michaelkrieg

[ $(uname -m) = x86_64 ] && curl -Lo ./kind https://kind.sigs.k8s.io/dl/v0.20.0/kind-linux-amd64
chmod +x ./kind
sudo mv ./kind /usr/local/bin/kind
kind --version

curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
chmod +x kubectl
sudo mv kubectl /usr/local/bin/
kubectl version --client

michaelkrieg

#cloud-config
package_update: true
package_upgrade: true

apt:
  sources:
    docker.list:
      source: deb [arch=amd64] https://download.docker.com/linux/ubuntu $RELEASE stable
      keyid: 9DC858229FC7DD38854AE2D88D81803C0EBFCD88

michaelkrieg

Keybase proof

I hereby claim:

• I am michaelkrieg on github.
• I am mfmichaelkrieg (https://keybase.io/mfmichaelkrieg) on keybase.
• I have a public key ASDs8tA737u4L0tGvSnSLdkUMssjQ20lh0bppYBBFhbCcAo

To claim this, I am signing this object:

michaelkrieg

Keybase proof

I hereby claim:

• I am michaelkrieg on github.
• I am mickri76 (https://keybase.io/mickri76) on keybase.
• I have a public key whose fingerprint is 0A79 E353 9019 40CA 7536 BD5E 650B DEAE ACFE 2976

To claim this, I am signing this object:

michaelkrieg

./filebeat setup --template -E output.logstash.enabled=false -E 'output.elasticsearch.hosts=["localhost:9200"]'

michaelkrieg

#!/usr/bin/env bash

export DEBIAN_FRONTEND=noninteractive 
sudo -E -H apt-get install -y software-properties-common rkhunter fail2ban
sudo -H apt-add-repository -y -u ppa:ansible/ansible
sudo -H apt-get install -y ansible
sudo -H ansible-galaxy install dev-sec.os-hardening dev-sec.ssh-hardening 2>/dev/null

cat << 'EOF' > hardening-playbook.yml
- hosts: localhost

michaelkrieg

#!/usr/bin/env python3
import ipaddress
import subprocess

'''
complete private networks:
 10.0.0.0/8
 172.16.0.0/12
 192.168.0.0/16
'''

michaelkrieg

#!/usr/bin/env python3

#
# credits go to: https://gist.github.com/chrisguitarguy/1305010
# rewritten for Python3 and bs4 by Michael Krieg <krieg@centrias-colocation.de>
#

from argparse import ArgumentParser

import requests

michaelkrieg

#!/usr/bin/env python3

import re
import random
import subprocess

initfile = "/usr/local/etc/vault/.init"
data = ""

with open(initfile, "r") as ifile:

michaelkrieg

if [ -f /etc/bash_completion ]; then
    source /etc/bash_completion
fi

__has_parent_dir () {
    # Utility function so we can test for things like .git/.hg without firing up a
    # separate process
    test -d "$1" && return 0;

    current="."