I added cloudflare-dns.com to my stubby.yml and couldn't find any information on the value of the tls_pubkey_pinset
tls_pubkey_pinset:
- digest: "sha256"
value: MISSING
Although I could find some examples, the value seemed to be wrong.
This can be used to retreive files/binaries/information from docker containers.
#!/bin/bash
set -Eeuo pipefail
mkdir ./binary || true
# build most recent docker image
| PURPOSE | ALPINE | DEBIAN / UBUNTU | CENTOS/RHEL |
|---|---|---|---|
| PostgreSQL | postgresql-dev | libpq-dev | |
| MySQL / MariaDB | mariadb-dev | libmysqlclient-dev/ libmariadbclient-dev | |
| Imagemagick | imagemagick-dev | imagemagick | |
| bcrypt | libffi-dev | libffi-dev | |
| ps | procpsbusybox | procps | procps |
python -c "import privy; hidden=privy.hide(secret=b'test', password='passwd', security=2); print(hidden); plain=privy.peek(hidden=hidden, password='passwd'); print(plain.decode())"
Output:
1$2$7nzvIxU2Xkt8DE4DgxwIgRt_HE6acDcPx10mCCQXbDM=$Z0FBQUFBQmU1T1pKQ0hfSVJ6bmZxZVpVckpTTzd4NElYNnVfNGdweFZiLUQtdDVCREQ2djJPLWxFVG81bXNHaUtmbnJ4NTVYZXpLbm1CdWl4aEF0cFd3ZTJES19HR1ViNXc9PQ==
test
This is more or less a sequence of manual steps, because I don't want to remove volumes I might still need, especially if no containers are using those volumes at the moment.
This is also why I, sometimes, prefer the following over: docker volume prune.
In situations where I have literally thousands of docker volumes, basically after a long time of not removing any docker volumes, the following comes in handy.
At first I get the 200 (just some number) biggest docker volumes (as root).
I exclude containers, that contain postgres or redis in their names, essentially allowing the removal of all other volatile containers, named and unnamed.