papamoose

Binding and Unbinding to Active Directory from Mac OS via Command Line

• Open the Terminal Application
• Type in sudo -i and type in your Mac Administrator account password. sudo gives you root level or administrator level privileges.

To View current Active Directory Settings

dsconfigad -show

To Unbind a Computer from an Active Directory Domain

papamoose

Renew Puppet CA cert.

Not the perfect idea, but should alleviate the need to resign every cert.

What you need from existing puppet ssl directory:
ca/ca_crt.pem
ca/ca_key.pem

Create an openssl.cnf:
[ca]

papamoose

Using Git

Global Settings

Related Setup: https://gist.github.com/hofmannsven/6814278

Related Pro Tips: https://ochronus.com/git-tips-from-the-trenches/

papamoose

1) see re: increasing shmmax http://stackoverflow.com/a/10629164/1283020

2) add to postgresql.conf:
shared_preload_libraries = 'pg_stat_statements'   # (change requires restart)
136 pg_stat_statements.max = 1000
137 pg_stat_statements.track = all

3) restart postgres

4) check it out in psql

papamoose

Howto start using Letsencrypt with simp_le

What I had:

• A Debian server at "mydomain.fi"
• A self-signed certificate for Apache HTTPD, Postfix SMTPD and Dovecot IMAPD.

What I wanted:

• A Letsencrypt certificate for Apache, Postfix and Dovecot
• Simple tool for managing certificates that does need root privileges
• Automatic renewal

papamoose

#!/usr/bin/env python

"""
Python functions for finding open files and PIDs that have opened a file.
"""

import numbers
import subprocess

try:

papamoose

#install gcc git build-essential python3
$ sudo aptitude install gcc git build-essential python3

#from http://www.pip-installer.org/en/latest/installing.html
$ curl -O https://raw.github.com/pypa/virtualenv/master/virtualenv.py

$ mkdir python3_prole
$ cd python3_prole/
$ python virtualenv.py -p /usr/bin/python3 env
$ python virtualenv.py --relocatable -p /usr/bin/python3 env

papamoose

Add the following chunk to your existing ISC dhcpd.conf file.

if exists user-class and ( option user-class = "iPXE" ) {
    filename "http://boot.smidsrod.lan/boot.ipxe";
}
else {
    filename "undionly.kpxe";
}

(or see https://gist.github.com/4008017 for a more elaborate setup

papamoose

#!/usr/bin/python

# For mojave only
# In order for this to work, you will need to go to System Preferences in Mojave -> Security & Privacy -> Privacy -> Full Disk Access and grant Terminal.app permissions

import sqlite3
conn = sqlite3.connect('/var/db/SystemPolicyConfiguration/KextPolicy')
c = conn.cursor()
query = 'SELECT * FROM kext_policy'
c.execute(query)

papamoose

tmux shortcuts & cheatsheet

start new:

tmux

start new with session name:

tmux new -s myname