pbar1

LUKS Cheat Sheet

Dependencies

• cryptsetup

Configure LUKS partition

# initialize and set passphrase
cryptsetup -y -v luksFormat /dev/$DEVICE

pbar1

Keybase proof

I hereby claim:

• I am pbar1 on github.
• I am pbar (https://keybase.io/pbar) on keybase.
• I have a public key ASAWn3HJGZg3rBFQeWQJQ774mS01fgOH_Wqkaley1RLh7Qo

To claim this, I am signing this object:

pbar1

# Use envFrom to load Secrets and ConfigMaps into environment variables

apiVersion: apps/v1beta2
kind: Deployment
metadata:
  name: mans-not-hot
  labels:
    app: mans-not-hot
spec:
  replicas: 1

pbar1

Kubernetes Config Helper Mockup

Annotations

confighelper.io/autoenv-vault

If set, automatically syncs a Vault KV v2 secret into a Kubernetes Secret. Each key in the Vault secret is mapped to the same key in the Kubernetes Secret.

• Format: < Vault KV v2 path >:< Kubernetes Secret name >
• Example: /kv/example-app/environ:example-app-env-secret

confighelper.io/autoenv-consul

If set, automatically syncs a Consul KV entry/directory into a Kubernetes ConfigMap. Each key in the Consul directory is mapped to the same key in the Kubernetes ConfigMap.

pbar1

Awesome Links

A collection of various articles and resources that I've encountered during my career as a software engineer. They are in my opinion high quality, and to be considered for this list I usually have to remember the time and place at which I discovered the article.

Articles

• (1998) Conceptual Architecture of the Linux Kernel
• (2005) Why does Win32 even have Fibers?
• (2010) Logging user-data Script Output on EC2 Instances

pbar1

#!/usr/bin/env bash
set -o errexit -o pipefail -x

GIT_ROOT="$(git rev-parse --show-toplevel)"
CLUSTER_NAME=example-test
export KUBECONFIG="${GIT_ROOT}/test/test-kubeconfig.yaml"

# usage: portfwd [namespace] [port]
# assumes service exists with same name as namespace
portfwd() {

pbar1

• How to use OpenZFS encryption at rest
• ZFS and ext4 Configuration
• Ubuntu Server Autoinstall
• ZFS Record Size
• Disabling atime
• ZFS Cheatsheet

pbar1

# Edit this configuration file to define what should be installed on
# your system.  Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).

{ config, pkgs, ... }:

{
  imports =
    [ # Include the results of the hardware scan.
      ./hardware-configuration.nix

pbar1

#!/usr/bin/env bash
# Decrypts Audible aax/mp4 to m4b
# USAGE: audible-convert FILE

set -o errexit -o pipefail -o nounset

# To get this: https://audible-converter.ml/
ab="${AUDIBLE_BYTES}"
input="$1"
output="${input%.*}.m4b"

pbar1

#!/usr/bin/env python

import argparse
import json
import re
import sys
import urllib.request


def fetch_ips():