Skip to content

Instantly share code, notes, and snippets.

@riton
riton / augeas_etc_services.md
Last active August 29, 2015 14:04
augeas_etc_services

I try to add the following line sane-port 6566/tcp sane saned # SANE network scanner daemon in my /etc/services file using augeas Services.lns.

# services_sample.augtool
# sane-port       6566/tcp        sane saned      # SANE network scanner daemon
defnode resource /files/etc/services/service-name[. = 'sane-port'][protocol = 'tcp'] 'sane-port'
set $resource/port 6566
set $resource/protocol tcp 
set $resource/#comment "SANE network scanner daemon"
@riton
riton / augeas.md
Created December 17, 2014 14:11
Augeas_Puppet_Services

After first puppet execution

augtool> print /files/etc/services/service-name[.="kerberos"]
/files/etc/services/service-name[171] = "kerberos"
/files/etc/services/service-name[171]/port = "88"
/files/etc/services/service-name[171]/protocol = "tcp"
/files/etc/services/service-name[171]/alias[1] = "kerberos5"
/files/etc/services/service-name[171]/alias[2] = "krb5"
/files/etc/services/service-name[171]/alias[3] = "kerberos-sec"
@riton
riton / output_debug.md
Created December 17, 2014 14:32
puppet / augeas / services
Info: Applying configuration version '1418826679'
Debug: Augeas[kerberos_etc_services](provider=augeas): Opening augeas with root /, lens path /var/lib/puppet/lib/augeas/lenses, flags 32
Debug: Augeas[kerberos_etc_services](provider=augeas): Augeas version 1.0.0 is installed
Debug: Augeas[kerberos_etc_services](provider=augeas): Will attempt to save and only run if files changed
Debug: Augeas[kerberos_etc_services](provider=augeas): sending command 'defnode' with params ["kerberostcp", "/files/etc/services/service-name[.=\"kerberos\"][protocol = \"tcp\"]", "kerberos"]
Debug: Augeas[kerberos_etc_services](provider=augeas): sending command 'set' with params ["$kerberostcp/port", "88"]
Debug: Augeas[kerberos_etc_services](provider=augeas): sending command 'set' with params ["$kerberostcp/protocol", "tcp"]
Debug: Augeas[kerberos_etc_services](provider=augeas): sending command 'remove' with params ["$kerberostcp/alias"]
Debug: Augeas[kerberos_etc_services](provider=augeas): sending command 'ins' with params ["
@riton
riton / file.md
Created December 19, 2014 13:48
puppet_array_operation

How can I transform

['value1', 'value2', 'value3']

into

['something value1 somethingelse', 'something value2 somethingelse', 'something value3 somethingelse']

in puppet ?

@riton
riton / hiera_data.yaml
Created February 10, 2015 08:14
create_resources_ssh_config
---
mymodule::profile::ssh_config:
'VerifyHostKeyDNS':
ensure: present
value : yes
'CanonicalizeHostname':
ensure: present
value : yes
'CanonicalDomains':
ensure: present
@riton
riton / workflow.md
Last active September 21, 2015 17:44
ssh_GSSAPI_expiration_workflow
  1. kinit THEUSER@EXAMPLE.ORG
  2. I got a ticket krbtgt/EXAMPLE.ORG@EXAMPLE.ORG
  3. I get a ticket for host/remote.example.org@EXAMPLE.ORG
  4. klist shows me that I have successfully retrieved ticket for host/remote.example.org@EXAMPLE.ORG
  5. ssh THEUSER@remote.example.org succeeds using GSS-API and everything works perfectly:
  • ticket is forwarded if requested
  • AFS access works

Now If I manually expires principal OR its password while tickets previously retrieved are still valid.

@riton
riton / keybase.md
Created September 23, 2015 16:43
keybase.md

Keybase proof

I hereby claim:

  • I am riton on github.
  • I am riton (https://keybase.io/riton) on keybase.
  • I have a public key whose fingerprint is 3729 62E5 C03B 0922 D0E2 D5CB EE6F E943 11EB B744

To claim this, I am signing this object:

@riton
riton / With_Ansible_1.5.4
Last active January 26, 2016 11:28
Ansible read inventory from FileDescriptor
# /usr/bin/ansible --version
# ansible 1.5.4
$ /usr/bin/ansible -i <(./cmdb.sh) all --list-hosts
hosta
hostb
hostc
hostd
hoste
@riton
riton / With_Ansible_git_66104191d182aedd7b76f4a1b839c448f97c3ffe
Last active January 26, 2016 22:09
Ansible / Ephemeral Inventory source
# ./bin/ansible --version
# ansible 2.1.0 (detached HEAD ephemeral_) last updated 2016/01/26 19:17:58 (GMT +200)
# lib/ansible/modules/core: (detached HEAD 25414bbd1b) last updated 2016/01/26 19:32:32 (GMT +200)
# lib/ansible/modules/extras: (detached HEAD e13942f9c5) last updated 2016/01/26 19:32:39 (GMT +200)
# config file = ~/.ansible.cfg
# configured module search path = Default w/o overrides
$ ./bin/ansible -i <(./cmdb.sh) all --list-hosts
ERROR! the file_name '/dev/fd/63' does not exist, or is not readable
# With the new option
@riton
riton / blockinfile_with_items.yaml
Last active November 29, 2016 13:07
Ansible / BlockInFile / With_Items
- hosts: localhost
connection: local
gather_facts: false
become: false
tasks:
- blockinfile:
dest: '/tmp/THE_FILE'
block: |
foo {{ item }} bar