rmoriz

source AS Amsterdam: AS20473 (choopa.com/vultr)
source AS Munich: AS31334 (Kabel Deutschland/Vodafone Germany)

Cable 100/12 Mbit/s
- Munich: direct => super slow to Munich Akamai Mirror 
- AMS: Muc-AMS via IPSec VPN => decent speed to AMS Akamai mirror

rmoriz

#!/bin/bash

function copy_data_bag() {
  data_bag=$1
  data_bag_item=$2
  new_data_bag_item=$3
  tmp_file_old=$(mktemp)
  tmp_file_new=$(mktemp)

  chef exec knife data bag show ${data_bag} ${data_bag_item} -f json > ${tmp_file_old}

rmoriz

#
# $ convert_and_send_to_ipad Billions.S01E04.720p.HDTV.x264-AVS.mkv
# ...


ac3mp3() {
  file=$@
  pre=${file:r}
  ext=${file:e}
  ffmpeg -i ${file} -acodec mp3 -vcodec copy ${pre}-ipad.${ext}

rmoriz

#!/bin/bash

# via https://github.com/lukas2511/letsencrypt.sh/pull/107

function deploy_challenge {
    local DOMAIN="${1}" TOKEN_FILENAME="${2}" TOKEN_VALUE="${3}"

    # This hook is called once for every domain that needs to be
    # validated, including any alternative names you may have listed.
    #

rmoriz

openssl req -x509 \
  -nodes \
  -newkey rsa:4096 \
  -sha256 \
  -keyout key.pem \
  -out cert.pem \
  -days 365 \
  -subj "/C=DE/ST=Bavaria/L=Pullach/O=Bundessstelle für Cloud-Aufgaben/CN=owncloud.local"
  

rmoriz

Federated Chef-server'ish with consul.

Why?

Why not? I thought it'd be interesting, and maybe useful.

Goals

• No centralized chef-server
• Nodes still know about eachother (so chef-searchs work)
• Use consul-templates / services for things that need to be updated 'realtime'
• Use chef resources for installation and configuration of the rest

rmoriz

client:

- mikrotek routerboard / raspberry / ...
- 2+ USB 3/4G Modems

  A:
    - MPTCP "client"
    - vpn to server
  B:

rmoriz

Certificate Revocation List (CRL):
        Version 2 (0x1)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: /C=DE/O=Deutscher Bundestag/OU=Deutscher Bundestag/CN=Deutscher Bundestag CA - G01/emailAddress=pki-ca@bundestag.de
        Last Update: Jun 11 09:11:10 2015 GMT
        Next Update: Jun 21 09:11:10 2015 GMT
        CRL extensions:
            X509v3 CRL Number: 
                3007
Revoked Certificates:

rmoriz

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            82:10:cf:b0:d2:40:e3:59:44:63:e0:bb:63:82:8b:00
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Internet Security Research Group, CN=ISRG Root X1
        Validity
            Not Before: Jun  4 11:04:38 2015 GMT
            Not After : Jun  4 11:04:38 2035 GMT

rmoriz

Requirements

• VirtualBox
• Vagrant
• Packer
• a Mac with a lot of Memory/CPU/Disk
• great Templates/Tools from https://github.com/timsutton/osx-vm-templates

Steps