Skip to content

Instantly share code, notes, and snippets.

cd /tmp
curl -fsSLo consul.zip https://dl.bintray.com/mitchellh/consul/0.4.1_linux_amd64.zip
cd /usr/bin
unzip /tmp/consul.zip
rm /tmp/consul.zip
adduser --system --group --home /var/lib/consul consul
chown consul:consul /usr/bin/consul
@steigr
steigr / Dockerfile.curl
Last active April 18, 2016 18:47
Check if DNS Server is link local and wait up to 60s to become reachable
RUN curl -sL https://gist.github.com/steigr/d58e03a3d0d3b0dfff5e824a3a85e503/raw/dns-resilience | install -m 0755 -o root -g root /dev/stdin /usr/bin/dns-resilience
@steigr
steigr / bitbucket.Dockerfile
Last active May 5, 2016 16:29
Create bitbucket Dockerimage
from fedora:rawhide
# run an system update first!
run dnf update -y \
&& dnf clean all
# basic system environment
env JAVA_HOME /usr/java/default
env JRE_HOME /usr/java/default/jre
env CATALINA_HOME /usr/lib/tomcat/default
from fedora:rawhide
# run an system update first!
run dnf update -y \
&& dnf clean all
# basic system environment
env JAVA_HOME /usr/java/default
env JRE_HOME /usr/java/default/jre
env CATALINA_HOME /usr/lib/tomcat/default

Keybase proof

I hereby claim:

  • I am steigr on github.
  • I am steigr (https://keybase.io/steigr) on keybase.
  • I have a public key ASDJRjbKone_flDFHJa_Ho5bjl6LYVjRJOJOKpHT7bqAeQo

To claim this, I am signing this object:

# install via
# curl -sL https://gist.github.com/steigr/cc4be305e06bc6c7e0b0dfac7a75b189/raw/swapspace.service | install -D -m 0644 /dev/stdin /etc/systemd/system/swapspace.service && systemctl enable --now swapspace
[Service]
ExecStartPre=-/usr/bin/env mkdir -p /opt/bin /var/lib/swapspace
ExecStartPre=-/usr/bin/env swapoff /var/lib/swapspace/base.swap
ExecStartPre=-/usr/bin/env dd if=/dev/zero of=/var/lib/swapspace/base.swap bs=1M count=1
ExecStartPre=-/usr/bin/env chmod 0600 /var/lib/swapspace/base.swap
ExecStartPre=-/usr/bin/env mkswap /var/lib/swapspace/base.swap
ExecStartPre=-/usr/bin/env swapon /var/lib/swapspace/base.swap
ExecStartPre=/usr/bin/env bash -c 'test -s /opt/bin/swapspace || curl -sL https://github.com/mathias-kaufmann/swapspace/releases/download/1.10/swapspace | install -m 0744 /dev/stdin /opt/bin/swapspace'
@steigr
steigr / kernel-mod-sign
Created December 26, 2018 07:40
Sign kernel modules
#!/usr/bin/env bash
[[ "$#" -eq 2 ]] && mokKey="$1"
[[ "$#" -eq 2 ]] && mokCrt="$2"
fail(){ echo "$*"; exit 1; }
kernelver="$(uname -r)"
[[ -f "/usr/src/kernels/$kernelver/scripts/sign-file" ]] || fail "sign-file not found in /usr/src/kernels/$kernelver/scripts/sign-file"
#!/usr/bin/env bash
namespace=$1
kubectl proxy&
trap "kill $!" EXIT
kubectl get "namespaces/$namespace" -o json \
| jq 'del(.spec.finalizers)' \
| curl -H "Content-Type: application/json" -X PUT --data-binary @- "http://127.0.0.1:8001/api/v1/namespaces/$namespace/finalize"
@steigr
steigr / build
Last active February 15, 2019 16:45
Docker for Desktop Wireguard Kernel Module and Tool build script
#!/bin/sh
# curl -sL https://gist.github.com/steigr/0746c759db9acbb608c1c9fca6d45c96/raw/61aace735f8e2adb991bcdf2b07c9aa420ced0c7 | sh
docker run --rm --cap-add=SYS_MODULE -i alpine sh <<'_EOF' | tar xv
apk add --no-cache make gcc curl bc libc-dev git xz bzip2 >&2
mkdir -p /usr/src/linux /usr/src/libmnl /usr/src/wireguard >&2
# linux headers and build infrastructure
KVER="$(awk -F'version ' < /proc/version '{print $2}' | awk -F- '{print $1}')" >&2
curl -L "https://cdn.kernel.org/pub/linux/kernel/v${KVER%%.*}.x/linux-${KVER}.tar.xz" | xzcat | tar -x -C /usr/src/linux --strip-components=1 >&2
cd /usr/src/linux >&2
zcat /proc/config.gz > .config