Skip to content

Instantly share code, notes, and snippets.

@urykhy
urykhy / dnscrypt.txt
Created May 19, 2018 05:49
dnscrypt client
1.
/etc/supervisor/conf.d/dnscrypt.conf
```
[program:resolver1]
command = /usr/sbin/dnscrypt-proxy --pidfile /run/dnscrypt-proxy1.pid --user=_dnscrypt-proxy --local-address=127.0.3.1:53 --resolver-name=XXX
autorestart = true
stdout_events_enabled=true
stderr_events_enabled=true
@urykhy
urykhy / grub.cfg
Created April 9, 2017 11:40
grub2 multiboot
insmod part_msdos
insmod ext2
insmod loop
insmod search_fs_uuid
menuentry "Linux Mint" {
search --no-floppy --set=isopart --fs-uuid ec0e9e38-2b0b-4dde-9416-d71782e3cc50
set isofile="/linuxmint-18.1-mate-64bit.iso"
loopback loop ($isopart)$isofile
linux (loop)/casper/vmlinuz boot=casper noprompt noeject iso-scan/filename=$isofile
@urykhy
urykhy / fluent.conf
Created January 24, 2016 09:19
fluentd + auditd
<source>
type tcp
port 9881
tag audit
time_format %s
format /(^type=AVC msg=audit\((?<time>\w+).*: apparmor=\"(?<resolution>\w+)\" operation=\"(?<operation>\w+)\"( profile=\"(?<profile>[^ ]+)\"){0,1}( name=\"(?<name>[^ ]+)\"){0,1} pid=(?<pid>\d+) comm=\"{0,1}(?<comm>[^ ]+)\"{0,1}( requested_mask=\"(?<requested_mask>\w+)\" denied_mask=\"(?<denied_mask>\w+)\" fsuid=(?<fsuid>\d+))?|^type=(?<type>\w+) msg=audit\((?<time>\w+).*: pid=(?<pid>\d+) uid=(?<uid>\d+) .* msg='(?<message>.*)'|type=NETFILTER_CFG msg=audit\((?<time>\w+).*: table=(?<table>[^ ]+) family=(?<family>\d+) entries=(?<entries>\d+)|type=ANOM_PROMISCUOUS msg=audit\((?<time>\w+).*: dev=(?<device>[^ ]+) prom=(?<prom>\d+) old_prom=(?<old_prom>\d+).*)|type=DAEMON\w+ msg=audit\((?<time>\w+).*: (?<message>.*)|type=CONFIG_CHANGE msg=audit\((?<time>\w+).*: (?<message>.*)/
</source>