Devops tips & tricks

#linux #bsd #ssh To install #NetBSD to overwrite a remote #Linux machine when you only have #ssh (not VNC, cloud panel), you can simply using cp command and its advanced version. https://cloudbsd.xyz/ tl;dr: Please don't try this at home.

#kafka 3 useful ways to get Remote Code Execution in Kafka UI https://github.blog/2024-07-22-3-ways-to-get-remote-code-execution-in-kafka-ui/

#devops Creating socks proxy by gcloud command:

shell 1> gcloud compute ssh --zone "europe-central2-a" "mybastion" --project "lauxanh.example" --ssh-flag="-D 2024"

shell 2> curl  api.ipify.org  -L 2>&1 --proxy socks5:///127.0.0.1:2024 ;echo

#devops A hobby OS written in #nim https://github.com/khaledh/fusion

When you're late for stand up but still have time with your typewriter machine... :D

This is a simple but resilient test for your redis. It is observed that this command reported error (empty output) while redis-cli didn't have any issue (likely due to some default tcp configuration).

So, Google Chrome gives all *.google.com sites full access to system / tab CPU usage, GPU usage, and memory usage. It also gives access to detailed processor information, and provides a logging backchannel. This API is not exposed to other sites - only to *.google.com. This is interesting because it is a clear violation of the idea that browser vendors should not give preference to their websites over anyone elses. The DMA codifies this idea into law: browser vendors, as gatekeepers of the internet, must give the same capabilities to everyone. Update: in Microsoft Edge this capability is also available exclusively to *.google.com domains And for everyone that keeps saying "Use Brave!!!": Brave also has the same behaviour as Chrome and Edge here. The extension that allows Google to retrieve this information exclusively from *.google.com is also pre-installed in Brave.

In case you are curious, $4 to indicate that length of your (binary) string is 4. So that's not a random number, isn't it?

In case you are curious, $4 to indicate that length of your (binary) string is 4. So that's not a random number, isn't it?

#jq #nodeports Find all allocated nodePorts on your cluster

kubectl \
  get svc --all-namespaces \
    -o json \
  | jq -r '
      .items[]
      | select(.spec.ports != null)
      | .spec.ports[]
      | select(.nodePort != null)
      | .nodePort
    ' \
  | sort -n

#redis #cli #lover Sending any command to redis server via netcat, when you can't install the official redis-cli

echo -e '*1\r\n$4\r\nINFO\r\n' | nc 10.xxx.xxx.xxx 6379 |head -4

small note : ibm has been using Hashicorp Vault as backend for their commercial service https://www.ibm.com/products/secrets-manager

#podman #docker #registry

$ docker pull redis
... 404 not found

$ docker pull docker.io/library/redis
... ok found

To make the first command work, add some alias in /etc/containers/registries.conf.d/00-shortnames.conf .

#helm #helm #helm One of the very interesting buggy feature of Helm , is mentioned in this thread: https://github.com/helm/helm/issues/3553#issuecomment-2089139511 You will see how crazy users want that feature, but for years the helm team has still some right reason not to support them =)) lt;dr: wtf is this?

#terraform #hashicorp HC joined IBM (https://www.hashicorp.com/blog/hashicorp-joins-ibm) > HashiCorp joins IBM to accelerate multi-cloud automation Redhat / Fedora Core, Haschicorp, and OpenOffice are on the same board. Congratulations PS: It's time to look at opentofu guys, later is better than never :D

#fritzbox https://crapts.org/2024/04/21/all-fritz-box-modems-have-been-hijacked/ > TL;DR: Every Fritz!Box has been compromised by DNS hijacking and using a Fritz!Box is unsafe. Every user of a Fritz!Box should immediately stop using their Fritz!Box or set up their own DHCP server.

#dnsmasq #open source Dnsmasq wins the first BlueHats Prize ( € 10 000)

#helm #values

helm show values prometheus-community/prometheus-blackbox-exporter

#slack is not down. It is still running and returning some server error...