I hereby claim:
- I am clrxbl on github.
- I am systemd (https://keybase.io/systemd) on keybase.
- I have a public key ASCmmRiW1q09Ioph0I5LWXC-7b8c8leqm8f-3mFCHUuL2wo
To claim this, I am signing this object:
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| # java shim to execute anything java within a distroless, rootless container | |
| # designed for podman 4, breaks with podman 3 because of different --pull syntax | |
| # https://iptables.sh | |
| set -euo pipefail | |
| IMAGE="gcr.io/distroless/java21:nonroot" | |
| # check for podman |
clrxbl
/ gist:c22f99baa0620bb8fd1fc52f00fb5ab6
Created
July 5, 2023 07:38
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 2023-07-05T07:37:58.670132Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "socket" | |
| 2023-07-05T07:37:58.670345Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "recvfrom" | |
| 2023-07-05T07:37:58.670407Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "sendto" | |
| 2023-07-05T07:37:58.670465Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "bind" | |
| 2023-07-05T07:37:58.670523Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "listen" | |
| 2023-07-05T07:37:58.670582Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "connect" | |
| 2023-07-05T07:37:58.670728Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "fcntl" | |
| 2023-07-05T07:37:58.670789Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "dup" | |
| 2023-07-05T07:37:58.670852Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "dup2" | |
| 2023-07-05T07:37:58.670909Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "getpeername" |
clrxbl
/ gist:e53570d00b126d11ab45cbfee0c9e5bf
Created
July 4, 2023 20:20
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 2023-07-04T20:00:44.215421Z TRACE ThreadId(27) getaddrinfo: mirrord_layer::socket::ops: new rawish_node=Some("kafka-kafka-0.kafka-kafka-brokers.infra.svc") rawish_service=None raw_hints=Some(addrinfo { ai_flags: 2, ai_family: 2, ai_socktype: 0, ai_protocol: 0, ai_addrlen: 0, ai_canonname: 0x0, ai_addr: 0x0, ai_next: 0x0 }) | |
| 2023-07-04T20:00:44.285791Z TRACE ThreadId(27) getaddrinfo: mirrord_layer::socket::ops: return=Error(ResponseError(RemoteIO(RemoteIOError { raw_os_error: Some(2), kind: NotFound }))) rawish_node=Some("kafka-kafka-0.kafka-kafka-brokers.infra.svc") rawish_service=None raw_hints=Some(addrinfo { ai_flags: 2, ai_family: 2, ai_socktype: 0, ai_protocol: 0, ai_addrlen: 0, ai_canonname: 0x0, ai_addr: 0x0, ai_next: 0x0 }) | |
| 2023-07-04T20:00:44.285862Z TRACE ThreadId(27) getaddrinfo: mirrord_layer::socket::ops: close time.busy=70.4ms time.idle=33.0µs rawish_node=Some("kafka-kafka-0.kafka-kafka-brokers.infra.svc") rawish_service=None raw_hints=Some(addrinfo { ai_flags: 2, ai_family: 2, ai_socktype: 0, ai |
clrxbl
/ gist:b12b70f76508718177f1186209ffbfc5
Created
July 4, 2023 19:48
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 2023-07-04T19:45:25.025216Z TRACE ThreadId(25) getsockname: mirrord_layer::socket::ops: return=Success(0) sockfd=394 | |
| 2023-07-04T19:45:25.025219Z TRACE ThreadId(25) getsockname: mirrord_layer::socket::ops: close time.busy=9.83µs time.idle=7.50µs sockfd=394 | |
| 2023-07-04T19:45:25.025227Z TRACE ThreadId(25) getsockname: mirrord_layer::socket::ops: new sockfd=394 | |
| 2023-07-04T19:45:25.025232Z TRACE ThreadId(25) getsockname: mirrord_layer::socket::ops: getsockname -> local_address Ip( | |
| 172.16.0.194:52734, | |
| ) sockfd=394 | |
| 2023-07-04T19:45:25.025235Z TRACE ThreadId(25) getsockname: mirrord_layer::socket::ops: return=Success(0) sockfd=394 | |
| 2023-07-04T19:45:25.025238Z TRACE ThreadId(25) getsockname: mirrord_layer::socket::ops: close time.busy=6.12µs time.idle=4.71µs sockfd=394 | |
| 2023-07-04T19:45:25.037526Z TRACE ThreadId(23) connect:connect_outgoing: mirrord_layer::socket::ops: return=Success(ConnectResult { result: -1, error: Some(Errno { code: 36, description: Some("Operation now in progress") }) }) sockfd=396 address_lengt |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Control-plane: | |
| PRIVATE_IFACE=eth1 | |
| PUBLIC_IP=$(curl http://ifconfig.me) | |
| PRIVATE_IP=$(ip -f inet addr show $PRIVATE_IFACE | awk '/inet / {print $2}' | cut -d/ -f1) | |
| curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644" INSTALL_K3S_EXEC="--bind-address $PRIVATE_IP --node-ip $PRIVATE_IP --node-external-ip $PUBLIC_IP --advertise-address $PRIVATE_IP --disable-network-policy --no-deploy traefik --disable traefik --no-flannel --kubelet-arg address=$PRIVATE_IP --kube-apiserver-arg kubelet-preferred-address-types=InternalIP --cluster-cidr 172.16.0.0/16 --service-cidr 172.17.0.0/16 --cluster-dns 172.17.0.10" sh - | |
| export KUBECONFIG=/etc/rancher/k3s/k3s.yaml | |
| Agents: | |
| PRIVATE_IFACE=eth1 | |
| PUBLIC_IP=$(curl http://ifconfig.me) |
clrxbl
/ values.yaml
Created
June 28, 2021 14:23
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| containerRuntime: | |
| integration: "containerd" | |
| socketPath: "/var/run/k3s/containerd/containerd.sock" | |
| nodePort: | |
| enabled: true | |
| nodeinit: | |
| enabled: true | |
| restartPods: true |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // ==UserScript== | |
| // @name Harvest Currency Exchange | |
| // @namespace Violentmonkey Scripts | |
| // @match https://*.harvestapp.com/projects/* | |
| // @run-at document-idle | |
| // @grant none | |
| // @version 1.0 | |
| // @author - | |
| // @description 3/22/2021, 3:47:59 PM | |
| // ==/UserScript== |
clrxbl
/ setrole.sh
Last active
May 25, 2020 10:01
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| CURRENT_IP=$(hostname -I | cut -d' ' -f1) | |
| CURRENT_NODE=$(kubectl get nodes -o wide | grep "$CURRENT_IP" | cut -d " " -f1) | |
| kubectl label node $CURRENT_NODE node-role.kubernetes.io/worker=worker |
clrxbl
/ keybase.md
Created
November 17, 2019 09:29
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdnZtp2EZhcbBJnPhISC9ehp7YisviZwXveQBC2jasfLf9MZbUgCaLJVcvPngfR33r0rP9j3AU5m2/GBGfF0E85zMcLenpFEOrbtugaaN6tem+o/b5l/ZwF4Y+4xfrHTlh7ptxzNGawuvI9RW2ydnaaw59sPDUzvak3Ti8MEGXES8AoHUUAGTOP3zSHPf6RX77MddxAYqisIG9s4ork6c79G3o4OJvI6z7LX9KuuI47JSrQABxmVRIPrPk+THTrCIK5eOxC1do7TWVR75hH2acD1MncquXWKb2Mtofr/LqAldS63OBSF+86QcEg1mQVyIF9+ZPjD/VqLVwOGM6yHND michael@arch |
NewerOlder