dmi3mis

#!/bin/bash
# Скрипт автоматической подготовки рабочего места для курса VM-603
# Основан на документе "VM-603_Подготовка рабочего места_2026-06-30.pdf"
# Требует запуска с правами sudo

set -euo pipefail

# Цвета для вывода
RED='\033[0;31m'
GREEN='\033[0;32m'

dmi3mis

#!/bin/bash

# Скрипт автоматического перевыпуска SSL-сертификатов Elastic Stack 8.x
# Запускать строго от пользователя root или через sudo.

set -e # Останавливать скрипт при любой необработанной ошибке

# --- НАСТРОЙКИ СЕРВЕРА (ОБЯЗАТЕЛЬНО ПРОВЕРЬТЕ) ---
NODE_NAME="elk"                # Имя вашего сервера (hostname)
NODE_IP="192.168.1.50"         # Реальный сетевой IP-адрес сервера

dmi3mis

#!/bin/bash

# Восстановление кластера Kubernetes (через пользователя kadm + sudo с паролем)

MASTER="k8s-master.techedu.lab"
WORKERS=("k8s-worker1.techedu.lab" "k8s-worker2.techedu.lab")
ALL_NODES=("$MASTER" "${WORKERS[@]}")
SSH_USER="kadm"

if [ -n "$1" ]; then

dmi3mis

#cloud-config
# https://canonical-subiquity.readthedocs-hosted.com/en/latest/intro-to-autoinstall.html
autoinstall:
  # version is an Autoinstall required field.
  version: 1
  locale: en_US.UTF-8
  # Subiquity will, by default, configure a partition layout using LVM.
  # The 'direct' layout method shown here will produce a non-LVM result.
  storage:
    layout:

dmi3mis

hosts:
  - name: host1
    connection:
      type: remote
      user: sa
      ip: 192.168.50.131
      ssh:
        keyfile: "~/.ssh/id_ecdsa"
    dataResourcePools:
      - name: pool

dmi3mis

additional_users: None
early_command: ''
early_command_in_target: ''
features: []
gpg: {}
host:
  generate_sub_name: true
  hostname: astra-32041
install_mode: standard
kernel-package: linux-6.1-generic

dmi3mis

root@infra:~# cat /etc/ufw/before.rules 
#
# rules.before
#
# Rules that should be run before the ufw command line added rules. Custom
# rules should be added to one of these chains:
#   ufw-before-input
#   ufw-before-output
#   ufw-before-forward
#

dmi3mis

kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.14.9/config/manifests/metallb-native.yaml

echo "
---
apiVersion: metallb.io/v1beta1
kind: IPAddressPool
metadata:
  name: default
  namespace: metallb-system
spec:

dmi3mis

REM https://docs.oracle.com/en/virtualization/virtualbox/6.0/user/vboxmanage.html
REM https://andreafortuna.org/2019/10/24/how-to-create-a-virtualbox-vm-from-command-line/

set vboxmanage="c:\Program Files\Oracle\VirtualBox\VBoxManage.exe"
%vboxmanage% natnetwork list|findstr /E /C:"NatNetwork" >nul & if errorlevel 1 (%vboxmanage% natnetwork add --netname NatNetwork --network 10.0.2.0/24 --enable --dhcp on )
%vboxmanage% natnetwork list
%vboxmanage% list hostonlyifs |findstr /E /C:"VBoxNetworkName: HostInterfaceNetworking-VirtualBox Host-Only Ethernet Adapter">nul & if errorlevel 1 (%vboxmanage% hostonlyif create)
%vboxmanage% hostonlyif ipconfig "VirtualBox Host-Only Ethernet Adapter" --ip 192.168.101.254 --netmask 255.255.255.0
%vboxmanage% list hostonlyifs |findstr /E /C:"VBoxNetworkName: HostInterfaceNetworking-VirtualBox Host-Only Ethernet Adapter #2">nul & if errorlevel 1 (%vboxmanage% hostonlyif create)
%vboxmanage% hostonlyif ipconfig "VirtualBox Host-Only Ethernet Adapter #2" --ip 10.11.0.254 --netma

dmi3mis

Red Hat Security: Linux in Physical, Virtual and Cloud (RH415)

Last update: Mon Nov 18 05:32:46 UTC 2019 by @luckylittle

---

1. Managing Security & Risk

# USING YUM TO MANAGE SECURITY ERRATA: