- Kubernetes SecurityContext Cheatsheet: https://snyk.co/udW5K
- Dockerfile Best Practices: https://docs.docker.com/develop/develop-images/dockerfile_best-practices
- Using multi-stage builds: https://docs.docker.com/develop/develop-images/multistage-build
- OPA Gatekeeper: https://open-policy-agent.github.io/gatekeeper/website/docs
- Kyverno: https://kyverno.io
- PodSecurityPolicy Deprecation: Past, Present, and Future: https://kubernetes.io/blog/2021/04/06/podsecuritypolicy-deprecation-past-present-and-future
- CNCF Certification Curriculum: https://github.com/cncf/curriculum
- Snyk Kubernetes “Quick hit” videos: https://youtube.com/playlist?list=PLQ6IC7glz4-UA4uKQOhmAxh6Mhvr3m4g-
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env python3 | |
# For a given image URL, platform and search string, fid any layers that add, remove or change a file with a name that matches the search string | |
import sys | |
import os | |
import subprocess | |
import json | |
import re | |
import datetime |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash | |
# Set the IFS variable to a newline character | |
IFS=$'\n' | |
# Get the list of docker images | |
images=$(docker images -a) | |
# Loop through the list of images | |
for image in $images; do |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
snyk container test cgr.dev/chainguard/nginx --print-deps --platform=amd64 --app-vulns | |
docker-image|cgr.dev/chainguard/nginx @ latest | |
├─ alpine-baselayout/alpine-baselayout-data @ 3.3.0-r2 | |
├─ aom/aom-libs @ 3.5.0-r0 | |
├─ brotli/brotli-libs @ 1.0.9-r8 | |
├─ busybox/busybox @ 1.35.0-r27 | |
├─ busybox/busybox-binsh @ 1.35.0-r27 | |
│ └─ busybox/busybox @ 1.35.0-r27 | |
├─ bzip2/libbz2 @ 1.0.8-r3 | |
├─ dav1d/libdav1d @ 1.0.0-r1 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Config I use for Tie Fighter Collectors' CD-ROM on OS X w/ XBox One controller via bluetooth (with ISO of CD in path configed below) | |
# This is the configuration file for DOSBox 0.74-3-3. (Please use the latest version of DOSBox) | |
# Lines starting with a # are comment lines and are ignored by DOSBox. | |
# They are used to (briefly) document the effect of each option. | |
[sdl] | |
# fullscreen: Start dosbox directly in fullscreen. (Press ALT-Enter to go back) | |
# fulldouble: Use double buffering in fullscreen. It can reduce screen flickering, but it can also result in a slow DOSBox. | |
# fullresolution: What resolution to use for fullscreen: original, desktop or fixed size (e.g. 1024x768). |
I hereby claim:
- I am ericsmalling on github.
- I am esmalling (https://keybase.io/esmalling) on keybase.
- I have a public key ASDOlnon9xZo99ocLFOyoG0LQTiaRJ_-ggEcsHYlImD3-Ao
To claim this, I am signing this object:
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Vagrantfile: | |
... | |
config.vm.provision "puppet" do |puppet| | |
puppet.module_path = "modules" | |
puppet.facter = { | |
'vpnUsername' => VPN_USERNAME, | |
'vpnPassword' => VPN_PASSWORD | |
} | |
puppet.options = "--verbose --debug" | |
end |