I had a requirement to move all of our code repos from multiple Gitlab projects to a self hosted Gitea instance I wrote the following script that uses the Gitlab API to pull a list of repos for a given 'Group', clones them all into a matching local folder then connects to the Gitea servers, creates the Repo(It just …

Read More

A quick reminder to myself, this is how you configure RabbitMQ to mirror all queue's to all nodes 1rabbitmqctl set_policy HA '^(.*)' '{"ha-mode": "all"}'

Read More

1 - Set ulimit flag when running docker container docker run -it --ulimit nofile=4096 memcached 2 - Start memcached with the conn-limit flag which ideally is inherited from 'ulimit -n' 3 - Check your config per screnshot Example memcahed start script 1#!/bin/sh 2# Memcached will run as a process under the memcache …

Read More

I came a cross this neat little script to lock down IPtables to allow ONLY SSH in, block everything else 1#!/bin/bash 2# Flushing all rules 3iptables -F 4iptables -X 5# Setting default filter policy 6iptables -P INPUT DROP 7iptables -P OUTPUT ACCEPT 8iptables -P FORWARD DROP 9# Allow unlimited traffic on loopback …

Read More

Get info about a web server cert openssl s_client -showcerts -connect registry.nexgen-poc.lan:5010 </dev/null Validate a crt against a CA crt openssl verify -CAfile rootCA.crt registry.nexgen-poc.lan.crt Thanks @Deep for spotting the error!

Read More

I was writing a script to scrub a server prior to decommissioning, something simple that would just make the disks unusbale enough that someone couldnt boot the OS or easily read the data. This is by no stretch a comprehensive disk wipe, if someone is lookign to recover data from these disks what were are doing here is …

Read More

To view the contents of a fiule but remove comments and new lines you can use this excellent little command. It will remove all lines that start with # or a new line, this is particulaly useful for viewing a config file that has 99% comments and a handful of actual values(E.G OpenStack config files) grep -v -e …

Read More

1#!/bin/bash 2# change the 999 if needed 3shopt -s nullglob 4for d in /sys/kernel/iommu_groups/{0..999}/devices/*; do 5n=${d#*/iommu_groups/*}; n=${n%%/*} 6printf 'IOMMU Group %s ' "$n" 7lspci -nns "${d##*/}" 8done; 1 2 3 4 5 6 7 8 9 10 11 12 sudo lspci -nnv | grep "c1:00.1" -i -A30 …

Read More

If you want to diagnose HTTP traffic it's sometime usefull to use tcpfump to dump the packets either on the console or to a tile Here is a nice litte command I found to run a dump of all http traffic on a defined port tcpdump -A -s 0 'src 10.10.110.254 and tcp port 5000 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - …

Read More

I was writing a script to interact with all local disks and i needed a simplied list of local disks, not partitions and not the loopback mounts..This is what I came up with lsblk -d | cut -f 1 -d" " | tail -n +2 | grep -v loop Which will give you a nice parseable output something like this 1sda 2sdb 3nvme0n1 …

Read More