I came a cross this neat little script to lock down IPtables to allow ONLY SSH in, block everything else 1#!/bin/bash 2# Flushing all rules 3iptables -F 4iptables -X 5# Setting default filter policy 6iptables -P INPUT DROP 7iptables -P OUTPUT ACCEPT 8iptables -P FORWARD DROP 9# Allow unlimited traffic on loopback …

Read More

Get info about a web server cert openssl s_client -showcerts -connect registry.nexgen-poc.lan:5010 </dev/null Validate a crt against a CA crt openssl verify -CAfile rootCA.crt registry.nexgen-poc.lan.crt

Read More

I was writing a script to scrub a server prior to decommissioning, something simple that would just make the disks unusbale enough that someone couldnt boot the OS or easily read the data. This is by no stretch a comprehensive disk wipe, if someone is lookign to recover data from these disks what were are doing here is …

Read More

To view the contetns of a fiule but remove comments and new lines you can use this excellent little command. It will remove all lines that start with # or a new line, this is particulaly useful for viewing a config file that has 99% comments and a handful of actual values(E.G OpenStack config files) grep -v -e …

Read More

1#!/bin/bash 2# change the 999 if needed 3shopt -s nullglob 4for d in /sys/kernel/iommu_groups/{0..999}/devices/*; do 5n=${d#*/iommu_groups/*}; n=${n%%/*} 6printf 'IOMMU Group %s ' "$n" 7lspci -nns "${d##*/}" 8done; 1 2 3 4 5 6 7 8 9 10 11 12 sudo lspci -nnv | grep "c1:00.1" -i -A30 …

Read More

If you want to diagnose HTTP traffic it's sometime usefull to use tcpfump to dump the packets either on the console or to a tile Here is a nice litte command I found to run a dump of all http traffic on a defined port tcpdump -A -s 0 'src 10.10.110.254 and tcp port 5000 and (((ip[2:2] - ((ip[0]&0xf)<<2)) - …

Read More

I was writing a script to interact with all local disks and i needed a simplied list of local disks, not partitions and not the loopback mounts..This is what I came up with lsblk -d | cut -f 1 -d" " | tail -n +2 | grep -v loop Which will give you a nice parseable output something like this 1sda 2sdb 3nvme0n1 …

Read More

The MaaS CLI documentation is a bit trash Login to MaaS maas login admin http://10.10.110.250:5240/MAAS/api/2.0/ 5HvxATpW5487XmkSjZ:CXfC3McdvV9U9aefbp:wB9jGT8AJ4DUYArJ8dDqeRVczBwJEXMk Set the IPMI Cipher Suite ID to 'freeipmi-tools default' maas admin machine update bfyq3e power_parameters_cipher_suite_id='' Commission …

Read More

bmon Nethogs Glances Warning dependency heavy

Read More

I always forget how to mount the subfolder of a CephFS filesystem sudo ceph-fuse -m 192.168.2.9:6789 -r /subfolder /folder/on/my/machine Note: The proceeding / after the -r is important Some great info here on restricting access to specific folders and more notes on mounting …

Read More