Welcome on Personal notes

About

Mon, 21 Sep 2020 00:00:00 +0000

About page

JKS Certificate Validation and Import Scripts

Tue, 17 Mar 2026 21:25:00 +0100

Preparation

Before executing any scripts, ensure the working directory contains the necessary decrypted artifacts.

Executing these scripts leaves decrypted cryptographic material in the file system. Ensure appropriate file permissions (chmod 600) and clean up the workspace after completion.

Required files: * Target Java KeyStore file (already decoded and extracted). * Plain text file containing the JKS password. * Source file containing one or multiple X.509 certificates in PEM format.

Resources/limits drill down

Fri, 06 Mar 2026 20:00:00 +0200

Drill down script

This script will show full drill down resources and limits across all namespaces.

kubectl get pods --all-namespaces -o json | jq -r '
  .items[] |
  .metadata.namespace as $ns |
  (if .metadata.ownerReferences then
     (.metadata.ownerReferences[0].kind + "/" + .metadata.ownerReferences[0].name)
   else
     ("Pod/" + .metadata.name)
   end) as $wl |
  .spec.containers[]? |
  {
    ns: $ns,
    wl: $wl,
    req_cpu: (.resources.requests.cpu // "0"),
    req_mem: (.resources.requests.memory // "0"),
    lim_cpu: (.resources.limits.cpu // "0"),
    lim_mem: (.resources.limits.memory // "0")
  } |
  [ .ns, .wl, .req_cpu, .req_mem, .lim_cpu, .lim_mem ] | @tsv
' | awk '
function cpu_to_m(cpu) {
  if (cpu ~ /m$/) { return int(substr(cpu, 1, length(cpu)-1)) }
  return int(cpu * 1000)
}
function mem_to_mi(mem) {
  if (mem ~ /Ki$/) { return int(substr(mem, 1, length(mem)-2)) / 1024 }
  if (mem ~ /Mi$/) { return int(substr(mem, 1, length(mem)-2)) }
  if (mem ~ /Gi$/) { return int(substr(mem, 1, length(mem)-2)) * 1024 }
  if (mem ~ /Ti$/) { return int(substr(mem, 1, length(mem)-2)) * 1024 * 1024 }
  if (mem ~ /^[0-9]+$/) { return int(mem) / 1024 / 1024 }
  return 0
}
{
  ns=$1
  wl=$2
  rc=cpu_to_m($3)
  rm=mem_to_mi($4)
  lc=cpu_to_m($5)
  lm=mem_to_mi($6)

  # Sumy dla całego namespace
  ns_req_cpu[ns] += rc
  ns_req_mem[ns] += rm
  ns_lim_cpu[ns] += lc
  ns_lim_mem[ns] += lm

  # Sumy dla konkretnego workloadu (np. ReplicaSet, StatefulSet) wewnątrz namespace
  wl_req_cpu[ns, wl] += rc
  wl_req_mem[ns, wl] += rm
  wl_lim_cpu[ns, wl] += lc
  wl_lim_mem[ns, wl] += lm
}
END {
  fmt = "%-55s %-12s %-12s %-12s %-12s"

  # Drukowanie nagłówków ze specjalnymi prefiksami do sortowania (!00, !01)
  print sprintf("!00\t00\t" fmt, "NAMESPACE / WORKLOAD", "REQ_CPU(m)", "REQ_MEM(Mi)", "LIM_CPU(m)", "LIM_MEM(Mi)")
  print sprintf("!01\t00\t" fmt, "-------------------------------------------------------", "------------", "------------", "------------", "------------")

  for (ns in ns_req_cpu) {
     # Drukowanie sumy dla przestrzeni nazw (prefiks 00 zapewnia, że będzie na górze grupy)
     print sprintf("%s\t00\t" fmt, ns, "[+] " ns, ns_req_cpu[ns], ns_req_mem[ns], ns_lim_cpu[ns], ns_lim_mem[ns])

     # Szukanie wszystkich sub-obiektów (workloads) należących do tej przestrzeni nazw
     for (key in wl_req_cpu) {
        split(key, arr, SUBSEP)
        if (arr[1] == ns) {
           wl = arr[2]
           wl_disp = "  |- " wl
           # Skracanie nazwy, jeśli jest zbyt długa, żeby nie rozwalić tabelki
           if (length(wl_disp) > 54) { wl_disp = substr(wl_disp, 1, 51) "..." }

           # Drukowanie konkretnego workloadu z wcięciem (prefiks 01 zapewnia sortowanie pod namespace)
           print sprintf("%s\t01_%s\t" fmt, ns, wl, wl_disp, wl_req_cpu[key], wl_req_mem[key], wl_lim_cpu[key], wl_lim_mem[key])
        }
     }
  }
}' | sort -k1,1 -k2,2 | cut -f3-

Debug TLS With wireshark

Wed, 05 Nov 2025 13:45:48 +0200

How to Debug Encrypted Traffic (TLS/HTTPS) with Wireshark

This guide describes how to capture and decrypt TLS (HTTPS) traffic from applications (e.g., Python, Chrome, cURL). We assume you are monitoring the 'Ethernet' interface.

Step 1: Configure Wireshark

Open Wireshark.
Select from the menu: 'Edit → Preferences…'.
Expand 'Protocols' and select 'TLS'.
In the '(Pre)-Master-Secret log filename' field, enter a path for the key file, for example C:\temp\ssl_keys.txt.
Click OK.

Step 2: Run the Capture

Open a new terminal (CMD). Set the temporary environment variable:

Git toolbox

Wed, 08 Jan 2025 15:49:48 +0000

Git toolbox

Reset to specific tag

git tag
git checkout <tag_name>
git reset --hard <tag_name>
# After resetting, you should force-push the changes to update the remote repository (if you've already pushed these changes)
git push origin <branch_name> --force

Please be extremely cautious when using git reset --hard as it can result in data loss. Make sure you have backups and communicate with your team if you are working in a collaborative environment.

OIDC/Oauth2 in Apex, with wallet for felf sign cert

Wed, 04 Dec 2024 00:00:00 +0000

Creating wallet for APEX with oracle client orapki

**Info** + You need to do it only if your sso server have self-signed certificate. +

Get your certs.

openssl s_client -connect sso-rho-sso-corpo-test.apps.playcloud-test.p4.int:443 -showcerts

You need full installation of oracle client to do this, instant client is not sufficent.
You can also use database instance if you have access.

cd C:\oracle\product\12.2.0\client_1\bin
set JAVA_HOME="c:\Program Files\java\jdk1.8.0_202"
orapki wallet create -wallet c:\temp\sso.wallet -auto_login
orapki wallet add -wallet c:\temp\sso.wallet -trusted_cert -cert c:\temp\sso.wallet\crt2.crt
orapki wallet add -wallet c:\temp\sso.wallet -trusted_cert -cert c:\temp\sso.wallet\crt1.crt

Git for Windows - pacman

Wed, 12 Jun 2024 20:44:48 +0000

How to add functional pacman to Git for Windows

Sprawdzamy obecne pakiety msys2, lista mirrorów tutaj: # https://www.msys2.org/dev/mirrors/ # tworzymy zmienne z nazwami pakietów zgodnie z architekturą (np. x86_64 )

pacman="
pacman-6.0.1-18-x86_64.pkg.tar.zst
pacman-mirrors-20220205-1-any.pkg.tar.zst
msys2-keyring-1~20220623-1-any.pkg.tar.zst
"
zstd=zstd-1.5.2-1-x86_64.pkg.tar.xz
curl curl https://raw.githubusercontent.com/msys2/MSYS2-packages/7858ee9c236402adf569ac7cff6beb1f883ab67c/pacman/pacman.conf -o /etc/pacman.conf
for f in $pacman; do curl https://mirrors.tuna.tsinghua.edu.cn/msys2/msys/$HOSTTYPE/$f -fo ~/Downloads/$f; done
curl -L https://github.com/mcgitty/pacman-for-git/raw/main/$zstd -o ~/Downloads/$zstd
cd /
tar x --xz -vf ~/Downloads/$zstd usr
for f in $pacman; do tar x --zstd -vf ~/Downloads/$f usr etc 2>/dev/nul; done
mkdir -p /var/lib/pacman; ln -s `which gettext` /usr/bin/
pacman-key --init
pacman-key --populate msys2
pacman -Syu
export URL=https://github.com/git-for-windows/git-sdk-64/raw/main
cat /etc/package-versions.txt | while read p v; do d=/var/lib/pacman/local/$p-$v; mkdir -p $d; echo $d; for f in desc files install mtree; do curl -sSL "$URL$d/$f" -o $d/$f; done; done
pacman -S pacman --overwrite '*'
pacman -Syu --overwrite '*'
pacman -Syu

K0sctl + XCP-ng proxy

Tue, 16 Apr 2024 09:51:48 +0000

K0sctl + XCP-ng proxy

Remember:

add http_proxy and https_proxy to the environment
add no_proxy to the environment
add privateInterface and privateAddress to the host if needed
ensure that there is default route on interface

apiVersion: k0sctl.k0sproject.io/v1beta1
kind: Cluster
metadata:
  name: k0s-cluster
spec:
  hosts:
  - ssh:
      address: 10.0.0.1
      user: root
      port: 22
      keyPath: /root/.ssh/id_ed25519
    role: controller
    #privateInterface: enX0
    #privateAddress: 10.0.0.1
    environment:
      HTTP_PROXY: "http://<proxy>:8080"
      HTTPS_PROXY: "http://<proxy>:8080"
      NO_PROXY: "localhost,127.0.0.1,<cluster network>,10.244.0.0/16,10.96.0.0/12"
  - ssh:
      address: 10.0.0.2
      user: root
      port: 22
      keyPath: /root/.ssh/id_ed25519
    role: controller
    #privateInterface: enX0
    #privateAddress: 10.0.0.2
    environment:
      HTTP_PROXY: "http://<proxy>:8080"
      HTTPS_PROXY: "http://<proxy>:8080"
      NO_PROXY: "localhost,127.0.0.1,<cluster network>,10.244.0.0/16,10.96.0.0/12"
  - ssh:
      address: 10.0.0.3
      user: root
      port: 22
      keyPath: /root/.ssh/id_ed25519
    role: controller
    #privateInterface: enX0
    #privateAddress: 10.0.0.3
    environment:
      HTTP_PROXY: "http://<proxy>:8080"
      HTTPS_PROXY: "http://<proxy>:8080"
      NO_PROXY: "localhost,127.0.0.1,<cluster network>,10.244.0.0/16,10.96.0.0/12"
  - ssh:
      address: 10.0.0.4
      user: root
      port: 22
      keyPath: /root/.ssh/id_ed25519
    role: worker
    #privateInterface: enX0
    #privateAddress: 10.0.0.4
    environment:
      HTTP_PROXY: "http://<proxy>:8080"
      HTTPS_PROXY: "http://<proxy>:8080"
      NO_PROXY: "localhost,127.0.0.1,<cluster network>,10.244.0.0/16,10.96.0.0/12"
  - ssh:
      address: 10.0.0.5
      user: root
      port: 22
      keyPath: /root/.ssh/id_ed25519
    role: worker
    #privateInterface: enX0
    #privateAddress: 10.0.0.5
    environment:
      HTTP_PROXY: "http://<proxy>:8080"
      HTTPS_PROXY: "http://<proxy>:8080"
      NO_PROXY: "localhost,127.0.0.1,<cluster network>,10.244.0.0/16,10.96.0.0/12"
  - ssh:
      address: 10.0.0.6
      user: root
      port: 22
      keyPath: /root/.ssh/id_ed25519
    role: worker
    #privateInterface: enX0
    #privateAddress: 10.0.0.6
    environment:
      HTTP_PROXY: "http://<proxy>:8080"
      HTTPS_PROXY: "http://<proxy>:8080"
      NO_PROXY: "localhost,127.0.0.1,<cluster network>,10.244.0.0/16,10.96.0.0/12"
  k0s:
    version: 1.32.3+k0s.0
    dynamicConfig: false
    config:
      apiVersion: k0s.k0sproject.io/v1beta1
      kind: Cluster
      metadata:
        name: k0s-xcp-cluster0
      spec:
        api:
          #address: 10.0.0.32
          #onlyBindToAddress: true
            #          externalAddress: 10.0.0.30
          k0sApiPort: 9443
          port: 6443
          sans:
            - 127.0.0.1
            - 10.0.0.1
            - 10.0.0.2
            - 10.0.0.3
            - 10.0.0.4
            - 10.0.0.5
            - 10.0.0.6
          extraArgs:
            default-not-ready-toleration-seconds: "50"
            default-unreachable-toleration-seconds: "50"
        controllerManager:
          extraArgs:
            node-monitor-grace-period: 20s
            node-monitor-period: 2s
        installConfig:
          users:
            etcdUser: etcd
            kineUser: kube-apiserver
            konnectivityUser: konnectivity-server
            kubeAPIserverUser: kube-apiserver
            kubeSchedulerUser: kube-scheduler
        konnectivity:
          adminPort: 8133
          agentPort: 8132
        network:
          kubeProxy:
            disabled: false
            mode: iptables
          nodeLocalLoadBalancing:
            enabled: true
            type: EnvoyProxy
          kuberouter:
            autoMTU: true
            mtu: 0
            peerRouterASNs: ""
            peerRouterIPs: ""
          podCIDR: 10.244.0.0/16
          provider: kuberouter
          serviceCIDR: 10.96.0.0/12
          clusterDomain: cluster.local
          dualStack:
            enabled: false
        podSecurityPolicy:
          defaultPolicy: 00-k0s-privileged
        storage:
          type: etcd
        telemetry:
          enabled: false
        extensions:
          helm:
            repositories:
            - name: stable
              url: https://charts.helm.sh/stable
            - name: bitnami
              url: https://charts.bitnami.com/bitnami
            - name: traefik
              url: https://traefik.github.io/charts
            - name: longhorn
              url: https://charts.longhorn.io
            - name: jetstack
              url: https://charts.jetstack.io
            - name: descheduler
              url: https://kubernetes-sigs.github.io/descheduler/
            - name: filebrowse
              url: https://utkuozdemir.org/helm-charts
            charts:

K0sctl cloud oracle

Tue, 16 Apr 2024 09:41:48 +0000

K0sctl cloud oracle

Remember:

add http_proxy and https_proxy to the environment
add no_proxy to the environment
add privateInterface and privateAddress to the host if needed
ensure that there is default route on interface

apiVersion: k0sctl.k0sproject.io/v1beta1
kind: Cluster
metadata:
  name: k0s-cluster
spec:
  hosts:
  - ssh:
      address: 10.0.0.5
      user: root
      port: 44662
      keyPath: /root/.ssh/id_ed25519
    role: controller
  - ssh:
      address: 10.0.0.130
      user: root
      port: 44662
      keyPath: /root/.ssh/id_ed25519
    role: controller
  - ssh:
      address: 10.0.0.135
      user: root
      port: 44662
      keyPath: /root/.ssh/id_ed25519
    role: controller
  - ssh:
      address: 10.0.0.10
      user: root
      port: 44662
      keyPath: /root/.ssh/id_ed25519
    role: worker
  - ssh:
      address: 10.0.0.140
      user: root
      port: 44662
      keyPath: /root/.ssh/id_ed25519
    role: worker
#  - ssh:
#      address: 10.0.0.210
#      user: root
#      port: 44662
#      keyPath: /root/.ssh/id_ed25519
#    role: worker
  - ssh:
      address: 10.0.0.220
      user: root
      port: 44662
      keyPath: /root/.ssh/id_ed25519
    role: worker
  k0s:
    version: 1.32.1+k0s.0
    dynamicConfig: false
    config:
      apiVersion: k0s.k0sproject.io/v1beta1
      kind: Cluster
      metadata:
        name: k0s-cluster0
      spec:
        api:
#          address: 10.0.0.5
#          externalAddress: 10.0.0.30
          k0sApiPort: 9443
          port: 6443
          sans:
            - 10.0.0.5
            - 10.0.0.10
            - 10.0.0.140
            - 10.0.0.210
            - 10.0.0.220
            - 10.0.0.130
            - 10.0.0.135
            - <other external ips>
            - 127.0.0.1
          extraArgs:
            default-not-ready-toleration-seconds: "50"
            default-unreachable-toleration-seconds: "50"
        controllerManager:
          extraArgs:
            node-monitor-grace-period: 20s
            node-monitor-period: 2s
        installConfig:
          users:
            etcdUser: etcd
            kineUser: kube-apiserver
            konnectivityUser: konnectivity-server
            kubeAPIserverUser: kube-apiserver
            kubeSchedulerUser: kube-scheduler
        konnectivity:
          adminPort: 8133
          agentPort: 8132
        network:
          kubeProxy:
            disabled: false
            mode: iptables
          nodeLocalLoadBalancing:
            enabled: true
            type: EnvoyProxy
          kuberouter:
            autoMTU: true
            mtu: 0
            peerRouterASNs: ""
            peerRouterIPs: ""
          podCIDR: 10.244.0.0/16
          provider: kuberouter
          serviceCIDR: 10.96.0.0/12
          clusterDomain: cluster.local
          dualStack:
            enabled: false
        podSecurityPolicy:
          defaultPolicy: 00-k0s-privileged
        storage:
          type: etcd
        telemetry:
          enabled: false
        extensions:
          helm:
            repositories:
            - name: stable
              url: https://charts.helm.sh/stable
            - name: bitnami
              url: https://charts.bitnami.com/bitnami
            - name: traefik
              url: https://traefik.github.io/charts
            - name: longhorn
              url: https://charts.longhorn.io
            - name: jetstack
              url: https://charts.jetstack.io
            - name: descheduler
              url: https://kubernetes-sigs.github.io/descheduler/
            - name: filebrowse
              url: https://utkuozdemir.org/helm-charts
            #- name: metallb
            #   url: https://metallb.github.io/metallb
            charts:
            #- name: traefik
            #  chartname: traefik/traefik
            #  version: "24.0.0"
            #  namespace: kube-system
            #  values: |
            #    deployment:
            #      replicas: 3
            #- name: longhorn
            #  chartname: longhorn/longhorn
            #  version: "1.4.2"
            #  namespace: longhorn-system
            #- name: cert-manager
            #  chartname: jetstack/cert-manager
            #  version: "1.13"
            #  namespace: cert-manager
            #- name: descheduler
            #  chartname: descheduler/descheduler
            #  version: "0.28.0"
            #  namespace: kube-system
            #- name: filebrowse
            #  chartname: utkuozdemir/filebrowser
            #  version: 1.0.0
            #  namespace: default
            #- name: metallb
            #  chartname: metallb/metallb
            #  #version: "4.5.6"
            #  namespace: metallb-system

Cloud Init - XCP, proxy

Tue, 16 Apr 2024 09:20:48 +0000

Cloud init xcp-ng proxy

Remember:

add http_proxy and https_proxy to the environment
add no_proxy to the environment
add privateInterface and privateAddress to the host if needed
ensure that there is default route on interface
consider firewall settings

#cloud-config
users:
 - name: root
   lock_passwd: false
   ssh_authorized_keys:
     - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKcGHk43LnUeM4MZne9Za3R3iA7mvFNI10AKcOtID2i+ user@key
write_files:
  - path: /etc/NetworkManager/system-connections/enX0.nmconnection
    owner: root:root
    permissions: '0600'
    content: |
      [connection]
      id=enX0
      type=ethernet
      autoconnect-priority=-999
      interface-name=enX0

      [ethernet]

      [ipv4]
      address1=10.0.0.10/27,10.0.0.1
      dns=10.0.0.11;10.0.0.12;
      method=manual
      route1=10.0.0.96/12,10.0.0.180

      [ipv6]
      addr-gen-mode=eui64
      method=auto

      [proxy]
  - path: /etc/bashrc
    content: |
      psg() {
      /bin/ps -ef |grep $* | grep -v grep | grep -v /usr/local/bin/psg
      }
      l() {
      ls -alh
      }
    append: true
runcmd:
  - [ systemctl, disable, --now, --no-block, firewalld ]
  - localectl set-locale C.UTF-8
  - grubby --update-kernel ALL --args selinux=0
  - setenforce 0
  - |
    cat >> /etc/hosts <<EOF
    10.0.0.10 k0adm02
    10.0.0.11 k0adm03
    10.0.0.12 k0wrk03
    10.0.0.13 k0wrk02
    10.0.0.14 k0wrk01
    10.0.0.15 k0adm01
    EOF
  - [ nmcli, general, hostname, {name} ]
  - rm -rf /etc/machine-id
  - rm -rf /var/lib/dbus/machine-id
  - systemd-machine-id-setup
  - nmcli connection reload
  - nmcli connection up enX0
  - [ systemctl, restart, --no-block, sshd ]
  - swapoff -a
  - sed -e '/swap/ s/^#*/#/' -i /etc/fstab
  - systemctl mask swap.target
  - systemctl enable xe-linux-distribution --now

Reflash LSI MEGARAID to HBA

Tue, 28 Nov 2023 22:47:48 +0000

Resources

Prerequisits:

LSI MEGARAID i9341-8i
maybe sas cable
maybe sas drive
possibility to attach card to board (for example m.2 to PCIe 3.0 16x riser :-))
for above you need additional source for 12V since m.2 do not cover 12V
maybe whole power supply

Introduction

We will try to flash MEGARAID using IT binary that efectvelly converts it to HBA disabling hardware RAID and opening possibility to connect and use any sata/sas drive without original flash limitations.

Cloud Init - UBUNTU

Tue, 28 Mar 2023 00:00:00 +0000

Cloud init - UBUNTU

#cloud-config
users:
 - default
 - name: backdoor
   sudo: ALL=(ALL) NOPASSWD:ALL
   lock_passwd: false
   passwd: $6$MFhXlUHt$JG.sn2M4ReeZ.V/TDs8AWJzhA1anX0iUbE0WvfR8v/8d4eGv8v6EwhyiKO.6VixMaC8/dG.YQce01QV8w1.dZ0
 - name: root
   lock_passwd: false
   ssh_authorized_keys:
     - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOiasj/u8jZ5jfVeCGz7XLzQAAHpgF6+OkfoIm4Wyxax root@instance2
 - name: opc
   lock_passwd: false
   ssh_authorized_keys:
     - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHRU8OV9UqSkonqIeuGQpAl4XnybtaKzjehLqosjKVGo jguzik
write_files:
- path: /etc/bash.bashrc
  content: |
    f2bc(){
    fail2ban-client status|awk -F: '/Jail list:/ { split($2,jail,",") ; for (i in jail) { gsub(/[\t ]/,"",jail[i]); system("fail2ban-client status "jail[i]); }; }'
    }
    psg() {
    /bin/ps -ef |grep $* | grep -v grep | grep -v /usr/local/bin/psg
    }
    l() {
    ls -alh
    }
    alias kubectl='k0s kubectl'
    # Automatically add completion for all aliases to commands having completion functions
    function alias_completion {
        local namespace="alias_completion"

        # parse function based completion definitions, where capture group 2 => function and 3 => trigger
        local compl_regex='complete( +[^ ]+)* -F ([^ ]+) ("[^"]+"|[^ ]+)'
        # parse alias definitions, where capture group 1 => trigger, 2 => command, 3 => command arguments
        local alias_regex="alias ([^=]+)='(\"[^\"]+\"|[^ ]+)(( +[^ ]+)*)'"

        # create array of function completion triggers, keeping multi-word triggers together
        eval "local completions=($(complete -p | sed -Ene "/$compl_regex/s//'\3'/p"))"
        (( ${#completions[@]} == 0 )) && return 0

        # create temporary file for wrapper functions and completions
        rm -f "/tmp/${namespace}-*.tmp" # preliminary cleanup
        local tmp_file; tmp_file="$(mktemp "/tmp/${namespace}-${RANDOM}XXX.tmp")" || return 1

        local completion_loader; completion_loader="$(complete -p -D 2>/dev/null | sed -Ene 's/.* -F ([^ ]*).*/\1/p')"

        # read in "<alias> '<aliased command>' '<command args>'" lines from defined aliases
        local line; while read line; do
            eval "local alias_tokens; alias_tokens=($line)" 2>/dev/null || continue # some alias arg patterns cause an eval parse error
            local alias_name="${alias_tokens[0]}" alias_cmd="${alias_tokens[1]}" alias_args="${alias_tokens[2]# }"

            # skip aliases to pipes, boolean control structures and other command lists
            # (leveraging that eval errs out if $alias_args contains unquoted shell metacharacters)
            eval "local alias_arg_words; alias_arg_words=($alias_args)" 2>/dev/null || continue
            # avoid expanding wildcards
            read -a alias_arg_words <<< "$alias_args"

            # skip alias if there is no completion function triggered by the aliased command
            if [[ ! " ${completions[*]} " =~ " $alias_cmd " ]]; then
                if [[ -n "$completion_loader" ]]; then
                    # force loading of completions for the aliased command
                    eval "$completion_loader $alias_cmd"
                    # 124 means completion loader was successful
                    [[ $? -eq 124 ]] || continue
                    completions+=($alias_cmd)
                else
                    continue
                fi
            fi
            local new_completion="$(complete -p "$alias_cmd")"

            # create a wrapper inserting the alias arguments if any
            if [[ -n $alias_args ]]; then
                local compl_func="${new_completion/#* -F /}"; compl_func="${compl_func%% *}"
                # avoid recursive call loops by ignoring our own functions
                if [[ "${compl_func#_$namespace::}" == $compl_func ]]; then
                    local compl_wrapper="_${namespace}::${alias_name}"
                        echo "function $compl_wrapper {
                            (( COMP_CWORD += ${#alias_arg_words[@]} ))
                            COMP_WORDS=($alias_cmd $alias_args \${COMP_WORDS[@]:1})
                            (( COMP_POINT -= \${#COMP_LINE} ))
                            COMP_LINE=\${COMP_LINE/$alias_name/$alias_cmd $alias_args}
                            (( COMP_POINT += \${#COMP_LINE} ))
                            $compl_func
                        }" >> "$tmp_file"
                        new_completion="${new_completion/ -F $compl_func / -F $compl_wrapper }"
                fi
            fi

            # replace completion trigger by alias
            new_completion="${new_completion% *} $alias_name"
            echo "$new_completion" >> "$tmp_file"
        done < <(alias -p | sed -Ene "s/$alias_regex/\1 '\2' '\3'/p")
        source "$tmp_file" && rm -f "$tmp_file"
    }; alias_completion
  append: true
- path: /etc/ssh/sshd_config
  content: |
    Port 44662
  append: true
package_update: true
package_upgrade: true
packages:
  - net-tools
  - iptables-persistent
  - vim
runcmd:
  - echo overlay | sudo tee /etc/modules-load.d/overlay.conf
  - echo br_netfilter | sudo tee /etc/modules-load.d/br_netfilter.conf
  - |
    cat > /etc/sysctl.d/99-kubernetes-cri.conf <<EOF
    net.bridge.bridge-nf-call-iptables  = 1
    net.ipv4.ip_forward                 = 1
    net.bridge.bridge-nf-call-ip6tables = 1
    EOF
  - sysctl --system
  - [ systemctl, daemon-reload ]
  - [ systemctl, enable, iptables-persistent ]
  - [ systemctl, start, iptables-persistent ]
  - iptables -I INPUT -j ACCEPT
  - sudo iptables-save > /etc/iptables/rules.v4


  sed -i -e 's/#Port.*/Port 44662/g' /etc/ssh/sshd_config
  systemctl restart sshd

Cloud Init - OL9

Tue, 14 Mar 2023 10:33:48 +0000

Cloud-init usefull

1LoveOracle!!

#cloud-config12
users:
 - default
 - name: backdoor
   sudo: ALL=(ALL) NOPASSWD:ALL
   lock_passwd: false
   passwd: $6$MFhXlUHt$JG.sn2M4ReeZ.V/TDs8AWJzhA1anX0iUbE0WvfR8v/8d4eGv8v6EwhyiKO.6VixMaC8/dG.YQce01QV8w1.dZ0
 - name: root
   lock_passwd: false
   ssh_authorized_keys:
     - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOiasj/u8jZ5jfVeCGz7XLzQAAHpgF6+OkfoIm4Wyxax root@instance2
 - name: opc
   lock_passwd: false
   ssh_authorized_keys:
     - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHRU8OV9UqSkonqIeuGQpAl4XnybtaKzjehLqosjKVGo jguzik
write_files:
- path: /etc/bashrc
  content: |
    f2bc(){
    fail2ban-client status|awk -F: '/Jail list:/ { split($2,jail,",") ; for (i in jail) { gsub(/[\t ]/,"",jail[i]); system("fail2ban-client status "jail[i]); }; }'
    }
    psg() {
    /bin/ps -ef |grep $* | grep -v grep | grep -v /usr/local/bin/psg
    }
    l() {
    ls -alh
    }
    alias kubectl='k0s kubectl'
    # Automatically add completion for all aliases to commands having completion functions
    function alias_completion {
        local namespace="alias_completion"

        # parse function based completion definitions, where capture group 2 => function and 3 => trigger
        local compl_regex='complete( +[^ ]+)* -F ([^ ]+) ("[^"]+"|[^ ]+)'
        # parse alias definitions, where capture group 1 => trigger, 2 => command, 3 => command arguments
        local alias_regex="alias ([^=]+)='(\"[^\"]+\"|[^ ]+)(( +[^ ]+)*)'"

        # create array of function completion triggers, keeping multi-word triggers together
        eval "local completions=($(complete -p | sed -Ene "/$compl_regex/s//'\3'/p"))"
        (( ${#completions[@]} == 0 )) && return 0

        # create temporary file for wrapper functions and completions
        rm -f "/tmp/${namespace}-*.tmp" # preliminary cleanup
        local tmp_file; tmp_file="$(mktemp "/tmp/${namespace}-${RANDOM}XXX.tmp")" || return 1

        local completion_loader; completion_loader="$(complete -p -D 2>/dev/null | sed -Ene 's/.* -F ([^ ]*).*/\1/p')"

        # read in "<alias> '<aliased command>' '<command args>'" lines from defined aliases
        local line; while read line; do
            eval "local alias_tokens; alias_tokens=($line)" 2>/dev/null || continue # some alias arg patterns cause an eval parse error
            local alias_name="${alias_tokens[0]}" alias_cmd="${alias_tokens[1]}" alias_args="${alias_tokens[2]# }"

            # skip aliases to pipes, boolean control structures and other command lists
            # (leveraging that eval errs out if $alias_args contains unquoted shell metacharacters)
            eval "local alias_arg_words; alias_arg_words=($alias_args)" 2>/dev/null || continue
            # avoid expanding wildcards
            read -a alias_arg_words <<< "$alias_args"

            # skip alias if there is no completion function triggered by the aliased command
            if [[ ! " ${completions[*]} " =~ " $alias_cmd " ]]; then
                if [[ -n "$completion_loader" ]]; then
                    # force loading of completions for the aliased command
                    eval "$completion_loader $alias_cmd"
                    # 124 means completion loader was successful
                    [[ $? -eq 124 ]] || continue
                    completions+=($alias_cmd)
                else
                    continue
                fi
            fi
            local new_completion="$(complete -p "$alias_cmd")"

            # create a wrapper inserting the alias arguments if any
            if [[ -n $alias_args ]]; then
                local compl_func="${new_completion/#* -F /}"; compl_func="${compl_func%% *}"
                # avoid recursive call loops by ignoring our own functions
                if [[ "${compl_func#_$namespace::}" == $compl_func ]]; then
                    local compl_wrapper="_${namespace}::${alias_name}"
                        echo "function $compl_wrapper {
                            (( COMP_CWORD += ${#alias_arg_words[@]} ))
                            COMP_WORDS=($alias_cmd $alias_args \${COMP_WORDS[@]:1})
                            (( COMP_POINT -= \${#COMP_LINE} ))
                            COMP_LINE=\${COMP_LINE/$alias_name/$alias_cmd $alias_args}
                            (( COMP_POINT += \${#COMP_LINE} ))
                            $compl_func
                        }" >> "$tmp_file"
                        new_completion="${new_completion/ -F $compl_func / -F $compl_wrapper }"
                fi
            fi

            # replace completion trigger by alias
            new_completion="${new_completion% *} $alias_name"
            echo "$new_completion" >> "$tmp_file"
        done < <(alias -p | sed -Ene "s/$alias_regex/\1 '\2' '\3'/p")
        source "$tmp_file" && rm -f "$tmp_file"
    }; alias_completion
  append: true
- path: /etc/ssh/sshd_config
  content: |
    Port 44662
  append: true
runcmd:
  - [ firewall-offline-cmd, --add-port=44662/tcp, --permanent ]
  - [ systemctl, restart, --no-block, sshd ]
  - [ systemctl, disable, --now, --no-block, firewalld ]
  - [ systemctl, disable, --now, --no-block, iscsi ]
  - timedatectl set-timezone Europe/Warsaw
  - localectl set-locale C.UTF-8
  - grubby --update-kernel ALL --args selinux=0
  - setenforce 0
  - sed -i --follow-symlinks 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/sysconfig/selinux
  - echo overlay | sudo tee /etc/modules-load.d/overlay.conf
  - echo br_netfilter | sudo tee /etc/modules-load.d/br_netfilter.conf
  - |
    cat > /etc/sysctl.d/99-kubernetes-cri.conf <<EOF
    net.bridge.bridge-nf-call-iptables  = 1
    net.ipv4.ip_forward                 = 1
    net.bridge.bridge-nf-call-ip6tables = 1
    EOF
  - sysctl --system
  #- |
  #  cat <<EOF | sudo tee /etc/yum.repos.d/kubernetes.repo
  #  [kubernetes]
  #  name=Kubernetes
  #  baseurl=https://pkgs.k8s.io/core:/stable:/v1.29/rpm/
  #  enabled=1
  #  gpgcheck=1
  #  repo_gpgcheck=1
  #  gpgkey=https://pkgs.k8s.io/core:/stable:/v1.29/rpm/repodata/repomd.xml.key
  #  EOF
  #- VERSION=1.27
  #- OS=CentOS_9_Stream
  #- curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable:/cri-o:/$VERSION/$OS/devel:kubic:libcontainers:stable:cri-o:$VERSION.repo
  #- mkdir -p /var/lib/crio

Gitlab Runner helm on arm64

Tue, 14 Mar 2023 10:33:48 +0000

Helm to replace in helm deployment

affinity: {}
checkInterval: 30
concurrent: 10
configMaps: {}
gitlabUrl: https://gitlab.com/
hostAliases: []
image:
  image: gitlab-org/gitlab-runner
  registry: registry.gitlab.com
  tag: ubuntu-v15.9.1
imagePullPolicy: IfNotPresent
metrics:
  enabled: false
  port: 9252
  portName: metrics
  serviceMonitor:
    enabled: false
nodeSelector: {}
podAnnotations: {}
podLabels: {}
podSecurityContext:
  fsGroup: 999
  runAsUser: 999
priorityClassName: ""
rbac:
  clusterWideAccess: true
  create: true
  podSecurityPolicy:
    enabled: false
    resourceNames:
    - gitlab-runner
  rules:
  - resources:
    - configmaps
    - pods
    - pods/attach
    - secrets
    - services
    verbs:
    - get
    - list
    - watch
    - create
    - patch
    - update
    - delete
  - apiGroups:
    - ""
    resources:
    - pods/exec
    verbs:
    - create
    - patch
    - delete
resources: {}
runnerRegistrationToken: GR1348941UZ26_eMsH4386vivVAHQ
runners:
  builds: {}
  cache: {}
  config: |
    [[runners]]
      name = "00_runner"
      [runners.kubernetes]
        privileged = true
        allow_privilege_escalation = true
        namespace = "{{.Release.Namespace}}"
        image = "ubuntu:20.04"
        helper_image = "gitlab/gitlab-runner-helper:arm64-latest"
        dns_policy = "none"
        [runners.kubernetes.dns_config]
          nameservers = ["8.8.8.8", "8.8.4.4"]
          searches = ["kubernetes.default",]
          [[runners.kubernetes.dns_config.options]]
            name = "ndots"
            value = "1"
  helpers: {}
  services: {}
secrets: []
dnsConfig:
  options:
    - name: ndots
      value: "1"
securityContext:
  allowPrivilegeEscalation: false
  capabilities:
    drop:
    - ALL
  privileged: false
  readOnlyRootFilesystem: false
  runAsNonRoot: true
service:
  enabled: false
  type: ClusterIP
sessionServer:
  enabled: false
terminationGracePeriodSeconds: 3600
tolerations: []
unregisterRunners: true
volumeMounts:
- mountPath: /cache
  name: cache-volume
volumes:
- emptyDir:
    sizeLimit: 500Mi
  name: cache-volume

ERX Toolbox

Sun, 19 Feb 2023 00:00:00 +0000

Station statistics

Here some examples how to get statistics for stations connected to UAP

iwconfig (1)
wlanconfig ath0 list station (2)
ip -s -h link show dev eth0 (3)

1	get UAP interfaces (`iwconfig --help` for broad info) this can change tx-power also
2	get stations statistics on specified UAP interface
3	stats for interface

PPPoE interface status and logs

show interfaces pppoe pppoe0
show interfaces pppoe pppoe0 log

Command toolbox

Tue, 06 Apr 2021 13:24:48 +0000

Linux - Disable RH subscription manager

vi /etc/yum/pluginconf.d/subscription-manager.conf
enabled=0

Linux - Delete logs older than

find /aa/bb -name '*.log' -type f -mtime +30 -exec rm {} +

Linux - Export amount of lines of log to tar.gz

cat <log_file_name> | wc -l
sed -n '777850,805947p' <log_file_name> | gzip > <output_file_name>

Linux - Pack bunch of logs in their own tar.gz

find . -type f \( -name "server.log.2021-02*" ! -name "*tar.gz" \) -exec tar czvf {}.tar.gz {} --remove-files \;

Linux - VirtualHere with legacy usb printer.

This is server-client solution for sharing USB devices over network.
If you have old usb printer connected to USB in your linx server you know that cups will not provide high quality printing.
So, my HP DeskJet 920c neded encapsulation of usb. Unfortunately freely available usbip is not a solution since on client side I’m using Windows and usbip drivers for windows are not signed. Hard way you can use it but it involves mapping device and starting windows in disabled drivers signing check.

Disable bluetooth Centos8/RHEL8

Fri, 02 Apr 2021 15:20:48 +0200

Issue

You have linux box that is a server. You don’t want / don’t have BT of anykind.

List your blue* packages, seek for their dependency and if you are satisfied - remove.

dnf list blue*

In my case needed to remove:

dnf remove bluedevil.x86_64

Certificate

Sat, 28 Nov 2020 20:07:48 +0000

Prepare cert for specified ip (non-existing anymore)

Gen:

83.238.173.46
--certyfikat CA
openssl req -x509 -days 365 -newkey rsa:1024  -keyout /etc/ssl/private/ca.key  -out /etc/ssl/ca.crt
--klucz prywatny
openssl genrsa -des3 -out 83.238.173.46.key 1024
--request z vigora do pliku  83.238.173.46.csr
openssl x509 -req -days 365 -in 83.238.173.46.csr -out 83.238.173.46.crt -CA /etc/ssl/ca.crt -CAkey /etc/ssl/private/ca.key -CAcreateserial -extfile /etc/ssl/x509v3.cnf -extensions x509v3_IPAddr
--import do vigora
--utworzenie cert dla usera

openssl req -new -nodes -out jareeq.csr -keyout jareeq.key -days 365 -config openssl.cnf
openssl x509 -req -days 365 -in jareeq.csr -out jareeq.crt -CA /etc/ssl/ca.crt -CAkey /etc/ssl/private/ca.key -CAcreateserial -extfile /etc/ssl/x509v3.cnf -extensions x509v3_FQDN
openssl pkcs12 -export -out jareeq.p12 -in jareeq.crt -inkey jareeq.key

Connect remote borg backup on wasabi as local resource

Wed, 18 Nov 2020 22:47:48 +0000

Mounting remote and reading

Prerequisits:

borg repository created and pushed to wasabi
installed and configred rsync with wasabi

First mount remote resource with rsymc mount.
You can add -vv but you should add --vfs-cache-mode writes, this will give you proper feedback for applications, especially mount.

rclone mount --vfs-cache-mode writes  wasabi:borgbackup /media/usb/bulbobackup/bulbo.borg -vv

Leave this console open go to next one and type:

borg mount /media/usb/bulbobackup/bulbo.borg /mnt

Now you have mounted your archive from remote
You can also use:

Ums Installation

Sun, 18 Oct 2020 13:54:47 +0000

Reproduced steps to install UMS on CentOS 8.

dnf install epel-release (1)
dnf install java-1.8.0-openjdk (2)
dnf config-manager --set-enabled PowerTools (3)
dnf install mediainfo (4)

1	a1
2	ab
3	bb
4	cc

Get UMS, from website then:

tar -zxvf UMS-9.8.1-x86_64.tgz ums-9.8.1/
mv ums-9.8.1/ /opt/
ln -s /opt/ums-9.8.1/ /opt/ums

Let’s create config files

mkdir /etc/ums
cp /opt/ums/UMS.conf /opt/ums/WEB.conf /etc/ums

New user and group for ums

Interactive grid - add filter

Thu, 08 Oct 2020 00:00:00 +0000

Interactive Grid - Filtering

apex.region("HIST").widget().interactiveGrid("addFilter", {
  type: 'column',
  columnType: 'column',
  columnName: 'ROLE',
  operator: 'C',
  value: $v2('P8_ROLE'),
  isCaseSensitive: false
});

Interactive grid - add next index to record

Thu, 08 Oct 2020 00:00:00 +0000

Interactive Grid - add next index to record.

First give the column you want to update a static id such as

C_INDEX.

Define a hidden page item to hold the next index value.

P5_NEXT_INDEX.

Create the DA on the IG region and give it a name.
When:
Event: Row Initialization Selection
Type:
RegionRegion: your IG regionThen

Add an Execute JavaScript Code action with this:

var index;
var model = this.data.model;
var meta = model.getRecordMetadata(this.data.recordId);
if ( meta.inserted && !meta.updated ) {    index = $v("P5_NEXT_INDEX");
$s("C_INDEX", index);
index += 1;
$s("P5_NEXT_INDEX", index);
}

Interactive grid - higlight row

Thu, 08 Oct 2020 00:00:00 +0000

Interactive Grid - higlight row

Add below to dynamic action.

var model = this.data.model,
record = this.data.record,
meta = model.getRecordMetadata(this.data.recordId),
id = model.getRecordId(record);

Add this to page function.

// create a private scope where $ is set to apex.jQuery
(function($) {
    function updateRecordHighlights(model, record, id) {
        var fields,
            meta = model.getRecordMetadata(id),
            fType = model.getValue(record, "TYPE").v === "NEW";
        fields = meta.fields;
        if (!fields) {
            fields = meta.fields = {};
        }
        if (!fields.TYPE) {
            fields.TYPE= {};
        }
        fields.TYPE.highlight = fType ? "hlType" : null;
        // should call metadataChanged but don't bother because currently the grid doesn't respond to highlight changes
    }
    function updateHighlights(model, offset, ids) {
        var i, id, record;
        if ( offset >= 0 ) {
            // model doesn't have a way to loop over a range of the data so use
            // forEach and check the index relative to the given offset
            model.forEach(function(record, index, id) {
                if ( index >= offset ) {
                    updateRecordHighlights(model, record, id);
                }
            });
        }
        if ( ids ) {
            for (i = 0; i < ids.length; i++) {
                id = ids[i];
                record = model.getRecord(id);
                updateRecordHighlights(model, record, id);
            }
        }
    }
    // do this after the page loads but before the IG is initialized to catch the initial events
    $(function() {
        //
        // This is the general pattern for subscribing to model notifications
        //
        // listen for model created events so that we can subscribe to model notifications
        $("#r111").on("interactivegridviewmodelcreate", function(event, ui) {
            var sid, view,
                model = ui.model;
            if ( ui.viewId === "grid" ) {
                view = apex.region("r111").widget().interactiveGrid("getViews", "grid");
                sid = model.subscribe( {
                    onChange: function(type, change) {
                        console.log(">> model changed ", type, change);
                        if ( type === "set" ) {
                            // don't bother to recalculate if other columns change
                            if (change.field === "TYPE" ) {
                                updateHighlights( model, -1, [change.recordId] );
                                // a veiw refresh is needed
                                view.view$.grid("refresh");
                            }
                        } else if (type === "addData") {
                            updateHighlights( model, change.offset, change.replacedIds );
                            // no veiw refresh needed because event happens before view is rendered
                        } else if (type === "refreshRecords" || type === "revert") {
                            updateHighlights( model, -1, change.recordIds );
                            // a veiw refresh is needed
                            view.view$.grid("refresh");
                        }
                    }
                } );
            }
            // if model is not lazy loaded there is no initial notification that
            // the model has data so update highlights for any initial data

            updateHighlights( model, 0 );
        });
    });
})(apex.jQuery);

Interactive grid - radio group in toolbar

Thu, 08 Oct 2020 00:00:00 +0000

Radio group in toolbar of Interactive Grid

function (options) {
  var tgc = options.toolbarData.toolbarFind("actions3").controls;
  // Add a Radio Group to the Toolbar
  // and define the associated action (that does the actual work)
  tgc.push(
    {
      type: "RADIO_GROUP"
      , action: "set-source"
      , id: "P855_SOURCE_SWITCH"
    });

Define the action : The options and what to do on change.

  options.initActions = function (actions) {
    actions.add(
      {
        name: "set-source"
        , choices: [
          { label: "JOP", value: "J" }
          , { label: "Retouren", value: "R" }
        ]
        , action: function (evt, elm) { // Show the current selection
          $("input:radio[name=report_ig_toolbar_set-source]").removeClass("current");
          $("input:radio[name=report_ig_toolbar_set-source][value=" + elm.value + "]").addClass("current");
          // Set the value of the Page Item to the selected value
          $s("P855_SOURCE", elm.value);
        }
      });
  };
  return options;
}

Interactive Grid - Row numbering

Thu, 08 Oct 2020 00:00:00 +0000

Interactive Grid - Row numbering

Numbering rowswhenn adding new with increment 10

var highest=Math.max(10,Number($v("P5_NEXT_INDEX")));
var model = this.data.model;
var meta = model.getRecordMetadata(this.data.recordId);
$(".sortorder").each(function(){
if(this.textContent!="") {
highest=Math.max(highest,parseFloat(this.textContent));
console.log('----------ssss--------------->'+highest)
}
});

if ( meta.inserted && !meta.updated && !meta.deleted && !meta.agg) {
$s("C_INDEX", highest);

$s("P5_NEXT_INDEX", Number(highest)+10);
}
function(config) {

    config.defaultGridColumnOptions = {

        linkTargetColumn: 'LIST_CONFIG',
        linkText: 'Edycja Listy'
    };

    return config;

}

Syncing & rebasing when behind

Thu, 08 Oct 2020 00:00:00 +0000

Syncing & rebasing when behind

Scenario:
When your branch is seriously outdated, with submodules.
You want to finally push your changes to develop.

Switch to dev

git switch develop

Pull your most actoual dev

git pull

Sync submodules

git submodule update --recursive

Take your status :-)

git status

Go to your feature branch

git switch feat/XXX-NNNNNN

Rebase to your freshly pulled local develop

git rebase --interactive develop

Command toolbox

Mon, 01 Jan 0001 00:00:00 +0000

Create remote backup from mysql database on windows using bat file

backup.bat

@echo off
d:
cd /d %0\..
for /f "tokens=1* delims= " %%a in ('date/t') do set yyyy-mm-dd=%%a
for /f "tokens=1* delims=-" %%a in ('echo %yyyy-mm-dd%') do set year=%%a
for /f "tokens=2* delims=-" %%a in ('echo %yyyy-mm-dd%') do set month=%%a
for /f "tokens=3* delims=-" %%a in ('echo %yyyy-mm-dd%') do set day=%%a
for /f "tokens=1* delims=:" %%a in ('echo %time%') do set hour=%%a
for /f "tokens=2* delims=:" %%a in ('echo %time%') do set mins=%%a
for /f "tokens=3* delims=:" %%a in ('echo %time%') do set sec=%%a
for /f "tokens=1* delims= " %%a in ('echo %sec%') do set secs=%%a
set cdate=%year%_%month%%day%_%hour%%mins%
@echo on
mysqldump.exe -C -v -h domain.com -u xxxxxxxxx --password=xxxxxxxx baza46_mauto | gzip -v -9 > backup_%cdate%.sql.gz

General installation tips

Mon, 01 Jan 0001 00:00:00 +0000

Proxmox - general instalation Tips

This instructions are valid for proxmox 7.4

0 - DNS

Any of your favorite

8.8.8.8
8.8.4.4
1.1.1.1
1.0.0.1
9.9.9.9

1 - Laptop install - disable lid

vi /etc/systemd/logind.conf

HandleLidSwitch=ignore
HandleLidSwitchExternalPower=ignore
HandleLidSwitchDocked=ignore

systemctl restart systemd-logind

3 - Enable community repo

First - disable commercial repo

sed -i "s/^deb/\#deb/" /etc/apt/sources.list.d/pve-enterprise.list
apt-get update

Second - add community repo

echo "deb http://download.proxmox.com/debian/pve $(grep "VERSION=" /etc/os-release | sed -n 's/.*(\(.*\)).*/\1/p') pve-no-subscription" > /etc/apt/sources.list.d/pve-no-enterprise.list
apt-get update

Generator

Mon, 01 Jan 0001 00:00:00 +0000

Pronouncable password generator.

This generator helps create strong, easy to remember passwords.




  Micro Generator

  
    
      Główne

      Ilość słów:
      

      Ilość haseł:
      

      Cyfry (szt.):
      
      
      
      Wybierz słownik:

IPV6 Subnet calculator

Mon, 01 Jan 0001 00:00:00 +0000

Subnet calculator

IPv4 subnet calculator.




  IPv6 Subnet Calculator

  
    
      
        IPv6 Prefix:

Kubernetes toolbox

Mon, 01 Jan 0001 00:00:00 +0000

Export namespace and non namespace objects

ROOT=${HOME}/clusterstate
while read -r resource
do
    echo "  scanning resource '${resource}'"
    while read -r namespace item x
    do
        mkdir -p "${ROOT}/${namespace}/${resource}"
        echo "    exporting item '${namespace} ${item}'"
        kubectl get "$resource" -n "$namespace" "$item" -o yaml > "${ROOT}/${namespace}/${resource}/$item.yaml" &
    done < <(kubectl get "$resource" --all-namespaces 2>&1  | tail -n +2)
done < <(kubectl api-resources --namespaced=true 2>/dev/null | grep -v "events" | tail -n +2 | awk '{print $1}')

wait

Install yq

BINARY=yq_linux_arm64
LATEST=$(wget -qO- https://api.github.com/repos/mikefarah/yq/releases/latest 2>/dev/null | grep browser_download_url | grep $BINARY\"\$|awk '{print $NF}' )
sudo wget -q $LATEST -O /usr/bin/yq && sudo chmod +x /usr/bin/yq

Extract 'last aplied configuration from deployment etc.'

 kubectl get deployment nginx-deployment -o json | jq -r '.metadata.annotations."kubectl.kubernetes.io/last-applied-configuration"' | yq r -P - > deployment_cleaned.yaml

Oracle cloud dns blachole fix

Mon, 01 Jan 0001 00:00:00 +0000

DNS Latency Resolution in Multi-Node Subnets

In Oracle Cloud Infrastructure (OCI) environments, DNS latency occurs when multiple Kubernetes nodes occupy a single subnet. The issue is asymmetric: traffic between different VCNs or tenants functions correctly due to mandatory SNAT at the Dynamic Routing Gateway (DRG) level, whereas intra-subnet traffic between nodes fails or lags significantly.

Root Cause Analysis

When nodes reside in the same subnet, the CNI typically avoids SNAT to maintain Pod IP visibility. Consequently, a Pod on Node A attempting to reach CoreDNS on Node B uses raw Pod IP addresses from the 10.244.x.x range.

Oracle cloud DNS fixed

Mon, 01 Jan 0001 00:00:00 +0000

Change dns settings to non-updatable

for host in 10.0.0.5 10.0.0.10 10.0.0.130 10.0.0.135 10.0.0.140 10.0.0.210 10.0.0.220; do ssh -p 44662 root@$host "sudo chattr -i /etc/resolv.conf && \
echo -e 'search default.svc.cluster.local svc.cluster.local cluster.local\nnameserver 10.96.0.10\nnameserver 1.0.0.1\nnameserver 1.1.1.1\noptions ndots:1' > /etc/resolv.conf && \
chattr +i /etc/resolv.conf
"; done

Subnet calculator

Mon, 01 Jan 0001 00:00:00 +0000

Subnet calculator

IPv4 subnet calculator.




  Subnet Calculator

  
    
      Network Address:

Testing

Mon, 01 Jan 0001 00:00:00 +0000

Test

dnf install epel-release (1)
dnf install java-1.8.0-openjdk (2)
dnf config-manager --set-enabled PowerTools (3)
dnf install mediainfo (4)

1	a1
2	ab
3	bb
4	cc

TUYA IoT programming

Mon, 01 Jan 0001 00:00:00 +0000

Required Software

Simplicity Studio - as the primary operational environment and graphical user interface (GUI) for flashing the firmware.
Simplicity Commander - the native CLI tool for performing safe memory dumps and low-level operations.

Hardware Interface and Wiring

Communication with the EFR32MG21 microcontroller is established using the physical JTAG interface.

Pinout and Wiring: * On the three bottom pins, looking from the left, connect the signal wires in the following order: red, white, green. * Connect the ground wire (black) to the pin on the right side.

WSL configuration ad usage

Mon, 01 Jan 0001 00:00:00 +0000

Zaawansowana konfiguracja Oracle Linux 9 w WSL2

1. Przygotowanie środowiska Windows

Przed instalacją należy aktywować funkcje wirtualizacji w systemie Windows (PowerShell jako Administrator).

Disable-NetAdapterBinding -Name "*" -ComponentID ms_tcpip6
dism.exe /online /enable-feature /featurename:Microsoft-Windows-Subsystem-Linux /all /norestart
dism.exe /online /enable-feature /featurename:VirtualMachinePlatform /all /norestart

Po restarcie systemu wykonujemy aktualizację:

wsl --update --web-download
wsl --set-default-version 2

2. Konfiguracja globalna silnika (.wslconfig)

Plik .wslconfig steruje parametrami wszystkich maszyn WSL2. Należy go utworzyć w lokalizacji: C:\Users\<twoja_nazwa>\.wslconfig.