I hereby claim:
- I am clrxbl on github.
- I am systemd (https://keybase.io/systemd) on keybase.
- I have a public key ASCmmRiW1q09Ioph0I5LWXC-7b8c8leqm8f-3mFCHUuL2wo
To claim this, I am signing this object:
#!/bin/bash | |
# java shim to execute anything java within a distroless, rootless container | |
# designed for podman 4, breaks with podman 3 because of different --pull syntax | |
# https://iptables.sh | |
set -euo pipefail | |
IMAGE="gcr.io/distroless/java21:nonroot" | |
# check for podman |
2023-07-05T07:37:58.670132Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "socket" | |
2023-07-05T07:37:58.670345Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "recvfrom" | |
2023-07-05T07:37:58.670407Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "sendto" | |
2023-07-05T07:37:58.670465Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "bind" | |
2023-07-05T07:37:58.670523Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "listen" | |
2023-07-05T07:37:58.670582Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "connect" | |
2023-07-05T07:37:58.670728Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "fcntl" | |
2023-07-05T07:37:58.670789Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "dup" | |
2023-07-05T07:37:58.670852Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "dup2" | |
2023-07-05T07:37:58.670909Z TRACE ThreadId(01) mirrord_layer::socket::hooks: hooked "getpeername" |
2023-07-04T20:00:44.215421Z TRACE ThreadId(27) getaddrinfo: mirrord_layer::socket::ops: new rawish_node=Some("kafka-kafka-0.kafka-kafka-brokers.infra.svc") rawish_service=None raw_hints=Some(addrinfo { ai_flags: 2, ai_family: 2, ai_socktype: 0, ai_protocol: 0, ai_addrlen: 0, ai_canonname: 0x0, ai_addr: 0x0, ai_next: 0x0 }) | |
2023-07-04T20:00:44.285791Z TRACE ThreadId(27) getaddrinfo: mirrord_layer::socket::ops: return=Error(ResponseError(RemoteIO(RemoteIOError { raw_os_error: Some(2), kind: NotFound }))) rawish_node=Some("kafka-kafka-0.kafka-kafka-brokers.infra.svc") rawish_service=None raw_hints=Some(addrinfo { ai_flags: 2, ai_family: 2, ai_socktype: 0, ai_protocol: 0, ai_addrlen: 0, ai_canonname: 0x0, ai_addr: 0x0, ai_next: 0x0 }) | |
2023-07-04T20:00:44.285862Z TRACE ThreadId(27) getaddrinfo: mirrord_layer::socket::ops: close time.busy=70.4ms time.idle=33.0µs rawish_node=Some("kafka-kafka-0.kafka-kafka-brokers.infra.svc") rawish_service=None raw_hints=Some(addrinfo { ai_flags: 2, ai_family: 2, ai_socktype: 0, ai |
2023-07-04T19:45:25.025216Z TRACE ThreadId(25) getsockname: mirrord_layer::socket::ops: return=Success(0) sockfd=394 | |
2023-07-04T19:45:25.025219Z TRACE ThreadId(25) getsockname: mirrord_layer::socket::ops: close time.busy=9.83µs time.idle=7.50µs sockfd=394 | |
2023-07-04T19:45:25.025227Z TRACE ThreadId(25) getsockname: mirrord_layer::socket::ops: new sockfd=394 | |
2023-07-04T19:45:25.025232Z TRACE ThreadId(25) getsockname: mirrord_layer::socket::ops: getsockname -> local_address Ip( | |
172.16.0.194:52734, | |
) sockfd=394 | |
2023-07-04T19:45:25.025235Z TRACE ThreadId(25) getsockname: mirrord_layer::socket::ops: return=Success(0) sockfd=394 | |
2023-07-04T19:45:25.025238Z TRACE ThreadId(25) getsockname: mirrord_layer::socket::ops: close time.busy=6.12µs time.idle=4.71µs sockfd=394 | |
2023-07-04T19:45:25.037526Z TRACE ThreadId(23) connect:connect_outgoing: mirrord_layer::socket::ops: return=Success(ConnectResult { result: -1, error: Some(Errno { code: 36, description: Some("Operation now in progress") }) }) sockfd=396 address_lengt |
Control-plane: | |
PRIVATE_IFACE=eth1 | |
PUBLIC_IP=$(curl http://ifconfig.me) | |
PRIVATE_IP=$(ip -f inet addr show $PRIVATE_IFACE | awk '/inet / {print $2}' | cut -d/ -f1) | |
curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644" INSTALL_K3S_EXEC="--bind-address $PRIVATE_IP --node-ip $PRIVATE_IP --node-external-ip $PUBLIC_IP --advertise-address $PRIVATE_IP --disable-network-policy --no-deploy traefik --disable traefik --no-flannel --kubelet-arg address=$PRIVATE_IP --kube-apiserver-arg kubelet-preferred-address-types=InternalIP --cluster-cidr 172.16.0.0/16 --service-cidr 172.17.0.0/16 --cluster-dns 172.17.0.10" sh - | |
export KUBECONFIG=/etc/rancher/k3s/k3s.yaml | |
Agents: | |
PRIVATE_IFACE=eth1 | |
PUBLIC_IP=$(curl http://ifconfig.me) |
containerRuntime: | |
integration: "containerd" | |
socketPath: "/var/run/k3s/containerd/containerd.sock" | |
nodePort: | |
enabled: true | |
nodeinit: | |
enabled: true | |
restartPods: true |
// ==UserScript== | |
// @name Harvest Currency Exchange | |
// @namespace Violentmonkey Scripts | |
// @match https://*.harvestapp.com/projects/* | |
// @run-at document-idle | |
// @grant none | |
// @version 1.0 | |
// @author - | |
// @description 3/22/2021, 3:47:59 PM | |
// ==/UserScript== |
#!/bin/bash | |
CURRENT_IP=$(hostname -I | cut -d' ' -f1) | |
CURRENT_NODE=$(kubectl get nodes -o wide | grep "$CURRENT_IP" | cut -d " " -f1) | |
kubectl label node $CURRENT_NODE node-role.kubernetes.io/worker=worker |
I hereby claim:
To claim this, I am signing this object:
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdnZtp2EZhcbBJnPhISC9ehp7YisviZwXveQBC2jasfLf9MZbUgCaLJVcvPngfR33r0rP9j3AU5m2/GBGfF0E85zMcLenpFEOrbtugaaN6tem+o/b5l/ZwF4Y+4xfrHTlh7ptxzNGawuvI9RW2ydnaaw59sPDUzvak3Ti8MEGXES8AoHUUAGTOP3zSHPf6RX77MddxAYqisIG9s4ork6c79G3o4OJvI6z7LX9KuuI47JSrQABxmVRIPrPk+THTrCIK5eOxC1do7TWVR75hH2acD1MncquXWKb2Mtofr/LqAldS63OBSF+86QcEg1mQVyIF9+ZPjD/VqLVwOGM6yHND michael@arch |