Summary: Firefox allows me to store passwords locally, encrypted, and password protected. Chrome wants to store passwords on line, which is not acceptable.
Continue reading
Category Archives: Software
todo.txt done
While I like the functionality of the todo.txt structure, I do not like the fact that done tasks stay in my todo list in perpetuity, and I also don’t want to lose them. So, I’ve made a simple hack that allows me to move done items to a done folder. Here’s the code:
#!/bin/sh awk '/^x/ {print $0}' ~/Dropbox/todo/todo.txt >> ~/Dropbox/todo/done.txt awk '!/^x/ {print $0}' ~/Dropbox/todo/todo.txt > ~/Dropbox/todo/todo2.txt mv ~/Dropbox/todo/todo2.txt ~/Dropbox/todo/todo.txt |
I call it todo_done.sh.
I copied my original to /tmp/pre in order to test and make sure I have a backup. After running todo_done.sh I get:
$ diff -u /tmp/pre/todo.txt ~/Dropbox/todo/todo.txt --- /tmp/pre/todo.txt 2017-11-15 17:46:21.794510999 -0500 +++ /home/ayoung/Dropbox/todo/todo.txt 2017-11-15 17:46:24.584515043 -0500 @@ -7,7 +7,6 @@ 2017-10-02 Expenses 2017-10-04 Containerize hammer 2017-10-06 Complete steam setup -x 2017-10-12 Trrc time resource reduce cost 2017-10-12 Whiteboard training 2017-10-14 Subscription manager extensions for skis or products? 2017-10-15 Workcenter is made up of 4 things: machine, man, method, measures. |
and
$ diff -u /tmp/pre/done.txt ~/Dropbox/todo/done.txt --- /tmp/pre/done.txt 2017-11-15 17:46:17.914505377 -0500 +++ /home/ayoung/Dropbox/todo/done.txt 2017-11-15 17:46:24.580515037 -0500 @@ -26,3 +26,4 @@ x 2017-10-19 Drs appt? x 2017-11-02 Letter of Support x 2017-11-15 2017-09-27 LinkedIn TJX +x 2017-10-12 Trrc time resource reduce cost |
Different CloudForms Catalogs for Different Groups
One of the largest value propositions of DevOps is the concept of Self Service provisioning. If you can remove human interaction from resource allocation, you can reduce both the response time and the likelihood of error in configuration. Red Hat CloudForms has a self service feature that allows a user to select from predefined services. You may wish to show different users different catalog items. This might be for security reasons, such as the set of credentials required and provided, or merely to reduce clutter and focus the end user on specific catalog items. Perhaps some items are still undergoing testing and are not ready for general consumption.
Obviously, these predefined services may not match your entire user population.
I’ve been working on setting up a CloudForms instance where members of different groups see different service catalogs. Here is what I did.
Continue reading
Getting a Virtual Machine’s IP Address from virsh
Ten Years later, and I finally know how to get virsh to tell me the IP address for a VM.
Continue reading
Deliberate Elevation of Privileges
“Ooops.” — Me, doing something as admin that I didn’t mean to do.
While the sudo mechanism has some warranted criticism, it is still an improvement on doing everything as the root account. The essential addition that sudo provides for the average sys admin is the ability to only grant themselves system admin when they explicitly want it.
A minor addition for todo.txt
I had a simple todo list I managed using shell scripts and git, but I wanted something for the Cell phone. The todo.txt application fills that need now. But I was able to reuse something from my old approach to make it a little more command line friendly.
Continue readingSE Linux for CentOS Part 3
After the previous two days debugging, Simo Sorce suggested that I need to tell the OS to show all AVCs, some are hidden by default.
SE Linux for CentOS Continued
Trying to troubleshoot the issues from Yesterday’s SELinux errors.
Continue reading
SELinux for Kubevirt on Centos
Without disabling SELinux enforcement, an attempt to deploy a VM generates the following audit message:
type=AVC msg=audit(1504194626.938:877): avc: denied { transition } for pid=9574 comm="libvirtd" path="/usr/local/bin/qemu-system-x86_64" dev="dm-19" ino=31526884 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:system_r:svirt_tcg_t:s0:c408,c741 tclass=process |
Running this through audit2allow provides a little more visibility into the problem:
#============= spc_t ============== #!!!! The file '/usr/local/bin/qemu-system-x86_64' is mislabeled on your system. #!!!! Fix with $ restorecon -R -v /usr/local/bin/qemu-system-x86_64 allow spc_t svirt_tcg_t:process transition; |
This is probably due to running as much of the virtualization machinery in containers. /usr/local/bin/qemu-system-x86_64 comes from inside the libvirt container. It does not exist on the base OS filesystem. Thus, just running restorecon won’t do much.
Deploying Kubevirt on Origin Master
Now that I have a functional OpenShift Origin built from source, I need to deploy KubeVirt on top of it.
Here are my notes. This is rough, and not production quality yet, but should get you started.