Diego Casati dcasati

Azure Global Black Belt Team at @microsoft. Kubernetes, Containers

dcasati / cleanup-appcat-rules.sh

Created October 24, 2025 17:02

cleanup-appcat-rules.sh

	#!/usr/bin/env bash
	# shfmt -i 2 -ci -w
	set -e

	# AppCAT Ruleset Cleanup Script
	# Optimized for Spring Boot applications targeting Azure AKS on Linux
	# Removes unnecessary rulesets to speed up assessments

	################################################################################
	RULESETS_DIR="${HOME}/.appcat/rulesets"

dcasati / Setup STEAM laptop

Created May 18, 2025 18:04

	# Run PowerShell as Administrator

	# 1. Install Chocolatey (if not already installed)
	if (-Not (Get-Command choco -ErrorAction SilentlyContinue)) {
	Set-ExecutionPolicy Bypass -Scope Process -Force
	[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072
	Invoke-Expression ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))
	}

	# 2. Install Applications

dcasati / servicemonitors.azmonitoring.coreos.com

Last active March 25, 2025 20:40

servicemonitors.azmonitoring.coreos.com

	apiVersion: apiextensions.k8s.io/v1
	kind: CustomResourceDefinition
	metadata:
	annotations:
	controller-gen.kubebuilder.io/version: v0.11.1
	meta.helm.sh/release-name: aks-managed-azure-monitor-metrics
	meta.helm.sh/release-namespace: kube-system
	creationTimestamp: "2025-03-18T18:40:43Z"
	generation: 1
	labels:

dcasati / daemonset-device-plugin-mig

Last active November 26, 2024 23:18

	# Source: nvidia-device-plugin/templates/daemonset-device-plugin.yml
	apiVersion: apps/v1
	kind: DaemonSet
	metadata:
	name: nvdp-nvidia-device-plugin
	namespace: nvidia-device-plugin
	labels:
	helm.sh/chart: nvidia-device-plugin-0.15.0
	app.kubernetes.io/name: nvidia-device-plugin
	app.kubernetes.io/instance: nvdp

dcasati / gist:35bbd47f9879c5a8c9345323e02bb876

Created September 24, 2024 17:11

piepeline import

	#!/bin/bash
	set -x
	# Set your ACR name and resource variables
	ACR_NAME=""
	SOURCE_RG_C1="<source-resource-group>"
	MyRegC1="<my-registry>"
	MyPipelineC1="<my-pipeline>"
	MyPipelineC1Run="<my-pipeline-run>"
	MyBlob="<my-storage-blob>"

dcasati / delft3d

Last active June 2, 2025 11:07

compile delft3d on rockylinux9

	#!/bin/env bash
	# shfmt -i 2 -ci -w
	set -eox

	wget https://registrationcenter-download.intel.com/akdlm/IRC_NAS/d461a695-6481-426f-a22f-b5644cd1fa8b/l_HPCKit_p_2024.2.1.79_offline.sh

	sh ./l_HPCKit_p_2024.2.1.79_offline.sh -a --silent --cli --eula accept

	# pre-requisites
	apt update && apt install -y \

dcasati / podman

Created April 30, 2024 20:27

run podman in a pod

dcasati / run.sh

Last active May 24, 2024 10:42

torchrun

	#!/usr/bin/env bash
	set -x

	export TORCH_CPP_LOG_LEVEL=INFO
	export TORCH_DISTRIBUTED_DEBUG=DETAIL
	export LOGLEVEL=DEBUG
	export NCCL_DEBUG=warn
	export LD_LIBRARY_PATH=/usr/lib/x86_64-linux-gnu/:/usr/local/nccl-rdma-sharp-plugins/lib:$LD_LIBRARY_PATH
	export LD_PRELOAD=/usr/lib/x86_64-linux-gnu/libnccl.so
	export NCCL_IB_PCI_RELAXED_ORDERING=1

dcasati / azure firewall query - deny

Created April 14, 2023 00:23

azure firewall query to show packets that were denied

	AzureDiagnostics
	\| where ResourceType == "AZUREFIREWALLS"
	\| extend
	proto = extract(@"^([A-Z]+) ",1,msg_s)
	,src_host = extract(@"request from ([\d\.]*)",1,msg_s)
	,src_port = extract(@"request from [\d\.]*:(\d+)",1,msg_s)
	,dest_host = extract(@" to ([-\w\.]+)(:\|\. \|\.$)",1,msg_s)
	,dest_port = extract(@" to [-\w\.]+:(\d+)",1,msg_s)
	,action = iif(
	msg_s has "was denied"

dcasati / gist:25be5997183b4e362d1eb729b384a13b

Created February 7, 2023 21:43

removing AppleDouble files and extended attributes from a tarbal

	# when creating a tarball on macOS you might want to exclude the
	# AppleDouble files and xattr in your tarball
	#
	# here is an example:
	tar --disable-copyfile --no-xattrs -cvzf capsh-0.1.1.tar.gz .