Skip to content

Instantly share code, notes, and snippets.

@jon-schmidt
jon-schmidt / systemd_service_hardening.md
Created June 8, 2023 03:47 — forked from ageis/systemd_service_hardening.md
Options for hardening systemd service units

security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict
import React, { Component } from 'react';
/**
* @desc TemperatureInput component to render input box and
* update the props when change temperature value
* @param {func} onChange
* @param {string} value
* @param {string} scale
*/
class TemperatureInput extends Component {
/**
@jon-schmidt
jon-schmidt / replace-debian-with-arch.txt
Created July 25, 2017 03:23 — forked from m-ou-se/replace-debian-with-arch.txt
Instructions to replace a live Debian installation with Arch
# Download latest archlinux bootstrap package, see https://www.archlinux.org/download/
wget 'ftp://ftp.nluug.nl/pub/os/Linux/distr/archlinux/iso/latest/archlinux-bootstrap-*-x86_64.tar.gz'
# Make sure you'll have enough entropy for pacman-key later.
apt-get install haveged
# Install the arch bootstrap image in a tmpfs.
mount -t tmpfs none /mnt
cd /mnt
tar xvf ~/archlinux-bootstrap-*-x86_64.tar.gz --strip-components=1