mrdrup

Currently, there is an explosion of tools that aim to manage secrets for automated, cloud native infrastructure management. Daniel Somerfield did some work classifying the various approaches, but (as far as I know) no one has made a recent effort to summarize the various tools.

This is an attempt to give a quick overview of what can be found out there. The list is alphabetical. There will be tools that are missing, and some of the facts might be wrong--I welcome your corrections. For the purpose, I can be reached via @maxvt on Twitter, or just leave me a comment here.

There is a companion feature matrix of various tools. Comments are welcome in the same manner.

You can find the MAC address for LAN1/eth0 (not the BMC MAC) via the SuperMicro IPMI interface by running the following command:

$ ipmitool -U <redacted> -P <redacted> -H 10.4.0.10 raw 0x30 0x21 | tail -c 18
00 25 90 f0 be ef

	$ aws --region eu-west-1 ec2 copy-image --description "test-enc" --encrypted --kms-key-id "alias/test-enc" --name "test-enc" --source-image-id ami-0b0aea60d5230c42c --source-region eu-west-1
	--------------------------------------
	\| CopyImage \|
	+----------+-------------------------+
	\| ImageId \| ami-0504c6aba12345678 \|
	+----------+-------------------------+

	$ aws --region eu-west-1 ec2 modify-image-attribute --image-id ami-0504c6aba12345678 --launch-permission "Add=[{UserId=234567890123}]"

	$ aws --region eu-west-1 ec2 describe-images --image-id ami-0504c6aba12345678

	#!/bin/bash

	# A script to set up a new mac. Uses bash, homebrew, etc.

	# Focused for ruby/rails development. Includes many utilities and apps:
	# - homebrew, rvm, node
	# - quicklook plugins, terminal fonts
	# - browsers: chrome, firefox
	# - dev: iterm2, sublime text, postgres, chrome devtools, etc.
	# - team: slack, dropbox, google drive, skype, etc

	# create keytab for radius user
	ipa-getkeytab -p 'radius/HOSTNAME' -k /etc/raddb/radius.keytab
	chown root:radiusd /etc/raddb/radius.keytab
	chmod 640 /etc/raddb/radius.keytab

	# make radius use the keytab for SASL GSSAPI
	mkdir -p /etc/systemd/system/radiusd.service.d
	cat > /etc/systemd/system/radiusd.service.d/krb5_keytab.conf << EOF
	[Service]
	Environment=KRB5_CLIENT_KTNAME=/etc/raddb/radius.keytab

	development:
	adapter: mysql2
	encoding: utf8
	database: my_database
	username: root
	password:
	apt:
	- somepackage
	- anotherpackage

	----- Esc -----
	Quick change directory: Esc + c
	Quick change directory history: Esc + c and then Esc + h
	Quick change directory previous entry: Esc + c and then Esc + p
	Command line history: Esc + h
	Command line previous command: Esc + p
	View change: Esc + t (each time you do this shortcut a new directory view will appear)
	Print current working directory in command line: Esc + a
	Switch between background command line and MC: Ctrl + o
	Search/Go to directory in active panel: Esc + s / Ctrl + s then start typing directory name