Dennis Staiger davosian

You will need ssh access to your USG. I suggest running sudo su so you're the root user throughout

Installation

Download tailscale and put the files in /config/. Find the latest stable or unstable version for your USG's processor.

curl https://pkgs.tailscale.com/stable/tailscale_1.36.1_mips64.tgz | tar xvz -C /tmp
mv /tmp/tailscale_1.36.1_mips64 /config/tailscale

Docker Swarm in LXC Containers

Part of collection: Hyper-converged Homelab with Proxmox

Update 09-10-2024: I have moved on to a setup with Docker LXC on Proxmox, with bind-mounts (without VirtioFS) as described in Gist Docker Swarm in Vm's with CephFS.

Update 07-03-2025: The Dockge LXC does this even better, eliminating most issues, with the Docker LXC](https://community-scripts.github.io/ProxmoxVE/scripts?id=docker)!

You will need ssh access to your USG. I suggest running sudo su so you're the root user throughout

Installation

Download tailscale and put the files in /config/. Find the latest stable or unstable version for your USG's processor.

curl https://pkgs.tailscale.com/stable/tailscale_1.36.1_mips64.tgz | tar xvz -C /tmp
mv /tmp/tailscale_1.36.1_mips64 /config/tailscale

Security Advisories / Bulletins / vendors Responses linked to Log4Shell (CVE-2021-44228)

Errors, typos, something to say ?

If you want to add a link, comment or send it to me
Feel free to report any mistake directly below in the comment or in DM on Twitter @SwitHak

Other great resources

Royce Williams list sorted by vendors responses Royce List
Very detailed list NCSC-NL
The list maintained by U.S. Cybersecurity and Infrastructure Security Agency: CISA List

Vagrant and VMWare Tech Preview 21H1 on Apple M1 Pro

UPDATE November 20, 2022: VMWare Fusion 13

VMWare Fusion 13 is now released. Read Vagrant and VMWare Fusion 13 Player on Apple M1 Pro for the latest.

Summary

This document summarizes notes taken while to make the VMWare Tech preview work on Apple M1 Pro, it originated

I've got 2 flavors of launching VS Code on remote servers for you

Clean terminal, you know you want to launch code on a remote server. Check out sshcode.sh
You want to launch code on your local machine from inside an existing SSH session. This needs a bit of setup, but seems to work pretty well. Hacks inbound!

Set PermitLocalCommand yes in your SSH config (see example)
Add a LocalCommand to stash the username, IP, and current directory in a local file when you connect
Save hack.sh in your home directory

Now to connect, use the SSH escape sequence (default single tilde ~) along with !command to invoke the script

	alias: Add unique to-do
	mode: single
	icon: mdi:clipboard-list
	sequence:
	- service: todo.get_items
	target:
	entity_id: "{{ list }}"
	data:
	status: needs_action
	response_variable: mylistneedsaction

	sourceServer=https://...
	sourceRepo=
	sourceUser=
	sourcePassword=
	targetRepositoryUrl=https://maven.pkg.github.com/[owner]/[repository]
	targetRepositoryId=

	filters=() # Grab only the packages specificed in the filter or leave the variable blank to grab everything
	logfile=$sourceRepo-backup.log
	outputFile=$sourceRepo-artifacts.txt

	import io
	import pathlib

	import pycdlib

	ubuntu = pathlib.Path('ubuntu-22.04.1-live-server-amd64.iso')
	new_iso_path = pathlib.Path('ubuntu-22.04.1-live-server-amd64-auto.iso')

	iso = pycdlib.PyCdlib()
	iso.open(ubuntu)

	# Simple example to deploy traefik with consul connect enabled.
	# For simplicity the job includes traefik as well as the backend service.
	# Please note that traefik currently only supports connect for HTTP.
	job "traefik-consul-connect-demo" {
	datacenters = ["dc1"]

	group "edge" {

	network {
	mode = "bridge"