ciis0 / ciis0.github.io Goto Github PK

extract encrypted key (esec.b64) from XML

<xenc:EncryptedKey xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" Id="EK-b2af33bb-aacd-4b6f-bbbf-cada8d8ecbee">
    <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/>
    <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <wsse:SecurityTokenReference>
            <!-- ... --->
        </wsse:SecurityTokenReference>
    </ds:KeyInfo>
    <xenc:CipherData>
        <xenc:CipherValue><!-- enc.b64 --></xenc:CipherValue>
    </xenc:CipherData>
    <xenc:ReferenceList>
        <xenc:DataReference URI="#ED-585a0a6b-36f0-4d5e-9052-f98463810da0"/>
    </xenc:ReferenceList>
</xenc:EncryptedKey>

extract encrypted data (edat.b64) from XML

<xenc:EncryptedData xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"
                    Id="ED-585a0a6b-36f0-4d5e-9052-f98463810da0"
                    Type="http://www.w3.org/2001/04/xmlenc#Content">
    <xenc:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
    <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <wsse:SecurityTokenReference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
                                     xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd"
                                     wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey">
            <wsse:Reference URI="#EK-b2af33bb-aacd-4b6f-bbbf-cada8d8ecbee"/>
        </wsse:SecurityTokenReference>
    </ds:KeyInfo>
    <xenc:CipherData>
        <xenc:CipherValue>
            <!-- edat.b64 -->
        </xenc:CipherValue>
    </xenc:CipherData>
</xenc:EncryptedData>

get key as pem (key.pem)

# decrypt secret
base64 -d esec.b64 > esec
openssl pkeyutl -decrypt -in esec -inkey key.pem > dkey

# split data and IV
base64 -d edat.b64 > edat
dd if=edat of=edat.iv bs=1 count=16
dd if=edat of=edat.dt bs=1 skip=16

# decrypt
openssl enc -d -in edat.dt -iv $(xxd -p edat.iv) -K $(xxd -p dkey | tr -d "\n ") -aes-256-cbc > dec.xml

if you use domains other than .localhost (e.g. my-keycloak.test vs. my-keycloak.localhost) https connections are terribly slow!

https://jolokia.org/reference/html/clients.html#client-jmx-adapter

if you use cpsScm you can use checkout scm, with cps you need to put configure scm in pipeline

• for sharing putty agent (keeagent actually) to WSL
• psl script
• zscaler in wsl
  • and using it from podman (using wsl ip)

https://sourceforge.net/p/vcxsrv/discussion/986201/thread/1ab552d067/
https://x410.dev/cookbook/transparently-adding-native-support-for-vsock-in-x11-apps/
https://x410.dev/cookbook/hyperv/adding-entries-to-windows-registry-for-vsock-connections/

• jboss on windows is slow due to MS defender, running in WSL is faster

• use sftp+rsync to copy exploded archive

  • WSL mount is dead slow
  • sftp with full war is slow, always need to copy everything
  • sftp with exploded archive is also slow, also copies everything
  • rsync is blazingly fast!
    • forget KeeAgent, that does not work

• rotate log files

• restart

https://gist.github.com/ciis0/b527b420b82605ef799dfd311992e3bf

generator = exec via ~/.kustomize/plugin/... + generator spec in kustomization YAMLs

wrapper = script that wraps generate resources (which are referenced in kustomizations via resources) and the runs kustomize

1. detectMultilineErrors https://github.com/openshift/cluster-logging-operator/blob/54a9918fb40a4dbb163e4661e58ba06e1962cf1c/internal/generator/fluentd/pipeline_to_output.go#L65-L71
2. matchMultilineDetectException https://github.com/openshift/cluster-logging-operator/blob/0516fdfb40689381d5c4f216db7c85692c247737/internal/generator/fluentd/multiline_detect_exceptions.go#L4-L12
3. @type detect_exceptions https://github.com/GoogleCloudPlatform/fluent-plugin-detect-exceptions/blob/5a3715f0b6b1edd536ca9a5cab3f7ab1be53dedb/lib/fluent/plugin/out_detect_exceptions.rb#L42
4. the rules https://github.com/GoogleCloudPlatform/fluent-plugin-detect-exceptions/blob/5a3715f0b6b1edd536ca9a5cab3f7ab1be53dedb/lib/fluent/plugin/exception_detector.rb#L54

https://gist.github.com/ciis0/c5cd99f5fd2f43d3494528871ee909ea

if you have a big multi-module project with multiple deployables, the it gets quite complicated to keep build times low, for example by building and testing only what changed.

it looks like bazel can do this.

problems that arose while investigating this:

• IDE support: the IntelliJ plugin is not supported on Windows
  • but IntelliJ installed inside WSL (not windows IntelliJ accessing projects via \\wsl$) might work
• Maven Dependencies
  • bazel does not properly expose transitive dependencies (e.g. if you depend on junit you won't get hamcrest, if you depend on logback, you won't get slf4j), and there are voices that oppose adding this at all.

cat <(echo '{"index":"app-*","ignore_unavailable":true}') <(jq -c . kib.json) | oc exec -i -n openshift-logging -c elasticsearch elasticsearch-cdm-m8fggxfn-3-5bb4f58d94-5jvgl -- curl -vk https://elasticsearch:9200/_msearch --data-binary @- -H 'Content-Type: application/json' -H "Authorization: Bearer $(oc whoami -t)" | jq -C | less

kib.json: Kibana Discover -> Inspect -> Request