Romain Taprest RomainTT

Title: Subversion Cheatsheet CSS : css/cheaters.css

Subversion Cheatsheet

| Subversion Resources ||

Docker compose as a systemd unit

Create file /etc/systemd/system/[email protected]. SystemD calling binaries using an absolute path. In my case is prefixed by /usr/local/bin, you should use paths specific for your environment.

[Unit]
Description=%i service with docker compose
PartOf=docker.service
After=docker.service

rsync daemon mode over ssh

There are several common ways to do rsync backups of hosts over ssh:

As a non-root user. Upsides: very secure. Downside: cannot back up sensitive files.
As root, with a public key. Downsides: Whoever has the private key has full root access to the host being backed up.
As root, with a public key and a "forced command". Upsides: Restricts access to the server. Downsides: Requires either careful matching of rsync options (which might change over time), or "validator" scripts. Neither idea sounds very appealing to me.
Running rsync in daemon mode on the host being backed up. Upsides: Lots of useful options, like read-only mode, running as a different user if required, server-side excludes/includes, etc. Downsides: Opens up a TCP port that has full filesystem read access and is hard to secure (Ideally you could make the rsync daemon use a unix socket instead, that could be secured by filesystem permissions, but I haven't found a way to do that).

Here is another option t

Each of these commands will run an ad hoc http static server in your current (or specified) directory, available at http://localhost:8000. Use this power wisely.

Discussion on reddit.

Python 2.x

$ python -m SimpleHTTPServer 8000

	/*
	* Test program for the ambient capabilities
	*
	* You need to install libcap-ng-dev first, then compile using:
	* $ gcc -o ambient ambient.c -lcap-ng && sudo setcap cap_setpcap,cap_net_raw,cap_net_admin,cap_sys_nice+eip ambient
	*
	* To get a shell with additional caps that can be inherited do:
	*
	* ./ambient /bin/bash
	*/

	MIT License

	Copyright (c) 2012 John Fink

	Permission is hereby granted, free of charge, to any person obtaining a copy
	of this software and associated documentation files (the "Software"), to deal
	in the Software without restriction, including without limitation the rights
	to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	copies of the Software, and to permit persons to whom the Software is
	furnished to do so, subject to the following conditions: