Skip to content

Instantly share code, notes, and snippets.

@sohooo
sohooo / rke2-hardened-install-tips
Created December 9, 2025 07:20 — forked from zackbradys/rke2-hardened-install-tips
Rancher Kubernetes (RKE2) - Installation of Fully Hardened Configuration Options
### FIRST RKE2 SERVER NODE (CONTROL PLANE NODES)
### Set Variables
export DOMAIN=
export TOKEN=
export vRKE2=
export Registry=
export RegistryUsername=
export RegistryPassword=
### Apply System Settings
@sohooo
sohooo / rke2-stig-controls
Created December 5, 2025 09:00 — forked from zackbradys/rke2-stig-controls
Configuration for the Published DISA STIG for Rancher Kubernetes (RKE2)
--- RKE2 SERVER NODES (CONTROL PLANE) ---
### Setup RKE2 Server
mkdir -p /opt/rke2-artifacts/ /etc/rancher/rke2/ /var/lib/rancher/rke2/server/manifests/
useradd -r -c "etcd user" -s /sbin/nologin -M etcd -U
### Configure RKE2 Config
cat << EOF >> /etc/rancher/rke2/config.yaml
profile: cis
selinux: true
secrets-encryption: true
#!/bin/bash
# Jenkins Configuraitons Directory
cd $JENKINS_HOME
# Add general configurations, job configurations, and user content
git add -- *.xml jobs/*/*.xml userContent/* ansible/*
# only add user configurations if they exist
if [ -d users ]; then
user_configs=`ls users/*/config.xml`
@sohooo
sohooo / setup.sh
Created March 4, 2021 09:38
Lab Setup
# .dotvim files
git clone http://github.com/sohooo/dotvim2.git ~/.dotvim
vim -u ~/.dotvim/vimrc -c PlugInstall
# colorized cat
wget -c https://github.com/owenthereal/ccat/releases/download/v1.1.0/linux-amd64-1.1.0.tar.gz -O - | tar -xz
mkdir -p ~/.local/bin
cp -v ~/linux-amd64-1.1.0/ccat ~/.local/bin
# install lens
inoremap <silent> <Bar> <Bar><Esc>:call <SID>align()<CR>a
function! s:align()
let p = '^\s*|\s.*\s|\s*$'
if exists(':Tabularize') && getline('.') =~# '^\s*|' && (getline(line('.')-1) =~# p || getline(line('.')+1) =~# p)
let column = strlen(substitute(getline('.')[0:col('.')],'[^|]','','g'))
let position = strlen(matchstr(getline('.')[0:col('.')],'.*|\s*\zs.*'))
Tabularize/|/l1
normal! 0
call search(repeat('[^|]*|',column).'\s\{-\}'.repeat('.',position),'ce',line('.'))
@sohooo
sohooo / build-ruby.sh
Created October 7, 2020 13:16
Build Rubies
# building Ruby versions on Vagrant box
#
# https://github.com/rbenv/ruby-build
#
# booting vagrant box
cd ~/Code/boxes/centos7
vagrant up
vagrant ssh
# install ruby-build
@sohooo
sohooo / settings.sh
Created October 7, 2020 13:13
MacOS Terminal Settings
# useful defaults settings
# delete Timemachine local backups
# https://github.com/mathiasbynens/dotfiles/issues/842
tmutil listlocalsnapshots
tmutil deletelocalsnapshots 2019-02-16-080424
# delete all snapshots
for snapshot in $(tmutil listlocalsnapshots /); do
timestamp=$(echo $snapshot | cut -d. -f4)
@sohooo
sohooo / organize-av-files
Created October 3, 2019 19:24 — forked from keithrbennett/organize-av-files
Helps separate your audio and video files into saves and deletes using Ruby and MPlayer.
#!/usr/bin/env ruby
# organize-av-files - Organizes files playable by mplayer
# into 'saves', 'deletes', and 'undecideds' subdirectories.
#
# stored at:
# https://gist.github.com/keithrbennett/4d9953e66ea35e2c52abae52650ebb1b
require 'date'
@sohooo
sohooo / logger.sh
Created March 19, 2019 19:59 — forked from bunchc/logger.sh
Bash Color Logging
# EasyColors
if [ ${libout_color:-1} -eq 1 ]; then
DEF_COLOR="\x1b[0m"
BLUE="\x1b[34;01m"
CYAN="\x1b[36;01m"
GREEN="\x1b[32;01m"
RED="\x1b[31;01m"
GRAY="\x1b[37;01m"
YELLOW="\x1b[33;01m"
fi