The spot for the Madrid Family
Category: Uncategorized
Another frequently used command that is easy to forget where the documentation isn’t current.
knife bootstrap <server> -U <username> -P <password> --sudoAs of 2022-01-08, we need to make another update. We must now specify as node name. Who knows why it can’t be inferred. We must also explicitly tell Chef to reuse the password to elevate privileges, which it could also infer.
knife bootstrap <server> -U <username> -N <node> --sudo -P <password> --use-sudo-passwordI keep forgetting this when I setup a new Ubuntu server, so here are the steps for automatically logging in via SSH.
ssh-keygen -t rsa
ssh-copy-id username@server
I just built a new computer and installed Sublime Text since I prefer it as my quick edit text editor due to its fast load time compared to Code or Atom. However, it has always annoyed me that it reopens files that were open when the application closed last and it always takes me a minute to remember how to change that behavior. So, for my own future reference go to Preferences -> Settings. You will see two panes now. In the right pane, for user settings, add these two lines inside the brackets:
I spent last night in Mexico City speaking to and recruiting Dreamers that have been in a coding bootcamp at <hola-code/>, powered by Hack Reactor, for the past four months. Many without previous technology experience at all. In that time, they more competent than many that have been in the industry anywhere in the world. I was asked what two qualities were the most important for junior consultants. Without a doubt I settled on curioustity and flexibility.
Curiosity – You must always be wondering what’s next, how it works, how it can be better. Like the early humans that wondered what was over the mountains or across the water.
Flexibility – You must be able to adapt to changing circumstances like team skills and experience, technical requirements, functional requirements, costs, timelines, and most importantly different roles and responsibilities.
I am in Mexico City this week and spent a lot of time with recent college graduates. They are going through training and getting imersed in the Mobiik culture. They primarily know C# and many asked what languages were important to learn. So, even though Azure has expanded its capabilities, I feel this list represents a balance of not being too many languages with what is truly necessary to be productive. This list is in order or importance to me:
It is a polyglot world these days; 1 & 2 are for the development of the app itself, 3 & 4 for managing the apps lifecycle, and 5 for well-roundedness. Once you’ve tackled these, start to look at Python, Java, and Groovy as part of the next set to learn. Embrace development as development and don’t get hung up on one language or environment.
SonarQube dropped native support for HTTPS, so you need to stand it up behind a reverse proxy to serve up SSL. This same procedure can be used to secure anything behind SSL like Jenkins, Confluence, Jira, etc. The other cool thing with this approach is that you can gain higher density in low volume environments by running multiple containers on one host. For example, I access my home instances with the following URLs:
They are all containers running on a single host, reverse proxied by NGINX. This allows me to not have to remember what port a given app is running on and is much cleaner.
So, today I am going to show how to run SonarQube in a docker container and expose it to the outside world through NGINX running in another container.
For this implementation, I will be adding config file along with the certificate and key file in the NGINX image. For the SonarQube image we will be setting enviroment variables. Therefore, we need the following 5 files available on the Docker host:
The sonarqube.env looks sort of like this:
SONARQUBE_JDBC_USERNAME=sonarqube SONARQUBE_JDBC_PASSWORD=notmypassword SONARQUBE_JDBC_URL=jdbc:postgresql://postgres.madridcentral.net/sonarqube
The NGINX default.conf file is a straight forward reverse proxy config. We redirect port 80 to 443 for HTTPS and proxy_pass to the container name and the appropriate 9000 port.
server {
listen 80;
listen [::]:80;
server_name sonarqube.madridcentral.net;
return 301 https://$server_name$request_uri;
}
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name sonarqube.madridcentral.net;
ssl_certificate /etc/ssl/certs/sonarqube.crt;
ssl_certificate_key /etc/ssl/private/sonarqube.key;
access_log /var/log/nginx/sonarqube.access.log;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Host $host;
proxy_pass http://sonarqube_container:9000;
proxy_redirect off;
}
}
For the docker-compose file, we require version 3.5 of the format for setting the user defined network name. I am setting it to proxy_net in this example. Docker has deprecated links so this is the preferred way to get containers to communicate and resolve each other using their container names.
version: "3.5"
services:
sonarqube_container:
container_name: sonarqube_container
image: sonarqube
networks:
- proxy_net
restart: always
expose:
- "9000"
env_file:
- sonarqube.env
reverse_proxy:
container_name: reverse_proxy
depends_on:
- sonarqube_container
image: nginx
networks:
- proxy_net
ports:
- 80:80
- 443:443
restart: always
volumes:
- /etc/madridcentral/default.conf:/etc/nginx/conf.d/default.conf
- /etc/madridcentral/sonarqube.crt:/etc/ssl/certs/sonarqube.crt
- /etc/madridcentral/sonarqube.key:/etc/ssl/private/sonarqube.key
networks:
proxy_net:
name: proxy_net
Now we can use the following command to bring it all up:
docker-compose up -d
We should see something similar to the following:
I’ve seen lots of examples on the Internet of Ubuntu installer boot commands for use in Packer. They appear to be derived from the same source and that’s fine, but they aren’t optimized and some comments about what are required are inaccurate. There are two reasons to minimize the boot command:
This is the command I use:
"boot_command": [ "<esc><wait>", "<esc><wait>", "<enter><wait>", "/install/vmlinuz", " initrd=/install/initrd.gz", " auto=true", " priority=critical", " url=http://{{ .HTTPIP }}:{{ .HTTPPort }}/{{user `preseed_path`}}", "<enter>" ]
Getting a Packer build run to complete successfully can be challenging. Getting the write combination of template configuration and scripts is always a challenge. If you stuck trying to get here are a few tips.
Enable Packer logging by setting a few environment variables. Set PACKER_LOG = 1 and enter a file path for PACKER_LOG_PATH.
Inform Packer that it should ask you what to do when it encounters an error instead of just immediately cleaning up all the resources it created.
packer build -on-error=ask mytemplate.json
If examining the log file isn’t enough to resolve the issue, you can leverage our ability to prevent cleanup and log into the VM. So, what is the password? Well the password is not dumped into the console output, which is just fine. You need to open the file at the path you specified for PACKER_LOG_PATH. Once you have that open you can search for “adminPassword” and grab the value that immediately follows it.
\"parameters\":{\"adminPassword\":{\"value\":\"THIS_IS_THE_PASSWORD\"}
I am doing a lot of Packer lately building images for deployment in Azure. Rather than copy content or worry about accessing SMB or NFS shares, I decided to expose my file server to make downloading original ISO files easy. However, I struggled a bit to find the right NGINX configuration to make this happen. So, if you ever find yourself in need of hosting files to download with NGINX you can use this configuration as a starting point:
server {
listen 80;
listen [::]:80;
location /software {
autoindex on;
alias /storage/standard/software;
types { application/octet-stream; }
default_type application/octet-stream;
}
}
This is good for ngnix/1.12.1 (Ubuntu) on Ubuntu 17.10 (Artful Aardvark)
I’m constantly on the command line for Git, PowerShell, NodeJs, SSH, etc. I’ve been using ConEmu for a while to consolidate all my terminals into a single window with tabs, which is great. However, sometimes you want to see multiple terminals at the same time. ConEmu has a great feature for that. One thing, I am constantly doing is using a bash shell for ssh and copying information from a PowerShell session.
To get your setup in a similar fashion, add a Startup Task in ConEmu and specify the following commands:
powershell -new_console:d:C:\Git bash -new_console:sH powershell -new_console:d:C:\Git -new_console:sV
MadridCentral 