chr4

Devops. I've never asked for this.

apt-get cleanup commands

Just a short post about some useful cleanup commands for Debian and Ubuntu systems. There are (to my knowledge) no build in task solving the following things

  • Remove old kernels (while keeping the currently running and the latest)
  • Purge removed packages (especially after autoremoving unneeded dependencies)

Howto use chef with ssl

By default, the connections between the chef-client and the chef-server are not secured. This is a short post on howto encrypt and verify your connections.

As of chef-11 (unlike chef-10), SSL is enabled by default. But (naturally, as Opscode cannot create trusted certificates for your domain) the certificates are not verified. This essentially means that the connection is not secure at all.

Unless you only use chef in a trusted network, you should invest some time in securing your clients connections.

Chef deploy_revision and Capistrano git_style

One thing that was annoying me for a long time, was that, using Capistrano deployment, you cannot spawn a new vanilla virtual machine, and bring it to a fully up-and-running state with just one Chef command.

make deploy_revision compatible with Capistrano, so deployments can happen with Capistrano, until we’ve decided to fully migrate to Chef, or to stick with the push deployment

$ whoami

1
2
3
4
5
6
7
8
9
$ whoami
chr4

$ finger chr4
Login: chr4                             Name: Chris Aumann
Directory: /home/chr4                   Shell: /bin/zsh
On since Thu Jan 5 05:13 1998 on pts/0 from 2001:1af8:4100:a016:2::3818
No mail.
No Plan.

Hi, I’m Chris.

I’m a freelance Devops Architect, Infrastructure Developer, SRE and Security Engineer.

Companies I work/ worked for:

You can find me

You can contact me via email: (sorry, no email without JavaScript, because hoping spambots are still stupid) [gpg]

Donations/ Support

Want to support me? Here’s what you can do:

  • Write me a small thank-you mail
  • Mail me some feedback about an article
  • Donate a small amount to one of the following crypto currency addresses:
    • BTC (Bitcoin): 35cqfUdpj7MWCLQ6X8ucddCBYgmB54VWb2
    • DASH (Dash): XsvTXnaFNuyv2UQthb1t3h7pFaL8T1QZgc
    • ZEC (Zcash): t1M1ZumBgGYCqrxmvcMzvsngaTzAqycaxdN
    • ETH (Ethereum): 0xeE749b54152edacaeBe89Cd5D4F14CcBA7031E1c
    • XRP (Ripple): rHNT46qAankTBGUPbYfpi82tmnQXHPGc18
    • XLM (Stellar): GBYMK6EVIGCBHYXRS7U755DUMKTRXAPZXNJOW2F4T4J3BPFR2BO5CWDD