RSSAmplifier

Blog

Jérémi Robi | jrb.nz

Jérémi Robitaille is a cloud engineer based in Canada. He's interested in all things that make the internet what it is, from the infrastructure that runs it silently to the small and weird websites that keep it interesting.

jrb.nzRSS feed ↗18 posts

Latest posts

What's cleaning /tmp on macOS?

Have you ever wondered how /tmp is cleaned on macOS? I did and went on a quick exploration. Here's what I found. launchd and launch daemons Launch daemons are background processes that can perform any task we define. And launchd is the macOS system-wide and per-user daemon manager which is started by the kernel during the system boot process. It manages processes, both for the system as a whole…

Learning to ski in my 30s

Work in progress ⛷️ I'm taking some notes about my experience learning alpine skiing these past winters. How it started I wasn't one of those kids that learned to ski in childhood. I did do cross-country skiing with my parents, but I remember that I found it a bit boring at the time. At some point, I did try snowboarding, but I can't remember it very much. I must have felt overwhelmed by it…

Annapurna - Advent of Sysadmin 2025

This is part of Sad Servers' Advent of Sysadmin 2025 series. I'm doing each challenge every day and I'm publishing a quick write up for each one every day. Spoiler alert! This gives the solution to the challenge. If you want to do it on your own, stop reading. Challenge details Scenario: "Annapurna": High privileges Level: Medium Type: Hack Tags: hack advent2025 Access: Email Description: You are…

Hamburg - Advent of Sysadmin 2025

This is part of Sad Servers' Advent of Sysadmin 2025 series. I'm doing each challenge every day and I'm publishing a quick write up for each one every day. Spoiler alert! This gives the solution to the challenge. If you want to do it on your own, stop reading. Challenge details Scenario: "Hamburg": Find the AWS EC2 volume Level: Easy Description: We have a lot of AWS EC2 instances and EBS volumes,…

La Rinconada - Advent of Sysadmin 2025

This is part of Sad Servers' Advent of Sysadmin 2025 series. I'm doing each challenge every day and I'm publishing a quick write up for each one every day. Spoiler alert! This gives the solution to the challenge. If you want to do it on your own, stop reading. Challenge details Scenario: "La Rinconada": Elevating privileges Level: Medium Type: Hack Tags: hack advent2025 Access: Email Description:…

Woluwe - Advent of Sysadmin 2025

This is part of Sad Servers' Advent of Sysadmin 2025 series. I'm doing each challenge every day and I'm publishing a quick write up for each one every day. Spoiler alert! This gives the solution to the challenge. If you want to do it on your own, stop reading. Challenge details Scenario: "Woluwe": Too many images Level: Medium Description: A pipeline created a lot of Docker images locally for a…

Kortenberg - Advent of Sysadmin 2025

This is part of Sad Servers' Advent of Sysadmin 2025 series. I'm doing each challenge every day and I'm publishing a quick write up for each one every day. Spoiler alert! This gives the solution to the challenge. If you want to do it on your own, stop reading. Challenge details Scenario: "Kortenberg": Can't touch this! Level: Easy Type: Fix Tags: Access: Email Description: Is "All I want for…

Marseille - Advent of Sysadmin 2025

This is part of Sad Servers' Advent of Sysadmin 2025 series. I'm doing each challenge every day and I'm publishing a quick write up for each one every day. Spoiler alert! This gives the solution to the challenge. If you want to do it on your own, stop reading. Challenge details Scenario: "Marseille": Rocky security Level: Medium Type: Fix Tags: apache php advent2025 Access: Email Description: As…

Auderghem - Advent of Sysadmin 2025

This is part of Sad Servers' Advent of Sysadmin 2025 series. I'm doing each challenge every day and I'm publishing a quick write up for each one every day. Spoiler alert! This gives the solution to the challenge. If you want to do it on your own, stop reading. Challenge details Scenario: "Auderghem": Containers miscommunication Level: Medium Type: Fix Tags: nginx Access: Email Description: There…

Terraform/terragrunt tools

tfsec - Static analysis security scanner for Terraform code Checkov - Static code analysis tool for infrastructure-as-code KICS (Keeping Infrastructure as Code Secure) - Security vulnerability scanning and compliance testing Terrascan - Static code analyzer for Infrastructure as Code tflint - Terraform linter focused on possible errors and best practices Terratest - Testing infrastructure code…

Bash with no letters

I recently did a challenge on PicoCTF ( U2Fuc0FscGhhCg 🐶) and I had to explore some bash trickery to solve it. I learned a few tricks that are worth noting here for future me or future you. The challenge starts in a limited shell in which you can only enter numbers and some special characters. $ ls Unknown character detected $ l s Unknown character detected $ l s Unknown character detected…

Zsh function to assume a role in AWS

Note The Granted CLI added the --chain flag a few months after publishing this, offering a cleaner solution to what I was doing with this script. Working in AWS, I sometimes need to test a role to debug some issues or validate some hypotheses. I'm already using the Granted CLI to assume federated roles in the AWS accounts I have access to, but it doesn't let me quickly change role (either in the…

Basic CI/CD pipeline with AWS S3, 11ty and GitHub Actions

As a DevOps learning project, I've decided to host a copy of this website on AWS using S3 and CloudFront services. From the current process that's using Vercel as a build/deploy tool, I'm now trying the manual way to learn the intricacies of it all: GitHub Actions, CloudFront and S3. The first step is to do it with the AWS web management console, and then to use Terraform and IaC to put this in…

OSINT quiz 2020 - Sector035

J'explore la communauté OSINT depuis quelques années. J'ai (re)découvert les quiz de @Sector035 cette année, et j'ai décidé de compléter l'édition de 2020. Voir ce tweet pour le contexte. J'avais déjà commencé l'édition précédente ( osintquiz [at] gmail.com ). J'ai le souvenir que les questions étaient particulièrement difficiles. Cette nouvelle édition 2020 est vraiment plus simple et permet de…

Comment configurer Cloudflare avec Vercel

Je fais la gestion DNS de mes projets sur Cloudflare. J'ai eu quelques pépins techniques en configurant mes noms de domaine avec des projets hébergés chez Vercel. Je recevais quotidiennement des courriels de Vercel me signalant que la configuration DNS de mes projets était incorrecte. Je me suis penché sur le problème pour tenter de trouver une solution. Vercel annonce d'emblée dans sa…

Projet: Radio-Canada Mini

Important Ce projet a reçu une notice de retrait DMCA en juin 2024 . Je savais que ce projet était voué à se terminer ainsi. Malgré tout, les échanges et les apprentissages que le projet a générés ont valu la peine! Tous les URLs vers le site pointent maintenant vers la page archivée dans la Wayback Machine. En 2021, j’ai découvert la version lite de CBC.ca, disponible à la page…

First steps with AWS, Terraform, Jenkins and Ansible

I'm publishing this as an updated version of Scotty Parlor's LEARNING DEVOPS: AWS, TERRAFORM, ANSIBLE, JENKINS, AND DOCKER tutorial. It has allowed me to play with Terraform, Ansible and Jenkins for the first time. Needless to say, I learned a lot. I made some modification here and there where I could. All the code snippets are initially from Scotty Parlor. Check out his blog and Youtube Channel…

Privacy oriented Firefox set-up

As of 2022, this is not the set-up I'm using anymore. I've moved to an hybrid solution, where I'm switching between Safari and Chrome on a daily basis depending what work needs to be done. Since the end of uBlock Origin on Safari, I've been using Firefox as my main browser. Here's how I'm setting it up so it's nice and fast. MaterialFox theme Inspired by Google's Material Design and their latest…