Recently I’ve worked with a client who wanted to restrict access to any Set IAM Policy permissions in their Google Cloud Platform environment. Currently this is implemented by defining a small number of custom roles which fall into one of two groups: Roles which include all the Set IAM Policy permissions for the necessary services; Role/s which include all the non- Set IAM Policy permissions for…
How to generate a PEM file containing the trusted CA certificates in your macOS Keychain. As described in this answer on Stack Exchange you can use the security tool added in Mac OS X 10.3: security find-certificate -a -p /System/Library/Keychains/SystemRootCertificates.keychain > cacerts.pem security find-certificate -a -p /Library/Keychains/System.keychain >> cacerts.pem If there are missing CA…
Ledger has support for GnuPG-encrypted journal files but it’s not really documented anywhere that I’ve been able to find. To check that it’s enabled in your build, consult the version message: $ ledger --version Ledger 3.3.2-20230330, the command-line accounting tool with support for gpg encrypted journals and without Python support Copyright (c) 2003-2023, John Wiegley. All rights reserved. This…
This is a pretty sparse log of things to do to set up a new Yubikey with OpenPGP for use with git . If anything below doesn’t make sense consult the sources linked at the end of the post. Install things We’ll install a bunch of stuff with Homebrew: git to get a newer version than what Apple ships ykman to view and tweak Yubikey configuration pinentry (to pop up a window to enter your Yubikey PIN…
Another Japanese Film Festival has come and gone. The Sydney showings were hosted by Palace Cinemas again this year. While I like Palace Cinemas, having the programme spread over multiple locations made it a little inconvenient to get all the films I wanted to see. In the end I went to six films: Yudo: The way of the bath The lines that define me We’re broke, my lord Brave: Gunjo Senki Mondays:…
Writing AWK scripts Many large AWK scripts are wrapped in a useless shell script. If all of your logic is in AWK then there’s no need for the shell to get involves in things; just use the correct shebang! #!/usr/bin/awk -f BEGIN { print("start") } END { print("end") } Just make it executable and now you have a script written directly in AWK with no shells involved. Just make it executable (with…
If you use Homebrew to install third-party packages on macOS, it’s pretty straightforward to install and configure Colima along with the various Docker and Kubernetes command-line tools. First, make sure your Homebrew formulas are all up to date: brew update Install Colima along with the Docker and Kubernetes command-line tools: brew install colima docker kubectl If you work on a network…
I have a new Microsoft Surface Go 3 and installed OpenBSD 7.2 to see how it does as a machine to carry while travelling. The box contained the Surface Go itself, a 24 W charger with the silly proprietary connector, and a few bits of paper. I already had a Type Cover keyboard (from the Go I bought when it came out) so I was pretty much ready to go. Installing OpenBSD Boot the Surface and let…
A work project took me to the UK for the greater part of 2022. While I needed to be in the UK, I didn’t have to be anywhere in particular for most of that time so I spent some time visiting places I hadn’t been to before. Mostly places with distilleries, breweries, and the like. Over the course of nine months or so, I visited: Kanpai Sake Brewery, London Bimber Distillery, London East London…
Even small teams can find that their continuous integration servers get bogged down with redundant builds. Some developers like to “commit early, commit often” and if they also “open a PR early and leave it sitting there in draft mode” then you can quite easily have multiple builds linting and building and testing code that has already been supersede. Happily, you can use the Pipeline: Milestone…