Handbuch eines Programmierers

[root@progisart:/tmp]# apt-get install encfs

[user@progisart:/tmp]$ mkdir -v .crypt crypt
mkdir: created directory '.crypt'
mkdir: created directory 'crypt'

[user@progisart:/tmp]$ encfs "${PWD}/.crypt" "${PWD}/crypt"
Creating new encrypted volume.
Please choose from one of the following options:
 enter "x" for expert configuration mode,
 enter "p" for pre-configured paranoia mode,
 anything else, or an empty line will select standard mode.
?> p

Paranoia configuration selected.

.... .... .... ....

New Encfs Password:
Verify Encfs Password:
[user@progisart:/tmp]$

[user@progisart:/tmp]$ find .crypt crypt
.crypt
.crypt/.encfs6.xml
crypt
[user@progisart:/tmp]$ cd crypt/
[user@progisart:/tmp/crypt]$ touch huhu.txt haha.txt hihi.txt
[user@progisart:/tmp/crypt]$ cd ..
[user@progisart:/tmp]$ find .crypt crypt
.crypt
.crypt/6v5s02ao2-hYpi,v8dqlIjwj
.crypt/BIfXW9HfxlaubuJDCephESFB
.crypt/.encfs6.xml
.crypt/Nt3GdcJ3DtdxVEODj4mNoyqF
crypt
crypt/haha.txt
crypt/huhu.txt
crypt/hihi.txt
[user@progisart:/tmp]$

[user@progisart:/tmp]$ fusermount -u "${PWD}/crypt"
[user@progisart:/tmp]$ find .crypt crypt
.crypt
.crypt/6v5s02ao2-hYpi,v8dqlIjwj
.crypt/BIfXW9HfxlaubuJDCephESFB
.crypt/.encfs6.xml
.crypt/Nt3GdcJ3DtdxVEODj4mNoyqF
crypt
[user@progisart:/tmp]$

[user@progisart:~/dev/kms]$ openssl rand -out myPlainKeyMaterial.bin 32
[user@progisart:~/dev/kms]$ ls -al myPlainKeyMaterial.bin
-rw-r--r-- 1 user user 32 Jan 24 11:17 myPlainKeyMaterial.bin

[user@progisart:~/dev/kms]$ aws kms create-key --origin EXTERNAL
.... .... .... ....

[user@progisart:~/dev/kms]$ cp ~/Downloads/Import_Parameters_357fea84-6620-4656-ab0c-5b27b19ecd79_01241235.zip .
[user@progisart:~/dev/kms]$ unzip Import_Parameters_357fea84-6620-4656-ab0c-5b27b19ecd79_01241235.zip
Archive:  Import_Parameters_357fea84-6620-4656-ab0c-5b27b19ecd79_01241235.zip
 extracting: WrappingPublicKey.bin
 extracting: ImportToken.bin
 extracting: README.txt
[user@progisart:~/dev/kms]$ ls
ImportToken.bin  Import_Parameters_357fea84-6620-4656-ab0c-5b27b19ecd79_01241235.zip  README.txt  WrappingPublicKey.bin  myPlainKeyMaterial.bin
[user@progisart:~/dev/kms]$

[user@progisart:~/dev/kms]$ openssl pkeyutl -in myPlainKeyMaterial.bin -out encMyPlainKeyMaterial.bin -inkey WrappingPublicKey.bin -keyform DER -pubin -encrypt -pkeyopt rsa_padding_mode:oaep -pkeyopt rsa_oaep_md:sha256

[user@progisart:~/dev/kms]$ aws kms create-alias --alias-name myKey --target-key-id 357fea84-6620-4656-ab0c-5b27b19ecd79

CMD > wsl --list
Windows-Subsystem für Linux-Distributionen:
Ubuntu-20.04 (Standard)
rancher-desktop
rancher-desktop-data
CMD >

wsl --export Ubuntu-20.04 C:\tmp\ubu20.04.tar

CMD > wsl --terminate  Ubuntu-20.04
CMD > wsl --unregister Ubuntu-20.04

CMD > wsl --import Ubuntu-20.04 C:\Users\{nbsp}{nbsp}{nbsp}{nbsp}ProgIsArt\AppData\Local\Packages\Ubuntu C:\tmp\ubu20.04.tar

[root@progIsArt /]# du -h --max-depth 3 | sort -hr  | head -n 20
294M    .
192M    ./usr
93M     ./var
82M     ./usr/lib64
67M     ./var/cache/yum
67M     ./var/cache
40M     ./usr/bin
38M     ./usr/share
29M     ./usr/lib64/python2.7
27M     ./var/lib
25M     ./usr/lib
23M     ./var/lib/rpm
9.5M    ./usr/share/i18n
9.2M    ./usr/lib/systemd
9.2M    ./etc
9.0M    ./usr/share/cracklib
7.4M    ./usr/sbin
7.3M    ./usr/lib64/gconv
6.5M    ./etc/udev
5.7M    ./usr/lib/udev

## Inspect local network
[root@progIsArt /]# nmap -v -sL $(ifconfig | grep inet | grep -v inet6 | grep -vF '127.0.0.1' | tr -s ' ' | cut -d ' ' -f 3 | cut -d '.' -f 1-3).0/24

## Crop images with offset in batch convert
## ... -crop widthxheigth+xpos+ypos
[root@progIsArt /]# find ../from | sort -n | cut -d '/' -f 3 | xargs -I{} convert "../from/{}"  -crop 2500x750+210+270 "{}"

## SSH Auto Login
[helmi@progIsArt-helmi ~]$ ssh-keygen -t rsa
[helmi@progIsArt-helmi ~]$ ssh-copy-id -i .ssh/id_rsa.pub helmo@twin-helmo
[helmi@progIsArt-helmi ~]$ ssh helmo@twin-helmo
[helmo@progIsArt-helmo ~]$ whoami
helmo
[root@progIsArt-helmo .ssh]# touch authorized_keys
[root@progIsArt-helmo .ssh]# chmod 600 authorized_keys
[root@progIsArt-helmo .ssh]# cat /home/helmo/.ssh/authorized_keys  | grep helmi >> authorized_keys
[helmi@progIsArt-helmi ~]$ ssh root@twin-helmo
Last login: Fri Mar 12 07:14:42 2021 from docker-twins_twin-helmi_1.docker-twins_default
[root@progIsArt-helmo ~]# whoami
root

# Add specific SSL cert to agent.
[root@progIsArt /]# eval "$(ssh-agent -s)"  ## .. only importent on mingw git-bash
[root@progIsArt /]# ssh-add ~/.ssh/id_yourprivate_cert

#!/bin/bash
apt-get update -y
apt-get upgrade -y
#apt-get dist-upgrade -y
apt-get autoclean -y
apt-get clean -y
apt-get autoremove -y

alias findMaxHumanReadable='function _findMaxHumanReadable(){
  limit=$(( ${1} ))

  maxSize=-1;

  du | sort -nr | sed -E "s/\s/ /g" | while read -r line; do
    currentSize=$(echo "${line}" | cut -d " " -f 1)
    if [ ${maxSize} == -1 ]; then maxSize=${currentSize}; fi
    if (( ${currentSize} < $((maxSize * ${limit} / 100)) )); then break; fi

    _size=$(numfmt --to=iec ${currentSize})
    _fileName=$(echo "${line}" | cut -d " " -f 2)

    echo -e "${_size}\t${_fileName}"
  done
};_findMaxHumanReadable'

root@earthX200:~# cd /tmp
root@earthX200:~# ## Ohne SD Karte
root@earthX200:/tmp# lsblk >1
root@earthX200:~# ## Mit SD Karte
root@earthX200:/tmp# lsblk >2
root@earthX200:/tmp# diff 1 2
34a35,37
> mmcblk0               179:0    0  14,9G  1 disk
> ├─mmcblk0p1           179:1    0   256M  1 part  /media/progisart/boot
> └─mmcblk0p2           179:2    0  14,6G  1 part  /media/progisart/rootfs

root@earthX200:~# dd bs=1MB if=/dev/mmcblk0 of=~/dockerpi.img  status=progress
15931000000 Bytes (16 GB, 15 GiB) kopiert, 837 s, 19,0 MB/s
15931+1 Datensätze ein
15931+1 Datensätze aus
15931539456 Bytes (16 GB, 15 GiB) kopiert, 837,434 s, 19,0 MB/s

root@earthX200:~# udisksctl loop-setup -f dockerpi.img
Mapped file dockerpi.img as /dev/loop24.

progisart@earthX200:~$ sudo gparted /dev/loop24
[sudo] Passwort für progisart:
GParted 1.0.0
configuration --enable-libparted-dmraid --enable-online-resize
libparted 3.3

root@earthX200:~# udisksctl loop-delete -b /dev/loop24

root@earthX200:~# fdisk -l dockerpi.img
Festplatte dockerpi.img: 14,86 GiB, 15931539456 Bytes, 31116288 Sektoren
Einheiten: Sektoren von 1 * 512 = 512 Bytes
Sektorgröße (logisch/physikalisch): 512 Bytes / 512 Bytes
E/A-Größe (minimal/optimal): 512 Bytes / 512 Bytes
Festplattenbezeichnungstyp: dos
Festplattenbezeichner: 0x738a4d67

Gerät         Boot Anfang     Ende Sektoren Größe Kn Typ
dockerpi.img1        8192   532479   524288  256M  c W95 FAT32 (LBA)
dockerpi.img2      532480 13230079 12697600  6,1G 83 Linux

root@earthX200:~# dd bs=512 count=13230080 if=~/dockerpi.img of=~/dockerpi_s.img status=progress
6676411904 Bytes (6,7 GB, 6,2 GiB) kopiert, 72 s, 92,7 MB/s
13230080+0 Datensätze ein
13230080+0 Datensätze aus
6773800960 Bytes (6,8 GB, 6,3 GiB) kopiert, 72,916 s, 92,9 MB/s

[root@progIsArt /]# dd if=/dev/zero of=/swapfile bs=1G count=12
[root@progIsArt /]# ls -lh | grep swapfile
-rw-r--r--   1 root root  12G Feb 21 12:04 swapfile

[root@progIsArt /]# chmod 600 /swapfile

[root@progIsArt /]# mkswap /swapfile
[root@progIsArt /]# swapon /swapfile

[root@progIsArt /]# vi /etc/fstab
...
/swapfile                                 none            swap    sw              0       0
...

[root@progIsArt /]# swapon --show

  192.168.178.8/29

  1111 1111
       ^
     => 111 = 7
      0-7
   *  8-15
     16-23
    ...

root@earthX200:~# nmap -sP -n 192.168.178.8/29
Starting Nmap 7.80 ( https://nmap.org ) at 2020-07-05 14:30 CEST
Stats: 0:00:00 elapsed; 0 hosts completed (0 up), 8 undergoing ARP Ping Scan
ARP Ping Scan Timing: About 56.25% done; ETC: 14:30 (0:00:00 remaining)
Nmap scan report for 192.168.178.11
Host is up (0.11s latency).
MAC Address: 52:D4:F6:61:74:A6 (Unknown)
Nmap scan report for 192.168.178.12
Host is up (0.12s latency).
MAC Address: 6A:FF:7A:28:93:CA (Unknown)
Nmap done: 8 IP addresses (2 hosts up) scanned in 1.04 seconds

  192.168.178.16/28

  1111 1111
     ^
    => 1111 = 15
      0-15
   * 16-31
     32-47
    ...

root@earthX200:~# nmap -sP -n 192.168.178.16/28
Starting Nmap 7.80 ( https://nmap.org ) at 2020-07-05 14:30 CEST
Nmap scan report for 192.168.178.24
Host is up (0.052s latency).
MAC Address: 84:0D:8E:50:AC:73 (Espressif)
Nmap scan report for 192.168.178.25
Host is up (0.059s latency).
MAC Address: 84:0D:8E:5A:80:59 (Espressif)
Nmap scan report for 192.168.178.29
Host is up (0.024s latency).
MAC Address: F0:81:73:56:20:63 (Amazon Technologies)
Nmap done: 16 IP addresses (3 hosts up) scanned in 0.59 seconds

  192.168.178.16/29

  1111 1111
       ^
     => 111 = 7
      0-7
      8-15
   * 16-23
    ...
root@earthX200:~# nmap -sP -n 192.168.178.16/29
Starting Nmap 7.80 ( https://nmap.org ) at 2020-07-05 14:31 CEST
Nmap done: 8 IP addresses (0 hosts up) scanned in 0.48 seconds

  192.168.178.27/29

  1111 1111
       ^
     => 111 = 7
      0-7
      8-15
     16-23
   * 24-31   <= 24<27
    ...
root@earthX200:~# nmap -sP -n 192.168.178.27/29
Starting Nmap 7.80 ( https://nmap.org ) at 2020-07-05 14:48 CEST
Nmap scan report for 192.168.178.24
Host is up (0.096s latency).
MAC Address: 84:0D:8E:50:AC:73 (Espressif)
Nmap scan report for 192.168.178.25
Host is up (0.088s latency).
MAC Address: 84:0D:8E:5A:80:59 (Espressif)
Nmap scan report for 192.168.178.29
Host is up (0.038s latency).
MAC Address: F0:81:73:56:20:63 (Amazon Technologies)
Nmap done: 8 IP addresses (3 hosts up) scanned in 0.80 seconds

root@orangepizero:~# apt install cryptsetup

root@orangepizero:~# lsblk -p
NAME             MAJ:MIN RM   SIZE RO TYPE MOUNTPOINT
/dev/sda           8:0    1 115.7G  0 disk
└─/dev/sda1        8:1    1 115.7G  0 part
/dev/mmcblk0     179:0    0   3.7G  0 disk
└─/dev/mmcblk0p1 179:1    0   3.5G  0 part /
/dev/zram0       254:0    0    50M  0 disk /var/log
/dev/zram1       254:1    0 246.1M  0 disk [SWAP]

root@orangepizero:~# blkid
/dev/mmcblk0p1: UUID="b94b4648-cbb0-42ba-95e5-ba7c5d978a3b" TYPE="ext4" PARTUUID="1cac4ae8-01"
/dev/sda1: UUID="3de72a1a-cb9a-41c9-baff-d3d872248163" TYPE="crypto_LUKS" PARTUUID="9f599bf5-7d3c-4276-91f4-42b1954bf47b"
/dev/zram0: LABEL="log2ram" UUID="3e01a261-aea6-4f8e-a0f8-5ea5ba48eadd" TYPE="ext4"
/dev/zram1: UUID="b32030e6-f424-4225-b192-4eb6681a4595" TYPE="swap"

root@orangepizero:~# cryptsetup luksOpen /dev/disk/by-uuid/3de72a1a-cb9a-41c9-baff-d3d872248163 OBERON

## Create Mount-Point
root@orangepizero:~# mkdir                    /media/OBERON

## Mount drive
root@orangepizero:~# mount /dev/mapper/OBERON /media/OBERON/

## Access for all users.
root@orangepizero:~# chown root:root -R       /media/OBERON
root@orangepizero:~# chmod 777                /media/OBERON/

## Verzeichnis erstellen, wo das KeyFile gespeichert wird.
root@orangepizero:~# mkdir ~/.keyfiles
## Ein randominisiertes KeyFile erstellen.
root@orangepizero:~# dd if=/dev/urandom of=/root/.keyfiles/OBERON_luks bs=1024 count=4
## Den randominisiertes KeyFile dem Volume als zusetzlichen Key zufügen.
cryptsetup luksAddKey /dev/disk/by-uuid/3de72a1a-cb9a-41c9-baff-d3d872248163 /root/.keyfiles/OBERON_luks

...
## Add this entry
/dev/mapper/OBERON  /media/OBERON   ext4    defaults,rw 0   0

...
## Add this entry
OBERON  /dev/disk/by-uuid/3de72a1a-cb9a-41c9-baff-d3d872248163  /root/.keyfiles/OBERON_luks luks

[1. ]helmi@progisart ~]$ cat >"helmi.keyData" <<EOF
>     %echo Generating a basic OpenPGP key
>     Key-Type: DSA
>     Key-Length: 1024
>     Subkey-Type: ELG-E
>     Subkey-Length: 1024
>     Name-Real: Helmi Helm
>     Name-Comment: with stupid passphrase <helmi123>
>     Name-Email: helmi.helm@dockerworld.de
>     Expire-Date: 0
>     Passphrase: helmi123
>     # Do a commit here, so that we can later print "done" :-)
>     %commit
>     %echo done
> EOF
[2. ]helmi@progisart ~]$ gpg --batch --gen-key "helmi.keyData"
[3. ]helmi@progisart ~]$ gpg --output "/tmp/helmi_pub.gpg" --armor --export $(gpg --list-keys | tr -s ' ' | grep -E '^pub' | sed -E 's/.*\/(.*) .*/\1/g')
[4. ]helmi@progisart ~]$ scp "helmo"@gpg__"helmo":"/tmp/helmo_pub.gpg" /tmp
[5. ]helmi@progisart ~]$ gpg --import "/tmp/helmo_pub.gpg"

[1. ]helmi@progisart ~]$ cat >"/tmp/messageFrom_helmi" <<EOF
A message from Helmi Helm
EOF
[2. ]helmi@progisart ~]$ gpg --encrypt --armor --recipient "helmo.helm@dockerworld.de" --trust-model always "/tmp/messageFrom_helmi"

[1. ]helmi@progisart ~]$ scp "helmo"@gpg__"helmo":"/tmp/messageFrom_helmo.asc" /tmp
[2. ]helmi@progisart ~]$ gpg --batch --yes --passphrase "helmi123" "/tmp/messageFrom_helmo.asc"
[3. ]helmi@progisart ~]$ cat "/tmp/messageFrom_helmo"

## -----------------------------------------------------------------------------
## Clone ...
## ... a repository
git clone http://[username@]<base.url>/<repo.git>
## -----------------------------------------------------------------------------
## Commit ...
## ... with comment
git commit -m "Initial Commit"
## ... with timestamp as comment
git commit -m  $(date --iso-8601=seconds)
## -----------------------------------------------------------------------------
## Pull on all branches
git pull --all
## Push ...
## ... on all branches
git push --all -f
## ... special branch
git push -u origin DRAFT
## -----------------------------------------------------------------------------
## Branches ...
## ... create local Branch (and checkout)
git checkout -b DRAFT
## ... and publish to remote
git push -u origin DRAFT
## ... delete local Branch
git branch -d DRAFT
## ... and delete at remote
git push origin --delete DRAFT
## -----------------------------------------------------------------------------
## Add ...
## ... all
git add --all
## -----------------------------------------------------------------------------
## Diff ...
## ... of two explicit versions
git diff 335f02d165218a4f24f98d605200064065c6f25e..677457e992369954021fb9069e027845a6f3bd86
## ... from master 3 version in the past.
git diff master~3
## ... difference between last but one commit and last commit
git diff HEAD~
git diff @
## ... difference between second and third commit
git diff HEAD~2 HEAD~1

## Edit the current configuration in VIM
git config --global -e

## Edit single configuration item
git config --global user.name "{nbsp}{nbsp}{nbsp}{nbsp}ProgIsArt"
git config --global user.email "progisart@gmx.de"
git config --global core.editor "gvim --nofork '%*'"
git config --global core.editor "vim"
git config --global credential.helper store

## Show the current configuration
git config --global --list

## Get remote url as single line
git config --get remote.origin.url

## Proxy-Settings and HTTP setting
##   Unspecific settings ...
##   ... proxy settings
git config --global http.proxy http://<username>:<passwd>@<url>:<port>
##   ... ignore errors with selfsigned/unsecure certificates
git config --global http.sslVerify false

##   (but GIT do not know a no_proxy settting, therefore to setup specific settings)
##   Specific settings ...
##   ... proxy settings
git config --global http.<repo-url:http[s]//:...>.proxy http://<username>:<passwd>@<url>:<port>
##   ... ignore errors with selfsigned/unsecure certificates
git config --global http.<repo-url:http[s]//:...>.sslVerify false



## Fix the EOL setting to unix format
git config --global core.autocrlf false
git config --global core.eol lf

## -----------------------------------------------------------------------------
## Checkout version by date
git checkout $(git rev-list -n 1 --first-parent --before="2020-02-02 00:00:00" master)


## -----------------------------------------------------------------------------
## Create new repository from the command line
touch README.md
git init
git add README.md
git commit -m "first commit"
git remote add origin https://<base.url>/<repo.git>
git push -u origin master

## Push existing repository from the command line
git remote add origin https://<base.url>/<repo.git>
git push -u origin master
## ... alternative ...
git push -u origin --all
git push origin --tags


## -----------------------------------------------------------------------------
## Importent on WINDOWS, open help on command line and not in the browser.
git <command> -h


## -----------------------------------------------------------------------------
## Create a tag with comment and push to remote
git tag -a MlStn_0.3.0 -m 'Milestone 0.3.0'
git push origin --tags
git tag -l -n5

## Delete a tag from local and remote
git tag -d v2.2.0.0
git push --delete origin v2.2.0.0
git tag -l -n5

## How have create a tag
git for-each-ref --format '%(refname) %09 %(taggerdate) %(subject) %(taggeremail)' refs/tags  --sort=taggerdate

## -----------------------------------------------------------------------------
## Moving files and directories to a new repository
git remote rm origin
git remote add origin  https://<base.url>/<repo.git>
git push --set-upstream origin master


## -----------------------------------------------------------------------------
## Create and apply a patch
git diff HEAD >a.patch
patch -p1 <../a/a.patch

## -----------------------------------------------------------------------------
## Rebase local
git rebase -i HEAD~2

## -----------------------------------------------------------------------------
## Rebase remote
git rebase -i origin/DRAFT~2 DRAFT
git push origin +DRAFT

## -----------------------------------------------------------------------------
## Checkout version by date
## ... with git-bash on Windoof add to [GIT-HOME]/etc/profile.d/bash_profile.sh
export  http_proxy=http://<username>:<passwd>@<url>:<port>
export https_proxy=http://<username>:<passwd>@<url>:<port>
export    no_proxy=example.com,192.0.2.42

## Install necessary packages
root@progIsArt:~# apt install espeak

## First stupid test.
helmi@progIsArt:~$ espeak 'huhu'
## An other test
helmi@progIsArt:~$ espeak 'Speech synthesis is the artificial production of human speech. A computer system used for this purpose is called a speech computer or speech synthesizer, and can be implemented in software or hardware products. A text-to-speech TTS system converts normal language text into speech; other systems render symbolic linguistic representations like phonetic transcriptions into speech.'
## Reduce speed
helmi@progIsArt:~$ espeak -s 145 'Speech synthesis is the artificial production of human speech. A computer system used for this purpose is called a speech computer or speech synthesizer, and can be implemented in software or hardware products. A text-to-speech TTS system converts normal language text into speech; other systems render symbolic linguistic representations like phonetic transcriptions into speech.'
## Output in german
helmi@progIsArt:~$ espeak -v de -s 145 'Unter Sprachsynthese versteht man die künstliche Erzeugung der menschlichen Sprechstimme. Ein Text-to-Speech-System TTS oder Vorleseautomat wandelt Fließtext in eine akustische Sprachausgabe.'

## List of all installed voices
root@progIsArt:~$ espeak --voice

## List of all available german voices
root@progIsArt:~$ espeak --voice=de

## Before you can use other voices you have to install Mbrola
root@progIsArt:~$ apt install mbrola

## The voices are not includes, they have to be installed separately
#  ... check for available voices
root@progIsArt:~$ apt search mbrola | grep -E '^mbrola\-(de|en)'
#  ... install some of them
root@progIsArt:~$ apt install mbrola-en1 mbrola-de7

#  ... test the new voice
helmi@progIsArt:~$ espeak -v mb-de7 -s 145 'Unter Sprachsynthese versteht man die künstliche Erzeugung der menschlichen Sprechstimme. Ein Text-to-Speech-System TTS oder Vorleseautomat wandelt Fließtext in eine akustische Sprachausgabe.'

## Installation necessary packages
root@progIsArt:~$ apt install xsel

## ... test
helmi@progIsArt:~$ espeak -v mb-de7 -s 145 "$(xsel)"

root@progisart-funk:~# apt install samba cifs-utils smbclient

root@progisart-funk:~# cp /etc/samba/smb.conf /etc/samba/smb.conf_backup root@progisart-funk:~#
grep -v -E "^#|^;" /etc/samba/smb.conf_backup | grep . > /etc/samba/smb.conf

[public]
  comment = public anonymous access
  path = /var/samba/
  writeable = yes
  browseable = yes
  public = yes
  create mask = 0777
  directory mask = 0777
  force user = root

root@progisart-funk:~# systemctl reload  smbd
root@progisart-funk:~# systemctl restart smbd