Forem: Malik Benkirane

docker config auths reverse engineering

Malik Benkirane — Sat, 22 Jun 2024 06:30:03 +0000

.docker/config.json auths secrets

Before we start, backup ~/.docker/config.json and export DOCKER_CONFIG=~/.docker.

We will be using sh.

We should now have an empty $DOCKER_CONFIG/config.json.

If you are on Mac OS X like me, after we issue some docker login command we should be able to spot a credsStore attribute in our docker config.json:

        "credsStore": "desktop"

or even

        "credsStore": "osxkeychain"

Let's make sure we remove that attribute. docker login will now warn us that the authorizations values will be stored unencrypted:

WARNING! Your password will be stored unencrypted in ~/.docker/config.json.

For example if we issue a docker login ... with a service account on google cloud

docker login -u _json_key --password-stdin https://europe-west1-docker.pkg.dev  < ~/.gcp/sa-secret.json

We would also spot auths attribute with a base64 encoded string value.

{
        "auths": {
                "europe-west1-docker.pkg.dev": {
                        "auth": "BASE64ENCODEDxxxx",
        //...
}

We can use docker-credential-helpers from docker credentials release
to retrieve that "auth" value.

For example with docker-credential-osxkeychain release:

echo europe-west1-docker.pkg.dev | docker-credential-osxkeychain get

{
  "ServerURL": "europe-west1-docker.pkg.dev",
  "Username": "_json_key",
  "Secret": {
    // ...
  }
}

We would finally find that in $DOCKER_CONFIG/config.json the base64 encoded value is nothing else than

_json_key:{
   // ... value retrieved from docker-credential-oskeychain
}

But not that this is not rigorous JSON where we would had "_json_key":{}.

I haven't gone further but let's take it further if we find the right time.

Let's hope this gave you some ideas regarding your daily or uncommon routines. Let us know if you found that useful ;-)

pinentry-touchid

Malik Benkirane — Wed, 22 Nov 2023 12:41:41 +0000

❯ pinentry-touchid  --check                                                                                                                                                                                            
❌ /opt/homebrew/opt/pinentry/bin/pinentry is a symlink that resolves to /opt/homebrew/Cellar/pinentry/1.2.1/bin/pinentry-curses not to pinentry-mac

symlink correction

sudo rm /opt/homebrew/opt/pinentry/bin/pinentry
sudo ln -s $(which pinentry-mac) /opt/homebrew/opt/pinentry/bin/pinentry

or just

pinentry-touchid -fix

gpg-agent

~/.gnupg/gpg-agent.conf

pinentry-program $(which pinentry-touchid)

do not forget to replace $(which pinentry-touchid) with its evaluated result as pinentry-touchid absolute path

Then reloading the agent

gpg-connect-agent reloadagent /bye

sudo touch id (mac 🚀🗒)

Malik Benkirane — Thu, 16 Nov 2023 06:49:05 +0000

ref: https://github.com/artginzburg/sudo-touchid

THx001

Malik Benkirane — Wed, 15 Nov 2023 04:28:17 +0000

Always feel free to open as many doors as you want. The beautiful door allegory you can also find in Mr Robot Season 2 episode 11 while White Rose is screening Angela. This reference done I would like to remind everyone out there, reaching this node, this can only happen because the IP protocol is open to all your packets. However the world scale regions are BGP routed, you get there. Internet is often synonym of freedom for a reason and we should more often exercise the possibility of opening some doors. But first as in the reference it is more than interesting to wonder first what is behind it. Of course, you already need to have some knowldege and skole time right? I hope that captured your interest and I want to keep this readable <1min (and by the way why is limiting by characters and not estimated time of read for your wall post app? e.g. X) If not go already read about Hannah Arendt - Between Past and Future: Six Exercises in Political Thought

Blog0001 (6310)

Malik Benkirane — Mon, 23 Oct 2023 18:04:52 +0000

Some could say this is not useful and the easy way is what we should take because this make us reach better efficiency. Featuring functors this article is not about what is being introduced in this paragraph. Make it bad but do it till you make it so the "fake it" PrimeTime doctrine is interesting to try out at appropriate PWM peace. That is to be read by you my dear and I say my dear as I am at the moment desperate withing Germany trying to hop to H1B visa and fighting with unemployment as a Software Engineer. But I am 100% align with primea Gen (R) tech! Maybe I would do my own language tier review and I think everyone should go through the exercise of doing so.

Today I bought a N6310 (NOKIA feat phone)

Nokia Invested or decided at one critical time for SE (Sony Ericson) and they have now copyright on Erlang / Joe Amstrong. I would say that is not another Golang fan article and I am sure you saw that coming (#prewatched) and the style is more and more the style of automated generated billion of parameters GPT. I would be curious to fly away from writing this and checking right now at the moment I am writing this article that should feel long and dense to read. Kafkaesque almost threading of the lines that structure the voices of this story telling. Unrelated descriptions and very libre strongly opiniated kind of litterature. This has no reviewer and you are of course more than welcome to find out how much we would appreciate feedbacks and reviews as you are already a peer if you just do it. Another N brand (Nike) and they make today the most expensive shoes at scale featuring so many non barefoot runners.

Back to my story though from where I bought a Nokia Phone.

I would be just so lucky if this would be read from some famous Youtuber (aka Anonymous share you pub PGP)

Oh and what about we redesign HTTPS?

Back to Nokia 6310 Erlang friendly phone maybe.

Let start with the ship

And that is ok as mothership landed.

And a big thank you to Yto Berrada native from Tangier! Tanger la belle, Tanger la blanche et celle qui vous illumine sans regards mais que de visions pour blanchir la vertu des plus modestes.

Enough poetry and I am more than happy to start my blog with saying I finally state

❓state unknown

Getting to Jailbreak maybe 6310 (starting with microchip 😅🦠)

Get exploit

👤 state action (`*`)

infection vaccine reflection

👤 state action (`**`)

infection exploit x/ record

🏁 state done

final state

parallels macos 14.0 Starting...

Malik Benkirane — Thu, 19 Oct 2023 02:56:05 +0000

rm -rf ~/Parallels

thank you and read also https://kb.parallels.com/en/117333 as well as https://kb.parallels.com/5029

scrot

Malik Benkirane — Thu, 19 Oct 2023 02:40:41 +0000

ffmpeg -f avfoundation -list_devices true -i ""

Note [] in the list beforementioned

ffmpeg -f avfoundation -i "<screen device index>:<audio device index>" output.mkv

Reference
https://trac.ffmpeg.org/wiki/Capture/Desktop

surrealdb driver github.com/4sp1/surrealhigh

Malik Benkirane — Mon, 16 Oct 2023 23:19:59 +0000

❓Open-Source
❓Side-Project
❓SurrealDB driver

👤 Surreal High "Coming Out"

Open Source Side Project

Higher level interface to the amazing SurrealDB Rusty DB engine featuring NoSQL, GraphDB, sqlDB with an original query language with permissions and more. They finally release the production edition.

I think Golang interface is lacking behind so I wrote a very handcrafted layer above the existing Go driver to make integrations and tasks easier. Indeed, this is a little trick to generate types for all of the data structures fields you would like to work with. At the moment support is limited and I already alpha tested it with 2 other side projects where I wanted to try a little more SurrealDB. Of course I have more projects to come so this will make the overall product better.

Also there is very basic and incomplete query constructors but it should be seamlessly easy for you to start a discussion so we could get it done together!

Looking forward to your feedback,
Back to you!

Malik

❓Techinality
❓Usability
❓Underground

👤 Install

https://github.com/4sp1/surrealhigh/commit/054984e9ac31

The link would get you to the version you should use

go install ./cmd/sh-gen-types

then in the package for your surrealdb adapter define some struct and for example prepose it with

👤 Use

//go:generate sh-gen-types -doc=myDoc -pkg=mysdbdriver -o my_doc.sdb.gen.go
type myDoc struct{
//... non strictly typed doc
}

👤 Hack

also have a look at the few following flags and meanings

var (
    doc = flag.String("doc", "", "comma-separated list of doc struct names; must be set")
    pkg = flag.String("pkg", "", "destination package")
    out = flag.String("o", "", "destination file .go")
)

from https://github.com/4sp1/surrealhigh/blob/054984e9ac3130d4326f608351d316c88f772ac0/cmd/sh-gen-types/main.go

the whole thing is backed with some template generator with some good and bad sides but it was worth trying and that might happen again:

👤 Dig

// :D
import "github.com/4sp1/surrealhigh/templates/jennifer"

🏁 We're done! It's amazing if you get done to the line

🎪🎪🎪

X.Com censorship>?

Malik Benkirane — Mon, 09 Oct 2023 19:06:13 +0000

Yet another

Original post

no censure please

frozen giga factory in berlin

sensible

hidden

welcome to my intercom studio (ICS)

no more bullshit

x is the last great idea

let us do this

make it successful

make things

manifesto and cult of done

ref

https://www.youtube.com/@4sp1
https://malik-ben-kirane.de
https://go.with.mb.multisvc.com
https://twitter.com/4sp14f

Research: Putting consistency back to Eventual Consistency

Malik Benkirane — Wed, 04 Oct 2023 21:08:21 +0000

https://hal.science/hal-01248191

one more referral ccc.de

Malik Benkirane — Thu, 28 Sep 2023 10:05:43 +0000

This is the chaos computer club next open event starting at 7:42 PM CEST in Hamburg at the Fux.eG. Be ready on the 13th of October, 1942CEST!

reference: events.ccc.de
see also: media.ccc.de

x ccc</h4>
x 😻</h4>
x socio
x 4sp1

#2ndFri

gitea doctl

Malik Benkirane — Wed, 27 Sep 2023 15:44:54 +0000

alias ks=kubectl # not to be confused with kube alias k
alias k9=k9s      # handy terminal user interface (HTUI)

OOR aka. Open On Request vs. OSS aka. Open Source Software

At the moment of writing this - and this symptomatic ADHD behavior -X is about a side project, and, a side note on this side project. So to tell the cat house is willing to produce cat memes and cat NFTs of course! That is finally need to be layered under security measures so that you are the only owner of the data being publicly available but ciphered in a way you remain the only one to be able to manage it (revoke access to others, grant access to others, etc.)

ks port-forward svc/gitea-http 3000

Ikagai The Kingdom of Heaven is Witihin

And what you were waiting for was this helm gist:

# if you never had the chance to get the repo yet
helm repo add gitea-charts https://dl.gitea.com/charts/ 
helm repo update

# saving precious resources 🔌🤑
# simple install (no ha for postgres and no redis) and you can save resources 
helm install \
    gitea \
    gitea-charts/gitea \ 
    --set=postgresql-ha.enabled=false \
    --set=redis-cluster.enabled=false