Notes

• Clean Git log recipe

  09/10/25, 08:00

  Simplest way of getting clean commits

  This is for contributing when forking projects. It allows me todo multiple work in a simple branch, then cherry pick files with different feature purpose and do PR from those without needing to split up work while retaining a clean git log when doing the PR back to the forked project.

  

  Commands needed

  git merge --squash other-branch
  git commit
  git rebase -i --signoff HEAD~<number_of_commits>
  git push --force -u origin

  And if on a rinse repeat cycle remember todo. to begin from fresh:

  git reset --hard <commit_id>

• DRAFT Tools for development

  24/09/25, 08:00

  Minimal installation

  These are the bare minimum tools need to install for a developer to operate in my setup (windows)

  • Notepad ++
  • Gpg win / Kleopratra
  • VS Code
  • JetBrains toolbox
  • Git
  • communications / slack

  Remote dev part

  • Podman Desktop
  • Podman Core

  Hypervisor

  • VMWare Pro

  PIV card operations

  • Open SC

  Password manangement

  • Keepass xc

  Configurations

  • VM setup

  This is Git’s per-user configuration file. (.gitconfig)

  [user]
    name = Nino Martinez Wael
    email = ***@***.***
    signingkey = ***16 char***
  [gpg]
    program = C:\\Users\\******\\AppData\\Local\\Programs\\GnuPG\\bin\\gpg.exe
  
  [commit]
    gpgSign = true
  
  [credential]
    helper = C:/Users/******/AppData/Local/Programs/Git/mingw64/bin/git-credential-manager.exe
  [core]
    sshCommand = C:/Windows/System32/OpenSSH/ssh.exe
    protectNTFS = false
  [gpg "ssh"]
    allowedSignersFile = C:\\Users\\******\\AppData\\Roaming\\gnupg\\sshcontrol

  C:/Users/____/AppData/Roaming/gnupg/gpg-agent.conf

  debug-level 4
  log-file C:\Users\m24669\Desktop\gpg-agent.log
  enable-ssh-support
  enable-putty-support
  enable-win32-openssh-support
  use-standard-socket

• Finally Got My Corporate PC to work

  18/07/25, 10:23

  After installing VMWare Workstation Pro

  Run these commands to get CoreOs booting

  $Env:CONFIG_ENCODING="base64"
  $Env:CONFIG_ENCODED="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"
  
  $Env:VM_NAME="podman-box"
  $Env:FCOS_OVA="C:\Users\m24669\Downloads\fedora-coreos-42.20250623.3.1-vmware.x86_64.ova"
  $Env:LIBRARY="C:\Users\m24669\tools\vmware"
  cd "C:\Program Files (x86)\VMware\VMware Workstation\OVFTool"
  .\ovftool.exe --powerOffTarget --name="$Env:VM_NAME" --net:"NAT" --allowExtraConfig --extraConfig:guestinfo.ignition.config.data.encoding="$Env:CONFIG_ENCODING" --extraConfig:guestinfo.ignition.config.data="$Env:CONFIG_ENCODED" "$Env:FCOS_OVA" "$Env:LIBRARY"

  TIP remember base64 sometimes needs padding, coreos are a bit strict. Some encoders are not!

  If for some reason network is not NAT’ED change it in VMare UI

  Edit HOST file

  ADD

  192.168.226.128 container-box.development

  ## Add DOCKER compability env

  DOCKER_HOST = tcp://container-box.development:24079

  Bonus

  powercfg /powerthrottling disable /path "C:\Program Files (x86)\VMware\VMware Workstation\x64\vmware-vmx.exe"

  accept new key

  ssh -i "C:\Users\uid\.ssh\root-podbox-ecdsa" root@container-box.development -p 22

• Cheat sheet for coco

  11/06/25, 10:23

  Peerpod IN pod container added sockets

  confidential data hub - cdh https://github.com/confidential-containers/guest-components/blob/main/confidential-data-hub/example.config.toml socket mount unix:///run/confidential-containers/cdh.sock

  attestation agent https://github.com/confidential-containers/guest-components/blob/main/attestation-agent/attestation-agent/config.example.toml socket mount unix:///run/confidential-containers/attestation-agent/attestation-agent.sock

  • IN pod communication
    • check reachability: wget http://kbs-service.operators.svc.cluster.local:8080

  echo -e “GET /aa/token?token_type=kbs HTTP/1.1\r\nhost: localhost\r\n\r\n” | socat unix-connect:/var/run/docker.sock STDIO

  unix:///run/confidential-containers/attestation-agent/attestation-agent.sock

  127.0.0.1:8006 /aa/token?token_type=kbs

  echo -e “GET /aa/token?token_type=kbs HTTP/1.1\r\nhost: localhost\r\n\r\n” | socat unix-connect:/run/confidential-containers/cdh.sock STDIO

• K8S on CoreOs

  15/05/25, 20:23

  K8S on CoreOs so I can test coco

  https://docs.fedoraproject.org/en-US/fedora-coreos/producing-ign/

  podman pull quay.io/coreos/butane:release
  podman run --interactive --rm quay.io/coreos/butane:release --pretty --strict remote.bu transpiled_config.ign
  podman run --interactive --rm --security-opt label=disable --volume "${PWD}:/pwd" --workdir /pwd quay.io/coreos/butane:release --pretty --strict remote.bu --out transpiled_config.ign

  CoreOs Butane

  variant: fcos
  version: 1.1.0
  passwd:
    users:
      - name: core
        ssh_authorized_keys:
          - ecdsa-sha2-nistp384 AAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlzdHAzODQAAABhBPNa92ELpFZlPWtoTSCDl+2GAmZth4gv/Sfed/6Woy9pGsLfz+XuEJ1bQFcngHjw7Sby249+QLIVuko7W6YPFIQjaSbVPG/PFh6cRm+foi7LrXdAkzdgujszgWkU5SIAkQ==
      - name: root
        ssh_authorized_keys:
          - ecdsa-sha2-nistp384 AAAAE2VjZHNhLXNoYTItbmlzdHAzODQAAAAIbmlzdHAzODQAAABhBPNa92ELpFZlPWtoTSCDl+2GAmZth4gv/Sfed/6Woy9pGsLfz+XuEJ1bQFcngHjw7Sby249+QLIVuko7W6YPFIQjaSbVPG/PFh6cRm+foi7LrXdAkzdgujszgWkU5SIAkQ==
  storage:
    files:
      - path: /etc/hostname
        mode: 420
        overwrite: true
        contents:
          source: 'data:,podman-box'
  systemd:
    units:
      - name: podman.socket
        enabled: true

  IGN on VMWare

  Install kind

  kind create cluster —config=

  kind: Cluster
  apiVersion: kind.x-k8s.io/v1alpha4
  name: dev01
  networking:
    # WARNING: It is _strongly_ recommended that you keep this the default
    # (127.0.0.1) for security reasons. However it is possible to change this.
    apiServerAddress: "0.0.0.0"
  nodes:
  - role: control-plane
    kubeadmConfigPatches:
    - |
      kind: ClusterConfiguration
      apiServer:
        certSANs:
        - "192.168.1.155"
        - "podman-box"
  - role: worker
    labels:
      "node.kubernetes.io/worker":