Gpg on Micha Kops' Tech Notes

Handling Secrets with SOPS

Fri, 19 Apr 2024 00:00:00 +0200

Figure 1. Handling Secret with SOPS

Installation

using homebrew

brew install sops

manual download

download from GitHub https://github.com/getsops/sops/releases

Using SOPS

Create a sops.yaml

sops.yaml

creation_rules:
  # encrypt stuff in .secrets
  - aws_profile: default
    kms: arn:aws:kms:eu-central-1:1234567890:key/abcdefg-0123456-abcdefg (1)
    path_regex: ^./secrets/.*$ (2)

1	We are using AWS KMS for encryption/decryption
2	All files in the directory `.secrets` will be encrypted

Inplace Encrypt
```
sops -e -i .secrets/mysecret.yaml
```
Inplace Decrypt
```
sops -d -i .secrets/mysecret.yaml
```

Install Docker on Linux

Fri, 14 May 2021 00:00:00 +0200

Goals

Installing a specific Docker version on (Debian-based) Linux
Freeze the version to avoid automatic updates

Installation

curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add - (1)

sudo add-apt-repository \ (2)
   "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
   $(lsb_release -cs) \
   stable"

sudo apt-get update (3)

sudo apt-get install -y docker-ce=18.06.1~ce~3-0~ubuntu (4)

sudo apt-mark hold docker-ce (5)

1	Add the Docker GPG key
2	Add the Docker repository
3	Update the index
4	Install docker
5	Freeze the version to avoid unwanted automatic updates

Install Kubernetes Components - Kubeadm, Kubectl, Kubelet

Fri, 14 May 2021 00:00:00 +0200

Goals

Install kubeadm, kubectl and kubelet on Debian-based Linux
Freeze their versions to avoid automatic updates

Installation

curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add - (1)

cat << EOF | sudo tee /etc/apt/sources.list.d/kubernetes.list (2)
deb https://apt.kubernetes.io/ kubernetes-xenial main
EOF

sudo apt-get update (3)

sudo apt-get install -y kubelet=1.15.7-00 kubeadm=1.15.7-00 kubectl=1.15.7-00 (4)

sudo apt-mark hold kubelet kubeadm kubectl (5)

Add the GPG key

Add the kubernetes repo to the sources list

Update the index

Install kubelet, kubeadm and kubectl

It’s important to use the same version for kubelet, kubeadm and kubectl.