Keychain helps you to manage SSH and GPG keys in a convenient and secure manner. It acts as a frontend to ssh-agent and ssh-add, but allows you to easily have one long running ssh-agent process per system, rather than the norm of one ssh-agent per login session.
This dramatically reduces the number of times you need to enter your passphrase. With keychain, you only need to enter a passphrase once every time your local machine is rebooted. Keychain also makes it easy for remote cron jobs to securely "hook in" to a long-running ssh-agent process, allowing your scripts to take advantage of key-based logins.
If your workflow is such that you have one terminal window but multiple tabs, this will fix quite a few annoyances.
Github: https://github.com/funtoo/keychain
Works very well on Linux, I've been using it for years. Also works on OSX; it's in Homebrew.
This repository helps to setup a ready-to-use chatmail server comprised of a minimal setup of the battle-tested postfix smtp and dovecot imap services. The setup is designed and optimized for providing chatmail accounts for use by Delta Chat apps. Chatmail accounts are automatically created by a first login, after which the initially specified password is required for using them.
This project is about delivering a ready-to-use IT infrastructure suitable for bootstrapping a small company, all self-hosted and supported by Open Source. The initial target platform is for a NetBSD/EdgeBSD NVMM hypervisor and a collection of guest VMs, with the software deployed with pkgsrc.
Stands up an OpenLDAP server, BIND for DNS, e-mail infrastructure (including webmail), Nextcloud, Gitea, Jitsi Meet, and a public website by running a handful of commands on a blank machine.
A couple of scripts that wrap git and generate short commit IDs that are linear, i.e., they start at 0000000, then 0000001, 0000002, and so forth.
It's kind of a useless hack but silly.
A a highly flexible, customizable, fast and powerful status bar replacement for people that like playing with shell scripts. The main design principle of this project is that all elements of the bar can be added, removed and freely changed at any point in time. Thus, the configuration of the bar is not static, rather it is possible to adapt the appearance of the bar completely dynamically with the help of a powerful event-driven scripting system at any point in time using the highly configurable basic building blocks SketchyBar offers.
The official documentation says to use Homebrew to install it.
Haserl is a small program that uses shell or Lua script to create cgi web scripts. It is intended for environments where PHP or ruby are too big. It was written for Linux, but is known to run on FreeBSD. A typical use is to run cgi scripts in an embedded environment, using a small web server, such as mini-httpd, lighty, or the server built into busybox.
he haserl binary typically compiles to less than 20KB (stripped). The lua language adds less than 150K if linked in statically. Parses like other scripting languages: Anything that is not enclosed in <% ... %> tags is sent verbatim to the client. Form elements sent from the client are automatically parsed and placed into environment variables. The script can then reference the variables without any extra work. Mime data sent via the enctype="multipart/form-data" method is transparently decoded. This method is used when uploading files from the client. Attempts to drop its privileges to the uid/gid of the owner of the script for security.
The Haserl Framework is a set of shell scripts and functions that allow one to build MVC-style web applications based on shell scripting and haserl templating. It is similar to Ruby's Sinatra framework in structure, functionality, and spirit. Haserl Framework is developed primarily for embedded systems running minimal Linux distributions with limited space and shell functionality. The framework itself is relatively bare-bones but can easily be extended.
Effort has be made to keep the framework as POSIX compliant as possible, but that is an ongoing pursuit. The original development platform for Haserl Framework was OpenWRT's Ash/Busybox shell.
Has its own DSL (domain-specific language) but it's shell-based. Uses either scgi requests or FIFO files. Request processing is done in subshells for isolation. Requires Haserl, socat, gpg, base64, and a web server that supports CGI or SCGI.
Microsoft's own de-bloating script for Windows.
This script will generate folders for each book, chapter, and page of a Bookstack install and writes them out as PDFs or HTML pages.
If you would export attachments from pages to, this script has to run on the same host as bookstackapp-wiki, because it reads files from the webservers docroot upload directory.
Library for embedding inline assembly directly inside bash. This is sheer madness - it injects machine code (assembled assembly language) directly into /proc/$$/mem for execution. Currently only supports x86-64.
A super-tiny Activitypub semi compliant microblogging platform, written entirely in bash. Requires netcat to provide network connectivity, openssl, jq, and curl. No front-end, no client-to-server. Everything is manual.
I'm not sure what you'd call this; there's no actual server, there's no API...
Dehydrated is a client for signing certificates with an ACME-server (e.g. Let's Encrypt) implemented as a relatively simple (zsh-compatible) bash-script. This client supports both ACME v1 and the new ACME v2 including support for wildcard certificates! It uses the openssl utility for everything related to actually handling keys and certificates, so you need to have that installed. Other dependencies are: cURL, sed, grep, awk, mktemp (all found pre-installed on almost any system, cURL being the only exception).
Current features:
- Signing of a list of domains (including wildcard domains!)
- Signing of a custom CSR (either standalone or completely automated using hooks!)
- Renewal if a certificate is about to expire or defined set of domains changed
- Certificate revocation
- and lots more.
Generally you want to set up your WELLKNOWN path first, and then fill in domains.txt. Please note that you should use the staging URL when experimenting with this script to not hit Let's Encrypt's rate limits. See docs/staging.md.
A shell script to bake raspberry pi OS disk images. Use plugins to download & mount image to copy/configure things to do on the first boot/login. Generates the image on the host and everything else will happen automatically on the first boot or first login. You can create different images with the same configuration by setting config-values programmatically.
sdm provides a quick and easy way to build consistent, ready-to-go SSDs and/or SD cards for the Raspberry Pi. This command line management tool is especially useful if you
- have multiple Raspberry Pi systems and you want them all to start from an identical and consistent set of installed software packages, configuration scripts and settings, etc.
- want to rebuild your Pi system in a consistent manner with all your favorite packages and customizations already installed. Every time.
- want to be nice to your future self and make it super-easy to build fresh, customized systems when that next release of RasPiOS comes out.
- want to do the above repeatedly and a LOT more quickly and easily.
Every one of your systems is fully configured with Keyboard mapping, Locale, Timezone, and WiFi set up as you want, all of your personal customizations and all desired RasPiOS packages and updates installed.
In the AUR as sdm-git.
WireGuard road warrior installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS and Fedora. This script will let you set up your own VPN server in no more than a minute, even if you haven't used WireGuard before. It has been designed to be as unobtrusive and universal as possible.
This is a community-sourced collection of scripts that extend Paperless-ngx in various ways.
SSH-Snake is a powerful tool designed to perform automatic network traversal using SSH private keys discovered on systems, with the objective of creating a comprehensive map of a network and its dependencies, identifying to what extent a network can be compromised using SSH and SSH private keys starting from a particular system.
SSH-Snake can automatically reveal the relationship between systems which are connected via SSH, which would normally take a tremendous amount of time and effort to perform manually. It's completely self-replicating and self-propagating -- and completely fileless. In many ways, SSH-Snake is actually a worm: It replicates itself and spreads itself from one system to another as far as it can. SSH-Snake takes a depth-first approach to discovery: once it connects to one system, it tries to connect further from that system before backtracking.
- On the current system, find any SSH private keys
- On the current system, find any hosts or destinations (user@host) that the private keys may be accepted,
- Attempt to SSH into all of the destinations using all of the private keys discovered,
- If a destination is successfully connected to, repeats steps #1 - #4 on the connected-to system.
Conway's Game of Life, implemented as a shell script.
A shell script which checks your home directory for unwanted files and directories. When it encounters a file it knows about, it will tell you whether it's possible to move this file to an appropriate location, and how to do it.
Generate macOS valid serials, uuids, and board serials for good-faith Security Research & Apple Bug Bounty Research.
This project provides two tools for generating serial numbers for Hackintosh, OpenCore, Docker-OSX and OSX-KVM.