t-lo

Generate a new pair of keys via wg

$ wg genkey | tee privatekey | wg pubkey > publickey

Rotate your public key via the same logic as in Mullvad's source code:

• Step 1: Obtaining an access token:

$ curl -fsSL -X POST \
    -H 'Content-Type: application/json' \

t-lo

execve("/usr/bin/mount", ["mount", "-t", "overlay", "-o", "lowerdir=/tmp/o/1:/tmp/o/2:/tmp/"..., "ovtest", "/tmp/o/m"], 0x7ffc31f29da0 /* 35 vars */) = 0
brk(NULL)                               = 0x55845b1ab000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=31851, ...}) = 0
mmap(NULL, 31851, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f5dfd832000
close(3)                                = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5dfd830000
openat(AT_FDCWD, "/lib64/libmount.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832

t-lo

#!/bin/bash

#
# Merge coreos-overlay and portage-stable submodules into scripts.
# From: https://x3ro.de/integrating-a-submodule-into-the-parent-repository/
#

# This commit contains the patch for scripts, ci-automation etc. to remove submodules.
git_ref_for_cherrypicking="c5b00016a13e1d4f7a52caae94c137572e3c0498"

t-lo

#!/bin/bash

set -eu

function get_firecracker() {
    rm -f firecracker-v0.24.6-x86_64.tgz firectl-v0.1.0
    rm -rf release-*/*

    wget https://github.com/firecracker-microvm/firecracker/releases/download/v0.24.6/firecracker-v0.24.6-x86_64.tgz
    wget https://firectl-release.s3.amazonaws.com/firectl-v0.1.0

t-lo

Step-by-step instructions to boot Flatcar on Firecracker.

Get Firecracker and firectl

Check for the latest versions on https://github.com/firecracker-microvm/firecracker/releases and https://github.com/firecracker-microvm/firectl/releases ; for our example we'll go with 0.24.6 and 0.1.0.

wget https://github.com/firecracker-microvm/firecracker/releases/download/v0.24.6/firecracker-v0.24.6-x86_64.tgz
wget https://firectl-release.s3.amazonaws.com/firectl-v0.1.0
tar xzf firecracker-v0.24.6-x86_64.tgz
mv release-*/* .

t-lo

apiVersion: v1
kind: Namespace
metadata:
  name: istio-system
  labels:
    istio-injection: disabled
---
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata: