Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

How's gitlab ci log cover up commands?

D
derk last edited by
Now, in the collection logs, it's about that (bash):
```
...
$ echo "Finish recompile objects"
Finish recompile objects
$ echo "BUILD - OK"
BUILD - OK
...
```
I mean, when you're watching, the commands are injected and their results. Is there any way to hide the team and leave only the conclusion?
```
...
Finish recompile objects
BUILD - OK
...
```
There's an echo off regime in cmd, so I'd like to activate the same.
I'll be grateful for any ideas:
Reply Quote 0
1 Reply Last reply
F
fbio last edited by
As aleksandr barakin correctly addressed in the commentaries, the solution is to use м multiple violin. https://docs.gitlab.com/ee/ci/yaml/script.html#split-long-commands )
```
myjob:
  script:
  - |
    # printing the job information
    echo --------------------------
    echo Building ${CI_COMMIT_SHA}
    echo --------------------------
```
The conclusion of the slogan will be as follows:
```
(...)
$ # printing the job information # collapsed multi-line command
--------------------------
Building 629fcab9e39f8564cb2a0d1a7f104e2312a22288
--------------------------
(...)
```
Ultimately, the commands are not displayed except first, and the withdrawal is correctly displayed.
More options can be seen in this discussion: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/4645
Reply Quote 0
1 Reply Last reply

2
Posts

0
Views

Suggested Topics

D

Custom Commands
Software Programming • python disc languageord.py • • Duquan

2

0
Votes

2
Posts

0
Views

the easiest way to add commands to your bot is:import discord from discord.ext import commands "resto del código" bot = commands.Bot(command_prefix='$') @bot.command(0 async def tu_comando(): "código"
T

turn Y-m-d H-i-s into d-m-Y H-i-s
Software Programming • php databank • • Trenton

2

0
Votes

2
Posts

0
Views

D

You can use the class DateTime the PHP, see;$date = new DateTime("2018-04-24 16:07:17"); print_r($date->format("d-m-Y H:i:s")); // saída: 24-04-2018 16:07:17 You can use dynamically if you prefer;$date = (new DateTime("2018-04-24 16:07:17"))->format("d-m-Y H:i:s") See more about the class http://php.net/manual/en/class.datetime.php
C

Move a file using Shell in linux U get the path+filename from a found file
Software Programming • bash shell shell sc languageript • • Cleofas

2

0
Votes

2
Posts

0
Views

You have several things that can be improved here. First, you're throwing the find, the slowest part of your script, many times when you only need one. In addition, you have not put your variables in quotation marks, which will make your script not work properly if the names of your files contain spaces, tabs, new lines (yes, there may be them in the file name), or glob characters (*, ? etc.). Basically, if you just want to find a file, you don't need any loops:fichero=$(find "$dirGeneral" -iname "*.zip" | head -n1) Or, to work with weird names:fichero=$(find . -iname "*.zip" -print0 | head -zn1) And that's it. So your script would be:#!/bin/bash . /home/"$USER"/Documentos/source.config fichero=$(find . -iname "*.zip" -print0 | head -zn1) mv "$fichero" /otro/directorio
discord.ext.commands.errors.CommandInvokeError: Command raised an exception: ClientException: ffmpeg was not found
Software Programming • python discord py • • jeanid

2

0
Votes

2
Posts

0
Views

C

FFMPEG - .exe the file needed to launch the sound. This sketch is launched through Discord API.You can download it. https://ffmpeg.org/ ♪ You can. https://github.com/BtbN/FFmpeg-Builds/releases/download/autobuild-2020-12-02-12-43/ffmpeg-N-100126-g0a5ff19643-win64-gpl.zip (loading begins immediately)There must be three files in the file: ffmpeg.exe♪ ffplay.exe♪ ffprobe.exe♪Launches with clear indication of the completed file ffmpeg.exe:voice.play(discord.FFmpegPCMAudio(executable="путь\\к\\файлу\\ffmpeg.exe", source = URL, **FFMPEG_OPTIONS))
K

What does it mean ': PHP /archivoDebug.log' in bash?
Software Programming • bash shell • • kalyn

2

0
Votes

2
Posts

0
Views

A

It's not a combination, the : is a command (specifically a "special shell builtin"). It's not. :> It is : and >And in this case, it's totally useless. Here it is used to create an empty file, but they could have done exactly the same without any command since > /archivoDebug.log (i.e., > and a name) creates an empty file without needing any command. I don't know why a lot of people do things like : > foo or true > foo or touch foo since > foo works the same (in bash, but not in other shells).More in detail, the : is called "NULL command" and is part of the newest POSIX versions. In general it works in a manner equivalent to true, it is a command that is used when you want a command that is always successful. For example to mount an infinite loop:while true; do commando; done orwhile : ; do comando; done Previously, we only had the true Although both are subtly different. https://pubs.opengroup.org/onlinepubs/009696699/utilities/true.html :The true utility has been retained in this volume of IEEE Std 1003.1-2001, even though the shell special built-in : provides similar functionality, because true is widely used in historical scripts and is less cryptic to novice script readers.In practice, there is only one difference between : and true that I know: in a POSIX sh, for example in dash or bash --posix, they work differently with the allocation of variables:$ dash $ x=foo true $ echo "x es: $x" x es: Instead:$ dash $ x=foo : $ echo "x es: $x" x es: foo But in bashI think they are equivalent, though different (no one of the two is not an alias of the other).
Log implementation and subsequent logging
Software Programming • php algorithm • • carriann

2

0
Votes

2
Posts

0
Views

K

Simple implementation$message = array( 'id' => 15, 'date' => '01.07.2011', 'message' => 'raz raz raz' ) function placeMessage($logfile, $msg) { if (!$f = @fopen($logfile, 'a+')) return false; fwrite($f, $msg['date'].'#'.str_replace("\n", '##N##', serialize($msg))); fclose($f); return true; } function getMessage($logfile, $date) { $result = array(); if (!$f = @fopen($logfile, 'r+')) return $result; while ($str = @fgets($f)) { list($dateMsg, $msg) = explode('#', $str, 2); if ($date == $dateMsg) $result[] = unserialize(str_replace('##N##', "\n", $msg)); } fclose($f); return $result; } In fact, in your case, the OBD is more appropriate (if available).
C

Programme(s+++)
Software Programming • c++ • • chanisef

2

0
Votes

2
Posts

0
Views

A

Functions paste goes beyond the range. The size of the allocated buffer will be 1 less than required, as the postfix increment is used. Increments and decrements with other operations should not be prevented. Post-fixing options should not be used.++size; int *pr = new int[size]{};
Command logs executed via terminal
Software Programming • linux shell console terminal c languageents • • emmalee

2

0
Votes

2
Posts

0
Views

S

Use the HISTFILE variable, in it you tell him where he writes the history. So you'll know who did what and what session.export HISTFILE = "(/bin/date '+%H.%M.%S_%d-%m-%Y'. "whoami".log." readonly HISTFILE
Prevention of user's passwords being stored as plain text in bash history
Security, Penetration Testing • bash password management password c languagerac la • • Laycee

2

0
Votes

2
Posts

0
Views

R

You can't, and you shouldn't try for the following reasons: Imperfect technical ability (semantics) Imperfect technical ability (centralized logging) Alternate vectors (process table) Best practices (teach correctness) Imperfect technical ability (semantics) Let's assume you actually want to have a history file - it exists for a reason; helps you remember commands you typed, repeat commands by reference, etc. etc. In this case, you want to remove passwords that you've mistakenly entered. How do you do that? You could have a plaintext list of passwords that you scan for within bash history files.... but then you have a list of plaintext passwords on your system. You could look for commands like 'sudo' and 'su' and try to remove things after them... but the thing that's going to happen is someone will type 'sudp' by mistake, then type in their password to the prompt, and your filter won't notice it because of the very typo that led to the password exposure. In short, the computer isn't smart enough to filter out inappropriate password entries; that's a semantic meaning problem. Imperfect technical ability (centralized logging) In bash 4.1, they introduced the ability to copy everyone's history logs to syslog. This was a legitimized version of functionality that people had been hacking, patching, and scripting into bash (and other shells) for years. If anybody else administers your machine - say, the IT group at work - then you may not have control over whether your command lines are being logged, quietly, without you ever knowing. It's not just bash. The auditd daemon on Linux can be configured to log commands and arguments: # grep oops /var/log/audit/auditd.log type=EXECVE msg=audit(1443795447.953:2387443): argc=6 a0="sudo" a1="oops" a2="i" a3="typed" a4="my" a5="password" # That's a system-level setting, operating via the kernel, completely unrelated to whatever shell you use and regardless of any history settings you may have chosen for yourself. Alternate vectors (process table) Anything you type on the command line may show up in the process table, which is why tools that use passwords require them to be entered interactively. If you mess up (as in the sudo example above) and enter them as arguments, they're there for someone to grab out of the process list - and it's not that hard for someone to script a harvester that grabs command lines out of the process table. Best practices (teach correctness) Each of these objections has caveats... "If I don't want to keep using a history file", "If my sysadmin is hands-off", "If no one is watching the process table carefully".... But my definition of "best practices" is "stuff you do because you can't rely on other things going the way you'd like them to." So best practices is simply to assume that any password mistyped where it shouldn't have been is compromised, to change it immediately, and to move on with your life. Any "solution" you could implement is partial and prone to failures outside the user's detection sphere. I'd rather not give people the false impression they're safer than they are. I realize training people to do it is hard. Heck, training people to do anything is hard, and security is doubleplushard. But it's the right answer.
I want to use array variables in the shell script for statement.
Software Programming • bash sh shellsc languageript • • Analeea

2

0
Votes

2
Posts

0
Views

D

bash for statementinexecutes the description in order. That's whylThe elements that are put intoinThen you need to align in order.for l in "${list1[@]}" "${list2[@]}" do echo $l done
E

Safely decrypting an unsolicited/untrusted PGP message
Security, Penetration Testing • bash pgp gnupg terminal • • elysha

2

0
Votes

2
Posts

0
Views

R

##Dangers of printing untrusted text The encrypted message could contain any sort of untrusted/malformed data that could try to exploit my bash environment, my terminal emulator, etc. When outputting arbitrary text to a terminal, as GnuPG does by default, you are risking the exploitation of your terminal emulator. New vulnerabilities regarding handling of untrusted text being printed are found all the time, and while the most severe vulnerabilities have been weeded out, they are still an issue. One solution would be to pipe the untrusted output through a command that strips non-printing characters. You can use cat -v for this purpose. From section 3.1 of the coreutils GNU Info page: -v --show-nonprinting Display control characters except for LFD and TAB using ^ notation and precede characters that have the high bit set with M-. Printing untrusted text while stripping non-printing characters should prevent exploitation of your terminal emulator through mishandled control codes or any other typical avenue of attack. $ gpg -d untrusted.gpg | cat -v ##Dangerous of decrypting untrusted messages Any potential vulnerabilities in GnuPG or whatever PGP client I am using could also be exploited by the untrusted data. This is also a risk. GnuPG is incredibly complex, and any parsing of complex data can lead to exploitation. The only solution would be to run GnuPG airgapped, or in a tight sandbox or properly isolated virtual machine. GnuPG v2 has improved its architecture, allowing the decryption to occur in a process which has no access to your private key, but this is far from a complete sandbox. In general, you should always assume that a sufficiently competent attacker will be able to exploit GnuPG through way of providing you with a maliciously malformed encrypted message. A quick search turned up several bad vulnerabilities in GnuPG in the past 10 years: CVE-2008-1530 - Memory corruption via duplicate keys from keyservers allowing code execution. CVE-2010-2547 - Use-after-free vulnerability in certificate parsing allowing code execution. CVE-2013-4242 - Side-channel attack revealing private key information to local processes. CVE-2013-4576 - Side-channel attack allowing acoustic cryptanalysis during RSA decryption. CVE-2016-6313 - Broken RNG leaking 160 bits of random material, weakening certain key types. ##But what is the actual risk? Am I going too far with this risk or should I use an air-gapped single-use offline machine to decrypt each individual message, and securely erase it afterwards? What other security controls or practises can I put in place to help? An airgapped machine would do nicely, but may not always be an option. There is no need to securely erase the messages afterwards, as an unlinked (deleted) message poses no risk. The only reason to try to securely delete something is if you do not want it to be available through forensic analysis. Overall, the actual risk should be fairly low. Exploiting a popular program requires a certain level of expertise which is unlikely to be used to compromise you through your website unless you are high profile, or very unlucky. There are easier ways to be compromised through an exploit that via GnuPG messages (for example, hyperlinks to compromise your browser, images to compromise image parsers, etc). Even so, there are a few things you can do to reduce this risk with regards to GnuPG: Decrypt messages using an unprivileged, or better yet dedicated, user. Strip control codes from decrypted output. Never view raw output with vim, less, etc. Keep GnuPG up to date at all times so known vulnerabilities will be patched on your system. Use the virtual terminal and not a terminal emulator. Never use xterm or related forks. Use AppArmor or similar on GnuPG. Do not run it under a user with X11 access.
A

Get only the ID of a process
Software Programming • linux bash shell sc languageript proc languageess • • amarantha

2

0
Votes

2
Posts

0
Views

What you can do is look for the process with ps. Specifically, you can do ps aux | grep "tu proceso" and get the exact PID out.Instead of parsing the exit psYou can ask yourself directly by saying ps -eo pid And so it will give you exactly the PID, nothing more.
S

Command to open window
Software Programming • javascript • • shizuka

2

0
Votes

2
Posts

0
Views

B

window.location changes the current page URL.To open a new window you have to use window.open, but in your case it seems you want to change the URL of a frame father, then should use parent.location.href Examples of window.open, more specifications and examples https://www.w3schools.com/Jsref/met_win_open.asp :window.open("http://www.google.com.br"); window.open("http://www.google.com.br", "_blank"); Examples of parent.location.href:Archive test.html (frame/page father)<html> <head></head> <body> frame1<br/><br/> <iframe src="teste2.html" width="500px" height="300px"/> </body> </html> Archive test2.html (frame/page daughter that contains the script to change url)<html> <head> <script> function vai() { parent.location.href = "http://www.google.com.br"; } </script> </head> <body> frame2 <br/> <input type="button" value="me clique" onclick="vai()" /> </body> </html>
C

Team Analog which (linux) in cmd?
Software Programming • bash cmd • • courtlanda

2

0
Votes

2
Posts

0
Views

The Windows Server 2003 and above showed a programme where.exe♪ Doing exactly the same thing. which Linux. Doesn't work for shell type teams. cd♪ Use your information. where /?♪ https://stackoverflow.com/questions/304319/is-there-an-equivalent-of-which-on-the-windows-command-line
N

No log /var/log/mysql/log-slow-queries.log in Centos
Software Programming • mysql centos • • Nykeriab

2

0
Votes

2
Posts

0
Views

P

Oh, yeah. mysqladmin var | grep slow

How's gitlab ci log cover up commands?

Suggested Topics

Custom Commands Software Programming • python disc languageord.py • • Duquan

turn Y-m-d H-i-s into d-m-Y H-i-s Software Programming • php databank • • Trenton

Move a file using Shell in linux U get the path+filename from a found file Software Programming • bash shell shell sc languageript • • Cleofas

discord.ext.commands.errors.CommandInvokeError: Command raised an exception: ClientException: ffmpeg was not found Software Programming • python discord py • • jeanid

What does it mean ': PHP /archivoDebug.log' in bash? Software Programming • bash shell • • kalyn

Log implementation and subsequent logging Software Programming • php algorithm • • carriann

Programme(s+++) Software Programming • c++ • • chanisef

Command logs executed via terminal Software Programming • linux shell console terminal c languageents • • emmalee

Prevention of user's passwords being stored as plain text in bash history Security, Penetration Testing • bash password management password c languagerac la • • Laycee

I want to use array variables in the shell script for statement. Software Programming • bash sh shellsc languageript • • Analeea

Safely decrypting an unsolicited/untrusted PGP message Security, Penetration Testing • bash pgp gnupg terminal • • elysha

Get only the ID of a process Software Programming • linux bash shell sc languageript proc languageess • • amarantha

Command to open window Software Programming • javascript • • shizuka

Team Analog which (linux) in cmd? Software Programming • bash cmd • • courtlanda

No log /var/log/mysql/log-slow-queries.log in Centos Software Programming • mysql centos • • Nykeriab

Custom Commands
Software Programming • python disc languageord.py • • Duquan

turn Y-m-d H-i-s into d-m-Y H-i-s
Software Programming • php databank • • Trenton

Move a file using Shell in linux U get the path+filename from a found file
Software Programming • bash shell shell sc languageript • • Cleofas

discord.ext.commands.errors.CommandInvokeError: Command raised an exception: ClientException: ffmpeg was not found
Software Programming • python discord py • • jeanid

What does it mean ': PHP /archivoDebug.log' in bash?
Software Programming • bash shell • • kalyn

Log implementation and subsequent logging
Software Programming • php algorithm • • carriann

Programme(s+++)
Software Programming • c++ • • chanisef

Command logs executed via terminal
Software Programming • linux shell console terminal c languageents • • emmalee

Prevention of user's passwords being stored as plain text in bash history
Security, Penetration Testing • bash password management password c languagerac la • • Laycee

I want to use array variables in the shell script for statement.
Software Programming • bash sh shellsc languageript • • Analeea

Safely decrypting an unsolicited/untrusted PGP message
Security, Penetration Testing • bash pgp gnupg terminal • • elysha

Get only the ID of a process
Software Programming • linux bash shell sc languageript proc languageess • • amarantha

Command to open window
Software Programming • javascript • • shizuka

Team Analog which (linux) in cmd?
Software Programming • bash cmd • • courtlanda

No log /var/log/mysql/log-slow-queries.log in Centos
Software Programming • mysql centos • • Nykeriab