Software Projects

Open Source

I have developed and maintain a few personal projects, including:

• chkok: a monitoring tool for checking attributes of files and sockets
• mute: run other programs while muting the output under configured conditions
• navdoon: simple yet powerful statsd server
• miniauth: small, extensible local user authentication command line tool
• statsd-metrics: statsd metrics Python data models and statsd client library
• fishion: sessions for fish shell

I am a contributor/have contributed to a few projects, including:

• elasticmetrics: ElasticSearch metrics collector Python library and command line tool
• searchguard-python: Python client library for the Search Guard REST API
• python-jalali: Jalali calendar Python library
• testinfra: infrastructure testing framework

Package Verification

I use my PGP key to sign checksums of software packages.

To verify a downloaded software package, you can:

1. download the packages, the checksum file and the detached signature of the checksum file, to the same directory
2. verify if the checksum file is signed by my key

$ gpg --verify DETACHED_SIGNED_FILE CHECKSUM_FILE

# or if the signature is not detached
# gpg --verify CHECKSUM_FILE

# confirm the checksum file is signed by my key

3. check if the checksum of downloaded files matches the expected value in the checksum file

$ sha256 --check CHECKSUM_FILE