Atadzhan Dzhan85

Simple WireGuard configuration

1 server, 2 clients

Getting started

Install Wireguard on all machines.

Generate all keys

1. Configure server: Nginx

Create the certificate:

$ sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/nginx-selfsigned.crt

Create a strong Diffie-Hellman group:

$ sudo openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048

How to Build a Cuckoo Sandbox Malware Analysis System

I had a heck of a time getting a Cuckoo sandbox running, and below I hope to help you get one up and running relatively quickly by detailing out the steps and gotchas I stumbled across along the way. I mention this in the references at the end of this gist, but what you see here is heavily influenced by this article from Nviso

Build your Linux Cuckoo VM

Setup a Ubuntu 16.04 64-bit desktop VM (download here) in VMWare with the following properties:

100GB hard drive
2 procs
8 gigs of RAM

Master: Dependencies

DISABLE SWAP: This is how to disable the swap file in Ubuntu 17.04

To turn off the swapfile. Run the following command:

sudo swapoff /swapfile

Now disable the swap file in /etc/fstab. I'm using Vim.

What is kubernetes ?

kubernetes is an open source orchestration tool for Docker containers( kubernetes supports also rkt as a replacement for docker).
It automates the deployment + scaling + management of Docker containers across clusters of physical or virtual machines .

How it's related to Docker (or Rkt)?

Docker manage the life cycle of a container (run,stop,start etc... a container), kubernetes (specifically kubelet) instructs or delegate Docker to do this task on a specific machine.

What is a cluster in kubernetes ?

it's the physical machines or the virtual ones that the kubernetes platform is deployed on, mainly it's composed from a master machine and nodes.

What are the componments of kubernetes?

Master components:
etcd

Двойной VPN на основе OpenVPN

Сначало настроим второй сервер:

Шаг 1. Установка OpenVPN

sudo apt update
sudo apt install openvpn easy-rsa

Fluent-bit rocks

A short survey of log collection options and why you picked the wrong one. 😜

Who am I? Where am I from?

I'm Steve Coffman and I work at Ithaka. We do JStor (academic journals) and other stuff. How big is it?

Number	what it means
101,332,633	unique visitors in 2017

kubeadm cloudinit

Setup a single node Kubernetes cluster for development using kubeadm: https://kubernetes.io/docs/setup/independent/install-kubeadm/

Create a CentOS 7 or Ubuntu Xenial (16.04) machine, and run kubeadm.sh as root.

You can pass this script as user-data to cloud-init so that it will be automatically run. For example, on openstack:

openstack server create NAME --flavor FLAVOR --key-name KEY --image 'Ubuntu Xenial' --network NET --security-group SECGROUP --user-data kubeadm.sh

	#!/bin/bash
	DOCKER_COMPOSE_FILES='docker-compose1.yml,docker-compose2.yml'
	DOCKER_COMPOSE_UP_MODE=1 #1\|0
	DOCKER_COMPOSE_UP_LOG_FILE='/tmp/log.txt'
	DOCKER_COMPOSE_BUILD_OPTIONS="" #any options for `docker-compose build`
	DOCKER_COMPOSE_UP_OPTIONS="" #any options for `docker-compose up`
	DOCKER_COMPOSE_RUN_OPTIONS="" #any options for `docker-compose run`
	TEST_CONTAINERS="application1=/test.sh,application2=/test2.sh"

	##### get port remover #####