ageis

security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict

AV4TAr

This was moved to https://github.com/AV4TAr/reading/blob/master/README.md

imbriaco

Cog on Kubernetes

This experiment was originally built on Google Cloud's Kubernetes and makes use of gcePersistentDisk. If you are not using Google Cloud, you'll need to adjust the gcePersistentDisk volumes to use the persistent disk technology available in your cluster.

At a high level the steps look something like this, though there may be subtle errors. This experiment happened a few weeks ago and I'm creating these from memory along with the test descriptors I used.

1. Setup Kubernetes and create the necessary persistent disks that are referenced in the deployment.

Tombar

# -*- mode: ruby -*-
# vi: set ft=ruby :

node_defaults = {
  :domain => 'dev',
  :memory => 384,
}

single = {:ip => '172.16.11.30', :memory => 1024, :cpus => 2}

Tombar

# -*- mode: ruby -*-
# vi: set ft=ruby :

puppetmaster = {:node_name => 'pm', :ip => '172.16.0.250', :memory => 1024, :cpus => 2}

nodes = {
  'node10' => {:ip => '172.16.11.10'},
  'node11' => {:ip => '172.16.11.11'},
  'node12' => {:ip => '172.16.11.12', :memory => 1024, :cpus => 2},
}

regit

{
  "title": "SSH analysis",
  "services": {
    "query": {
      "list": {
        "0": {
          "query": "message:\"Invalid user\" AND sshd",
          "alias": "Failed login",
          "color": "#BF1B00",
          "id": 0,

okunishinishi

#Delete local tags.
git tag -l | xargs git tag -d
#Fetch remote tags.
git fetch
#Delete remote tags.
git tag -l | xargs -n 1 git push --delete origin
#Delete local tasg.
git tag -l | xargs git tag -d

guenter

import mesosphere.mesos.util.FrameworkInfo
import org.apache.mesos.MesosSchedulerDriver


/**
 * @author Tobi Knaup
 */

object Main extends App {

tnolet

NB: The following examples where done on Puppet Enterprise 3.0 running on Centos 6. Should be similar for open source versions, except for some file locations.

1. Logging into the PuppetDB PostgresQL database on Linux

The easiest way to snoop around in de actual PuppetDB postgres database is using the command prompt. You have to be the peadmin user though. Couldn't get it working just under root.

[root@master bin]# sudo su - pe-postgres -s /bin/bash
-bash-4.1$ /opt/puppet/bin/psql
psql (9.2.4)

Type "help" for help.

shlomibabluki

# coding=UTF-8
from __future__ import division
import nltk
from collections import Counter

# This is a simple tool for adding automatic hashtags into an article title
# Created by Shlomi Babluki
# Sep, 2013