blisabda

%title: Kubeception %author: @dghubble

// Youtube: https://www.youtube.com/watch?v=tlUiQa2JYQU

-> Kubeception

-> Experiments with QEMU/KVM on Kubernetes <-

Open a webpage that uses the CA with Firefox
Click the lock-icon in the addressbar -> show information -> show certificate
the certificate viewer will open
click details and choose the certificate of the certificate-chain, you want to import to CentOS
click "Export..." and save it as .crt file
Copy the .crt file to /etc/pki/ca-trust/source/anchors on your CentOS machine
run update-ca-trust extract
test it with wget https://thewebsite.org

Uber facts

Original posts/information

Migrating Uber from MySQL to PostgreSQL

Key points

~50GB MySQL Application
Main motivation: PostGis
Migration made with a custom tool(xml2pgcopy) and mysqldump on 45min

Libvirt

yum group install -y "Development Tools"
yum -y install qemu-kvm libvirt virt-install bridge-utils libvirt-devel  libxslt-devel libxml2-devel libvirt-devel libguestfs-tools-c

echo "net.ipv4.ip_forward = 1"|sudo tee /etc/sysctl.d/99-ipforward.conf
sysctl -p /etc/sysctl.d/99-ipforward.conf

Linux NetFilter, IP Tables and Conntrack Diagrams

IPTABLES TABLES and CHAINS

IPTables has the following 4 built-in tables.

1) Filter Table

Filter is default table for iptables. So, if you don’t define you own table, you’ll be using filter table. Iptables’s filter table has the following built-in chains.

Install Vagrant

sudo su
apt-get update && apt-get install -y libvirt-dev ruby-all-dev apparmor-utils
curl -O -L https://dl.bintray.com/mitchellh/vagrant/vagrant_1.6.5_x86_64.deb
dpkg -i vagrant_1.6.5_x86_64.deb 
aa-complain /usr/lib/libvirt/virt-aa-helper # workaround
exit

	Edit '/etc/sysconfig/jenkins' and add 'prefix=/jenkins' to 'JENKINS_ARGS'
	**************************************************************************
	JENKINS_ARGS="--prefix=/jenkins"


	Comment out the default server config in '/etc/nginx/nginx.conf'
	and create following file

	'/etc/nginx/conf.d/domain.conf'
	*************************************************

	#include <netinet/in.h>
	#include <string.h>
	#include <sys/socket.h>
	#include <sys/kern_control.h>
	#include <net/if_utun.h>
	#include <sys/ioctl.h>
	#include <sys/kern_event.h>

	int open_utun(int num) {
	int err;

	# npm using https for git
	git config --global url."https://github.com/".insteadOf [email protected]:
	git config --global url."https://".insteadOf git://

	# npm using git for https
	git config --global url."[email protected]:".insteadOf https://github.com/
	git config --global url."git://".insteadOf https://

	""" Simple IPC benchmark test

	Test throughput of 512 KB messages sent between two python processes using:

	- multiprocessing pipe
	- zeroMQ PUSH/PULL
	- zeroMQ DEALER/DEALER

	Result: