OpenSSL vulnerability don’t forget your containers

Building my own mechanical numpds

kscb is a sidecar container, that is based upon rclone with a crontab. The sidecar container in the pod has access to the PV mount and the data on it, Rclone can then easily copy/sync to a public/private storage provider

Kubernetes is deprecating Docker as a container runtime after v1.20. Don’t Panic 😱 Docker containers are still supported, but the dockershim/Docker, the layer between Kubernetes and containerd is deprecated and will be removed from version 1.22+. https://kubernetes.io/blog/2020/12/02/dont-panic-kubernetes-and-docker/" So if you are running docker you need to change to a supported container runtime interface (CRI). containerd is a good choice, it is already running on your Kubernetes node if you are running Docker....

Running a webserver in Kubernetes is easy, but a mailserver is more challenging. Most of the challenging things has todo with your ip infrastructure, ingress and loadbalancer within Kubernetes. Here are things I learned when I was deploying a mailserver based on Postfix on Kubernetes with metallb and nginx ingress. If you have a different setup, things could apply or not. Prevent mail loops on your secondary MX Your postfix MX pod is running maybe on a private ip RFC1918, this is fine....

This is a simple minimal but highly configurable Varnish caching service for Kubernetes. This should be placed between your ingress and your application service. simple setup It can be used in combination with multiple ingresses and application services at the same time. multiple ingress and services Setup Apply the following yaml file, replicas and environment variables can be adjusted to your need....

To get metrics from your FortiGate in Grafana using Telegraf and InfluxDB. Enable SNMP on your FortiGate Put the following telegraf config in your /etc/telegraf/telegraf.d directory Edit the the agent IP and community string as appropriate # # Retrieves SNMP values from remote agents [[inputs.snmp]] agents = [ "192.168.1.1:161" ] timeout = "10s" retries = 3 version = 2 community = "monitoring" # ## SNMPv3 auth parameters sec_name = "sec_name" auth_protocol = "SHA" # Values: "MD5", "SHA", "" auth_password = "auth_pass" sec_level = "authPriv" # Values: "noAuthNoPriv", "authNoPriv", "authPriv" # #context_name = "" priv_protocol = "AES" # Values: "DES", "AES", "" priv_password = "priv_pass" name = "FortiGate" [[inputs....

Today I passed the Red Hat RHCSA exam with the maximum 300/300 100% score! 😁 I had a good feeling during the exam, and after about an hour I got the following email from Red Hat. The results of your recent EX200 Red Hat Certified System Administrator Exam are reported below. Passing score: 210 Your score: 300 Result: PASS Congratulations -- you have earned the Red Hat Certified System Administrator certification....

I am a big fan of LXD and lot of my ‘home infra’ and VPS’s are all running LXD container. Also I am using LXD at work to create test setup for al sorts of Linux OS’s and applications. Most “free” Linux OS’s are already in the LXD image repository. But sometime’s I need a non free Linux OS. Such as SUSE Linux Enterprise Server, or SLES for short. Off-course I can run this in a VPS just by installing it from an ISO....