security - Karma Computing

Karma Computing

Sign in Subscribe

security

A collection of 13 posts

Windows containers how to...not?

Windows containers how to...not?

Things to know about Windows Containers This started as an initial research into Windows Containers. My initial impression was not fantastic, left wanting. * "Windows requires the host OS version to match the container OS version" (src) * This is in stark constrast compared to Linux containers, where you can trivially, swap

Email Hosting Alternative to 123 Reg in the UK

Email Hosting Alternative to 123 Reg in the UK

We were surprised to learn about 123 Reg closing down its Email Hosting Generation 1 Mailboxs. But this might be the big break you needed to take a look at other regional services that cater to your email needs. We’ve got just the thing for you. Karma Computing Email

How to write a secure container

How to write a secure container

So, how do you write a secure container? Rule 1: Know where your data is coming from Common things to avoid: * Pulling images from public registries * Know your dependencies Solution: Maintain your own copy of dependencies, and keep up to date when new patches are released to adress security issues

Shrink existing partition mdraid linux ext4 using resize2fs

Shrink existing partition mdraid linux ext4 using resize2fs

How do I know what filesystem type it is? df -T How do I view the current disk(s) layout? lsblk -f 1. unmount the drive's partition you want to shrink umount /dev/md3 If you see umount: : target is busy. then you may need to cd out of the

Saas based architectures

Saas based architectures

Deploy Sass customers independently each within their own version of the application or as one, application containing all tenants? The trade-offs when building software as a service (saas) based architectures, especially within the context of open source software. There's a lot of resources out there about building scalable architectures. Horizontal

Kubernetes SSL Certificates- How to Set-up a Cluster With SSL Termination

Kubernetes SSL Certificates- How to Set-up a Cluster With SSL Termination

Using Cert Manager on a Kubernetes cluster to do SSL termination. By the end of this guide you will be able to: * Route SSL traffic from a domain your own (example.com) to a kubernetes cluster * Understand how to add additional domains to your cluster * Certificate renewal is automatic, handled

How to audit slack permissions

How to audit slack permissions

Slacks permission system is based around scopes, read about Slack Scopes and Permissions [https://api.slack.com/scopes] Can public users view my workspace email accounts? The permission to "View your workspace members' email addresses" is users:read.email: https://api.slack.com/scopes/users:read.email How to check

Building Non Root Docker Images OpenShift

Building Non Root Docker Images OpenShift

* Bummer: You can rarely use an existing Dockerhub image and run it on OpenShift out the box. * Although with good intentions, this is a massive blow to developer experience coming from standard Kubernetes which is probably hindering adoption of OpenShift in the wider community * Openshift ignores the USER directive of

CRM Options For Small Business

CRM Options For Small Business

The moment you start reaching for a CRM, what's behind that (naturally) is a need for your small business to become more organised. Critical questions against your business goals are important for this, you might not need (or desire) a fancy CRM to start with. (That's great!) Here are some

How to set-up .app domains with ssl and apache

How to set-up .app domains with ssl and apache

Get a new shiny .app domain name Google sells .app domains, and many other registrars. The key thing with .app domains is they must be served over https for browsers to load it. This means you must set-up an ssl certificate. Add an A record pointing to your web server

How to create MongoDB Replica Set with Authentication Ubuntu 16.04

How to create MongoDB Replica Set with Authentication Ubuntu 16.04

How to make a MongoDB replica set A three member mongodb replica set on three separate hosts with authentication. Also see official docs. In this tutorial we're putting MongoDB on three different hosts. We generate and use keyfile. The keyfile gets used as part of a Salted Challenge Response Authentication

Installing Mongodb Ubuntu 16.04

Installing Mongodb Ubuntu 16.04

See Official MongoDB install docs for all platforms. See getting started with MongoDB for an overview of what MongoDB is. 1. Import Key sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 2930ADAE8CAF5059EE73BB4B58712A2291FA4AD5 2. Create List file echo "deb [ arch=amd64,arm64 ] https://repo.mongodb.org/apt/ubuntu xenial/

Why you should base your backup strategy on standards not startups

Why you should base your backup strategy on standards not startups

Today, Dropbox updated their blog post announcing end of support for part of their service which backup services use for their back-up solutions. Dropbox Blog: From September 28th, 2017: API v1 endpoints are no longer accessible. Also recently, Crashplan, a popular backup solution for Mac users decided to discontinue offering

Collect recurring payments with Subscribie