The Debugging Dilemma in Distroless Images In a mature DevOps environment, we strive for minimal container images. “Distroless” images, which contain only your application and its immediate depend...
The Security Administrator’s Enigma: SELinux For many Linux administrators, Security-Enhanced Linux (SELinux) is the first thing disabled after a fresh installation. This is a significant mistake....
The Threat: Automated Opportunistic Attacks If you check your firewall logs, you’ll see thousands of attempts to hit SSH, RDP, or common web vulnerabilities (like /wp-admin) every hour. These aren...
Intro Install docker We will be running the Nginx Proxy Manager in docker stack. Hence, we will be needing a working docker installation. You can follow another one of my posts on Docker - Instal...
The Problem: The 2000-Line docker-compose.yml As your infrastructure grows, your docker-compose.yml becomes a nightmare to maintain. You have 20 services, and they all share the same logging confi...
The Problem: The 100MB/s Ceiling You have a high-speed 10Gbps network and a fast SSD-backed storage server. Yet, when mounting via NFS, your rsync or database backups are capped at around 110-120M...
Intro Obtain keystore file In order to host a Demo CAS server, first of all we will need to generate a trusted authority signed certificate which can be obtained by following my pervious post on ...
Intro Install certbot as mentioned in my previous post on Linux - Install Certbot. By default, certbot retrieves a certificate and installs it immediately on the web server by adding an extra par...
The Problem: Dashboard Sprawl You have 10 different clusters, each with 50 nodes. If you create a static dashboard for every host, you end up with 500 dashboards. When you want to add a new “Disk ...
The Problem: The Zombie Quota You’ve added usrquota,grpquota to your /etc/fstab. You’ve remounted the filesystem. But when you run quotacheck -avug, you get: quotacheck: Cannot find filesystem to ...