PhilipSchmid

How to get started with nodeJS

• How to get started with nodeJS
  • Context
  • Requirements
  • Start the first project
    • Node modules
      • Adding modules
• Hello World

PhilipSchmid

How to switch from RHN to Red Hat subscription-manager

RHEL 6 Server

1. Check if subscription-manager is installed. If not, install it via yum install subscription-manager.

2. Delete host on the RHN site.

3. "Unregister" host from RHN:

rm -rf /etc/sysconfig/rhn/systemid

PhilipSchmid

version: "3.7"

services:
  backend:
    image: registry.example.com/my-example-docker-image:stable
    restart: always
    hostname: my-example-service.example.com
    environment:
      TZ: Europe/Zurich
    env_file:

PhilipSchmid

How To Install A NFS Server

Based on CentOS 7.

Prerequisites

Disk

pvcreate /dev/sdb
vgcreate vg1-nfs /dev/sdb
lvcreate -l 100%FREE -n nfs vg1-nfs

PhilipSchmid

feature netflow

flow exporter elastic-exp
  description elasticsearch exporter
  destination 10.10.10.10 use-vrf XY
  transport udp 9995
  source Vlan123
  dscp 0
  version 9

PhilipSchmid

Add CA certificates to the Firefox Truststore (via CLI)

Use the following commands to add CA certificates to the Firefox truststore via command line. Ensure Firefox is closed while running these commands! certutil comes with the installation of libnss3-tools.

certificateFileRoot="root.crt"
certificateNameRoot="Root CA"
certificateFileInter="intermediate.crt"
certificateNameInter="Intermediate CA"
# We use cert9.db and "sql:..." since cert8.db is in the legacy format
for certDB in $(find ~/.mozilla* -name "cert9.db")

PhilipSchmid

Add Firefox Security Device (via CLI)

Use the following commands to add a security device module to Firefox. Ensure Firefox is closed while running these commands! modutil comes with the installation of libnss3-tools.

securityModuleDeviceName="My Awesome Module"
securityModulePath="/usr/lib/libBlaBla.so"
# We use cert9.db and "sql:..." since cert8.db is in the legacy format
for devicedDB in $(find  ~/.mozilla* -name "cert9.db")
do
 certDir=$(dirname ${devicedDB});

PhilipSchmid

Let's Encrypt Traefik Docker Compose Example

version: "3.7"

services:
  lb:
    image: index.docker.io/traefik:v1.7.14-alpine
    hostname: traefik-webserver.example.com
    restart: unless-stopped

PhilipSchmid

Linux NIC to namespace (persisted via systemd service)

Save the file nic-isolation.service to /etc/systemd/system/nic-isolation.service.

Afterwards reload the systemd daemon and enable & start the "service":

sudo systemctl daemon-reload
sudo systemctl enable nic-isolation.service
sudo systemctl start nic-isolation.service

PhilipSchmid

---
# https://kubernetes.io/docs/concepts/policy/pod-security-policy/
# Attention: This PSP has quite some loose restrictions! Do not just copy & paste it!
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
  name: example
spec:
  allowPrivilegeEscalation: true
  allowedCapabilities: