einyx

Authorized uses only. All activity may be monitored and reported.
#############################################################################
##                                                                         ##
## This computer system is for authorized use only.                        ##
##                                                                         ##
## Users (authorized or unauthorized) have no explicit or                  ##
## implicit expectation of privacy. Any or all use of this system          ##
## and all files on this system may be intercepted, monitored,             ##
## recorded, copied, audited, inspected and disclosed to authorized        ##
## IT personnel, law enforcement as well as officials of other             ##

einyx

for i in /proc/sys/net/ipv4/conf/*/rp_filter; do                                                                                                                                       


echo 1 > "$i"; done && echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter

einyx

EROR[10-25|09:56:04] Failed to insert OVAL                    err="Failed to insert. cve: &models.Root{\n  ID:          0x8,\n  Family:      \"ubuntu\",\n  OSVersion:   \"18\",\n  Definitions: []models.Definition{...},\n  Timestamp:   2019-10-25 09:56:03 UTC,\n}, err: Error 1292: Incorrect datetime value: '0000-00-00' for column 'issued' at row 1"



mysql> mysql -e "SELECT @@sql_mode;"
    -> ^C
mysql> SELECT @@GLOBAL.sql_mode;
+-----------------------------------------------------------------------------------------------------------------------+
| @@GLOBAL.sql_mode                                                                                                     |
+-----------------------------------------------------------------------------------------------------------------------+

einyx

apk fetch hangs
https://github.com/gliderlabs/docker-alpine/issues/307  


nano /etc/docker/daemon.json

{
  "mtu": 1450
}

einyx

ssh-rsa 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 alessio@me

einyx

goaccess access.log --log-format='%h %^[%d:%t %^] "%r" %s %b "%R" "%u" %^ %D' --date-format=%d/%b/%Y --time-format=%T

einyx

10143  helm upgrade --install --wait k8s-heapster stable/heapster --set=command='{/heapster,--source=kubernetes:https://kubernetes.default?kubeletHttps=true&kubeletPort=10250&insecure=true}' --namespace kube-system\n

einyx

kubectl create serviceaccount --namespace kube-system tiller                                                                                ✔  10145  10:09:08
kubectl create clusterrolebinding tiller-cluster-rule --clusterrole=cluster-admin --serviceaccount=kube-system:tiller
kubectl patch deploy --namespace kube-system tiller-deploy -p '{"spec":{"template":{"spec":{"serviceAccount":"tiller"}}}}'

einyx

Generate certs
Sample cert json data provided in the docs directory.

Create the Certificate Authority Cert and Key
cfssl gencert -initca ca.json | cfssljson -bare ca
Create Server pair
cfssl gencert -ca=ca.pem -ca-key=ca-key.pem server.json | cfssljson -bare server
Create Agent pair
cfssl gencert -ca=ca.pem -ca-key=ca-key.pem agent.json | cfssljson -bare agent
Store in Kubernetes

einyx

{
    "hosts": [
        "kiam-server",
        "localhost",
        "kiam-server:443",
        "127.0.0.1",
        "::1"
    ],
    "key": {
        "algo": "rsa",