Skip to content

Instantly share code, notes, and snippets.

View kevherro's full-sized avatar

Kevin Herro kevherro

22 followers · 64 following
  • Los Angeles, CA
View GitHub Profile
@kevherro
kevherro / cve.md
Last active April 26, 2018 17:41
How to track down and patch Common Vulnerabilities and Exposures (CVEs) in Docker images used by Replicated

Background

Common Vulnerabilities and Exposures (CVEs) are known security vulnerabilities that exist in commom packages/os' used by our Docker images

When a CVE is introduced, we need to fix the respective Dockerfile so that it uses the most up-to-date version of the package/os that contains the CVE

CVEs are constantly discovered. This means that patching CVEs in our Dockerfiles is something we will do often

Fortunately, the solution may be as simple as re-building the respective Dockerfile

@kevherro
kevherro / loadavg.md
Last active April 13, 2018 21:40
/proc/loadavg

Background

proc - a process information pseudo-file system which is used as an interface to kernel data structures

loadavg describes CPU load

Command and Sample Output

> cat /proc/loadavg
0.01 0.06 0.11 2/442 4114