mdaguete

Automatic Signing of DKMS-Generated Kernel Modules for Secure Boot (Nvidia Driver on CentOS 8 as Example)

First I thank Nvidia for sponsoring the video card.

Secure Boot isn't exactly easy to configure to work with Linux and disabling it isn't really a good idea. Many modern Linux distributions provide the Microsoft-signed shim EFI binary to interpose between Secure Boot and the grub2 bootloader, making booting Linux easy enough if you only ever use kernels and drivers from the official repos. Still, enabling Secure Boot prevents the loading of kernel or modules without a proper digital signature. For example, the propriatary Nvidia GPU driver won't work, unless your distro really went to great lengths to distribute a signed version of the kernel module.

To make Secure Boot play nicely with the driver (i.e. to work at all), we can generate and import a Machine Owner Key (MOK)

mdaguete

#!/bin/bash

set -e

resourceGroupDefault='<set your default here, to avoid having to specify in the common case>'
resourceGroup=${RESOURCE_GROUP:-$resourceGroupDefault}
clusterNameDefault='<set your default here>'
clusterName=${CLUSTER_NAME:-$clusterNameDefault}
regionDefault='<set your default here>'
region=${REGION:-$regionDefault}

mdaguete

Supported escape sequences:
  ~.  - terminate connection (and any multiplexed sessions)
  ~B  - send a BREAK to the remote system
  ~C  - open a command line
  ~R  - Request rekey (SSH protocol 2 only)
  ~^Z - suspend ssh
  ~#  - list forwarded connections
  ~&  - background ssh (when waiting for connections to terminate)
  ~?  - this message
  ~~  - send the escape character by typing it twice

mdaguete

#!/usr/bin/python
import os, sys, gzip
from StringIO import StringIO
from datetime import datetime

def readByte(f):
	return ord(f.read(1))

def readInt(f):
	l = 0

mdaguete

MicroService Proxy Gateway Solutions

Kong, Traefik, Caddy, Linkerd, Fabio, Vulcand, and Netflix Zuul seem to the most common in microservice proxy/gateway solutions. Kubernetes Ingress is often a simple Ngnix, which is difficult to seperate the popularity from other things.

Github Star Trend:

This is just a picture of this link from July 13, 2017

Service Mesh vs Reverse Proxy

mdaguete

• Setup DNS to resolv app.yourdomain.com
• Setup hostname and domain on all machines

hostnamectl set-hostname oc.boube.es  --static

Master

• Update & install dockers and ansible

mdaguete

This Gist confirms the Linked Identity in my OpenPGP key, and links it to this GitHub account.

Token for proof:
[Verifying my OpenPGP key: openpgp4fpr:d24ccc90aa7ab1baed65e64a60c6c3bedabbb89d]

mdaguete

This Gist confirms the Linked Identity in my OpenPGP key, and links it to this GitHub account.

Token for proof:
[Verifying my OpenPGP key: openpgp4fpr:d24ccc90aa7ab1baed65e64a60c6c3bedabbb89d]

mdaguete

This Gist confirms the Linked Identity in my OpenPGP key, and links it to this GitHub account.

Token for proof:
[Verifying my OpenPGP key: openpgp4fpr:d24ccc90aa7ab1baed65e64a60c6c3bedabbb89d]

mdaguete

package main

import (
	"fmt"
	"reflect"
	"net/url"
)

type ExampleType struct {
	Name    string `url:"name"`