szpeter80

An opinionated collection of notable OpenShift changes

OpenShift 4.17

Sources:

• https://www.youtube.com/watch?v=DvKHwz-c11c
• https://www.armosec.io/blog/kubernetes-1-30-security/

szpeter80

Generate KEY for cert

openssl genrsa -out server.key 2048

Generate CSR with SAN

openssl req -new -key server.key -out server.csr \
    -subj "/C=US/ST=Krakosia/L=City/O=ACME corp/CN=*.apps.kube.example.com" \
    -addext "subjectAltName=DNS:*.apps.kube.example.com,IP:192.168.1.1"

szpeter80

Original sources:
https://www.it-hure.de/2024/02/podman-compose-and-systemd/
https://www.christiansaga.de/howto/2024/04/17/switching-from-docker-to-podman.html
https://github.com/containers/podman/blob/main/docs/tutorials/rootless_tutorial.md

By default, non-root rules are very strict. You can relax some with sysctl's:

# vi /etc/sysctl.d/podman-settings.conf
net.ipv4.ip_unprivileged_port_start=0

szpeter80

AUTHOR = 'Szabo Peter'
SITENAME = 'RetroSynthvawe'
SITEURL = ''

PATH = 'content'

TIMEZONE = 'Europe/Budapest'

DEFAULT_LANG = 'en'