ukitazume

set -g default-terminal "screen-256color"
set-option -g default-shell /bin/zsh

# act like vim
setw -g mode-keys vi
set -g base-index 1
set -g history-limit 10000
bind-key C-a last-pane
bind h select-pane -L
bind j select-pane -D

ukitazume

Privleged container

A privileged container is a container that has all the capabilities of the host machine, which lifts all the limitations regular containers have. Practically, this means that privileged containers can do almost every action that can be performed directly on the host. Attackers who gain access to a privileged container, or have permissions to create a new privileged container (by using the compromised pod’s service account, for example), can get access to the host’s resources.

cf attack matrics kubernetes by MS

Steps:

ukitazume

"Learn Kubernetes Security" の勉強会資料

Chapter 5 Configuring Kubernetes Security Boundaries

今日の範囲

• Security domainとSecurity boundaryの理解
• Security boundaryとTrust boundaryの区別とその重要性の理解
• KubernetesのSecurity domain
• KubernetesのSecurity boundary

ukitazume

<?xml version="1.0" encoding="UTF-8"?>
<project>
  <modelVersion>4.0.0</modelVersion>

  <groupId>com.mycompany.app</groupId>
  <artifactId>my-app</artifactId>
  <version>1</version>
  <dependencies>
    <dependency>
      <groupId>com.fasterxml.jackson.core</groupId>

ukitazume

WordPress

0. Prepare

• Dockerhub or Quay.io account
• Docker runtime at your local machine
• your Deis

1. Pulling the docker official image of wordpress and run on a local machine

ukitazume

run "ln -nfs #{config.shared_path}/app/wp/wp-content/ #{config.release_path}/wp-content"

ukitazume

10040  git clone git@github.com:engineyard/ey-cloud-recipes.git
10042  cd ey-cloud-recipes/
10044  cd cookbooks/
10047  vim main/recipes/default.rb
/// include_recipe "timezone"
10049  vim timezone/recipes/default.rb
/// UTC => Asia/Tokyo

ukitazume

// $nohup node owner_change_watcher.js &
// set file target log
const filePath = 'log/production.log';

const fs = require('fs');
const process = require('child_process');

fs.watchFile(filePath, function(cur, pre){
  for (var key in cur) {
    if (cur[key] !== pre[key]) {

ukitazume

☺  git status                                                                                                               ruby-2.0.0-p247
# On branch master
# Changes not staged for commit:
#   (use "git add <file>..." to update what will be committed)
#   (use "git checkout -- <file>..." to discard changes in working directory)
#
#       modified:   cookbooks/main/recipes/default.rb
#       modified:   cookbooks/timezone/recipes/default.rb
#
# Untracked files:

ukitazume

This is an example command for Backtick. A Backtick command consists of some executable JavaScript and a bit of metadata in JSON.

Here are the required steps to create a command:

1. Create a new Gist with a command.js and command.json file, or simply fork this one.

2. Write your JavaScript in command.js. This will be injected into and executed on the page the user is currently on when they run it.

3. Add some metadata to the command.json file:

• name: The name of the command.