A vulnerability (CVE-2020-14367) has been identified in chrony, the NTP protocol implementation used for synchronizing accurate time across various Linux distributions, which allows overwriting any file in the system with access to the local unprivileged chrony user. The vulnerability can only be exploited through the chrony user, which reduces its danger. However, the issue compromises the isolation level in chrony and can be utilized in […]
This post will describe the setup of information panel visualization for ELK and SIEM in ELK. The article is divided into the following sections: 1- Overview of ELK SIEM 2- Default dashboards 3- Creating your first dashboards. Table of contents for all posts. Introduction. Deployment of infrastructure and technologies for SOC as a Service (SOCasS) ELK stack — installation and configuration. A walk through open Distro […]
Note: In early August, Red Hat publicly addressed the availability issues that users of its Quay.io service experienced in the preceding months (the service is based on a container image registry that came to the company with the acquisition of CoreOS). Regardless of your interest in this service per se, the journey taken by the company's SRE engineers is informative […]
QNAP Systems has announced the QXP-10G2U3A expansion card designed for use in personal computers, workstations, and network-attached storage (NAS). The new card allows the system to be equipped with two USB 3.2 Gen2 Type-A ports. This interface provides a bandwidth of up to 10 Gbps. The card is based on the ASMedia ASM3142 controller. A PCIe Gen2 x2 slot is required for installation. It is said to be compatible with […]
All Linux distributions come with a functional and customizable terminal emulator. There are plenty of ready-made themes on the internet, and sometimes even within the terminal itself, to make it look appealing. However, to transform the standard terminal (in any DE, of any distribution) into something beautiful yet convenient and easy to use, I spent a lot of time. So, how can we make the default […]
Hello everyone in this blog! This is the third post in a series where we demonstrate how to deploy modern web applications on Red Hat OpenShift. In the previous two posts, we discussed how to deploy modern web applications in just a few steps and how to use the new S2I image along with a ready-made HTTP server image, such as NGINX, with the help of chained builds […]
Developing a data warehouse is a long and serious task. Much in the life of a project depends on how well thought out the object model and database structure are from the start. The common approach has been and remains a combination of the 'star' schema with the third normal form. Generally, the principle is: source data — 3NF, data marts — star. This approach, tried and tested over time, is backed by […]
Hello everyone. This spring, I came across a project where the guys learned to run a 2014 version Dota 2 server and, accordingly, play on it. I am a big fan of this game and couldn't pass up the unique opportunity to dive into my childhood. I dove in very deeply, and it turns out that I wrote a Discord bot that responds to almost […]
Hi! My name is Sergey, and I am a DevOps at Surf. The DevOps department at Surf aims not only to establish interaction between specialists and integrate workflows but also to actively research and implement current technologies in both our infrastructure and that of our clients. Below, I will share a bit about the changes in the technology stack for containers that we […]
Corrective updates have been released for the stable branches of the DNS server BIND 9.11.22 and 9.16.6, as well as for the experimental branch 9.17.4 currently in development. The new releases fix five vulnerabilities. The most critical vulnerability (CVE-2020-8620) allows remote denial of service to be triggered by sending a specific set of packets to the TCP port on which BIND accepts connections. Sending abnormally large AXFR requests to the TCP port may lead to […]
Microsoft announced support for the WSL2 (Windows Subsystem for Linux) in Windows 10 releases 1903 and 1909, which were formed in May and November of last year. Initially, the WSL2 subsystem, allowing for the execution of Linux executables on Windows, was introduced in the Windows 10 2004 release. Now, Microsoft has backported this subsystem to earlier Windows 10 updates, which […]
openITCOCKPIT is open-source software for configuring Nagios or Naemon. The most significant changes in this version include: Data collection via its own agent The frontend and backend fully interact through the API Notifications through various chat systems (Slack, RocketChat, Mattermost, …) Automatic conversion of measurement units in graphs to simpler units Numerous improvements to the web interface and much […]
Russian Russian
Italian
German
Polish
Estonian
Albanian
Bulgarian
Croatian
Czech
Danish
Dutch
English
French
Hungarian
Latvian
Norwegian
Portuguese
Romanian
Slovak
Slovenian
Spanish
Swedish