Language Selection

English French German Italian Portuguese Spanish

IBM/Red Hat Leftovers

Submitted by Roy Schestowitz on Wednesday 8th of September 2021 09:14:03 PM Filed under
Red Hat
  • Why distroless containers aren't the security solution you think they are

    The concept of distroless is a popular idea in the world of containers. The idea is to package applications in container images while at the same time removing as much of the operating system as possible (package managers, libraries, shells, etc). This does provide some security benefits, but these benefits are often blown out of proportion because of a naive understanding of what an operating system is, how it works, and in particular what a Linux distribution is and how they work.

    This article will try to give a clearer understanding of the actual benefits of Distroless while at the same time tempering the over-hyped marketing of Distroless. Let’s explore some fallacies.

  • Reviewing RHEL systems on the Red Hat Customer Portal

    In previous posts, we showed you how to enable Simple Content Access (SCA), register your Red Hat Enterprise Linux (RHEL) with Insights, and tag and review systems. In this third part of our series on Subscription Manager and SCA, we will look at reviewing your RHEL instances in the Red Hat customer portal.

  • Hybrid work policy templates: 6 things you need

    Attitudes about hybrid work continue to evolve. In March, just under half (49 percent) of businesses said they planned to bring employees back to the office by fall 2021, but that’s since grown to nearly three-quarters (74 percent), according to the Office Re-Entry Index, published by staffing and recruiting firm LaSalle Network.

    But not everyone will be leaving home to work. The majority of respondents to the most recent LaSalle Network survey (77 percent) say they are planning a hybrid office for the future with employees in the office two to three days a week. Recent surges in COVID-19 infections have made it clear that a well-functioning hybrid workspace will be required for the foreseeable future.

    That sounds like consensus. However, the road ahead could be rocky as employers and employees negotiate what that looks like. Nearly four out of ten respondents (39 percent) to LaSalle’s June survey expect some conflict between leaders and staff regarding return-to-office policies.

  • 4 ways to spot DevOps stars

    In today’s business environment, speed is a competitive advantage when delivering quality software products to the market: The faster companies can meet evolving needs, the better the overall customer experience. That’s one reason why the use of DevOps teams has grown in popularity. Organizations know that when software development and operations teams work together, they can innovate faster, bring applications to market more quickly, and grow their businesses.

    The current global technical talent crunch makes it difficult to recruit DevOps talent. But that doesn’t mean you should employ just anybody that presents a resume loaded with technology experience. Hiring technical talent that isn’t a good fit for your team can set back your efforts in the long run. It’s important to get it right the first time.

  • Red Hat To Provide Technical, Community-Building Expertise For OS-Climate Data Commons Platform

    Red Hat has joined OS-Climate (OS-C), a Linux Foundation-backed open source project, to provide technical acumen and resources to help OS-C build a “Data Commons” that serves as an open data ingestion, processing and management platform for members to collaborate on standardizing and improving the accuracy of corporate climate and environmental, social and governance (ESG) metrics.

  • rpminspect-1.6-released

    rpminspect 1.6 is now available. This release includes a lot of fine tuning and bug fixing for the various tests across multiple Fedora, CentOS, and RHEL releases. The GitHub Actions testing has expanded to cover many more distributions.

    The main feature present in the 1.6 release is the handling of what I call the Product Security workflow. The idea is that any finding that says the Product Security team needs to investigate the change should not be something a developer can automatically waive. For example, a package adding a setuid root executable that the product does not already know about. The workflow for this should be the developer adds the new file to the appropriate fileinfo/ file and sends a pull request to the rpminspect-data project containing that data. The Product Security team would then review that change and approve it or not. If it’s approved, the change would be merged and the rpminspect-data package updated and rebuilt.

    There are instances where some security findings should be reported slightly differently or even ignored. To handle that on a case-by-case basis, librpminspect supports the security/ rules files that allow you to specify a different reporting level for these findings. The match is performed by path glob(7) specification, package name, and package version. For the package name and version you can specify * to indicate any.

  • 16 AnsibleFest presentations for sysadmins | Enable Sysadmin

    Automation is a big part of a sysadmin's job—any time you can avoid manual intervention means you can save time and decrease the risk of human error. Ansible is one of the most popular tools for automation, so if you want to learn new ideas and best practices around automating IT, AnsibleFest is an excellent place to start.

»

More in Tux Machines

digiKam 7.7.0 is released

After three months of active maintenance and another bug triage, the digiKam team is proud to present version 7.7.0 of its open source digital photo manager. See below the list of most important features coming with this release. Read more

Dilution and Misuse of the "Linux" Brand

Samsung, Red Hat to Work on Linux Drivers for Future Tech

The metaverse is expected to uproot system design as we know it, and Samsung is one of many hardware vendors re-imagining data center infrastructure in preparation for a parallel 3D world. Samsung is working on new memory technologies that provide faster bandwidth inside hardware for data to travel between CPUs, storage and other computing resources. The company also announced it was partnering with Red Hat to ensure these technologies have Linux compatibility. Read more

today's howtos

  • How to install go1.19beta on Ubuntu 22.04 – NextGenTips

    In this tutorial, we are going to explore how to install go on Ubuntu 22.04 Golang is an open-source programming language that is easy to learn and use. It is built-in concurrency and has a robust standard library. It is reliable, builds fast, and efficient software that scales fast. Its concurrency mechanisms make it easy to write programs that get the most out of multicore and networked machines, while its novel-type systems enable flexible and modular program constructions. Go compiles quickly to machine code and has the convenience of garbage collection and the power of run-time reflection. In this guide, we are going to learn how to install golang 1.19beta on Ubuntu 22.04. Go 1.19beta1 is not yet released. There is so much work in progress with all the documentation.

  • molecule test: failed to connect to bus in systemd container - openQA bites

    Ansible Molecule is a project to help you test your ansible roles. I’m using molecule for automatically testing the ansible roles of geekoops.

  • How To Install MongoDB on AlmaLinux 9 - idroot

    In this tutorial, we will show you how to install MongoDB on AlmaLinux 9. For those of you who didn’t know, MongoDB is a high-performance, highly scalable document-oriented NoSQL database. Unlike in SQL databases where data is stored in rows and columns inside tables, in MongoDB, data is structured in JSON-like format inside records which are referred to as documents. The open-source attribute of MongoDB as a database software makes it an ideal candidate for almost any database-related project. This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of the MongoDB NoSQL database on AlmaLinux 9. You can follow the same instructions for CentOS and Rocky Linux.

  • An introduction (and how-to) to Plugin Loader for the Steam Deck. - Invidious
  • Self-host a Ghost Blog With Traefik

    Ghost is a very popular open-source content management system. Started as an alternative to WordPress and it went on to become an alternative to Substack by focusing on membership and newsletter. The creators of Ghost offer managed Pro hosting but it may not fit everyone's budget. Alternatively, you can self-host it on your own cloud servers. On Linux handbook, we already have a guide on deploying Ghost with Docker in a reverse proxy setup. Instead of Ngnix reverse proxy, you can also use another software called Traefik with Docker. It is a popular open-source cloud-native application proxy, API Gateway, Edge-router, and more. I use Traefik to secure my websites using an SSL certificate obtained from Let's Encrypt. Once deployed, Traefik can automatically manage your certificates and their renewals. In this tutorial, I'll share the necessary steps for deploying a Ghost blog with Docker and Traefik.

More on Tux Machines: About ● Gallery ● Forum ● Blogs ● Search ● News ● RSS Feed

Part of Bytes Media ● Sister sites below.

TechBytes Techrights button

Powered by Drupal, an open source content management system

Content available under CC-BY-SA CC

© by original authors

Powered by CentOS 6.5 (GNU/Linux), Varnish, and Drupal 6