Chef, Inspec, and Dirty COW
Using Compliance to remediate CVE-2016-5195
Many of you know about or will hear about CVE-2016-5195 aka Dirty COW.
This particularly nasty kernel vulnerability has been around for years and likely affects a majority of the Linux nodes are currently running. The short form is that it allows an unprivileged user to gain root access to . . .
Setting up Docker for Direct LVM
Devicemapper for the rest of us.
So guess what isn't in the upstream kernel? If you said AUFS then you'd be right.For all of us using RHEL/CentOS/OEL you might have noticed the default storage backend for Docker is devicemapper. You might have also noticed that it uses loop files for data storage which are slow and have a host of other problems. Seriously just do a . . .
Posted in: devicemapperdockerlinuxlvmrhel
Do You Really Need and Ops Team
Startups and DevOps
The following is an excerpt from a conversation I had w/ a developer who is part of a small start up. Most of the conversation was related to DevOps principals and toolchains, but after he told me about their staff of five I became worried that this was really too much. He was already worrying about CI/CD, Configuaration Management, and . . .
Nginx Reverse Proxy for your Docker Registry
Part 2 of Setting up a Docker Registry
Who is tired of typing :5000 every time you push or pull something from your private registry? Since everyone is raising their hands and several of you are screaming in fits of rage, I'm going to tell you a really quick way to set up Nginx to reverse proxy our traffic from port 80 and 443 to 5000.
Nginx?
Nginx . . .
Posted in: containersdevopsdockerlinuxnginx
Getting Started w/ Docker
This post was originally published Jan 9th 2015.
So I've been using Docker for around 6 months now and I wanted to give people an idea of how easy it is to get started with. Today I'm going to show you how to get Docker running and build a simple nginx web server.
Before you begin
I'm going to . . .