March 17, 2017

Deploy to Docker Swarm using Gitlab CI

UPDATE 2017-06-07: Added info about secure connections You might have heard of awesome Gitlab and it’s builtin CI. Also, Docker might ring some bells. And Gitlab loves Docker. I’m using Gitlab CI with Docker for a long time now, even before Gitlab included the container registry. Playing around with Swarm some months ago immediately made me want to combine all of them. The whole Kubernetes thing is pretty cool but sometimes just too much. Your Dev’s probably rather want to code instead of playing DevOp or Sysadmin. Also i must admit that running Docker swarm is much easier than running a full blown Kubernetes stack. And Docker commands in swarm mode are almost the same, so hurdles for developers are almost gone if they are already using Docker ;) Read more

December 14, 2016

Detect ransomware with cryptostalker

As an experienced linux only user, i could have ignored the latest waves of crypto malware. But i’m also taking care of some people being forced to use Windows and Office and so on. Can’t say enough: Backup! Backup! Backup! If your happily using ZFS based sytems with high snapshot rate like me, you might be quite relaxed about backup because of read-only snapshots. But i also want to get noticed, when some bogus I/O starts on these servers. I was playing arounf with inotify and custom scripts, which just extracts the filename extension and shout out loud, when there are lots of files having the same (unknown before) extension. Works. But also, i stumbled upon cryptostalker, which more or less does the same (ok, it checks for encrypted files ;) ). Read more

December 6, 2016

Zeyple Postfix GPG Gateway

If you’re using postfix as mail server or relay for your mails (e.g. log mails, …) you might want to encrypt them. Zeyple does!

December 6, 2016

Setup encrypted Ubuntu with ZFS on LUKS

This post is just combining the information from Ubuntu 16.04 Root on ZFS and Encrypted ZFS Ubuntu Installation. First, start up your target machine using an Ubuntu Live ISO. When you’ll see the desktop, just press Ctrl + Alt + F1 and login with ubuntu and blank password. Let’s prepare the system for SSH, as things are much easier there. You can also skip this and do things locally, of course. Prepare SSH passwd sudo su systemctl stop lightdm # save some precious memory ;) apt update apt install openssh-server -y Now we can connect to the target machine via SSH. Read more