Search for a command to run...
Overview This post is a proof of concept (POC) for a migration scenario. It moves an RKE2 cluster from the bundled ingress-nginx controller to an Istio gateway that uses the Kubernetes Gateway API. Wh
Shellfirm is a lightweight safety layer for interactive shells that helps prevent accidental or malicious execution of destructive commands. It works by installing a small shell hook that inspects eac
Snoopy is a lightweight, unobtrusive auditing tool for Unix-like systems that records every command executed on the host. It works as a small library wrapper that logs command execution details (times
Monitoring SSH logins is a simple but powerful way to improve the security and situational awareness of your servers. By sending immediate alerts when someone authenticates (or fails to authenticate)
Fail2ban is a lightweight, widely used intrusion prevention tool that helps protect servers from brute-force attacks and other repeated authentication failures. It continuously monitors log files (for
UFW (Uncomplicated Firewall) is a user-friendly front end for iptables designed to make managing a host-based firewall simpler. It’s available on Debian/Ubuntu and many other Linux distributions and p
OpenSCAP is an open‑source implementation of the Security Content Automation Protocol (SCAP). It provides a framework and tooling to automate security compliance tasks: assessing systems against publi
In this article I will show you how to deploy RKE2 cluster via Rancher Manager. Creating an production-ready RKE2 clusters through Rancher is as straightforward as filling out a web form - select your
In this article I will show you how to upgrade the Kubeadm Cluster from v1.32 to v1.33. Unlike managed Kubernetes services that handle upgrades automatically, kubeadm requires a hands-on approach to c
