Ingress-NGINX to Istio Migration on RKE2
Overview This post is a proof of concept (POC) for a migration scenario. It moves an RKE2 cluster from the bundled ingress-nginx controller to an Istio gateway that uses the Kubernetes Gateway API. Wh
Latest articles
Intercepting Dangerous Shell Commands with Shellfirm
Shellfirm is a lightweight safety layer for interactive shells that helps prevent accidental or malicious execution of destructive commands. It works by installing a small shell hook that inspects eac
Auditing Command Execution with Snoopy
Snoopy is a lightweight, unobtrusive auditing tool for Unix-like systems that records every command executed on the host. It works as a small library wrapper that logs command execution details (times
Sending SSH Login Alerts to Telegram
Monitoring SSH logins is a simple but powerful way to improve the security and situational awareness of your servers. By sending immediate alerts when someone authenticates (or fails to authenticate)
Preventing Brute Force Attacks with Fail2ban
Fail2ban is a lightweight, widely used intrusion prevention tool that helps protect servers from brute-force attacks and other repeated authentication failures. It continuously monitors log files (for
Controlling Port Access with UFW
UFW (Uncomplicated Firewall) is a user-friendly front end for iptables designed to make managing a host-based firewall simpler. It’s available on Debian/Ubuntu and many other Linux distributions and p
Hardening Ubuntu Server with OpenSCAP
OpenSCAP is an open‑source implementation of the Security Content Automation Protocol (SCAP). It provides a framework and tooling to automate security compliance tasks: assessing systems against publi
RKE2 v1.32 Deployment via Rancher Manager
In this article I will show you how to deploy RKE2 cluster via Rancher Manager. Creating an production-ready RKE2 clusters through Rancher is as straightforward as filling out a web form - select your
Kubeadm Cluster v1.32 to v 1.33 Upgrade
In this article I will show you how to upgrade the Kubeadm Cluster from v1.32 to v1.33. Unlike managed Kubernetes services that handle upgrades automatically, kubeadm requires a hands-on approach to c