blog
MariaDB Galera Cluster on Red Hat OpenShift/Kubernetes
In this blog post we present a solution with which you’re able to operate a MariaDB Galera Cluster on Kubernetes or compatible solutions (e.g. Red Hat OpenShift Container Platform, CoreOS Tectonic or Canonical’s Kubernetes). It allows cloud-native applications running in Kubernetes and their required databases to be run on the same infrastructure, using the same…
Read MoreGitLab CI
In this two-part article, we will take a closer look at the continuous integration functionalities of GitLab CI. The first part deals with installation and configuration, while the second part provides more detailed information on individual application scenarios. What does CI actually mean? In this case, CI stands for continuous integration. But simply, this means…
Read MoreDecrypt LUKS devices remotely via Dropbear SSH
Sometimes, when you’re not at the office, and your PC’s sitting there all properly shut down to save on electricity and it sure would be nice if you could just ask a co-worker to boot up the computer. Then you could use that wonderful technology known as SSH. Unfortunately, the encrypted hard drive makes this…
Read MoreYubikey Validation Server Setup
If the YubiCloud is not to be used for the validation of Yubico one-time passwords (OTP), validation servers can also be managed in-house. In principle this is not very difficult, but the redundant setup is rather poorly documented. Overview MySQL is used as the backend and Apache as the frontend. The two components yubikey-val and…
Read MoreSSL certificate monitoring with Bash
In order to see in the monitoring tool if and when an SSL certificate is due to expire a script was created to determine the expiration date. In comparison to other checks, this script is not limited to checking certificates via HTTPS. This article provides a description of how the expiration date of an SSL…
Read MoreCreating OpenSSL x509 certificates
There are (still) various servers on the internet that have just an insufficient SSL/TLS configuration or none at all. It is not just web servers (like nginx or Apache) but also XMPP/Jabber servers and mail servers, for example. As the basis of each SSL/TLS configuration, we need keys and certificates and sometimes Diffie-Hellman parameters. This…
Read MoreOffice365, Google Docs or data integrity?
Clouds are sexy! Set them up instantly, maintenance and care are outsourced, scale resources without assistance, and web solutions now often offer functions you can only dream of with desktop solutions. Since Google began demonstrating how people can collaborate on the same document online, even die-hard Word freaks have noticed that text editing is primarily…
Read MoreTesting with Pytest
If you want to test your code in Python, you should take a look at Pytest as an alternative to Unittest. Pytest is a testing framework for Python. It makes testing very easy, without a lot of boilerplate. Its advantages lie in its simplicity, automatic test discovery, modular fixtures and intelligent error output. This blog…
Read MoreConnect OpenVPN to the GitLab User DB
This blog post will discuss how OpenVPN can be connected to the GitLab user database. Data in a Git repository often require a lot of work, meaning a lot of energy, time and money. If you don’t want to rely on the GitLab login alone but instead want additional protection before it, one way to…
Read MoreInterpretation of the RFC 2119 in the German language
The RFC 2119 written by Scott Bradner of the Harvard University in Cambridge, has been interpreted in the German language by Jean-Louis Fuchs of the Adfinis SyGroup. It is not a literal translation, but rather an interpretation in German. The objective of this interpretation is to provide and spread the RFC 2119 in the German-speaking…
Read More