MariaDB Galera Cluster on Red Hat OpenShift/Kubernetes

In this blog post we present a solution with which you’re able to operate a MariaDB Galera Cluster on Kubernetes or compatible solutions (e.g. Red Hat OpenShift Container Platform, CoreOS Tectonic or Canonical’s Kubernetes). It allows cloud-native applications running in Kubernetes and their required databases to be run on the same infrastructure, using the same…

Read More

GitLab CI

In this two-part article, we will take a closer look at the continuous integration functionalities of GitLab CI. The first part deals with installation and configuration, while the second part provides more detailed information on individual application scenarios. What does CI actually mean? In this case, CI stands for continuous integration. But simply, this means…

Read More

Decrypt LUKS devices remotely via Dropbear SSH

Sometimes, when you’re not at the office, and your PC’s sitting there all properly shut down to save on electricity and it sure would be nice if you could just ask a co-worker to boot up the computer. Then you could use that wonderful technology known as SSH. Unfortunately, the encrypted hard drive makes this…

Read More

Yubikey Validation Server Setup

If the YubiCloud is not to be used for the validation of Yubico one-time passwords (OTP), validation servers can also be managed in-house. In principle this is not very difficult, but the redundant setup is rather poorly documented. Overview MySQL is used as the backend and Apache as the frontend. The two components yubikey-val and…

Read More

SSL certificate monitoring with Bash

In order to see in the monitoring tool if and when an SSL certificate is due to expire a script was created to determine the expiration date. In comparison to other checks, this script is not limited to checking certificates via HTTPS. This article provides a description of how the expiration date of an SSL…

Read More

Creating OpenSSL x509 certificates

There are (still) various servers on the internet that have just an insufficient SSL/TLS configuration or none at all. It is not just web servers (like nginx or Apache) but also XMPP/Jabber servers and mail servers, for example. As the basis of each SSL/TLS configuration, we need keys and certificates and sometimes Diffie-Hellman parameters. This…

Read More

Office365, Google Docs or data integrity?

Clouds are sexy! Set them up instantly, maintenance and care are outsourced, scale resources without assistance, and web solutions now often offer functions you can only dream of with desktop solutions. Since Google began demonstrating how people can collaborate on the same document online, even die-hard Word freaks have noticed that text editing is primarily…

Read More

Testing with Pytest

If you want to test your code in Python, you should take a look at Pytest as an alternative to Unittest. Pytest is a testing framework for Python. It makes testing very easy, without a lot of boilerplate. Its advantages lie in its simplicity, automatic test discovery, modular fixtures and intelligent error output. This blog…

Read More

Connect OpenVPN to the GitLab User DB

This blog post will discuss how OpenVPN can be connected to the GitLab user database. Data in a Git repository often require a lot of work, meaning a lot of energy, time and money. If you don’t want to rely on the GitLab login alone but instead want additional protection before it, one way to…

Read More

Interpretation of the RFC 2119 in the German language

The RFC 2119 written by Scott Bradner of the Harvard University in Cambridge, has been interpreted in the German language by Jean-Louis Fuchs of the Adfinis SyGroup. It is not a literal translation, but rather an interpretation in German. The objective of this interpretation is to provide and spread the RFC 2119 in the German-speaking…

Read More