rescue steps Force stop the failed ec2 instance Detach the root ebs volume Launch new ec2 instance need support Nitro System the instance type and attach the previous EBS volume Add new user in new ec2 instance and get the /etc/shadows encrypt password copy to old device same file administrator user overide the line …

read more

Sometimes we have access internal service or server in local network,needs through external bastion server bridge to. 1# The traffic forward to internal environment through bastion iptables rule diagram 2 3# local or office ——> bastion machine ———-> internal server 4# local access bastion-public-ip:8888 …

read more

Cloud native workflow security checklist Development security Integrate Code Scanning at the CI/CD Process SAST (Static Application Security Testing) tools sonarqube, gosec various language lint itegration the IDE plugins Enabled the gitlab ci security or github action scan Reduce external vulnerabilities via …

read more

In a k8s environment, it is a good choice to have the application runtime and source code build packages separated in separate containers Smallest source code build image use a smallest base image to build docker image store source code build result package 1FROM alpine:latest 2WORKDIR /var/www 3COPY app /var/www/app …

read more

There are often some excellent blogs and open source website learning resources that need to be recorded Also for better sharing and dissemination, so the total continues below. Cloud native and kubernetes https://github.com/labring/sealos(kubernetes-kernel-based cloud os! Let’s sealos run kubernetes and …

read more