Skip to main contentOps
- On Sunday, Feb 12th, I received a suspcious message about a DHL delivery from hello@namecheap.com. Pretty odd, but I ignored. Later I received notification from NameCheap that there had been a compromise. As of 18:18UTC on 2/13 it’s still being investigated. Below are the emails headers of my message, which appears to be an authenticated message from Sendgrid. I would venture to guess that an API key was leaked. Certainly highlights the need to protect third-party access to such systems.
- Protect your infrastructure - some overlap with secure, so this will focus more on protection from non-security related incidents (buggy code, infrastructure outages, etc)
Backups Restic Kubernetes k8up: Open source k8s backup, allows for custom commands via annotations or generic RWX volume backups Kasten K10: Commercial Kubernetes backup, but up to 10 nodes for free. Velero: Backup both k8s manifests and volumes. Audit Kube Bench - Scan K8S clsuter against CIS best practices.
- Various resources on working remotely.
Guides Gitlab Remote Resources GitLab Remote Culture GitLab Guide to Starting a Remote Position GitLab Information Communication in an all-remote environment Increment: A guide to distributed teams Microsoft: Staying productive while working remotely: Although focused slightly around Microsoft Teams, some good overall strategies for remote work. Toptal Remote Work Playbook Articles 47 Insanely Practical Work From Home Tips from Our 100% Remote Team Algorithms You Should Know Before You Take a System Design Interview Driving Engagement In a Remote Work World How to Ace an Online Job Interview: Also great tips for remote meetings in general How to Mentor Remote Workers How to build remote teams properly My 90 day plan as a new manager of an existing team: Useful outside of management roles.
- Captures ad-hoc scripting and process needs. Also includes resources making these ad-hoc scripts more robust and part of an automation framework.
Shell Minimally Safe Bash Shell Script Template Bash Style Guidelines Bash - Using Loops - Nice example of several looping and conditional structures. Bash - Performance - Reddit post on more advance ways to speed up bash scripts. Debugging Bash Like a Sire: A stacktrace like mechanism for Shell! Gum - Pretty Shellscript Addon Testing Shell Scripts/CLI leveraging Go’s Testing Framework Higher Level Python Shell-like Scripting In Go - Might be a nice bridge when a shell script gets complex enough that you want to use a more robust langauge, but maintain a lot of “shell-like” features Cheatsheet Passing variables to curl bash (Example from coder)
- Every now and then we do have to use windows. So let’s try to make it as Linux like as possible
Enabling WinRM As Ansible leverages WinRM for managing Windows servers, it’s guide below provides a lot of helpful guidance:
https://docs.ansible.com/ansible/latest/user_guide/windows_setup.html
The TL;DR is to use the following snippet below to run a powershell script that will correctly enable WinRM for the system:
$url = "https://raw.githubusercontent.com/ansible/ansible/devel/examples/scripts/ConfigureRemotingForAnsible.ps1" $file = "$env:temp\ConfigureRemotingForAnsible.ps1" (New-Object -TypeName System.