Apr 1, 2020
· 3 minute read
linuxwireguard
I last wrote about Wireguard in May 2019.
At that time the author, Jason Donenfeld, described Wireguard as Work In progress.
Since then Jason has been very busy to the extent that Linux kernel 5.6 now includes Wireguard.
I too have been busy with Wireguard, using it for 3 quite different purposes.
Remote workers Windows, Mac and Linux machines connecting back to the office.
Wireguard installs as a new network interface which is available before login.
Read On →
Feb 28, 2020
· 2 minute read
linuxversion controlgit
Example use of webhooks:
Automatically update a website when chages are pushed to a repository.
There are at least two ways to achieve this, both have certain requirements:
Use a secret key which should be sufficently complex.
The repository should be accessible without requiring credentials, either by:
Using keys
Caching credentials using, e.g., git config credential.helper store
Caddy git module Include something like the following in your Caddyfile.
Read On →
Feb 26, 2020
· 1 minute read
linux
Atom has long been our favourite editor.
Normal installation method now is using Snap
$ snap install atom --classic Need to override confinement as the editor will make changes outside of the normal sandbox snaps run in.
Whether you use te snap or traditional installation method you may find that the Atom display does not appear.
There are many possible causes (e.g. wide or multi monitors) but for us the cause was very specifc.
Read On →
Jan 7, 2020
· 5 minute read
linuxsecurity
Step certificates The Open Source step certificates project provides the infrastructure, automations, and workflows to securely create and operate a private certificate authority. Step certificates makes it easy for developers, operators and security teams to manage certificates for production workloads.
References:
Step and SSH
Step and ACME
Everything about PKI
Install By package
# wget https://github.com/smallstep/cli/releases/download/v0.13.3/step-cli_0.13.3_amd64.deb # dpkg -i step-cli_0.13.3_amd64.deb Or manual (my preference)
# wget https://github.
Read On →
Dec 11, 2019
· 1 minute read
linuxlxd
In recent versions of Ubuntu lxd runs as a snap.
Snaps are a very good way of getting an application installed with little or no configuration.
There is one limitation regarding the HOME directory of a user described here.
In particular -
> The $HOME directory of the user must match /home/user. Other directories are not supported yet. In particular /home/subdir/user is also not supported.
We use Samba to join Ubuntu servers to an AD domain.
Read On →