Month: July 2024

[Github] Prevent contributors from pushing code to the master branch and creating tags.

Posted on By nim No Comments on [Github] Prevent contributors from pushing code to the master branch and creating tags.

Create a Rule for the branch Click Add classic branch protection rule. Input the branch name and choose an option to Require a pull request before merging Tiếp theo allow cho admin được quền push lên master Prevent anybody (except admins) can create the tag

Coding

[Docker] Docker Laravel on Alpine.

Posted on By nim No Comments on [Docker] Docker Laravel on Alpine.

Docker – Laravel – Ubuntu – Apache. Mình có một cái demo: https://github.com/mrnim94/thiep-cuoi Nhưng mà với image này thì mình gặp khá nhiều Vulnerbility. thì mình đã có thử tìm hiểu Run Docker Laravel trên Apline. Docker – Laravel – Nginx https://github.com/khromov/alpine-nginx-php8/blob/master/Dockerfile Giờ chúng ta cần bắt trước để upgrade php 8.3 đầu tiên bạn…

Read More “[Docker] Docker Laravel on Alpine.” »

Laravel

[Ec2] How to reset the forgotten password on EC2

Posted on By nim No Comments on [Ec2] How to reset the forgotten password on EC2

refer to: https://sennovate.com/how-to-reset-the-forgotten-root-password-in-aws-ec2-instance/ Có một số điều mà chúng ta cần lưu ý.:– Bạn cần đổi con Ec2 sang type là ít nhất là m5 mới có thể mở cổng console vào vm thông qua tty– Khi bạn đã gỡ được ổ đĩa root của con mất password thì sau khi đã change được pass…

Read More “[Ec2] How to reset the forgotten password on EC2” »

AWS - Amazon Web Service

[Terraform] Your query returned no results. Please change your search criteria and try again

Posted on By nim No Comments on [Terraform] Your query returned no results. Please change your search criteria and try again

Khi chạy install EC2 trong quá khứ từ rất lâu: sau đó bạn sử đổi 1 field bất kì:thì thấy báo lỗi là AMI mà hồi đó bạn sử dụng đã xóa. Và đây là terraform code của mình Tại thời điểm này chúng ra sẽ cần làm 2 việc:+ Làm sao để data “aws_ami”…

Read More “[Terraform] Your query returned no results. Please change your search criteria and try again” »

Terraform

[Vulnerability] CVE-2024-6387 – Critical vulnerability in OpenSSH

Posted on By nim No Comments on [Vulnerability] CVE-2024-6387 – Critical vulnerability in OpenSSH

CVE-2024-6387 is a critical vulnerability in OpenSSH that allows unauthenticated remote code execution, affecting millions of Linux systems. The flaw, named “regreSSHion,” is particularly dangerous because it can be exploited without authentication, making it a significant threat to affected systems.Affected Versions: 8.5p1 to 9.7p1. Stop and Remove Existing OpenSSH Service Install OpenSSH 9.8 Maybe you encounter…

Read More “[Vulnerability] CVE-2024-6387 – Critical vulnerability in OpenSSH” »

DevSecOps

[Security] Find vulnerabilities in your EC2 Linux instance

Posted on By nim No Comments on [Security] Find vulnerabilities in your EC2 Linux instance

To find vulnerabilities on your EC2 Linux instance, including ones related to OpenSSH and other software, you can use several open-source tools. Here are some recommended steps and tools: These tools will help you identify and mitigate vulnerabilities on your EC2 Linux instance. Be sure to regularly update these tools and your system to keep…

Read More “[Security] Find vulnerabilities in your EC2 Linux instance” »

DevSecOps