Author: nim

[PromQL] Use Count and Count by (xx) to count the number of pods that hold many containers inside these pods.

Posted on By nim No Comments on [PromQL] Use Count and Count by (xx) to count the number of pods that hold many containers inside these pods.

Tối đang có 2 metrics: Bạn có thể thấy là 2 metrics của 2 container khác nhau nhưng cùng 1 pod.nếu như mình muốn tạo 1 query đếm số pods thì sẽ cần làm gì Đầu tiên chúng ta dùng count by (xxx) This part groups the metrics by the pod label and counts the…

Read More “[PromQL] Use Count and Count by (xx) to count the number of pods that hold many containers inside these pods.” »

Uncategorized

[Github] Prevent contributors from pushing code to the master branch and creating tags.

Posted on By nim No Comments on [Github] Prevent contributors from pushing code to the master branch and creating tags.

Create a Rule for the branch Click Add classic branch protection rule. Input the branch name and choose an option to Require a pull request before merging Tiếp theo allow cho admin được quền push lên master Prevent anybody (except admins) can create the tag

Coding

[Docker] Docker Laravel on Alpine.

Posted on By nim No Comments on [Docker] Docker Laravel on Alpine.

Docker – Laravel – Ubuntu – Apache. Mình có một cái demo: https://github.com/mrnim94/thiep-cuoi Nhưng mà với image này thì mình gặp khá nhiều Vulnerbility. thì mình đã có thử tìm hiểu Run Docker Laravel trên Apline. Docker – Laravel – Nginx https://github.com/khromov/alpine-nginx-php8/blob/master/Dockerfile Giờ chúng ta cần bắt trước để upgrade php 8.3 đầu tiên bạn…

Read More “[Docker] Docker Laravel on Alpine.” »

Laravel

[Ec2] How to reset the forgotten password on EC2

Posted on By nim No Comments on [Ec2] How to reset the forgotten password on EC2

refer to: https://sennovate.com/how-to-reset-the-forgotten-root-password-in-aws-ec2-instance/ Có một số điều mà chúng ta cần lưu ý.:– Bạn cần đổi con Ec2 sang type là ít nhất là m5 mới có thể mở cổng console vào vm thông qua tty– Khi bạn đã gỡ được ổ đĩa root của con mất password thì sau khi đã change được pass…

Read More “[Ec2] How to reset the forgotten password on EC2” »

AWS - Amazon Web Service

[Terraform] Your query returned no results. Please change your search criteria and try again

Posted on By nim No Comments on [Terraform] Your query returned no results. Please change your search criteria and try again

Khi chạy install EC2 trong quá khứ từ rất lâu: sau đó bạn sử đổi 1 field bất kì:thì thấy báo lỗi là AMI mà hồi đó bạn sử dụng đã xóa. Và đây là terraform code của mình Tại thời điểm này chúng ra sẽ cần làm 2 việc:+ Làm sao để data “aws_ami”…

Read More “[Terraform] Your query returned no results. Please change your search criteria and try again” »

Terraform

[Vulnerability] CVE-2024-6387 – Critical vulnerability in OpenSSH

Posted on By nim No Comments on [Vulnerability] CVE-2024-6387 – Critical vulnerability in OpenSSH

CVE-2024-6387 is a critical vulnerability in OpenSSH that allows unauthenticated remote code execution, affecting millions of Linux systems. The flaw, named “regreSSHion,” is particularly dangerous because it can be exploited without authentication, making it a significant threat to affected systems.Affected Versions: 8.5p1 to 9.7p1. Stop and Remove Existing OpenSSH Service Install OpenSSH 9.8 Maybe you encounter…

Read More “[Vulnerability] CVE-2024-6387 – Critical vulnerability in OpenSSH” »

DevSecOps

[Security] Find vulnerabilities in your EC2 Linux instance

Posted on By nim No Comments on [Security] Find vulnerabilities in your EC2 Linux instance

To find vulnerabilities on your EC2 Linux instance, including ones related to OpenSSH and other software, you can use several open-source tools. Here are some recommended steps and tools: These tools will help you identify and mitigate vulnerabilities on your EC2 Linux instance. Be sure to regularly update these tools and your system to keep…

Read More “[Security] Find vulnerabilities in your EC2 Linux instance” »

DevSecOps

[Security] How to access S3 when you stay at any EC2!

Posted on By nim No Comments on [Security] How to access S3 when you stay at any EC2!

You already have limited access inside the AWS account with the credentials of a compromised IAM user. To find out the name of your IAM user, you have to execute aws iam get-user. There are 3 ways to give permissions to an IAM user: inline policies (aws iam list-user-policies), attached policies (aws iam list-attached-user-policies) and…

Read More “[Security] How to access S3 when you stay at any EC2!” »

DevSecOps

[Golang] Use -buildvcs=false to disable VCS stamping

Posted on By nim No Comments on [Golang] Use -buildvcs=false to disable VCS stamping

Trong 1 lần mình build image trên bitbucket pipeline thì nó bị lỗi này: The -buildvcs=false flag in the go build command is used to disable VCS (Version Control System) stamping during the build process. This flag is particularly useful in environments where the Go compiler might face issues accessing the version control metadata, such…

Read More “[Golang] Use -buildvcs=false to disable VCS stamping” »

Bitbucket