Category: Coding

[Docker] Docker Laravel on Alpine.

Posted on By nim No Comments on [Docker] Docker Laravel on Alpine.
[Docker] Docker Laravel on Alpine.

Docker – Laravel – Ubuntu – Apache. Mình có một cái demo: https://github.com/mrnim94/thiep-cuoi Nhưng mà với image này thì mình gặp khá nhiều Vulnerbility. thì mình đã có thử tìm hiểu Run Docker Laravel trên Apline. Docker – Laravel – Nginx https://github.com/khromov/alpine-nginx-php8/blob/master/Dockerfile Giờ chúng ta cần bắt trước để upgrade php 8.3 đầu tiên bạn…

Read More “[Docker] Docker Laravel on Alpine.” »

Laravel

[Ec2] How to reset the forgotten password on EC2

Posted on By nim No Comments on [Ec2] How to reset the forgotten password on EC2
[Ec2] How to reset the forgotten password on EC2

refer to: https://sennovate.com/how-to-reset-the-forgotten-root-password-in-aws-ec2-instance/ Có một số điều mà chúng ta cần lưu ý.:– Bạn cần đổi con Ec2 sang type là ít nhất là m5 mới có thể mở cổng console vào vm thông qua tty– Khi bạn đã gỡ được ổ đĩa root của con mất password thì sau khi đã change được pass…

Read More “[Ec2] How to reset the forgotten password on EC2” »

AWS - Amazon Web Service

[Terraform] Your query returned no results. Please change your search criteria and try again

Posted on By nim No Comments on [Terraform] Your query returned no results. Please change your search criteria and try again
[Terraform] Your query returned no results. Please change your search criteria and try again

Khi chạy install EC2 trong quá khứ từ rất lâu: sau đó bạn sử đổi 1 field bất kì:thì thấy báo lỗi là AMI mà hồi đó bạn sử dụng đã xóa. Và đây là terraform code của mình Tại thời điểm này chúng ra sẽ cần làm 2 việc:+ Làm sao để data “aws_ami”…

Read More “[Terraform] Your query returned no results. Please change your search criteria and try again” »

Terraform

[Vulnerability] CVE-2024-6387 – Critical vulnerability in OpenSSH

Posted on By nim No Comments on [Vulnerability] CVE-2024-6387 – Critical vulnerability in OpenSSH
[Vulnerability] CVE-2024-6387 – Critical vulnerability in OpenSSH

CVE-2024-6387 is a critical vulnerability in OpenSSH that allows unauthenticated remote code execution, affecting millions of Linux systems. The flaw, named “regreSSHion,” is particularly dangerous because it can be exploited without authentication, making it a significant threat to affected systems.Affected Versions: 8.5p1 to 9.7p1. Stop and Remove Existing OpenSSH Service Install OpenSSH 9.8 Maybe you encounter…

Read More “[Vulnerability] CVE-2024-6387 – Critical vulnerability in OpenSSH” »

DevSecOps

[Security] Find vulnerabilities in your EC2 Linux instance

Posted on By nim No Comments on [Security] Find vulnerabilities in your EC2 Linux instance
[Security] Find vulnerabilities in your EC2 Linux instance

To find vulnerabilities on your EC2 Linux instance, including ones related to OpenSSH and other software, you can use several open-source tools. Here are some recommended steps and tools: These tools will help you identify and mitigate vulnerabilities on your EC2 Linux instance. Be sure to regularly update these tools and your system to keep…

Read More “[Security] Find vulnerabilities in your EC2 Linux instance” »

DevSecOps

[Security] How to access S3 when you stay at any EC2!

Posted on By nim No Comments on [Security] How to access S3 when you stay at any EC2!
[Security] How to access S3 when you stay at any EC2!

You already have limited access inside the AWS account with the credentials of a compromised IAM user. To find out the name of your IAM user, you have to execute aws iam get-user. There are 3 ways to give permissions to an IAM user: inline policies (aws iam list-user-policies), attached policies (aws iam list-attached-user-policies) and…

Read More “[Security] How to access S3 when you stay at any EC2!” »

DevSecOps

[RabbitMQ] Queue announces “cluster is in minority”

Posted on By nim No Comments on [RabbitMQ] Queue announces “cluster is in minority”
[RabbitMQ] Queue announces “cluster is in minority”

We are using AmazonMQ.Chúng mình hay gặp vấn đề là các Node rabbitmq tự nhiên bị change: và Client không thể connect đến các queue trên rabbitMQ Chúng tôi đã thực hiện restart cả client và Server nhưng mà issue vẫn không được giải quyết. Sau đó mình thực hiện call vào API để show…

Read More “[RabbitMQ] Queue announces “cluster is in minority”” »

AWS - Amazon Web Service

[Laravel] Splitting Layouts in Laravel: Utilizing Blade’s @extends, @yield, and @section Directives

Posted on By nim No Comments on [Laravel] Splitting Layouts in Laravel: Utilizing Blade’s @extends, @yield, and @section Directives
[Laravel] Splitting Layouts in Laravel: Utilizing Blade’s @extends, @yield, and @section Directives

Thường khi bắt đầu cho 1 project frontend chúng chia layout ra1 và 2 là những phần cố định và 3 là phần thường xuyên nay đổi nội dung. mình cắt phần này ra và xác định phần HTML cần cắt Folder structure: Layout File (resources/views/layout.blade.php): Child View (resources/views/encrypted-file/home.blade.php): Đại loại là khi bạn call…

Read More “[Laravel] Splitting Layouts in Laravel: Utilizing Blade’s @extends, @yield, and @section Directives” »

Laravel

Accelerating Data Access: Effective Initialization of Amazon EBS Volumes

Posted on By nim No Comments on Accelerating Data Access: Effective Initialization of Amazon EBS Volumes
Accelerating Data Access: Effective Initialization of Amazon EBS Volumes

Initializing Amazon EBS volumes from snapshots involves bringing data from Amazon S3 and writing it to the volume, which initially can lead to higher I/O latency. For volumes that demand immediate high performance, you can force immediate initialization or enable fast snapshot restore, ensuring the volume performs optimally from the start. For Linux, use commands…

Read More “Accelerating Data Access: Effective Initialization of Amazon EBS Volumes” »

AWS - Amazon Web Service

[Laravel] This form is not secure. Autofill has been turned off

Posted on By nim No Comments on [Laravel] This form is not secure. Autofill has been turned off
[Laravel] This form is not secure. Autofill has been turned off

Nếu bạn đang làm 1 form submit trên web và bông dưng gặp thông báo này.This form is not secure. Autofill has been turned off Lý do là action của bạn đang post sang 1 http chứ không phải là https Vậy giở bạn phải làm sao? The code you’ve written in the boot() method…

Read More “[Laravel] This form is not secure. Autofill has been turned off” »

Laravel