System Engineer
-Overview
- - -
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- '}),Ye=l({},zn.DefaultType,{content:"(string|element|function)"}),ze="fade",Ze=".popover-header",Ge=".popover-body",$e={HIDE:"hide"+Ke,HIDDEN:"hidden"+Ke,SHOW:(Je="show")+Ke,SHOWN:"shown"+Ke,INSERTED:"inserted"+Ke,CLICK:"click"+Ke,FOCUSIN:"focusin"+Ke,FOCUSOUT:"focusout"+Ke,MOUSEENTER:"mouseenter"+Ke,MOUSELEAVE:"mouseleave"+Ke},Xe=function(t){var e,n;function i(){return t.apply(this,arguments)||this}n=t,(e=i).prototype=Object.create(n.prototype),(e.prototype.constructor=e).__proto__=n;var r=i.prototype;return r.isWithContent=function(){return this.getTitle()||this._getContent()},r.addAttachmentClass=function(t){Ue(this.getTipElement()).addClass(Qe+"-"+t)},r.getTipElement=function(){return this.tip=this.tip||Ue(this.config.template)[0],this.tip},r.setContent=function(){var t=Ue(this.getTipElement());this.setElementContent(t.find(Ze),this.getTitle());var e=this._getContent();"function"==typeof e&&(e=e.call(this.element)),this.setElementContent(t.find(Ge),e),t.removeClass(ze+" "+Je)},r._getContent=function(){return this.element.getAttribute("data-content")||this.config.content},r._cleanTipClass=function(){var t=Ue(this.getTipElement()),e=t.attr("class").match(Be);null!==e&&0
-
-
-
-
-
-
-
-
-
-
- Blogs
- --
-
-
- - August 12, 2020 - Rundeck 3.3.1 - MySQL connection - - -
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Rundeck 3.3.1 - MySQL connection
-Rundeck 3.3.1 updated its ‘mysql-connector-java’ dependancy to version 8.0.21 which renamed the com.mysql.jdbc.Driver classname to com.mysql.cj.jdbc.Driver.
Reconfigure Rundeck accordingly:
-/etc/rundeck/rundeck-config.properties:
-...
-- dataSource.url = jdbc:mysql://localhost/rundeck?autoReconnect=true&useSSL=false
-+ dataSource.url = jdbc:mysql://localhost/rundeck?serverTimezone=Europe/Amsterdam
-...
-- dataSource.driverClassName = com.mysql.jdbc.Driver
-+ dataSource.driverClassName = com.mysql.cj.jdbc.Driver
-+ dataSource.properties.autoReconnect = true
-+ dataSource.properties.useSSL = false
-...
-All commands are executed as root inside the jail, unless specified otherwise.
FreeBSD jail
Create a jail and connect to the console.
-[simon@host ~]$ sudo ezjail-admin create bastion 'bridge0|10.0.0.10'
-[simon@host ~]$ sudo ezjail-admin console bastion
-Install bash.
# pkg install bash
-OpenSSH-Portable
+[simon@host ~]$ sudo ezjail-admin create bastion 'bridge0|10.0.0.10'
+[simon@host ~]$ sudo ezjail-admin console bastion
+Install bash.
# pkg install bash
+OpenSSH-Portable
Install openssh-portable.
# pkg install openssh-portable
-Configure rc.conf.
# sysrc sshd_enable=NO
-# sysrc openssh_enable=YES
-Check only what the current best practices are regarding the full OpenSSH daemon configuration. +
# pkg install openssh-portable
+Configure rc.conf.
# sysrc sshd_enable=NO
+# sysrc openssh_enable=YES
+Check only what the current best practices are regarding the full OpenSSH daemon configuration. For example check; https://infosec.mozilla.org/guidelines/openssh
Make sure the daemon only listens to the assigned IP for this jail. And make sure the firewall running on the host accepts incoming and outgoing SSH connections.
-# cat /usr/local/etc/sshd
-...
-ListenAddress 10.0.0.10
-...
-Stop and start the services.
-# service sshd stop
-# service openssh start
-User
+# cat /usr/local/etc/sshd
+...
+ListenAddress 10.0.0.10
+...
+Stop and start the services.
+# service sshd stop
+# service openssh start
+User
Create a default user and make sure the user has the /usr/local/bin/rbash shell configured.
# mkdir /usr/home/user/bin
-Symlink the only required binaries into this directory.
-# ln -s /usr/local/bin/ssh /usr/home/user/bin/ssh
-Create bash profile.
-# cat /usr/home/user/.bash_profile
-PATH=$HOME/bin
-export PATH
-Make sure the permissions are so that the user cannot modify its own .(bash_)profile files.
# chown root:user .bash_profile .profile
-Remove also all unused rc files like cshrc, shrc, etc.
-# rm .cshrc .shrc ...
-Create .ssh folder and fill authorized_keys file (optional).
# mkdir /usr/home/user/.ssh
-# echo "your_public_key_here" >> /usr/home/user/.ssh/authorized_keys
-# chown -R user:user /usr/home/user/.ssh
-# chmod -R 700 /usr/home/user/.ssh
-User directory can look like this.
-[user@bastion ~]$ ls -al
-total 3
-drwxr-xr-x 4 user user 5 Oct 20 11:24 .
-drwxr-xr-x 4 root wheel 4 Oct 19 11:59 ..
--rw-r--r-- 1 root user 43 Oct 19 14:09 .bash_profile
-drwx------ 2 user user 5 Oct 19 12:40 .ssh
-drwxr-xr-x 2 user user 3 Oct 19 14:21 bin
-Result
+# mkdir /usr/home/user/bin
+Symlink the only required binaries into this directory.
+# ln -s /usr/local/bin/ssh /usr/home/user/bin/ssh
+Create bash profile.
+# cat /usr/home/user/.bash_profile
+PATH=$HOME/bin
+export PATH
+Make sure the permissions are so that the user cannot modify its own .(bash_)profile files.
# chown root:user .bash_profile .profile
+Remove also all unused rc files like cshrc, shrc, etc.
+# rm .cshrc .shrc ...
+Create .ssh folder and fill authorized_keys file (optional).
# mkdir /usr/home/user/.ssh
+# echo "your_public_key_here" >> /usr/home/user/.ssh/authorized_keys
+# chown -R user:user /usr/home/user/.ssh
+# chmod -R 700 /usr/home/user/.ssh
+User directory can look like this.
+[user@bastion ~]$ ls -al
+total 3
+drwxr-xr-x 4 user user 5 Oct 20 11:24 .
+drwxr-xr-x 4 root wheel 4 Oct 19 11:59 ..
+-rw-r--r-- 1 root user 43 Oct 19 14:09 .bash_profile
+drwx------ 2 user user 5 Oct 19 12:40 .ssh
+drwxr-xr-x 2 user user 3 Oct 19 14:21 bin
+Result
- FreeBSD Jail with latest packaged version of OpenSSH-Portable
- Commands are unavailable and absolute paths are not allowed. @@ -174,26 +180,26 @@ drwxr-xr-x 2 user user 3 Oct 19 14:21 bin
- The
.bash_profilefile is read-only for the user. - Only some bash functions + the
sshbinary is available for the user.
[user@bastion ~]$ ls
--rbash: ls: command not found
-
-[user@bastion ~]$ /bin/ls
--rbash: /bin/ls: restricted: cannot specify `/' in command names
-
-[user@bastion ~]$ export PATH=/usr/bin
--rbash: PATH: readonly variable
-
-[user@bastion ~]$
-! break continue else fg in pushd shopt true while
-./ builtin coproc enable fi jobs pwd source type {
-: caller declare esac for kill read ssh typeset }
-[ case dirs eval function let readarray suspend ulimit
-[[ cd disown exec getopts local readonly test umask
-]] command do exit hash logout return then unalias
-alias compgen done export help mapfile select time unset
-bg complete echo false history popd set times until
-bind compopt elif fc if printf shift trap wait
-[user@bastion ~]$ ls
+-rbash: ls: command not found
+
+[user@bastion ~]$ /bin/ls
+-rbash: /bin/ls: restricted: cannot specify `/' in command names
+
+[user@bastion ~]$ export PATH=/usr/bin
+-rbash: PATH: readonly variable
+
+[user@bastion ~]$
+! break continue else fg in pushd shopt true while
+./ builtin coproc enable fi jobs pwd source type {
+: caller declare esac for kill read ssh typeset }
+[ case dirs eval function let readarray suspend ulimit
+[[ cd disown exec getopts local readonly test umask
+]] command do exit hash logout return then unalias
+alias compgen done export help mapfile select time unset
+bg complete echo false history popd set times until
+bind compopt elif fc if printf shift trap wait
+
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- FreeBSD - Jail - Secure Jumphost
-FreeBSD jail
-ezjail-admin create bastion 'bridge0|10.0.0.10'
-pkg install bash
-OpenSSH-Portable
-pkg install openssh-portable
-$ cat /etc/rc.conf
-
-# OpenSSH
-sshd_enable="NO"
-openssh_enable="YES"
-Check only what the current best practices are regarding the full OpenSSH daemon configuration. -For example check; https://infosec.mozilla.org/guidelines/openssh
-$ cat /usr/local/etc/sshd
-
-...
-ListenAddress 10.0.0.10
-...
-Stop and start the services.
-service sshd stop
-service openssh start
-User
-Create a default user and make sure the user has the /usr/local/bin/rbash shell.
$ mkdir <user homedir path>/bin
-Symlink the only required binaries into this directory.
-$ ln -s /usr/local/bin/ssh <user homedir path>/bin/ssh
-Create bash profile.
-$ cat .bash_profile
-PATH=$HOME/bin
-export PATH
-Make sure the permissions are correct.
- -Rundeck 3.3.1 updated its ‘mysql-connector-java’ dependancy to version 8.0.21 which renamed the com.mysql.jdbc.Driver classname to com.mysql.cj.jdbc.Driver.
Reconfigure Rundeck accordingly:
-/etc/rundeck/rundeck-config.properties
-...
-- dataSource.url = jdbc:mysql://localhost/rundeck?autoReconnect=true&useSSL=false
-+ dataSource.url = jdbc:mysql://localhost/rundeck?serverTimezone=Europe/Amsterdam
-...
-- dataSource.driverClassName = com.mysql.jdbc.Driver
-+ dataSource.driverClassName = com.mysql.cj.jdbc.Driver
-+ dataSource.properties.autoReconnect = true
-+ dataSource.properties.useSSL = false
-...
-/etc/rundeck/rundeck-config.properties
+...
+- dataSource.url = jdbc:mysql://localhost/rundeck?autoReconnect=true&useSSL=false
++ dataSource.url = jdbc:mysql://localhost/rundeck?serverTimezone=Europe/Amsterdam
+...
+- dataSource.driverClassName = com.mysql.jdbc.Driver
++ dataSource.driverClassName = com.mysql.cj.jdbc.Driver
++ dataSource.properties.autoReconnect = true
++ dataSource.properties.useSSL = false
+...
+
Services
-
+
+
@@ -148,7 +156,7 @@
©
- 2020
+ 2022
Simon Cornet
diff --git a/public/tags/index.html b/public/tags/index.html
index 658e581..c72e6d4 100644
--- a/public/tags/index.html
+++ b/public/tags/index.html
@@ -56,11 +56,16 @@
-
-
+
+
+
+
+
+
+
-
+
@@ -135,7 +140,7 @@
©
- 2020
+ 2022
Simon Cornet
diff --git a/static/android-chrome-144x144.png b/static/android-chrome-144x144.png
deleted file mode 100644
index 4a962f6..0000000
Binary files a/static/android-chrome-144x144.png and /dev/null differ
diff --git a/static/android-chrome-192x192.png b/static/android-chrome-192x192.png
deleted file mode 100644
index 3654ec1..0000000
Binary files a/static/android-chrome-192x192.png and /dev/null differ
diff --git a/static/android-chrome-256x256.png b/static/android-chrome-256x256.png
deleted file mode 100644
index b432fc1..0000000
Binary files a/static/android-chrome-256x256.png and /dev/null differ
diff --git a/static/android-chrome-36x36.png b/static/android-chrome-36x36.png
deleted file mode 100644
index 2a3b345..0000000
Binary files a/static/android-chrome-36x36.png and /dev/null differ
diff --git a/static/android-chrome-384x384.png b/static/android-chrome-384x384.png
deleted file mode 100644
index 42127d9..0000000
Binary files a/static/android-chrome-384x384.png and /dev/null differ
diff --git a/static/android-chrome-48x48.png b/static/android-chrome-48x48.png
deleted file mode 100644
index 6bc9e31..0000000
Binary files a/static/android-chrome-48x48.png and /dev/null differ
diff --git a/static/android-chrome-512x512.png b/static/android-chrome-512x512.png
deleted file mode 100644
index c1f6470..0000000
Binary files a/static/android-chrome-512x512.png and /dev/null differ
diff --git a/static/android-chrome-72x72.png b/static/android-chrome-72x72.png
deleted file mode 100644
index 4644730..0000000
Binary files a/static/android-chrome-72x72.png and /dev/null differ
diff --git a/static/android-chrome-96x96.png b/static/android-chrome-96x96.png
deleted file mode 100644
index 7c92cdc..0000000
Binary files a/static/android-chrome-96x96.png and /dev/null differ
diff --git a/static/apple-touch-icon-114x114-precomposed.png b/static/apple-touch-icon-114x114-precomposed.png
deleted file mode 100644
index e6fee9d..0000000
Binary files a/static/apple-touch-icon-114x114-precomposed.png and /dev/null differ
diff --git a/static/apple-touch-icon-114x114.png b/static/apple-touch-icon-114x114.png
deleted file mode 100644
index b0a1509..0000000
Binary files a/static/apple-touch-icon-114x114.png and /dev/null differ
diff --git a/static/apple-touch-icon-120x120-precomposed.png b/static/apple-touch-icon-120x120-precomposed.png
deleted file mode 100644
index ce32c99..0000000
Binary files a/static/apple-touch-icon-120x120-precomposed.png and /dev/null differ
diff --git a/static/apple-touch-icon-120x120.png b/static/apple-touch-icon-120x120.png
deleted file mode 100644
index f53b3cd..0000000
Binary files a/static/apple-touch-icon-120x120.png and /dev/null differ
diff --git a/static/apple-touch-icon-144x144-precomposed.png b/static/apple-touch-icon-144x144-precomposed.png
deleted file mode 100644
index 85906ae..0000000
Binary files a/static/apple-touch-icon-144x144-precomposed.png and /dev/null differ
diff --git a/static/apple-touch-icon-144x144.png b/static/apple-touch-icon-144x144.png
deleted file mode 100644
index 51454a3..0000000
Binary files a/static/apple-touch-icon-144x144.png and /dev/null differ
diff --git a/static/apple-touch-icon-152x152-precomposed.png b/static/apple-touch-icon-152x152-precomposed.png
deleted file mode 100644
index 313e6d3..0000000
Binary files a/static/apple-touch-icon-152x152-precomposed.png and /dev/null differ
diff --git a/static/apple-touch-icon-152x152.png b/static/apple-touch-icon-152x152.png
deleted file mode 100644
index 578abb8..0000000
Binary files a/static/apple-touch-icon-152x152.png and /dev/null differ
diff --git a/static/apple-touch-icon-180x180-precomposed.png b/static/apple-touch-icon-180x180-precomposed.png
deleted file mode 100644
index 6698683..0000000
Binary files a/static/apple-touch-icon-180x180-precomposed.png and /dev/null differ
diff --git a/static/apple-touch-icon-180x180.png b/static/apple-touch-icon-180x180.png
deleted file mode 100644
index bba9e9f..0000000
Binary files a/static/apple-touch-icon-180x180.png and /dev/null differ
diff --git a/static/apple-touch-icon-57x57-precomposed.png b/static/apple-touch-icon-57x57-precomposed.png
deleted file mode 100644
index d517d2e..0000000
Binary files a/static/apple-touch-icon-57x57-precomposed.png and /dev/null differ
diff --git a/static/apple-touch-icon-57x57.png b/static/apple-touch-icon-57x57.png
deleted file mode 100644
index 50df9a1..0000000
Binary files a/static/apple-touch-icon-57x57.png and /dev/null differ
diff --git a/static/apple-touch-icon-60x60-precomposed.png b/static/apple-touch-icon-60x60-precomposed.png
deleted file mode 100644
index 6023594..0000000
Binary files a/static/apple-touch-icon-60x60-precomposed.png and /dev/null differ
diff --git a/static/apple-touch-icon-60x60.png b/static/apple-touch-icon-60x60.png
deleted file mode 100644
index 6424a7e..0000000
Binary files a/static/apple-touch-icon-60x60.png and /dev/null differ
diff --git a/static/apple-touch-icon-72x72-precomposed.png b/static/apple-touch-icon-72x72-precomposed.png
deleted file mode 100644
index 5f34967..0000000
Binary files a/static/apple-touch-icon-72x72-precomposed.png and /dev/null differ
diff --git a/static/apple-touch-icon-72x72.png b/static/apple-touch-icon-72x72.png
deleted file mode 100644
index 453e084..0000000
Binary files a/static/apple-touch-icon-72x72.png and /dev/null differ
diff --git a/static/apple-touch-icon-76x76-precomposed.png b/static/apple-touch-icon-76x76-precomposed.png
deleted file mode 100644
index 1782855..0000000
Binary files a/static/apple-touch-icon-76x76-precomposed.png and /dev/null differ
diff --git a/static/apple-touch-icon-76x76.png b/static/apple-touch-icon-76x76.png
deleted file mode 100644
index e6858af..0000000
Binary files a/static/apple-touch-icon-76x76.png and /dev/null differ
diff --git a/static/apple-touch-icon-precomposed.png b/static/apple-touch-icon-precomposed.png
deleted file mode 100644
index 6698683..0000000
Binary files a/static/apple-touch-icon-precomposed.png and /dev/null differ
diff --git a/static/apple-touch-icon.png b/static/apple-touch-icon.png
deleted file mode 100644
index bba9e9f..0000000
Binary files a/static/apple-touch-icon.png and /dev/null differ
diff --git a/static/browserconfig.xml b/static/browserconfig.xml
index f9c2e67..25c882c 100644
--- a/static/browserconfig.xml
+++ b/static/browserconfig.xml
@@ -2,7 +2,7 @@