Server Security Update Best Practices
Securing the Server with Update Patches In any environment it is important to keep systems up to date with security patches that fix vulnerabilities. In large deployments with many use cases, you may...
View Article[FIXED] Libvirtd QEMU / KVM monitor unexpectedly closed – failed to create...
Fixing Libvirt/QEMU KVM Permission Errors in RHEL 7/CentOS 7 If you get errors like these while trying to live-migrate a virtual machine or run `virsh start`, then there is a simple fix. If this is a...
View ArticleFixed Versions: Linux SACK Attack – Denial of Service
The recently published CVE-2019-11477 and CVE-2019-11478 attacks enable an attacker with access to a TCP port on your server (most everyone, including those with web or mail servers) to either: Slow it...
View ArticleApache Performance Tuning
Understanding Apache Tuning When Apache gets flooded with connections, sometimes the server will stop responding to requests even though the CPU isn’t maxed out and the disk IO is not a problem. You...
View ArticleForce Docker to Boot Container into One Program
Specifying the Program that Docker Should Launch at Start Time Sometimes if you are working with a container that gets stuck in a boot loop you need to force it to start a specific application for...
View ArticleRedHat/CentOS/RHEL 7 does not copy mdadm.conf into Dracut
Force MD and LUKS Auto-Detection There is a bug in RedHat 7 releases for some systems when md is used that prevents booting. For some reason it does not copy mdadm.conf into the initrd generated by...
View ArticleClik here to view.
Docker or KVM: Which is Right for You?
Over the years there have been many different technologies to isolate workloads. Isolation is important for security because if one workload is compromised, and they are not isolated, then others can...
View ArticleClik here to view.
How to reset your root password!
From time to time I am asked how to set reset the root password on a Linux server when you get locked out. Obvious for security reasons you can’t to do this remotely, but it is pretty easy to do if you...
View ArticleRecover Deleted MegaRAID Volume with Linux
Recently a customer with a 4-disk RAID5 array backed by a MegaRAID controller came to us because their RAID volume was missing. The virtual disk (VD) exported by the RAID controller had disappeared!...
View ArticleClik here to view.
Thwarting the Terrapin SSH Attack (Mitigation)
The Terrapin Attack is the biggest SSH vulnerability that we have seen in decades. Terrapin splices TCP sequence numbers to truncate SSH extension negotiation. While this is a concern, effective...
View Article
