Home Blog Page 405

Automated Compliance Testing with InSpec

Those who have been involved in converting a home-grown system to one in which strict compliance rules are observed knows the pain involved. Whereas previously a laissez-faire atmosphere ruled the day, all of a sudden, a rigid structure with many requirements and conditions regulate the administrator’s work, often with far-reaching consequences. The sheer volume of regulations alone can make moving forward difficult. If a quick fix is needed in an emergency, compliance rules often provide for exceptions, but they do need to be replaced by the right solutions looking forward.

InSpec, from the developer of Chef, promises to run compliance tests automatically and regularly on target systems with tests you define in a human-readable language that avoids the need to learn an overly elaborate syntax. InSpec describes itself as a framework for auditing and testing. First and foremost, it’s all about acid testing the existing automated system to determine whether the system and the services running on it are configured in line with policies. The slogan is “Compliance as Code.”

Having a tool for automated compliance testing come from the same company that also has the Chef automation tool in its portfolio makes a lot of sense.

Read more at ADMIN Magazine

Endless OS Helps Tear Down Linux Wall

The Endless OS community’s goal is to build a global platform for digital literacy. Its EOS Shell desktop is a big factor in making this universal computing platform work. It eliminates the technology barrier that often inhibits Linux newcomers.

Although it looks and feels a lot like an Android shell running on a PC, Endless OS is a fully functional Linux distro designed to be easy to install and very simple to use.

Endless Mobile released this latest version, 3.3.10, on Feb. 10. Its features include automatic updates, improved launch speed for applications, and some Flatpak programs from the Flathub community repository rather than Endless’ custom repository.

Read more at LinuxInsider

Adrian Cockcroft on the Convergence of Cloud Native Computing and AWS

Cloud native computing is transforming cloud architectures and application delivery at organizations of all sizes. Via containers, microservices, and more, it introduces many new efficiencies. One of the world’s leading experts on it, Adrian Cockcroft, Vice President of Cloud Architecture at Amazon Web Services (AWS), focused on cloud native computing within the context of AWS in his keynote address at KubeCon + CloudNativeCon 

In his talk, called “Cloud Native at AWS,” Cockcroft covered topics including Fargate container provisioning, running Kubernetes on AWS, and open source trends at AWS. “Cloud native computing is pay-as-you-go, emphasizing self-service,” he said. “You’re not going to have to invest in a data center and guess at how much capacity you are going to need next year. Through it, you can get very high utilization.”

Watch the complete video at The Linux Foundation

 

How to Use WSL Like a Linux Pro

In the previous tutorial, we learned about setting up WSL on your Windows 10 system. You can perform a lot of Linux command like tasks in Windows 10 using WSL. Many sysadmin tasks are done inside a terminal, whether it’s a Linux based system or macOS. Windows 10, however, lacks such capabilities. You want to run a cron job? No. You want to ssh into your server and then rsync files? No way. How about managing your local files with powerful command line utilities instead of using slow and unreliable GUI utilities?

In this tutorial, you’ll see how to perform additional tasks beyond managing your servers using WSL – things like mounting USB drives and manipulating files. You need to be running a fully updated Windows 10 and the Linux distro of your choice. I covered these steps in the previous article, so begin there if you need to catch up. Let’s get started.

Keep your Linux system updated

The fact is there is no Linux kernel running under the hood when you run Ubuntu or openSUSE through WSL. Yet, you must keep your distros fully updated to keep your system protected from any new known vulnerabilities. Since only two free community distributions are officially available in Windows Store, out tutorial will cover only those two: openSUSE and Ubuntu.

Update your Ubuntu system:

# sudo apt-get update

# sudo apt-get dist-upgrade

To run updates for openSUSE:

# zypper up

You can also upgrade openSUSE to the latest version with the dup command. But before running the system upgrade, please run updates using the previous command.

# zypper dup

Note: openSUSE defaults to the root user. If you want to perform any non-administrative tasks, please switch to a non-privileged user. You can learn how to create a user on openSUSE in this article.

Manage local files

If you want to use great Linux command line utilities to manage your local files, you can easily do that with WSL. Unfortunately, WSL doesn’t yet support things like lsblk or mnt to mount local drives. You can, however, cd to the C drive and manage files:

/mnt/c/Users/swapnil/Music

I am now in the Music directory of the C drive.

To mount other drives, partitions, and external USB drives, you will need to create a mount point and then mount that drive.

Open File Explorer and check the mount point of that drive. Let’s assume it’s mounted in Windows as S:

In the Ubuntu/openSUSE terminal, create a mount point for the drive.

sudo mkdir /mnt/s

Now mount the drive:

mount -t drvfs S: /mnt/s

Once mounted, you can now access that drive from your distro. Just bear in mind that distro running with WSL will see what Windows can see. So you can’t mount ext4 drives that can’t be mounted on Windows natively.

You can now use all those magical Linux commands here. Want to copy or move files from one folder to another? Just run the cp or mv command.

cp /source-folder/source-file.txt /destination-folder/

cp /music/classical/Beethoven/symphony-2.mp3 /plex-media/music/classical/

If you want to move folders or large files, I would recommend rsync instead of the cp command:

rsync -avzP /music/classical/Beethoven/symphonies/ /plex-media/music/classical/

Yay!

Want to create new directories in Windows drives, just use the awesome mkdir command.

Want to set up a cron job to automate a task at certain time? Go ahead and create a cron job with crontab -e. Easy peasy.

You can also mount network/remote folders in Linux so you can manage them with better tools. All of my drives are plugged into either a Raspberry Pi powered server or a live server, so I simply ssh into that machine and manage the drive. Transferring files between the local machine and remote system can be done using, once again, the rsync command.

WSL is now out of beta, and it will continue to get more new features. Two features that I am excited about are the lsblk command and the dd command that allow me to natively manage my drives and create bootable drives of Linux from within Windows. If you are new to the Linux command line, this previous tutorial will help you get started with some of the most basic commands.

Learn more about the Administering Linux on Azure (LFS205) course and sign up here.

6 Days Left to Submit a Proposal to Speak at LinuxCon + ContainerCon + CloudOpen China

Submit a proposal to speak at LinuxCon + ContainerCon + CloudOpen China (LC3), taking place in Beijing this June 25 – 27, and share your expertise with 3,000+ open source technologists, executives and community members.

We’re seeking a wide range of submissions on topics including Open Source Strategy & Governance, Networking & Orchestration, Linux Systems, Cloud Native & Containers, AI and more. Proposals are due Sunday, March 4, 2018. Submit Now.

Read more at The Linux Foundation

SecOps Spends Its Days Monitoring

Developers, Security and Operations: DevSecOps. The operations part of the term usually refers to IT operations. However, today narrows in on SecOps, that work in security operations centers (SOCs) and cyber incident response teams (CIRTs). The Cyentia Institute’s survey of 160 of these security analysts shows they face some of the same challenges developers and IT operations teams do. They spend more time on monitoring than any other activity, but they much rather solve problems and “hunt” new threats. SecOps does not like reporting or something called Shift Ops — the actual details of change control and making sure the team doesn’t burn out. Given the shortage of information security professionals, it is concerning that only 45 percent of respondents said their job experience was meeting their expectations.

Cyentia suggests that automation can reduce the time spent on monitoring, letting analysts focus on intrusion prevention and threat intelligence. 

Read more at The New Stack

How Compilers Work

Compilers translate source code into executable programs and libraries. Inside modern compiler suites, a multistage process analyzes the source code, points out errors, generates intermediate code and tables, rearranges a large amount of data, and adapts the code to the target processor.

Below the surface, a black box compiler handles complex processes that require good knowledge of machine theory and formal languages. Given the importance of compilers, it is not surprising that compiler construction is standard curriculum for computer science students. If you have never been to a college-level lecture on compiler theory – or if you went to the lecture but need a refresher course – this article summarizes the basics.

In simple terms, a compiler goes through three steps: It parses the source code, analyzes it, and synthesizes the finished program (Figure 1).

Figure 1: Rough structure of a compiler: parse code, analyze it, and create an executable program.

Read more at Linux Pro Magazine

Conan Package Manager Brings C and C++ to DevOps

Conan, a distributed, open source package and dependency manager, promises to bring C and C++ into devops.

The multiplatform package manager builds and shares native binaries. Conan lets you quickly create builds, port packages, and run them on different operating systems…

While intended for C and C++, Conan can manage builds from source, dependencies, and precompiled binaries for any language. 

Read more at InfoWorld

Why Open Source Could be IBM’s Key to Future Success in the Cloud

Ask most developers what they think of IBM and you’ll get a blank stare in response. “IB-who?” In our brave new cloud world, IBM—once so imperious with CIO golf calendars—is generally an afterthought for developers looking to deploy to the cloud. And yet there remain good reasons to consider Big Blue, especially for enterprises that have significant investments in IBM.

Instead of asking IBM, however, which tends to come up with antiquated answers like “Because we’re rad with Java,” I spoke with Linux Foundation executive director Jim Zemlin, who gave me a more compelling answer: Because IBM has deep experience making open source work in the enterprise.

Read more at Tech Republic

This Week in Open Source News: Documentary Series on Women in Tech to Premiere Next Month, Fake Linux News & More

This week in open source and Linux news: an exciting documentary series by open source communications veteran Jennifer Cloer to premiere in March, Steven J Vaughan-Nichols is fed up with fake Linux vulnerability story, and more! Read on to stay in the open source know!

1) Jennifer Cloer of reTHINKit PR & Wicked Flicks (former VP of Communications at The Linux Foundation) is premiering Episode 1 of her new documentary series about women in tech next month.

‘Chasing Grace’: Docuseries Tracks Women in Tech– The Business Journal 

2) Steven J. Vaughan-Nichols is frustrated by fake news of a security hole that gives attackers complete control over Linux servers.

Bogus Linux Vulnerability Gets Publicity– ZDNet

3) New Linux Foundation project can support carrier availability and performance needs in cloud services optimized for edge computing systems and applications.

The Linux Foundation Opens to the Edge with Akraino Project– SDxCentral

4) The Forbes Tech council explains why companies put money towards FOSS.

Why Pay For Something When It’s Free?– Forbes

5) “Musk is leaving the ethical AI organization he founded only two years ago.”

Elon Musk Steps Down From Open Source AI Group– Vice Motherboard