Home Blog Page 746

Containers Rated More Secure Than Conventional Apps, says Gartner

Containers are more secure than apps running on a bare OS and organisations that like not being hacked therefore need to seriously consider a move, according to analyst firm Gartner.

Analyst Jeorg Fritsch, in a new document titled How to Secure Docker Containers in Operation says “Gartner asserts that applications deployed in containers are more secure than applications deployed on the bare OS” because even if a container is cracked “they greatly limit the damage of a successful compromise because applications and users are isolated on a per-container basis so that they cannot compromise other containers or the host OS”.

Which is not to say that containers are perfect: the paper acknowledges that they possess “… innate security properties that make them vulnerable to kernel privilege escalation attacks” and are therefore “not the right tool for high-risk-assurance isolation.”

The paper nonetheless advocates that organisations “Benefit from the security of Linux containers by using a ‘container €first’ approach” and “Deploy internet-exposed applications in Docker containers with best-practice security whether or not you do CI/CD/DevOps.”

Read more at The Register

Linux Troubleshooting Cheatsheet: strace, htop, lsof, tcpdump, iftop & sysdig

This cheatsheet is a great guide of command-lines linux admins can use to get insights into their servers. Whether you’ve been an admin for one month or 20 years you’ve definitely used one if not all of these tools to troubleshoot an issue. Because we love sysdig (naturally!) we also included a translation for each of these common operations into the sysdig command line or csysdig.

Rather than attempt covering all options from manpages (which would have made for boring coverage of many esoteric, rarely-used switches), we’ve started from examples referenced at the most popular web pages you’d find when you search for terms like “strace examples”, “htop examples”, and so forth.

Do you have favorites that aren’t listed here? Let us know and we’ll include them in future articles.

Read more at sysdig

Linux Command To Put Your Ubuntu Laptop or Netbook In Hibernate/Suspend Mode

How do I suspend or hibernate from bash shell command line under Linux operating systems? How do I suspend or hibernate my Ubuntu Dell laptop using command line, without using additional software?

This tutorial explains how to suspend/hibernate from command line on Ubuntu Linux 16.04 LTS and Fedora Linux 24 workstation.

Howdy, Ubuntu on Windows! An Intro From Canonical’s Dustin Kirkland

Hi there!  My name is Dustin Kirkland, a Linux user for nearly 20 years, and an open source developer for almost as long.  I worked on Linux at IBM for most of a decade, on site at Red Hat for a bit, and now at Canonical for nearly another decade.  I started at Canonical as an engineer on the Ubuntu Server team and eventually evolved into the product manager responsible for Ubuntu as a server and cloud platform.  I’ve authored many open source utilities used by millions of Ubuntu users every day.  Open source software is my passion, my heart, and my soul.

I was working in Cape Town, South Africa when I received a strange call from a friend and colleague at Microsoft in January of 2016.  The call was decorated with subtlety as he danced around the technology underpinning what you and I today know as “Ubuntu on Windows,” but without any detail.  There was plenty of confusion.  Confusion around exactly what we were talking about.  Confusion about how this could even work.  Confusion about how I should feel about this.

But that confusion quickly disappeared a few days later as I saw the demo, for real.  I’ll never forget that moment.  I was in the Star Alliance lounge, in Heathrow airport, dialed into a Skype conference from my iPad (because Skype for Business doesn’t work on Linux), watching and listening as Microsoft kernel engineers demonstrated a Bash shell in an Ubuntu environment — natively compiled 64-bit ELF binaries — running natively on a Windows system.  What I saw was nothing shy of amazing.

Critically, this was more than just a science project.  Microsoft was genuinely interested in working with Canonical to deliver the full Ubuntu shell experience to Windows 10 users!  

Our friends at Microsoft actually call the entirety of the Ubuntu on Windows experience, “bash”.  Bash is how execs at Microsoft think of the command line Linux world, it seems.  It’s just a bash shell.  The Linux geeks among us find that pretty hilarious, because Bash is a scripting language, and a handful of native, built in commands.  But what the team here at Microsoft is actually sitting on, is far more than just Bash.  It’s the very Stargate to the entire Ubuntu world.  Apt install anything you can imagine:  compilers, libraries, debuggers, editors, games, other shells besides bash.  Perhaps you’ll find this as entertaining, when your Windows-running friends try Ubuntu on Windows for the first time, and they call it “bash.” 🙂

Anyway, even to this day, sometimes I have to pinch myself, and wonder again if I’m dreaming….

I’ve spent a the majority of the last two decades wondering “when” Microsoft would drop the hammer on the Linux party in the form of some ugly litigation.  I’ve billed thousands of hours of my time reviewing patents and intellectual property claims — the details of which I cannot speak about to this day — in preparation for some impending open source Armageddon.

And yet here I was, drafting a term sheet between Microsoft and Canonical, to put Ubuntu in the Windows Store and to make Ubuntu available on Windows 10 desktops everytime and anytime a Windows user typed the word “bash” from the Windows Start menu.  Holy smokes.  What unbelievable times in which we live!

Looking Ahead

So here we are today.  Ubuntu on Windows is real technology, that any Windows 10 user can trial, after jumping through a few minor hoops.  Hoops, that I’m told, Microsoft is working on removing.  The next article in this series walks you through the exact steps you’ll need to take to run Ubuntu on Windows.  Note that this is going to get much, much easier once this technology emerges from beta and into general availability.

Personally, I’m excited about the opportunities that Ubuntu on Windows presents, to bring the world of open source software and our way of development to more people than ever before.  That’s why this is good for every Linux.com reader out there.  We know and love our open source editors (vim and emacs), our tool chains (make, gcc, glibc), our web servers (Apache and Nginx), our scripting languages (Bash, Python, Perl, Ruby, PHP), our shells (bash, zsh, csh, fish).  And keeping free software all to ourselves has never been our plan.  So it’s really genuinely amazing to think about how many more people in this world will now be exposed to our open source way of life.

Hopefully, some of those new users will find their way to the third article in this series, as I’ll look at a dozen or so of the first shell commands every user should learn.

Developers should really enjoy the fourth and fifth articles in the series, where I’ll show how to write, compile, and execute a simple program in at least 15 different languages, in the Ubuntu on Windows system.  Many of these languages have no native Windows port, so effectively, this is the first time those languages are available natively in a Windows environment!

Finally, I’ll close out the series with the sixth article where we’ll run a few performance benchmarks, and check how fast and usable the Ubuntu on Windows environment actually is.

I hope you enjoy reading these articles as much as I’ve enjoyed writing them!

Cheers,

Dustin

Learn more about Running Linux Workloads on Microsoft Azure in this on-demand webinar with guest speaker Ian Philpot of Microsoft. Watch Now >> 

 

StorPool Unveils Latest Update, Adds CloudStack Support

Software-defined storage company StorPool has launched an upgraded version of its block storage system, which now integrates with CloudStack, the Apache software for public and private Infrastructure-as-a-Service (IaaS) clouds. According to the company, the new version also brings other improvements including lower CPU usage, up to 30 percent more IOPS, increasing data capacity saving of up to 15 percent, and increased scalability to beyond 1PB.

Read more at ZDNet

Open Source Offers Job Security as Businesses Navigate an IT Talent War

Open source offers job security as businesses navigate an IT talent war

If you’re in open source and looking for a job, chances are you won’t have to search long. According to recent research, businesses are going out of their way to findand hang ontotheir best open source talent. Last month, the 2016 Open Source Jobs Report found that 79% of hiring managers have increased incentives to retain their current open source professionals.

Another report by Harvard Business Review urges CIOs and business leaders toget involved in the open source community as an answer to their IT talent challenges

Read more at OpenSource.com

Minikube: Easily Run Kubernetes Locally

Editor’s note: This is the first post in a series of in-depth articles on what’s new in Kubernetes 1.3 

While Kubernetes is one of the best tools for managing containerized applications available today, and has been production-ready for over a year, Kubernetes has been missing a great local development platform.

For the past several months, several of us from the Kubernetes community have been working to fix this in the Minikube repository on GitHub. Our goal is to build an easy-to-use, high-fidelity Kubernetes distribution that can be run locally on Mac, Linux and Windows workstations and laptops with a single command.

Read more at Kubernetes Blog

A Beginners Guide to SQL

If you’re anything like me, SQL is one of those things that may look easy at first (it reads just like regular english!), but for some reason you can’t help but google the correct syntax for every silly query.

Is it “SELECT * WHERE a=b FROM c

or “SELECT WHERE a=b FROM c ON *” ?
Then, you get to joins, aggregation, and subqueries and everything you read just seems like gibberish. Something like this :

Read more at Soham Kamani’s Blog

Most Companies Still Can’t Spot Incoming Cyberattacks

Four out of five businesses lack the required infrastructure or security professionals with relevant skills to spot and defend against incoming cyberattacks.

According to a new report by US cybersecurity and privacy think tank Ponemon Institute on behalf of cybersecurity firm BrandProtect, 79 percent of cybersecurity professionals say that their organisations are struggling to monitor the internet for the external threats posed by hackers and cybercriminals.

Just 17 percent of respondents say that they have any sort of formal process in place for intelligence gathering which is applied across the whole company.

Read more at ZDNet

Chrooting Apache 2.4 with mod_unixd on Debian 8 (Jessie)

This guide explains how to set up mod_unixd with Apache on a Debian 8 system. With mod_unixd, you can run Apache in a secure chroot environment (similar to the older mod_chroot) and make your server less vulnerable to break-in attempts that try to exploit vulnerabilities in Apache or your installed web applications.

Read the full article.