Does TKL have a network security scan run against it on candidate/release? I would be interested to know how the core stands up against the usual security scanning tools in the industry. Essentially, does core represent a fairly secure image, or is it running wide open asking for attacks? I am sure it is not running wide open, but I am sure you can understand where I am coming from.
Is there a 'hardening' or security state that has to be met before core is graduated to a release and used for downstream apps/images? Maybe I have overlooked this somewhere?
Inherited a very old system. Webmin 1.490 on redmine (Ubuntu Linux 8.04.3). Need to upgrade/move/or replace to get in line with a security audit. I found the upgrade all button in the web interface, but it errors out .
We have just migrated our gitlab instance into a turnkey gitlab lxc instance. I am happy to see the switch to the omnibus install, so kudos for that.
I am mixed about the tklbam design which, unless there is something I'm missing, when using the stock config, make a single huge tar with the gitlab-backup command (configured in /etc/tklbam/hooks.d). By default, this takes ALL repositories, artifacts, etc.
I am my companies first dedicated Sysadmin and am now in charge of migrating the existing Infrastructure away from the MSP that hosted everything IT related prior to my arrival. This is a 45 person company selling hardware and software.
Historically, iptables (and friends) has been the way to manage a firewall on linux (possibly using a gui or cli wrapper), then nftables came along and was supposed to replace iptables, but then bpfilter came along. And even after reading several blog posts about it, I'm still not really sure how bpfilter fits in. Will iptables and/or nftables just be changed to use bpf as the implementation, or will both get replaced by something else that uses eBPF to implement packet filtering?
Now that Valve has decided to no longer produce the Steam Controller, how many of you would be interested in petitioning them to release it and all associated software via the MIT, GPL, or some other license?