Fredric News

Tag: SystemOps

  • Advanced TypeScript Types: Generics, Unions

    💡 Advanced TypeScript Types: Generics, Unions — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Advanced TypeScript Types: Generics, Unions. Utility Type TypeScript’s **Utility Types** are powerful tools that help you transform already defined types or easily create new types. Frequently used utility types include Partial, Readonly, Pick, and Omit. Below…

  • Long-Term K8s Monitoring: Prometheus & Thanos

    💡 Long-Term K8s Monitoring: Prometheus & Thanos — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Long-Term K8s Monitoring: Prometheus & Thanos. 📑 Table of Contents Declarative Management Deployments Action Olds Samples TroubleShooting Setups Declarative Management Deployments thanos + kube-prometheus-stack Architecture & System Flow Diagram SVG 100% Pan & Zoom thanos…

  • Network Subnet Masking & CIDR Notation

    💡 Network Subnet Masking & CIDR Notation — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Network Subnet Masking & CIDR Notation. References and Guidelines (NOTE) CIDR (Classless Inter-Domain Routing) and subnet mask are similar concepts, but they are not exactly the same thing. Subnet Mask is a 32-bit (IPv4) or…

  • Harbor Container Registry T-Shoot & Recovery

    💡 Harbor Container Registry T-Shoot & Recovery — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Harbor Container Registry T-Shoot & Recovery. When: docker push Issue: unknown blob () bash Copy docker push my-harbor/base/ubuntu:latest >>> The push refers to repository [my-harbor/base/ubuntu] a46a5fb872b5: Pushing [==================================================>] 80.62MB unknown blob Given Use Bitnami Helmchart…

  • OPNsense Internal CA & WebGUI SSL/TLS

    💡 OPNsense Internal CA & WebGUI SSL/TLS — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Internal CA & WebGUI SSL/TLS.

  • HashiCorp Vault Security: Transit Engine

    💡 HashiCorp Vault Security: Transit Engine — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for HashiCorp Vault Security: Transit Engine. Installation Operation Authentication Management Policy registration bash Copy k exec -it -n portal-system sts/vault — sh ### START IN CONTAINER vault login policy_name=admin-policy cat > /tmp/${policy_name}.hcl <<EOF path “*” { capabilities…

  • Docker Container Security: Non-Root Execution

    💡 Docker Container Security: Non-Root Execution — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Docker Container Security: Non-Root Execution. Dockerfile Hardening Example References and Guidelines (NOTE) There is a Dockerfile at /root/image/Dockerfile . It’s a simple container which tries to make a curl call to an imaginary api with a…

  • MariaDB Installation

    💡 MariaDB Installation — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for MariaDB Installation. References and Guidelines (NOTE) [!IMPORTANT] Sensitive information such as account password and cluster SST authentication information used when configuring the MariaDB installation on this page has been quarantined and transferred to the 🔒 common-secret page. If you…

  • Linux Filesystem Mgmt: df, du & mount Sheet

    💡 Linux Filesystem Mgmt: df, du & mount Sheet — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Linux Filesystem Mgmt: df, du & mount Sheet. Links print commons lvm

  • Stubby DNS Daemon: DNS-over-TLS (DoT) Client

    💡 Stubby DNS Daemon: DNS-over-TLS (DoT) Client — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Stubby DNS Daemon: DNS-over-TLS (DoT) Client. 📑 Table of Contents Architecture Installation Exec Features Architecture Architecture & System Flow Diagram SVG 100% Pan & Zoom Installation Mac bash Copy brew install stubby jq yq Exec…