All.I am currently running docker 1.13 on CentOS 7 boxes with devicemapper storage plugin. I would like to know what are your experiences in regard to:- storage plugins- kernel versions- stabilityI consider upgrade to docker 17.03.1 and would like..
All.I am currently searching for a decent image/container/registry scanner. Iwould like to be able to check images for CVE, at the moment I am using rhel/CentOS/ubuntu/debian based images.I tried on CentOS7:- openscap (oscap-docker): needs atomic ..
All.I currently have a problem with proper invocation of a python script with cron.non-root $ crontab -l#Ansible: script_repo_scanner55 11 * * * /usr/bin/python /path/script_repo_scanner.py –bb_user bb_user–bb_pass bb_pass –bd_log_dir /path/logs &>/path/script_repo_scanner.py.log..
All.I am trying to install some software. Part of its installation is an invocation of command similar to:# sudo-H -E -u postgres /bin/bash -c /usr/bin/python2.7/bin/bash: /usr/bin/python2.7: Permission deniedFrom my perspective:# ls -l /bin/bash /usr/bin/python2.7-rwxr-xr..
All.I am currently using OpenStack Juno on CentOS 7. The problem is that by default OpenStacks Cinder service creates logical volumes of lineartype. I would like to have them stripped over all physical disks to get better write performance.Is ther..
All.Currently I am trying to change a logical volume from linear to stripped because I would like to have a better write throughput. I would like to perform this change live without stopping access to this lv.I have found two interesting examples:http://community.hpe.com/t5/System-Administration/Need-to-move-the-data-from-Linear-LV-to-stripped-LV-on-RHEL-5-7/td-p/6134323http://www.depesz.com/2015/10/08/converting-logical-volume-so-that-its-striped/B..
All :)I have three servers, all with CentOS 7 installed 3 days ago. I need on them old naming scheme (ethX) for network interfaces, because of that:# grep GRUB_CMDLINE_LINUX /etc/sysconfig/grub GRUB_CMDLINE_LINUX..
All :)In CentOS 7 we have systemd. Is in this case supervisord needed? What are your experiences? systemd can clearly be used to respawn processes in case they will die…
All :)I need to check and possibly update openssl on my fleet of servers. I would like to avoid reboot if possible. I think that I can:- update openssl version with yum- check all daemon processes which are constantly running in the os, for example ..
All:)I would like to start using a tool for automating of os hardening. I found some informations about Bastille. One things which attracted my attention is that in http://bastille-linux.sourceforge.net/news_updates.htm the last post is from Janu..