VirtualTam's bookmarks

1. oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise 2024-03-31

   tags: compression/lzma, compression/xz, linux, programming/c, programming/shell/bash, security, security/backdoor

   [ permalink ]

   • XZ Utils backdoor
   • xz/liblzma: Bash-stage Obfuscation Explained
   • /r/Linux - XZ Utils backdoor
   • Debian Bug report logs - #1068024 revert to version that does not contain changes by bad actor
   • FAQ on the xz-utils backdoor
   • LWN - A backdoor in xz
   • Everything I Know About the Xz Backdoor
2. (A few) Ops Lessons We All Learn The Hard Way 2023-02-18

   tags: cloud, network/dns, programming/shell, sysadmin

   [ permalink ]

   28. Blocking TCP port 53 traffic leads to very strange failures. Don't.
   29. The source you're looking at is not the code running in production.
   30. "Prod" is just another name for "staging".

3. Testing Microservices, the sane way | by Cindy Sridharan 2022-03-23

   tags: continuous-integration, microservice, programming/testing

   [ permalink ]

   Article series:

   • Testing Microservices, the sane way
   • Testing in Production, the safe way
   • Testing in Production: the hard parts

   Presentations:

   • Cindy Sridharan: Testing Microservices: A Sane Approach Pre-Production & In Production

   • https://twitter.com/copyconstruct/status/974530841190608897

   I’m more and more convinced that staging environments are like mocks - at best a pale imitation of the genuine article and the worst form of confirmation bias.

   It’s still better than having nothing - but “works in staging” is only one step better than “works on my machine”.

4. Scaling productivity on microservices at Lyft 2022-03-23

   tags: continuous-integration, envoy, microservice, network/http, programming, team

   [ permalink ]

   • Part 1 - History of development and test environments
   • Part 2 - Optimizing for fast local development
   • Part 3 - Extending our Envoy mesh with staging overrides
   • Part 4 - Gating Deploys with Automated Acceptance Tests
5. Docker - Allow COPY command's --chown to be dynamically populated via ENV or ARG · Issue #35018 2018-09-26

   tags: build, environment, linux/container/docker, variable

   [ permalink ]

   • https://stackoverflow.com/questions/51981904/cant-build-docker-multi-stage-image-using-arg-in-copy-instruction
   • https://github.com/moby/moby/issues/34129
6. Parallel stages with Declarative Pipeline 1.2 2018-09-13

   tags: continuous-integration, continuous-integration/jenkins, parallel, pipeline

   [ permalink ]

   • https://jenkins.io/blog/2018/07/02/whats-new-declarative-piepline-13x-sequential-stages/
   • https://jenkins.io/doc/pipeline/examples/#jobs-in-parallel
7. Use multi-stage builds | Docker Documentation 2018-04-15

   tags: build, linux/container, linux/container/docker, security

   [ permalink ]
8. Build Stages - Travis CI 2017-10-18

   tags: continuous-integration, continuous-integration/travis

   [ permalink ]

   • https://blog.travis-ci.com/2017-09-12-build-stages-order-and-conditions
   • https://docs.travis-ci.com/user/conditional-builds-stages-jobs
   • https://github.com/travis-ci/beta-features/issues/28
9. /r/linux - Gitlab is down: notes on the incident (and why you should always check backups) 2017-02-02

   tags: database, database/postgresql, failure, linux, recovery, replication, source-code-management/git, source-code-management/gitlab, sysadmin, tale

   [ permalink ]

   https://www.theregister.co.uk/2017/02/02/gitlabcom_has_found_and_restored_from_an_accidental_backup/ https://www.reddit.com/r/linux/comments/5rmhwg/gitlabcom_luckily_found_lost_data_on_a_staging/

10. Réseau Tripalium | Éoliennes Piggott : Stages, Manuel, Ressources, Actualités 2016-12-30

    tags: alternative, diy, electricity, energy, turbine, wind

    [ permalink ]

    via http://www.efficycle.fr/v3-power-ateliers-construire-eolienne-domestique/

11. Rubber Band - YouTube 2014-06-21

    tags: fail, instrument/piano, stage

    [ permalink ]
12. Casualties of Cool: Casualties of Cool on PledgeMusic 2014-03-27

    tags: back, cool, crowdfunded, devin, pledge, stage, townsend

    [ permalink ]
13. shadow warriors - MetalManiaX 2014-01-16

    tags: band, metal, roadie, rock, stage, tour

    [ permalink ]