Connexion
Debian Linux project announces the first update of the Debian project's stable distribution, Debian 12 (codename "bookworm") named Debian 12.1. This update mainly addresses security issues and significant problems. Security advisories have been published and are now available to download.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post Debian Linux 12.1 released with Security Updates appeared first on nixCraft.
Red Hat launched the Ansible Lightspeed Code Assistant Generative AI with IBM Watson Code Assistant in May 2023. This preview is now available to all Ansible users, allowing them to explore the technology, provide feedback to Red Hat, and further train the AI model. In this brief blog post, I will share my personal experience with installing and utilizing Ansible Lightspeed AI to create playbooks in VSCode using Ubuntu Linux 20.04 LTS desktop.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post Setting up VSCode for Ansible Lightspeed AI in Ubuntu 22.04 desktop appeared first on nixCraft.
The FreeBSD Release Engineering Team is announcing the availability of FreeBSD version 13.2-RELEASE on 11/April/2023. It is the third release of the stable/13 branches. I updated my FreeBSD version 13.1 to 13.2 using the CLI over an ssh-based session. Here are my quick notes.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to upgrade FreeBSD 13.1 to 13.2 release appeared first on nixCraft.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post nvtop – Awesome Linux task monitor for NVIDIA, AMD & Intel GPUs appeared first on nixCraft.
All Linux and Unix servers are managed manually or by automation tools such as Ansible using ssh. For example, say you have a server at Linode or AWS. Then you copy your public ssh key to a remote cloud server. Once copied, you can now login to those servers without a password as long as ssh keys are matched. It is the best practice. Unfortunately, you are not protecting ssh keys stored on a local desktop or dev machine at $HOME/.ssh/ directory. If your keys are stolen, an attacker can get access to all of your cloud servers, including backup servers. To avoid this mess, we can protect our ssh keys stored on local dev/desktop machines using physical security keys such as YubiKey.
In both cases, you need to insert your YubiKey (or any FIDO2 compatible hardware key) into a USB port and complete the authentication. In other words, ssh login will not work when malware or attacker has stolen your passphrase and ssh keys as they can not insert YubiKey and press the button on it to complete OTP for ssh keys.
In the corporate environment, we have a bastion host that allows ssh access with Yubikey. It is a special-purpose server on a network specifically designed and configured to withstand attacks. The server generally hosts an sshd process, and all other services are removed. Once logged into bastion host, you can access all other cloud servers easily.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How To Set Up SSH Keys With YubiKey as two-factor authentication (U2F/FIDO2) appeared first on nixCraft.
As you may know, email spoofing allows attackers to pose as someone else to gain illegal profit. For example, I only use webmaster@cyberciti.biz for communication, but someone might create a spoofed-up email, say info@opensourceflare.com, to trick someone. This is called email spoofing with fake headers as follow:
Date: Thu, 24 Oct 2021 12:46:10 From: nixCraft <info@opensourceflare.com> Reply-To: info@opensourceflare-email.com To: <my@personal_gmail_com>
Correct headers are often not checked by receiving email servers, and my@personal_gmail_com may think the email is from me. Here is the thing I don't use opensourceflare.com for email communication at all. So how do I prevent illegitimate email traffic on my domain? In this tutorial, I will explain how to configure DNS settings that tell receiving email servers this domain is not configured for emailing purposes and the attacker maliciously sending email on my behalf.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post DNS settings to avoid email spoofing and phishing for unused domain appeared first on nixCraft.
usbgurd
You deployed a perfect firewall and other network security policies preventing unauthorized access to the user's desktop computer over a network. However, you still need to block USB device access. We can configure a Linux desktop security policy to protect your computer against rogue USB devices (a.k.a. BadUSB) by implementing essential allow and blocklisting capabilities based on device attributes. For instance, I can define what kind of USB devices are authorized and how a USB device interacts with the Linux system. For example, I can define policy allowing Yubikey with serial number "XYZ" and USB LTE modem with serial # "ABC." Every other USB device access is denied by default.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to protect Linux against rogue USB devices using USBGuard appeared first on nixCraft.
Like every other solo developer and sysadmin, I do stuff using ssh. Some stuff is automated using scripts, and others require ssh login. For example, one of my scripts logs into my Linux and FreeBSD server using public ssh keys and does a particular type of work for me. I have a dedicated user account for that purpose called autovivek on Raspberry PI 4 for Ansible and custom script automation. Here is how it works:
{rpi4:~}$ ssh autovivek@192.168.2.17 /path/to/taks1
In other cases, it sends scripts and then executes them on the remote server named 192.168.2.17. Sounds good, right? So, when I need to make backups and other tasks, I lock down the autovivek user account on the server so that it will not modify data on disks. For example, here is how to lock down a user account:
{linux-server:~}$ sudo usermod -L -e 1 autovivek
## OR ##
{freebsd-server:~}$ sudo pw lock -n autovivek
However, I soon discovered that a user named autovivek can still log into the server and make changes despite being locked down on both Linux and FreeBSD servers.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post A cautionary tale about locking Linux & FreeBSD user accounts appeared first on nixCraft.
I already wrote about migrating from CentOS 8 to CentOS Stream. I also have a guide about migrating from CentOS 8 to Rocky Linux. Today, I am working on another side project with my partner, and I wanted to try out AlmaLinux. Hence, this quick post will list steps to convert existing VM or bare metal server from CentOS 8 to AlmaLinux 8. The server currently acts as API for mobile apps, including PostgreSQL, Redis, Python+Django, Apache web server, and SELinux and firewalld.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to migrate from CentOS 8 to AlmaLinux (conversion) appeared first on nixCraft.
I already wrote about migrating from CentOS 8 to CentOS Stream. Now, I am migrating Linode VM from CentOS 8 to Rocky Linux 8. The server runs a very simple workload that includes PHP 8.1, MariaDB server and Nginx, and SELinux and firewalld.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to migrate from CentOS 8 to Rocky Linux (conversion) appeared first on nixCraft.
As you know, CentOS 8 is ending soon. Red Hat is making the shift from CentOS 8 to CentOS Stream. CentOS stream places itself between Fedora Linux and RHEL. It is not 100% RHEL clone but ahead of RHEL development. Think of it as a midstream distro. Of course, if you need 100% RHEL compatibility, then you need Rocky Linux or AlmaLinux. However, the CentOS stream is more than sufficient for me as I only need Apache, Perl, and Python for my use case. This page explains how to migrate the existing installation of CentOS 8 stable to CentOS Stream without reinstalling a new operating system.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to migrate from CentOS 8 to CentOS stream conversion appeared first on nixCraft.
All supported versions of FreeBSD are affected by various security bugs that need to be applied ASAP. For example, a memory corruption bug exists in the bhyve hypervisor. Another overwrite the stack of ggatec and potentially execute arbitrary code. There are two issues fixed for OpenSSL in this security advisory too. Let us see what and how to fix these security vulnerabilities on FreeBSD.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post FreeBSD bhyve, OpenSSL, GEOM & libfetch security fixes released appeared first on nixCraft.
Red Hat Enterprise Linux (RHEL) 8.4 released. This version includes updates and various improvements for developers, hybrid cloud, edge deployments and more.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post RHEL 8.4 released and here is how to upgrade 8.3 to 8.4 appeared first on nixCraft.
Did you know? You can turn off the banner in Linux or Unix using a particular file. When you log in using ssh or other methods, you will find tons of information on the screen. Here is how my FreeBSD home server login looks:
Default motd with my hardware and other info
The first one is /etc/motd, and the second is the output of neofetch called from ~/.profile file. And my Ubuntu Linux box showing stuff too when I login using the ssh command:
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post Quick Tip: Turn off the login banner in Linux or Unix .hushlogin file appeared first on nixCraft.
The FreeBSD project released FreeBSD version 13. The new version comes with updated software and features for a wild variety of architectures. The latest release provides performance improvements and better support for FreeBSD. One can benefit greatly using an upgraded version of FreeBSD. Let us see what's new and quickly update FreeBSD 12 to 13 using the CLI.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post FreeBSD 13 released: Here is how to upgrade FreeBSD 12 to 13 appeared first on nixCraft.
All supported versions of FreeBSD are affected by various security bugs that need to be applied ASAP. If the process is privileged, it may escape jail and gain full access to the FreeBSD system. Similarly, when using Xen, a malicious or buggy frontend driver may be able to cause resource leaks. Let us see what and how to fix these security vulnerabilities on FreeBSD.
The post FreeBSD jail, xen, and .pam_login_access security fixes released appeared first on nixCraft.
Dart is easy to use BSD licensed programming language to build mobile, desktop, server, and web apps. Google creates and maintains the Dart ecosystem. It follows C-style syntax. We can compile code either to the native platform or JavaScript. Flutter allows building iOS/Android mobile and desktop/web apps from a single code base. Let us see how to install Dart programming language on a Debian or Ubuntu Linux and set vim as IDE.
The post How to install Dart on Linux and set up VIM as IDE appeared first on nixCraft.
As you know, Red Hat recently announced that CentOS Linux 8, as a rebuild of RHEL 8, will end in 2021. CentOS Stream continues after that date, serving as the upstream (development) branch of Red Hat Enterprise Linux. The news met with a strong reaction from the open-source community and CentOS users. Today, Red Hat released a new option where RHEL developer subscriptions can now be used in production environments. The developers and team can have up to 16 systems. In other words, it is a no-cost RHEL that small groups and developers can use to build packages and in production environments.
The post Red Hat introduces new no-cost RHEL option appeared first on nixCraft.
The last ten years in the computer and IT security world are crippled with so many vulnerabilities. We saw massive cloud computing adoption and end-users using mobile devices with high speed 4G LTE networks. A threat actor may have exploited such weakness in modern computers and networks. Let us look into top vulnerabilities and the attack surface in this decade (2010-2020) that affected Linux/Unix, macOS, IT, cloud-computing, and computers in general.
The post Significant vulnerabilities that crippled IT world this decade (2010-2020) appeared first on nixCraft.
A text editor is an essential tool for both developers and sysadmin, especially when dealing with text based sessions. We use a text editor to create, edit, and update text. A text editor is used for many things. Some use them to write documents. Some people write code and others use it to edit Linux and Unix configuration files locally or remote servers running in the cloud. Let us see the top 6 text editors for Linux, macOS, and Unix command-line users/developers.
The post Top 6 awesome text editors for Linux and Unix command-line users/developers appeared first on nixCraft.
As you know, Red Hat and IBM shocked the Linux community by killing CentOS 8 stable. There will be no CentOS Linux. Red Hat announced that there would be only CentOS Stream, which will act as a rolling version, and it will be used as next RHEL. Now we have a possible alternative called Rocky Linux.
The post CentOS Linux reborn as Rocky Linux enterprise operating system appeared first on nixCraft.
CentOS is an acronym for Community Enterprise Operating System, and it is a 100% rebuild of RHEL (Red Hat Enterprise Linux). While RHEL costs money, CentOS offered as a free community-supported enterprise Linux distro. Developers and companies who are good at Linux and don't want to pay RHEL support fees always selected CentOS to save money and get enterprise-class software. However, the free ride is over. Red Hat announced that CentOS Linux 8, as a rebuild of RHEL 8, will end at 2021. CentOS Stream continues after that date, serving as the upstream (development) branch of Red Hat Enterprise Linux.
The post CentOS Linux 8 will end in 2021 and shifts focus to CentOS Stream appeared first on nixCraft.
How do I install Golang on Ubuntu Linux for developing apps in Go?
The post How to install Go [golang] on Ubuntu Linux appeared first on nixCraft.
A video card is a special circuit board that controls what is displayed on a computer monitor. It is also called a graphics processing unit (GPU), which calculates 3D images and graphics for Linux gaming and other usages. Let us see the top 7 Linux GPU monitoring and diagnostic command-line tools to solve issues.
The post Top 7 Linux GPU Monitoring and Diagnostic Commands Line Tools appeared first on nixCraft.
Want to display a message or banner before OpenSSH (SSHD server) authentication? Try this simple tip to show the banner or ASCII logo on your Linux or Unix system.
The post Quick tip: Display banner/message before OpenSSH authentication appeared first on nixCraft.
Linux is a free and open-source kernel developed by Linus Torvalds, a Unix-like operating system clone. XKCD comic has a long tradition for including humorous geeky cartoons. In this post, I pick my favorite XKCD comics for Linux and Unix fans.
The post Top 15 XKCD comics for Linux and Unix fans appeared first on nixCraft.
There is a new kid in town for resource monitoring on Linux called bashtop. As the name suggests, the entire tool coded in the bash script itself that displays usage and stats for CPU, RAD, HDD/SSD, network, and other resources. Let us see how to install and use bashtop, which is an awesome Linux resource monitor. You don't need a Linux desktop to install it. You can also install this app on macOS/FreeBSD provided that you meet software requirements.
The post bashtop – Awesome Linux resource monitor that shows usage and stats for processor, memory, disks, and network appeared first on nixCraft.
Here are 10 Linux command to know the system and increase your productivity quickly.
The post 10 Linux commands to know the system appeared first on nixCraft.
KDE project and Slimbook released a new Linux ultrabook with AMD Ryzen 4000 CPU that comes with eight cores, 16 threads, and a Plasma desktop. Let us look into laptop hardware specifications and other information.
The post Linux Slimbook Laptop with AMD Ryzen 4000 released appeared first on nixCraft.
One of the essential tasks for developers and sysadmin is to get an alert notification about failed services or running out of disk space and other critical failures. Let us see how to send or push a direct message to a mobile device powered by Apple iOS or Google Android phone.
The post How to push/send message to iOS and Android from Linux CLI appeared first on nixCraft.
CentOS Linux 8.2 (2004) released. It is a Linux distribution derived from RHEL (Red Hat Enterprise Linux) 8.2 source code. CentOS was created when Red Hat stopped providing RHEL free. CentOS 8.2 gives complete control of its open-source software packages and is fully customized for research needs or for running a high-performance website without the need for license fees. Let us see what's new in CentOS 8.2 (2004) and how to upgrade existing CentOS 8.1.1199 server to 8.2.2004 using the command line.
The post CentOS Linux 8.2 (2004) released and here is how to upgrade it appeared first on nixCraft.
The cat (short for concatenate) command is one of the most frequently used flexible commands on Linux and Unix-like operating systems. Say hello to bat Linux command, which is a cat command written in Rust programming language. The bat command comes with syntax highlighting, git integration, and works as is a drop-in cat command replacement. Let us see how to install bat on Linux and Unix system for fun and profit.
The post bat Linux command – A cat clone with written in Rust appeared first on nixCraft.
How do I install Adminer on Ubuntu 20.04 LTS for database management over the web?
The post How to install Adminer on Ubuntu 20.04 LTS appeared first on nixCraft.
Let's Encrypt is a non-profit certificate authority that provides X.509 certificates for Transport Layer Security (TLS) encryption free of cost. The TLS certificate is valid for 90 days only. However, Due to the bug, they need to revoke many (read as "certain") Let’s Encrypt TLS/SSL certificates. Let us see how to find out if you are affected by this bug and how you can fix it to avoid any problems with your TLS/SSL certificates.
The post Letsencrypt is revoking certificates on March 4 appeared first on nixCraft.
System76 is a Denver, Colorado-based American computer manufacturer. They are specializing in the sale of Linux powered laptops, desktops, and servers. Last year System76 announced two Intel laptops with Coreboot, which as an alternative to proprietary BIOS using Intel 10th Gen CPUs. Now, System76 updated its Linux workstations line and ship with the latest AMD chips for CPU-intensive workloads. But how much of a difference can 64 cores AMD CPU make?
The post System76 Announces AMD Threadripper Linux Workstations appeared first on nixCraft.
CentOS Linux 8.1 (1191) released. It is a Linux distribution derived from RHEL (Red Hat Enterprise Linux) 8.1 source code. CentOS was created when Red Hat stopped providing RHEL free. CentOS 8.1 gives complete control of its open-source software packages and is fully customized for research needs or for running a high-performance website without the need for license fees. Let us see what's new in CentOS 8.1 (1911) and how to upgrade existing CentOS 8.0.1905 server to 8.1.1911 using the command line.
The post CentOS Linux 8.1 (1911) released and here is how to upgrade it appeared first on nixCraft.
Look like Dell listing to customer feedback. Dell XPS 13 Developer Edition is the ultimate Linux laptop for developers and Linux enthusiasts/power users. The Dell XPS 13 Developer Edition 2020 now supports 10th Gen Intel CPU and 32GB ram. This system comes pre-installed with Ubuntu Linux 18.04, but you can install any other distro.
The post Dell XPS 13 Developer Edition 2020 Ubuntu Laptop Announced appeared first on nixCraft.
Helios64 is an upgraded version Helios4 of ARM-based NAS SBC (Single-board computer) for Linux. This NAS (Network Attached Storage) comes with 5 SATA 3.0 port, M.2 sata slot, LPDDR 4 ram, and hexacore SoC. Let us see some details about the Helios64 Arm-Based Linux NAS SBC, including pricing and hardware specs information.
The post Helios64 Arm-Based Linux NAS announced appeared first on nixCraft.
Kubuntu is a free and open-source version based upon Ubuntu Linux. Kubuntu flavor uses KDE instead of GNOME desktop. Now, the Kubuntu project announced the first authorized laptop called Kubuntu Focus in collaboration with MindShareManagement Inc, and Tuxedo Computers. Let us see technical specs and other information.
The post Kubuntu Linux Focus Laptop Announced appeared first on nixCraft.
The Debian GNU/Linux project has released an updated version of its stable Linux distribution Debian 10 ("buster"). You must upgrade to get corrections for security problem as this version made a few adjustments for the severe issue found in Debian version 10.8. Debian is a Unix-like (Linux distro) operating system and a distribution of Free Software. It is mainly maintained and updated through the work of many users who volunteer their time and effort. The Debian Project was first announced in 1993 by Ian Murdock.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post Debian Linux 10.9 released and here is how to upgrade it appeared first on nixCraft.
Ubuntu Linux 19.10 released and will be supported for nine months till July 2020. It is codenamed as Eoan Ermine. The newer release comes with updated Linux kernel 5.3.x, NVIDIA drivers for gaming or AI programming, ZFS on root, OpenStack Train, and more. Let us see what's new in Ubuntu 19.10 and how to upgrade 19.04 to 19.10 using the command-line options.
The post Ubuntu Linux 19.10 released: New Features and Download appeared first on nixCraft.
Are you looking for modern Linux laptops with coreboot? The wait is over. Coreboot is a free and open-source software. The coreboot project aimed at replacing the proprietary BIOS firmware and blobs. System76 recently announced two Intel laptops with Coreboot, which as an alternative to proprietary BIOS. These laptops are using Intel 10th Gen CPUs.
The post Modern Linux Laptops with Coreboot Firmware From System76 appeared first on nixCraft.
The neofetch command like utility written in a bash shell. The main purpose of neofetch is to be used in screenshots to display other users what operating system or Linux distro you are using including theme, icons, hardware config and more. Now we have another tool called pfetch. It is a pretty system information tool written in POSIX sh. Let us see how to install and use pfetch Linux and Unix hardware information tool.
The post pfetch Linux and Unix hardware information tool appeared first on nixCraft.
I want to start command called foo, and kill it if still running after given DURATION in seconds. How do I run a command a time Limit on Linux? How do I run a Linux command, and have it timeout (abort) after N seconds?
The post Linux run a command with a time limit (timeout) appeared first on nixCraft.
CentOS Linux 8 released. It is a Linux distro derived from RHEL 8. CentOS was created when Red Hat stopped providing RHEL free. These days CentOS mostly used on servers, HPC, and desktop. CentOS is a high-quality Linux distribution. It gives complete control of its open-source software packages and is fully customized for research needs or for running a high-performance website without the need for license fees. Let us see what's new in CentOS 8.
The post CentOS Linux 8 released: New Features and Download appeared first on nixCraft.
The CentOS Linux project has released an updated version of its stable Linux distribution CentOS Linux 7.7. You must upgrade to get corrections for security problem as this version made a few adjustments for the severe issue found in CentOS 7.6. CentOS is a Linux distro that is mainly maintained and updated through the work of many users who volunteer their time and effort. It is based upon RHEL 7.7 upstream source code.
The post CentOS Linux 7.7 released and here is how to update it appeared first on nixCraft.
Linux kernel version 5.3 released. This version includes many improvements including support for AMD Navi GPU, support for new IPv4 addresses in the 0.0.0.0/8 range, the lightweight hypervisor ACRN for embedded IoT devices and much more.
The post Linux Kernel 5.3 released and here is how to install it appeared first on nixCraft.
On 26 August 1991, Linus Torvalds announced hobby project that was supposed to better than Minix operating systems. He said I am doing a free operating system. Just a hobby and won't be big or professional like GNU. Linux turns 28 years old, and we are going to celebrate Linux's birthday by sharing comics in pop culture that made it even more popular.
The post In comics: Linux celebrates 28th birthday appeared first on nixCraft.
Dell recently announced the new XPS 13 developer edition powered by Ubuntu Linux and Intel's 10th generation Comet Lake CPUs. The new device will soon be available in the US, Canada, and European markets. It is good news for both developers and Linux enthusiast who wants Linux laptop with preloaded Ubuntu operating systems. Let us see new Linux XPS 13 developer edition specs and other information.
The post Dell announces new Linux XPS 13 developer edition 7390 laptop appeared first on nixCraft.
Lateo.net - Flux RSS en pagaille (pour en ajouter : @ moi) 