473 reputation
411
bio website
location Edinburgh, UK
age 94
visits member for 3 years, 6 months
seen Jun 25 at 14:53

AWS Cloud Consultant with a strong DevOps engineering background


Mar
28
comment Hash function in shell that could be used for an ssh port from (say) hwaddr of eth0
You live and learn. I'd never really come across RANDOM in bash, nor the pre-seeding
Mar
28
comment Hash function in shell that could be used for an ssh port from (say) hwaddr of eth0
This is pretty much what I imagined, but my perl is appaling :) It works great, I get the number, but I also get a warning message "Integer overflow in hexadecimal number at /tmp/hash.pl line 8, <IFCONFIG> line 1." Can this be eliminated?
Mar
28
comment Hash function in shell that could be used for an ssh port from (say) hwaddr of eth0
One trick I had in mind (this is slightly OT) is to have the machines email home (or use cfengine or a web API or something like that) their config/public keys when they boot. That way I'd have a copy of the keys. So when they were switched on remotely, they would be knocking on the door, so as to speak, but not allowed in. I could take the config they had sent home, add it to the landing pad machine and then they would be allowed in. Yes I know there are some obvious flaws in this approach!
Mar
28
comment Hash function in shell that could be used for an ssh port from (say) hwaddr of eth0
We use ssh keys on each machine as well but they are equally a pain to manage and add to the authorized keys! I may have a look at using a generic key. I had a look at cssh as suggested and it appears to me to be used for concurrent execution on multiple machines; although i wouldn't rule it out, that isn't what we need this for. The port problem is just to make the remote machines more and more commodity like (eg for swap out in the event of problems)
Mar
28
asked Hash function in shell that could be used for an ssh port from (say) hwaddr of eth0
Mar
8
revised Using Amazon S3 for multiple remote data site uploads, securely
added 528 characters in body
Mar
7
asked Using Amazon S3 for multiple remote data site uploads, securely
Feb
19
awarded  Good Question
Feb
9
awarded  Editor
Feb
9
revised Securing HTTP traffic between data-logger and website, options
added 191 characters in body
Feb
9
answered Securing HTTP traffic between data-logger and website, options
Feb
8
awarded  Supporter
Feb
8
awarded  Scholar
Feb
8
accepted Why would I need a firewall if my server is well configured?
Feb
8
awarded  Nice Question
Feb
8
comment Why would I need a firewall if my server is well configured?
Good point about the single config, less room for error. I agree with being lazy wherever possible! cfengine does take out some of this complexity for me partly mitigating the issue of many config files ....but... it is only as good as the rules that are written of course. So you leave most config files at "default" (or near as) as a secondary barrier and have the firewall as (at least in a layer sense) the primary concern.
Feb
8
comment Why would I need a firewall if my server is well configured?
That's a very insightful answer, particularly the text about flipping from "everything is permitted..." to "everything is forbidden..." Your point is well made about local daemons as well. As is often the case - I am sure you will agree - the danger is often on the "inside"
Feb
8
awarded  Student
Feb
8
asked Why would I need a firewall if my server is well configured?