Questions tagged [pinning]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2 votes
1 answer
214 views

Apt Pinning: Pinning based on multiple criteria

I'm attempting to pin a package based on more than one field. In my case, the origin and the version. My specific reasons for doing this is to ping RabbitMQ's Erlang release at a specific version. I ...
user avatar
0 votes
1 answer
16 views

How to list all of the known root keys in docker (Docker Content Trust)

How can I list all of the Docker Content Trust root keys on my system? I am setting up a CI process that will use the debian:stable-latest docker image to build my application's releases in ephemeral ...
user avatar
0 votes
1 answer
172 views

Rollback Yum machine to historical state, ignoring "obsoletes"

I have a large number of stateful servers that use Yum for package management. I am interested in a general automatic process for rolling them back to a historical state. Usually, enabling the ...
user avatar
  • 101
0 votes
1 answer
281 views

Is it possible to have a partial hyperthreading with a Linux System?

I have a server with 2*14 cores with Hyperthreading enabled. This means I have (2*14*2=28*2) 56 vCPUs. [root@supervision1 /]# dmidecode -t 4 | egrep 'Socket Designation|Count' Socket Designation: ...
user avatar
1 vote
1 answer
2k views

How to accomplish Server Certificate pinning in Azure?

I have a Web API suite deployed in Azure managed by Azure APIM that transacts with an external API. I need to ensure that the Server Certificate from the external partner is validated and pinned ...
user avatar
1 vote
1 answer
708 views

Apt pinning returns error message about package headers

I have a server running Debian Stretch that I need to install PHP 7.1 on, which isn't available in the default repositories of Stretch, but in Testing aka Buster. I tried to use apt pinning to add the ...
user avatar
  • 51
0 votes
1 answer
834 views

How to update expired ssl certificate on server with key-pinning (hpkp)

On server with nginx web server was setup ssl section with key-pinning: add_header Public-Key-Pins 'pin-sha256="some-key"; pin-sha256="second-key"; max-age=5184000;' always; now certificate is ...
user avatar
1 vote
1 answer
1k views

How to recreate let's encrypt certificate with public key from the past?

So what we have is an invalid let's encrypt certificate, when we try to renew it, public key changes. Is there a way to preserve the old public key? Our clients have it implemented for SSL pinning ...
user avatar
  • 153
0 votes
3 answers
668 views

Ideally, how should HSTS / SSL Everywhere / Let's encrypt work with captive Wifi portals?

Some captive Wifi portals require the ability to 301/302 redirect a user to an authentication / terms of service page before permitting access to the Internet. This is at odds with SSL, which can't ...
user avatar
3 votes
3 answers
9k views

Cpu pinning strategy for kvm / centos7

I am migrating from Xen to Kvm. In Xen I was able to easily pin host cpus to guest vms, and also to pin host cpus to the "dom0" . In Kvm I can also easily pin host cpus to guests vms, but, as far as ...
user avatar
  • 2,709
0 votes
1 answer
125 views

Mismatch of pin rules for domain

I see some of those logs in my windows eventlog (Windows 10) 05/31/2017 07:44:03 AM LogName=Application SourceName=Microsoft-Windows-CAPI2 EventCode=4114 EventType=2 Type=Error ComputerName=VIE-TABSI-...
user avatar
2 votes
3 answers
869 views

Remove domain from HPKP preload list

So, this is a fun story regarding HTTP Public Key Pinning (HPKP) and HTTP Strict Transport Security (HSTS). I was playing with the HTST Always and HPKP preload options, not being fully aware of the ...
user avatar
0 votes
1 answer
33 views

Can I use cross-signing to facilitate HPKP management?

HPKP in a webserver works by adding headers to replies containing hashes of various public keys, such that at least one of the hashes is valid = of a certificate in the certificate chain of the ...
user avatar
1 vote
2 answers
4k views

Virtualization: vCPU pinning with Hyperthreading Host CPU?

I'm using KVM/libvirt on a Linux server with Core i7-2600 CPU, which has the following CPU topology (1 Socket, 4 Cores, 8 Threads): Physical | Logical ---------+-------- Core 0 | 0, 4 Core 1 | 1, ...
user avatar
  • 55
0 votes
0 answers
776 views

Debian apt install single package from experimental but keep original system upgrades

I'v installed xfce 4.12 on debian jessie from testing by adding the testing repo in /etc/apt/sources.list.d/testing.list File content: deb http://ftp.us.debian.org/debian/ testing main ...
user avatar
8 votes
3 answers
9k views

Install Debian Backports kernel automatically

I've got the following pinnings set: Package: linux-image-amd64 Pin: release a=wheezy-backports Pin-Priority: 1001 Package: * Pin: release a=wheezy-backports Pin-Priority: 499 I get the following ...
user avatar
  • 568
1 vote
2 answers
7k views

What does cpu-pinning mean in context of KVM hypervisor with multiple virtual machines

I am looking at configuring a KVM hypervisor to have some virtual machines. THe KVM hypervisor has 8 physical cores (16 with HyperThreading). I want to create 8 virtual machines on it but I am not ...
user avatar
0 votes
1 answer
501 views

How to use specific apt repository

I'm trying to install imagemagick package from my own repository. Here is my step-by-step: I created apt repository using reprepro utility with conf: Origin: custom-repo.s3.amazonaws.com Label: ...
user avatar
  • 3
2 votes
1 answer
225 views

Pinning specific subsection in Debian

I'm trying to pin some packages from a specific subsection (gnome in this case) in Debian jessie. For subsection I mean: gnome, admin, x11, etc… This value is showed by apt-cache in the 'Section' ...
user avatar
1 vote
1 answer
421 views

Package pinning in Debian lenny

I need your advice as I don't know if I hit a bug, or I am misunderstanding something. On a Debian Lenny, I am trying to prevent the installation of two particular packages, when they are requested ...
user avatar
  • 121
6 votes
2 answers
4k views

kvm and qemu host: Is there a limit for max CPUs (Ubuntu 10.04)?

Today we encountered a really strange behaviour on two identical kvm and qemu hosts (Dell R910). The host systems each have 4 x 10 Cores, which means that 40 physical cores are displayed as 80 within ...
user avatar