Questions tagged [pinning]
The pinning tag has no usage guidance.
21
questions
2
votes
1
answer
214
views
Apt Pinning: Pinning based on multiple criteria
I'm attempting to pin a package based on more than one field. In my case, the origin and the version.
My specific reasons for doing this is to ping RabbitMQ's Erlang release at a specific version. I ...
0
votes
1
answer
16
views
How to list all of the known root keys in docker (Docker Content Trust)
How can I list all of the Docker Content Trust root keys on my system?
I am setting up a CI process that will use the debian:stable-latest docker image to build my application's releases in ephemeral ...
- 475
0
votes
1
answer
172
views
Rollback Yum machine to historical state, ignoring "obsoletes"
I have a large number of stateful servers that use Yum for package management. I am interested in a general automatic process for rolling them back to a historical state.
Usually, enabling the ...
- 101
0
votes
1
answer
281
views
Is it possible to have a partial hyperthreading with a Linux System?
I have a server with 2*14 cores with Hyperthreading enabled. This means I have (2*14*2=28*2) 56 vCPUs.
[root@supervision1 /]# dmidecode -t 4 | egrep 'Socket Designation|Count'
Socket Designation: ...
1
vote
1
answer
2k
views
How to accomplish Server Certificate pinning in Azure?
I have a Web API suite deployed in Azure managed by Azure APIM that transacts with an external API. I need to ensure that the Server Certificate from the external partner is validated and pinned ...
- 111
1
vote
1
answer
708
views
Apt pinning returns error message about package headers
I have a server running Debian Stretch that I need to install PHP 7.1 on, which isn't available in the default repositories of Stretch, but in Testing aka Buster. I tried to use apt pinning to add the ...
- 51
0
votes
1
answer
834
views
How to update expired ssl certificate on server with key-pinning (hpkp)
On server with nginx web server was setup ssl section with key-pinning:
add_header Public-Key-Pins 'pin-sha256="some-key"; pin-sha256="second-key"; max-age=5184000;' always;
now certificate is ...
1
vote
1
answer
1k
views
How to recreate let's encrypt certificate with public key from the past?
So what we have is an invalid let's encrypt certificate, when we try to renew it, public key changes. Is there a way to preserve the old public key? Our clients have it implemented for SSL pinning ...
- 153
0
votes
3
answers
668
views
Ideally, how should HSTS / SSL Everywhere / Let's encrypt work with captive Wifi portals?
Some captive Wifi portals require the ability to 301/302 redirect a user to an authentication / terms of service page before permitting access to the Internet.
This is at odds with SSL, which can't ...
- 8,781
3
votes
3
answers
9k
views
Cpu pinning strategy for kvm / centos7
I am migrating from Xen to Kvm.
In Xen I was able to easily pin host cpus to guest vms, and also to pin host cpus to the "dom0" .
In Kvm I can also easily pin host cpus to guests vms, but, as far as ...
- 2,709
0
votes
1
answer
125
views
Mismatch of pin rules for domain
I see some of those logs in my windows eventlog (Windows 10)
05/31/2017 07:44:03 AM
LogName=Application
SourceName=Microsoft-Windows-CAPI2
EventCode=4114
EventType=2
Type=Error
ComputerName=VIE-TABSI-...
- 1
2
votes
3
answers
869
views
Remove domain from HPKP preload list
So, this is a fun story regarding HTTP Public Key Pinning (HPKP) and HTTP Strict Transport Security (HSTS).
I was playing with the HTST Always and HPKP preload options, not being fully aware of the ...
- 153
0
votes
1
answer
33
views
Can I use cross-signing to facilitate HPKP management?
HPKP in a webserver works by adding headers to replies containing hashes of various public keys, such that at least one of the hashes is valid = of a certificate in the certificate chain of the ...
- 816
1
vote
2
answers
4k
views
Virtualization: vCPU pinning with Hyperthreading Host CPU?
I'm using KVM/libvirt on a Linux server with Core i7-2600 CPU, which has the following CPU topology (1 Socket, 4 Cores, 8 Threads):
Physical | Logical
---------+--------
Core 0 | 0, 4
Core 1 | 1, ...
- 55
0
votes
0
answers
776
views
Debian apt install single package from experimental but keep original system upgrades
I'v installed xfce 4.12 on debian jessie from testing by adding the testing repo in
/etc/apt/sources.list.d/testing.list
File content:
deb http://ftp.us.debian.org/debian/ testing main ...
- 631
8
votes
3
answers
9k
views
Install Debian Backports kernel automatically
I've got the following pinnings set:
Package: linux-image-amd64
Pin: release a=wheezy-backports
Pin-Priority: 1001
Package: *
Pin: release a=wheezy-backports
Pin-Priority: 499
I get the following ...
- 568
1
vote
2
answers
7k
views
What does cpu-pinning mean in context of KVM hypervisor with multiple virtual machines
I am looking at configuring a KVM hypervisor to have some virtual machines.
THe KVM hypervisor has 8 physical cores (16 with HyperThreading). I want to create 8 virtual machines on it but I am not ...
- 133
0
votes
1
answer
501
views
How to use specific apt repository
I'm trying to install imagemagick package from my own repository. Here is my step-by-step:
I created apt repository using reprepro utility with conf:
Origin: custom-repo.s3.amazonaws.com
Label: ...
- 3
2
votes
1
answer
225
views
Pinning specific subsection in Debian
I'm trying to pin some packages from a specific subsection (gnome in this case) in Debian jessie. For subsection I mean: gnome, admin, x11, etc… This value is showed by apt-cache in the 'Section' ...
- 93
1
vote
1
answer
421
views
Package pinning in Debian lenny
I need your advice as I don't know if I hit a bug, or I am misunderstanding something.
On a Debian Lenny, I am trying to prevent the installation of two particular packages, when they are requested ...
- 121
6
votes
2
answers
4k
views
kvm and qemu host: Is there a limit for max CPUs (Ubuntu 10.04)?
Today we encountered a really strange behaviour on two identical kvm and qemu hosts (Dell R910).
The host systems each have 4 x 10 Cores, which means that 40 physical cores are displayed as 80 within ...
- 1,022