Questions tagged [pinning]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
18 views

How to pin public root key when downloading an image with docker pull (Docker Content Trust)?

How can I execute docker pull (with Docker Content Trust enabled) such that it fails if the image doesn't have a valid signature using the private key corresponding to (or subordinate to) the public ...
0
votes
1answer
10 views

How to list all of the known root keys in docker (Docker Content Trust)

How can I list all of the Docker Content Trust root keys on my system? I am setting up a CI process that will use the debian:stable-latest docker image to build my application's releases in ephemeral ...
0
votes
1answer
87 views

Rollback Yum machine to historical state, ignoring “obsoletes”

I have a large number of stateful servers that use Yum for package management. I am interested in a general automatic process for rolling them back to a historical state. Usually, enabling the ...
0
votes
1answer
110 views

Is it possible to have a partial hyperthreading with a Linux System?

I have a server with 2*14 cores with Hyperthreading enabled. This means I have (2*14*2=28*2) 56 vCPUs. [root@supervision1 /]# dmidecode -t 4 | egrep 'Socket Designation|Count' Socket Designation: ...
1
vote
1answer
833 views

How to accomplish Server Certificate pinning in Azure?

I have a Web API suite deployed in Azure managed by Azure APIM that transacts with an external API. I need to ensure that the Server Certificate from the external partner is validated and pinned ...
1
vote
1answer
339 views

Apt pinning returns error message about package headers

I have a server running Debian Stretch that I need to install PHP 7.1 on, which isn't available in the default repositories of Stretch, but in Testing aka Buster. I tried to use apt pinning to add the ...
0
votes
1answer
716 views

How to update expired ssl certificate on server with key-pinning (hpkp)

On server with nginx web server was setup ssl section with key-pinning: add_header Public-Key-Pins 'pin-sha256="some-key"; pin-sha256="second-key"; max-age=5184000;' always; now certificate is ...
1
vote
1answer
678 views

How to recreate let's encrypt certificate with public key from the past?

So what we have is an invalid let's encrypt certificate, when we try to renew it, public key changes. Is there a way to preserve the old public key? Our clients have it implemented for SSL pinning ...
0
votes
3answers
544 views

Ideally, how should HSTS / SSL Everywhere / Let's encrypt work with captive Wifi portals?

Some captive Wifi portals require the ability to 301/302 redirect a user to an authentication / terms of service page before permitting access to the Internet. This is at odds with SSL, which can't ...
3
votes
3answers
7k views

Cpu pinning strategy for kvm / centos7

I am migrating from Xen to Kvm. In Xen I was able to easily pin host cpus to guest vms, and also to pin host cpus to the "dom0" . In Kvm I can also easily pin host cpus to guests vms, but, as far as ...
0
votes
1answer
112 views

Mismatch of pin rules for domain

I see some of those logs in my windows eventlog (Windows 10) 05/31/2017 07:44:03 AM LogName=Application SourceName=Microsoft-Windows-CAPI2 EventCode=4114 EventType=2 Type=Error ComputerName=VIE-TABSI-...
2
votes
2answers
780 views

Remove domain from HPKP preload list

So, this is a fun story regarding HTTP Public Key Pinning (HPKP) and HTTP Strict Transport Security (HSTS). I was playing with the HTST Always and HPKP preload options, not being fully aware of the ...
0
votes
1answer
31 views

Can I use cross-signing to facilitate HPKP management?

HPKP in a webserver works by adding headers to replies containing hashes of various public keys, such that at least one of the hashes is valid = of a certificate in the certificate chain of the ...
1
vote
2answers
4k views

Virtualization: vCPU pinning with Hyperthreading Host CPU?

I'm using KVM/libvirt on a Linux server with Core i7-2600 CPU, which has the following CPU topology (1 Socket, 4 Cores, 8 Threads): Physical | Logical ---------+-------- Core 0 | 0, 4 Core 1 | 1, ...
0
votes
0answers
570 views

Debian apt install single package from experimental but keep original system upgrades

I'v installed xfce 4.12 on debian jessie from testing by adding the testing repo in /etc/apt/sources.list.d/testing.list File content: deb http://ftp.us.debian.org/debian/ testing main ...
8
votes
3answers
8k views

Install Debian Backports kernel automatically

I've got the following pinnings set: Package: linux-image-amd64 Pin: release a=wheezy-backports Pin-Priority: 1001 Package: * Pin: release a=wheezy-backports Pin-Priority: 499 I get the following ...
1
vote
2answers
5k views

What does cpu-pinning mean in context of KVM hypervisor with multiple virtual machines

I am looking at configuring a KVM hypervisor to have some virtual machines. THe KVM hypervisor has 8 physical cores (16 with HyperThreading). I want to create 8 virtual machines on it but I am not ...
0
votes
1answer
428 views

How to use specific apt repository

I'm trying to install imagemagick package from my own repository. Here is my step-by-step: I created apt repository using reprepro utility with conf: Origin: custom-repo.s3.amazonaws.com Label: ...
2
votes
1answer
182 views

Pinning specific subsection in Debian

I'm trying to pin some packages from a specific subsection (gnome in this case) in Debian jessie. For subsection I mean: gnome, admin, x11, etc… This value is showed by apt-cache in the 'Section' ...
1
vote
1answer
394 views

Package pinning in Debian lenny

I need your advice as I don't know if I hit a bug, or I am misunderstanding something. On a Debian Lenny, I am trying to prevent the installation of two particular packages, when they are requested ...
6
votes
2answers
3k views

kvm and qemu host: Is there a limit for max CPUs (Ubuntu 10.04)?

Today we encountered a really strange behaviour on two identical kvm and qemu hosts (Dell R910). The host systems each have 4 x 10 Cores, which means that 40 physical cores are displayed as 80 within ...