Questions tagged [pinning]
The pinning tag has no usage guidance.
21
questions
0
votes
0answers
18 views
How to pin public root key when downloading an image with docker pull (Docker Content Trust)?
How can I execute docker pull (with Docker Content Trust enabled) such that it fails if the image doesn't have a valid signature using the private key corresponding to (or subordinate to) the public ...
0
votes
1answer
10 views
How to list all of the known root keys in docker (Docker Content Trust)
How can I list all of the Docker Content Trust root keys on my system?
I am setting up a CI process that will use the debian:stable-latest docker image to build my application's releases in ephemeral ...
0
votes
1answer
87 views
Rollback Yum machine to historical state, ignoring “obsoletes”
I have a large number of stateful servers that use Yum for package management. I am interested in a general automatic process for rolling them back to a historical state.
Usually, enabling the ...
0
votes
1answer
110 views
Is it possible to have a partial hyperthreading with a Linux System?
I have a server with 2*14 cores with Hyperthreading enabled. This means I have (2*14*2=28*2) 56 vCPUs.
[root@supervision1 /]# dmidecode -t 4 | egrep 'Socket Designation|Count'
Socket Designation: ...
1
vote
1answer
833 views
How to accomplish Server Certificate pinning in Azure?
I have a Web API suite deployed in Azure managed by Azure APIM that transacts with an external API. I need to ensure that the Server Certificate from the external partner is validated and pinned ...
1
vote
1answer
339 views
Apt pinning returns error message about package headers
I have a server running Debian Stretch that I need to install PHP 7.1 on, which isn't available in the default repositories of Stretch, but in Testing aka Buster. I tried to use apt pinning to add the ...
0
votes
1answer
716 views
How to update expired ssl certificate on server with key-pinning (hpkp)
On server with nginx web server was setup ssl section with key-pinning:
add_header Public-Key-Pins 'pin-sha256="some-key"; pin-sha256="second-key"; max-age=5184000;' always;
now certificate is ...
1
vote
1answer
678 views
How to recreate let's encrypt certificate with public key from the past?
So what we have is an invalid let's encrypt certificate, when we try to renew it, public key changes. Is there a way to preserve the old public key? Our clients have it implemented for SSL pinning ...
0
votes
3answers
544 views
Ideally, how should HSTS / SSL Everywhere / Let's encrypt work with captive Wifi portals?
Some captive Wifi portals require the ability to 301/302 redirect a user to an authentication / terms of service page before permitting access to the Internet.
This is at odds with SSL, which can't ...
3
votes
3answers
7k views
Cpu pinning strategy for kvm / centos7
I am migrating from Xen to Kvm.
In Xen I was able to easily pin host cpus to guest vms, and also to pin host cpus to the "dom0" .
In Kvm I can also easily pin host cpus to guests vms, but, as far as ...
0
votes
1answer
112 views
Mismatch of pin rules for domain
I see some of those logs in my windows eventlog (Windows 10)
05/31/2017 07:44:03 AM
LogName=Application
SourceName=Microsoft-Windows-CAPI2
EventCode=4114
EventType=2
Type=Error
ComputerName=VIE-TABSI-...
2
votes
2answers
780 views
Remove domain from HPKP preload list
So, this is a fun story regarding HTTP Public Key Pinning (HPKP) and HTTP Strict Transport Security (HSTS).
I was playing with the HTST Always and HPKP preload options, not being fully aware of the ...
0
votes
1answer
31 views
Can I use cross-signing to facilitate HPKP management?
HPKP in a webserver works by adding headers to replies containing hashes of various public keys, such that at least one of the hashes is valid = of a certificate in the certificate chain of the ...
1
vote
2answers
4k views
Virtualization: vCPU pinning with Hyperthreading Host CPU?
I'm using KVM/libvirt on a Linux server with Core i7-2600 CPU, which has the following CPU topology (1 Socket, 4 Cores, 8 Threads):
Physical | Logical
---------+--------
Core 0 | 0, 4
Core 1 | 1, ...
0
votes
0answers
570 views
Debian apt install single package from experimental but keep original system upgrades
I'v installed xfce 4.12 on debian jessie from testing by adding the testing repo in
/etc/apt/sources.list.d/testing.list
File content:
deb http://ftp.us.debian.org/debian/ testing main ...
8
votes
3answers
8k views
Install Debian Backports kernel automatically
I've got the following pinnings set:
Package: linux-image-amd64
Pin: release a=wheezy-backports
Pin-Priority: 1001
Package: *
Pin: release a=wheezy-backports
Pin-Priority: 499
I get the following ...
1
vote
2answers
5k views
What does cpu-pinning mean in context of KVM hypervisor with multiple virtual machines
I am looking at configuring a KVM hypervisor to have some virtual machines.
THe KVM hypervisor has 8 physical cores (16 with HyperThreading). I want to create 8 virtual machines on it but I am not ...
0
votes
1answer
428 views
How to use specific apt repository
I'm trying to install imagemagick package from my own repository. Here is my step-by-step:
I created apt repository using reprepro utility with conf:
Origin: custom-repo.s3.amazonaws.com
Label: ...
2
votes
1answer
182 views
Pinning specific subsection in Debian
I'm trying to pin some packages from a specific subsection (gnome in this case) in Debian jessie. For subsection I mean: gnome, admin, x11, etc… This value is showed by apt-cache in the 'Section' ...
1
vote
1answer
394 views
Package pinning in Debian lenny
I need your advice as I don't know if I hit a bug, or I am misunderstanding something.
On a Debian Lenny, I am trying to prevent the installation of two particular packages, when they are requested ...
6
votes
2answers
3k views
kvm and qemu host: Is there a limit for max CPUs (Ubuntu 10.04)?
Today we encountered a really strange behaviour on two identical kvm and qemu hosts (Dell R910).
The host systems each have 4 x 10 Cores, which means that 40 physical cores are displayed as 80 within ...
