Integrit is a simple yet secure alternative to products like tripwire. It has a small memory footprint, uses up-to-date cryptographic algorithms, and has features that make sense (like including the MD5 checksum of newly generated databases in the report. You may already now the alternatives on OpenBSD or RedHat. So now let’s play with Debian :-)

Continue reading

In a sad scenario where an application is fully consuming CPU to limit it. To do so, you will need a magic command called Cpulimit that will help you to limit a PID to a desired percentage usage of your CPU. I’ve wrote a little documentation on cpulimit.

Continue reading

Nginx Substitutions Filter is a filter module able to do both regular expression and fixed string substitutions on response bodies. This module is quite different from the Nginx’s native Substitution Module. It scans the output chains buffer and matches string line by line, just like Apache’s mod_substitute. I’ve played with the classic substitution module but due to limitations (only one matching pattern and no regex), it wasn’t easy to do all I wanted to do.

Continue reading

It´s been a while that I was waiting for a tool that tells me if my Debian server is requesting a reboot or not. Of course GUI tools exists (like Ubuntu update-manager), but on a server machine, where there is no X server installed (thankfuly), this kind of CLI tools can be quickly interesting. That´s why I wrote a tool called deb_reboot that gives the reboot requierement information in parsing postinstall scripts of installed packages.

Continue reading

How could this happen ? I found a communication on that and it has simply been removed as there were no updates since a long time. Even if CVE were recently proposed, it’s considered as not enough : http://debian.2.n7.nabble.com/Status-of-haproxy-for-upcoming-wheezy-release-td2907665.html But guys ! Seriously, do you know how many people are using HAproxy ? It’s a shame that it’s not in the current stable version of Debian. Now let’s check the availability on all Debian versions, it’s currently only on oldstable and experimental versions :

Continue reading