I’m currently developing a complete packaging stack based on Docker to easily make different kind of packages for several Linux distributions. This for MySecureShell project. This stack will be used to build packages in destination of upstream Linux distribution packages. But I’d like to provide a simpler and faster way to create custom repositories mainly for Debian, Ubuntu, CentOS and Fedora. In addition if packages could be automatically created when a new tag is pushed to the GitHub account, it would be perfect.

Continue reading

You may upgrade your Mac OS X version to Yosemite (10.10) and saw you dual boot with Linux not working anymore :-(. That’s because Apple made changes and Refind is not yet ready for it. So here is the solution to get your dual boot half back. It won’t fully work as expected, but you’ll be able to boot to Linux with Refind and Mac OS X with the alt key.

Continue reading

A colleague talked to me about this tool this week and I felt in love. It helps to easily navigate into your git repository. You can have a look on last log and directly in the same interface the diff of the current commit. I’ve attached one screenshot to let you see how cool it is. The are also a lot of other features but just for browsing purpose. You can’t update or make changes.

Continue reading

Fig is a fast, isolated development environments using Docker. For some features, it can be compared to Vagrant where the Dockerfike is not enough powerful to build multiple instances. For example, let’s say you want to test a new product version of a software like MediaWiki and you want to build the complete stack. So you may need to have several tools categories (depending of the usage): Web: Nginx, PHP-FPM, Varnish App Cahing: Redis Search: ElasticSearch In Vagrant you can natively build 3 VM and interconnect them without the need of additional tool.

Continue reading

The first thing you generally want to do when you have any new Storage system like SSD, Disk arrays or a Cluster Ceph, is benching. You will want to know how can read and write throughput. FIO is able to do that for you, here is an example: [global] ioengine=libaio invalidate=1 ramp_time=5 direct=1 size=5G runtime=300 time_based directory=/home [seq-read] rw=read bs=64K stonewall [rand-read] rw=randread bs=4K stonewall [seq-write] rw=write bs=64K stonewall [rand-write] rw=randwrite bs=4K stonewall You then will have a good output of everything you need to know.

Continue reading

I recently heard of HSTS which is a way to force users to come back to your website in SSL if they’ve already be to HTTPS once. It is simple, just add this line: # HSTS (force users to come in SSL if they've already been once) add_header Strict-Transport-Security "max-age=31536000; includeSubdomains"; If you want to have an overview of a complete configuration with it, look at the my wiki.

Continue reading

My use case is specific but not isolated. When I’m at work, I’m connected to my VPN at home. I have a specific DNS at home for my domain in deimos.lan and this is very useful to avoid me to remind all the IP of the services I have. Sometimes, I want to connect to a home service from the VPN, but my bookmarked links have my home DNS which are unknown from the DNS at work.

Continue reading

Author's picture

Pierre Mavro / Deimosfr


SRE Lead DevOps at Criteo  •  Nousmotards Co-Founder

Paris - France