Skopeo parses a multi-arch manifest list and pulls only the OS/arch combo you specify, writing raw layers locally. No wasted pulls.

https://www.valtersit.com/vault/selective-architecture-extraction-from-multiplatform-images-5b8b6b/

#skopeo #multi-arch #ValtersIT

Masscan --banners completes the TCP handshake and sends HTTP GET or TLS ClientHello probes, capturing Server headers and certs as JSON. Pipe to jq for parsing. https://www.valtersit.com/vault/masscan-banner-grabbing-on-common-web-ports-with-json-output-14b1b5/ #masscan #json #ValtersIT

Chain canary then prod with Flux HelmRelease dependsOn. One HelmRelease per cluster plus values overlay. Prod waits for canary Ready.

https://www.valtersit.com/vault/crosscluster-helmrelease-promotion-with-flux-helmrelease-dep-62cb5b/

#fluxcd #helmrelease #ValtersIT

Automate TheHive 4 case creation from enriched Cortex alerts with Python REST. Auth via API key, POST to /api/v1/case, attach observables. https://www.valtersit.com/vault/thehive-4-autocreate-case-from-enriched-alert-via-python-res-58c33a/ #soar #thehive #ValtersIT

iscsiadm -m node --login logs into every discovered iSCSI target at once, then node.startup=automatic keeps sessions alive across reboots. One command, persistent storage https://www.valtersit.com/vault/login-to-all-discovered-targets-and-enable-automatic-startup-e70f38/

#linux #iscsi #ValtersIT

Cap CPU and memory requests/limits per namespace plus a pod ceiling. The quota admission controller rejects anything over budget. Manifest inside:
https://www.valtersit.com/vault/enforce-namespace-compute-quota-with-requests-and-limits-cap-e5cf8e/
#kubernetes #resourcequota #ValtersIT

Validate STIX 2.1 bundles in CI with stix2-validator: check required props, indicator patterns, JSON error paths before TAXII publish. https://www.valtersit.com/vault/automated-stix-21-bundle-validation-with-stix2validator-in-c-c0a1b6/
#stix #taxii #ValtersIT

Per-IP fair shaping on a NAT gateway: tc's hash filter auto-creates an HTB class per src/dst IP, each inheriting parent rate/ceil. No static class list needed. Linux 4.14+. https://www.valtersit.com/vault/perip-fair-shaping-with-hash-filter-and-htb-on-nat-gateway-1b1552/ #tc #htb #ValtersIT

Cut Alertmanager noise: AlertmanagerConfig CRD inhibit rules suppress low-severity alerts while critical fires on same target. Secrets hold SMTP/Slack creds. https://www.valtersit.com/vault/harden-alertmanager-with-inhibit-rules-and-encrypted-silence-492b4f/
#prometheus #alertmanager #ValtersIT

Safe hot etcd backups? Use snapshot save for a consistent point-in-time copy from a live member, then verify integrity. Step-by-step: https://www.valtersit.com/vault/hot-backup-etcd-with-snapshot-save-and-integrity-verificatio-bc3975/ #etcd #backup #ValtersIT

Catch systemd unit syntax errors with systemd-analyze verify and score sandboxing exposure (0.0 to 10.0) via systemd-analyze security before deploying.

#systemd #hardening #ValtersIT

https://www.valtersit.com/vault/validate-and-analyze-unit-hardening-score-before-deployment-db6f18/

terragrunt scaffold generates terragrunt.hcl from any module by parsing variables.tf into documented inputs. Pair it with a catalog over HTTP for standardized https://www.valtersit.com/vault/terragrunt-scaffold-and-catalog-for-standardized-module-onbo-2fd6d3/ #terragrunt #scaffold #ValtersIT

Set MALLOC_CHECK_=3 and glibc validates every malloc/free via _int_free, aborting on double-free or bad chunk size. Fast way to confirm heap corruption. https://www.valtersit.com/vault/trigger-and-confirm-a-doublefree-with-malloccheck-and-glibc--cfb6d2/ #glibc #heap #ValtersIT

Floating rules in pfSense live in the pf anchor "floating", not per-interface, and load globally across multiple interfaces. Learn how pfctl handles them. https://www.valtersit.com/vault/create-floating-rules-with-pfctl-for-advanced-multiinterface-3e416d/ #pfsense #pfctl #ValtersIT

Enable DOKS cluster autoscaler by setting node pool min/max via doctl. DOKS runs a managed cluster-autoscaler in kube-system that scales on unschedulable pods.
https://www.valtersit.com/vault/enable-doks-cluster-autoscaler-with-node-pool-minmax-2f049f/
#doks #autoscaler #ValtersIT

Convert STIX 2.1 bundles to MISP events with the misp-stix Python package. Maps Indicators, Malware, ThreatActors to MISP attributes and galaxies, then POSTs to /events/add. https://www.valtersit.com/vault/push-stix-21-bundle-into-misp-via-mispstix-converter-467de2/ #misp #stix #ValtersIT

Attach perf to a running PID, no restart needed. perf record -p arms per-task counters so samples only fire while that task is on-CPU. Efficient when you know the suspect. https://www.valtersit.com/vault/attach-perf-to-a-running-pid-without-restarting-the-service-8e09f0/
#linux #perf #ValtersIT

bicepconfig.json controls Bicep analyzer rules, linter severity, and module aliases. Wire it into CI to enforce no-unused-params, no-hardcoded-env-urls and more at build time. https://www.valtersit.com/vault/enforce-bicep-linting-rules-via-bicepconfigjson-in-ci-5111e4/ #bicep #linting #ValtersIT

Omada at 500+ devices choking? Bump JVM heap and WiredTiger cache via omada.properties. Defaults (512MB-1GB) only handle ~50 devices. https://www.valtersit.com/vault/tune-jvm-heap-and-mongo-cache-for-omada-at-500-devices-441baf/ #omada #jvm #ValtersIT

tc flower rules offload VNF steering to NIC ASICs via switchdev. Match tunnel metadata + VLAN, push match-action to hardware with skip_sw. Cuts CPU load for SR-IOV VF traffic. https://www.valtersit.com/vault/apply-tc-flower-offload-rules-for-hardwareaccelerated-vnf-st-351bcd/ #tc #network #ValtersIT