[B! ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£] yassan0627ã®ãƒ

yassan0627 id:yassan0627

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹yassan0627ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (129)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

æœ€å°æ¨©é™å®Ÿç¾ã¸ã®4ã‚¹ãƒ†ãƒƒãƒ—ã‚¢ãƒ—ãƒãƒ¼ãƒ å‰ç·¨ | Amazon Web Services
Amazon Web Services ãƒ–ãƒã‚° æœ€å°æ¨©é™å®Ÿç¾ã¸ã®4ã‚¹ãƒ†ãƒƒãƒ—ã‚¢ãƒ—ãƒãƒ¼ãƒ å‰ç·¨ AWS ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã‚’å®Ÿç¾ã™ã‚‹ã«å½“ãŸã‚Šã€ã€Œæœ€å°æ¨©é™ã®åŽŸå‰‡ã€ã«æˆ¸æƒ‘ã£ãŸã“ã¨ã¯ã‚ã‚Šã¾ã›ã‚“ã‹ï¼Ÿ AWS ã®åˆ©ç”¨ã§ã¯ AWS Identity and Access Management ï¼ˆIAMï¼‰ã‚µãƒ¼ãƒ“ã‚¹ã‚’é¿ã‘ã¦é€šã‚‹ã“ã¨ã¯å‡ºæ¥ã¾ã›ã‚“ã€‚ãã®ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã¨ã—ã¦æŽ²ã’ã‚‰ã‚Œã¦ã„ã‚‹ã®ãŒã€æœ€å°æ¨©é™ã®åŽŸå‰‡ã§ã™ã€‚ç‰¹ã«å¼·å›ºãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’æ±‚ã‚ã‚‹ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã§ã¯ã“ã®åŽŸå‰‡ã®å®Ÿç¾ãŒèª²é¡Œã«ãªã‚‹ã“ã¨ãŒå¤šã„ã‹ã¨æ€ã„ã¾ã™ã€‚æœ¬ãƒ–ãƒã‚°ã§ã¯ã€ã“ã®æœ€å°æ¨©é™ã®åŽŸå‰‡ã‚’ã‚·ã‚¹ãƒ†ãƒžãƒãƒƒã‚¯ã«æ¤œè¨Žã™ã‚‹ã‚¢ãƒ—ãƒãƒ¼ãƒã®ä¸€ä¾‹ã‚’ã”ç´¹ä»‹ã—ã¾ã™ã€‚ ã¯ã˜ã‚ã« ã€Œæœ€å°æ¨©é™ã‚’é©åˆ‡ã«é‹ç”¨ã™ã‚‹ã€ã“ã¨ã‚’è¨ˆç”»ã™ã‚‹éš›ã€ã¾ãšæ€ã„ã¤ãã®ã¯ã‚·ã‚¹ãƒ†ãƒ ã®é‹ç”¨ã‚„é–‹ç™ºã®è¦–ç‚¹ã§ã€Œå¿…è¦ã€ã¨ãªã‚‹æ“ä½œã®æ¨©é™ã®ã¿ã‚’äººã‚„ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ä»˜ä¸Žã™ã‚‹ã¨ã„ã†ã‚¢ãƒ—ãƒãƒ¼ãƒã§ã™ã€‚ã‚·ãƒ³ãƒ—ãƒ«ã§ã™ãŒã€æ¨©é™ãŒ
yassan0627 2024/07/25
aws

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
containerã«ãŠã‘ã‚‹SELinuxã®å½¹å‰²ã«ã¤ã„ã¦ - Gekko0114 å‚™å¿˜éŒ²
èƒŒæ™¯ æœ¬å®¶ã®runcã§å®Ÿè£…ã•ã‚Œã¦ã„ã‚‹SELinuxæ©Ÿèƒ½ãŒã€Youki (Rustã§runcã‚’å†å®Ÿè£…ã™ã‚‹OSSï¼‰ã«å®Ÿè£…ã•ã‚Œã¦ã„ãªã„ã“ã¨ãŒã‚ã‹ã£ãŸã€‚ ãã“ã§ã€SELinuxæ©Ÿèƒ½ã‚’Youkiã«å°Žå…¥ã™ã‚‹ã“ã¨ã«ãªã£ãŸã®ã ãŒã€SELinux crateãŒç„¡ã‹ã£ãŸã®ã§Rustã§å†å®Ÿè£…ã™ã‚‹ã“ã¨ã«ãªã‚Šã€ãã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã«ã‚¢ã‚µã‚¤ãƒ³ã—ã¦ã‚‚ã‚‰ã£ãŸã€‚ ã—ã‹ã—ã€SELinuxã«ã¤ã„ã¦ä½•ã‚‚çŸ¥ã‚‰ãªã‹ã£ãŸã®ã§ã€SELiuxã«ã¤ã„ã¦è‰²ã€…ã¨èª¿ã¹ãŸã“ã¨ã‚’ã¾ã¨ã‚ãŸã€‚ SELinuxã¨ã¯ä½•ã‹ï¼Ÿ security-enhanced Linuxã®ç•¥ç§°ã€‚MACåˆ¶å¾¡ã‚’è¡Œã†ã“ã¨ãŒã§ãã‚‹ã€‚é€šå¸¸ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«åŠ ãˆã¦SELinuxã‚’è¨å®šã™ã‚‹ã“ã¨ã§ã€ã‚·ã‚¹ãƒ†ãƒ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’æ›´ã«å¼·åŒ–ã§ãã‚‹ã€‚ Labelã¨policyã‚’çµ„ã¿åˆã‚ã›ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åˆ¶å¾¡ãŒç‰¹å¾´ã§ã‚ã‚‹ã€‚processãƒ»fileãƒ»networkãªã©ã®objectã€processãƒ»userãªã©ã®su
yassan0627 2024/07/21
ã‚³ãƒ³ãƒ†ãƒŠ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
1Passwordã‚’ä½¿ã£ã¦ã€ãƒãƒ¼ã‚«ãƒ«ã«ãƒ•ã‚¡ã‚¤ãƒ«(~/.configã‚„.env)ã¨ã—ã¦ç½®ã‹ã‚Œã¦ã‚‹ç”Ÿã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãªã©ã‚’å‰Šé™¤ã—ãŸ
1Passwordã‚’ä½¿ã£ã¦ã€ãƒãƒ¼ã‚«ãƒ«ã«ãƒ•ã‚¡ã‚¤ãƒ«(~/.configã‚„.env)ã¨ã—ã¦ç½®ã‹ã‚Œã¦ã‚‹ç”Ÿã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãªã©ã‚’å‰Šé™¤ã—ãŸ æœ€è¿‘ã€ã‚³ãƒŸãƒƒãƒˆã¯ã•ã‚Œãªã„ãŒãƒãƒ¼ã‚«ãƒ«ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ç½®ã‹ã‚Œã¦ã„ã‚‹.envã®ã‚ˆã†ãªãƒ•ã‚¡ã‚¤ãƒ«ã‹ã‚‰ç”Ÿã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚„API Tokenã‚’å‰Šé™¤ã—ã¾ã—ãŸã€‚ ã“ã‚Œã¯ã€ãƒãƒ¼ã‚«ãƒ«ã§ãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚’å®Ÿè¡Œã—ãŸå ´åˆã«ã€ãƒãƒ¼ã‚«ãƒ«ã«ç½®ã‹ã‚Œã¦ã„ã‚‹ç”Ÿã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚„API Tokenã‚’ç›—ã¾ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ãŸã‚ã§ã™ã€‚ æœ€è¿‘ã¯ã€npm installæ™‚ã®postinstallã§ã®ãƒ‡ãƒ¼ã‚¿ã‚’ç›—ã‚€ã‚ˆã†ãªãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚’ä»•è¾¼ã‚“ã ã‚Šã™ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚µãƒ—ãƒ©ã‚¤ãƒã‚§ãƒ¼ãƒ³æ”»æ’ƒãŒå¤šæ§˜åŒ–ã—ã¦ã„ã¾ã™ã€‚ Compromised PyTorch-nightly dependency chain between December 25th and December 30th, 2022. | PyTorch Whatâ€™s Really Goin
yassan0627 2024/01/24
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

é–‹ç™º
ãƒªãƒ³ã‚¯
Kube-Bench: Kubernetes CIS Benchmarking Tool [Guide]
yassan0627 2023/11/21
k8s

é–‹ç™º

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Tetragonã§eBPFã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚ªãƒ–ã‚µãƒ¼ãƒãƒ“ãƒªãƒ†ã‚£å…¥é–€ | ãƒ•ãƒ¥ãƒ¼ãƒãƒ£ãƒ¼æŠ€è¡“ãƒ–ãƒã‚°
CNCFé€£è¼‰ ã®4æœ¬ç›®ã§ã™ã€‚ ã¯ã˜ã‚ã«æ•°å¹´å‰ã«ã‚¯ãƒ©ã‚¦ãƒ‰ãƒã‚¤ãƒ†ã‚£ãƒ–æ³¨ç›®æŠ€è¡“ã¨ã—ã¦æŒ™ã’ã‚‰ã‚ŒãŸeBPFã«ã‹ãã¦ã‚ˆã‚Šã‚ãƒ£ãƒƒãƒã‚¢ãƒƒãƒ—ã—ãŸã„ãªã¨æ€ã£ã¦ã„ãŸã®ã§ã€ã“ã®é€£è¼‰ã®ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã§eBPFã¨ãã®é–¢é€£ãƒ—ãƒãƒ€ã‚¯ãƒˆã«å…¥é–€ã—ã¦ã¿ã‚‹ã“ã¨ã«ã—ã¾ã—ãŸã€‚ CNCFãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆå‚˜ä¸‹ã®eBPFã‚’æ´»ç”¨ã—ãŸãƒ—ãƒãƒ€ã‚¯ãƒˆã¨ã—ã¦ã¯Cilium, Falcoãªã©ãŒæŒ™ã’ã‚‰ã‚Œã¾ã™ã€‚Ciliumã¯Kubernetesãªã©ã®ã‚¯ãƒ©ã‚¦ãƒ‰ãƒã‚¤ãƒ†ã‚£ãƒ–ãªç’°å¢ƒã§ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã€ã‚ªãƒ–ã‚µãƒ¼ãƒãƒ“ãƒªãƒ†ã‚£ã®æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹OSSãªã®ã§ã™ãŒã€ä»Šå›žã¯ãã®ã„ã‚ã°ã‚µãƒ–ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆçš„ãªä½ç½®ã¥ã‘ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ„ãƒ¼ãƒ«ã§ã‚ã‚‹ã€Tetragonã«è§¦ã£ã¦ã¿ã¾ã™ã€‚ Cilium, Tetragonã®é–‹ç™ºã‚’ãƒ¡ã‚¤ãƒ³è¡Œã£ã¦ã„ã‚‹Isovalentç¤¾ã¯ã€æ›¸ç±ã‚„ãƒãƒ³ã‚ºã‚ªãƒ³ãƒ©ãƒœãªã©ã§è‡ªç¤¾ã®è£½å“ãƒ»eBPFã«ã¤ã„ã¦ã®å¦ç¿’ãƒªã‚½ãƒ¼ã‚¹ã‚’å¤šãæä¾›ã—ã¦ã„ã¾ã™ã€‚ https://isovalent.com/reso
yassan0627 2023/07/11
k8s

cilium

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

eBPF
ãƒªãƒ³ã‚¯
Dockerã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ã™ã¹ã¦
yassan0627 2022/12/01
ã‚³ãƒ³ãƒ†ãƒŠ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã‹ã‚‰ Kubernetes ã‚¯ãƒ©ã‚¹ã‚¿ã‚’å®ˆã‚‹ãŸã‚ã®åŠ¹æžœçš„ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–
CloudNative Security Conference 2022 ãƒ—ãƒ¬ã‚¤ãƒ™ãƒ³ãƒˆ ã®ç™»å£‡è³‡æ–™ã§ã™ã€‚ https://cloudnativedays.connpass.com/event/252961/
yassan0627 2022/07/12
k8s

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Dockerfileã®ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ Top 20
æœ¬æ–‡ã®å†…å®¹ã¯ã€2021å¹´3æœˆ9æ—¥ã«Ãlvaro IradierãŒæŠ•ç¨¿ã—ãŸãƒ–ãƒã‚°(https://sysdig.com/blog/dockerfile-best-practices/)ã‚’å…ƒã«æ—¥æœ¬èªžã«ç¿»è¨³ãƒ»å†æ§‹æˆã—ãŸå†…å®¹ã¨ãªã£ã¦ãŠã‚Šã¾ã™ã€‚ Dockerfileã®ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã®ã‚¯ã‚¤ãƒƒã‚¯ã‚»ãƒƒãƒˆã‚’ã‚¤ãƒ¡ãƒ¼ã‚¸ãƒ“ãƒ«ãƒ‰ã«é©ç”¨ã™ã‚‹ã“ã¨ã§ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã‚’é˜²ãŽã€ã‚³ãƒ³ãƒ†ãƒŠåŒ–ã•ã‚ŒãŸã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’æœ€é©åŒ–ã™ã‚‹æ–¹æ³•ã‚’å¦ã³ã¾ã™ã€‚ ã‚³ãƒ³ãƒ†ãƒŠåŒ–ã•ã‚ŒãŸã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚„ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹ã«ç²¾é€šã—ã¦ã„ã‚‹äººãªã‚‰ã€è‡ªåˆ†ã®ã‚µãƒ¼ãƒ“ã‚¹ãŒãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹ã§ã‚ã‚‹ã“ã¨ã«æ°—ã¥ã„ã¦ã„ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ã—ã‹ã—ã€è„†å¼±æ€§ã®æ¤œå‡ºã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã®èª¿æŸ»ã€ãƒ‡ãƒ—ãƒã‚¤å¾Œã®å ±å‘Šã‚„ä¿®æ£ãªã©ã€ç®¡ç†ã®ã‚ªãƒ¼ãƒãƒ¼ãƒ˜ãƒƒãƒ‰ãŒãƒžã‚¯ãƒãªå•é¡Œã«ãªã£ã¦ã„ã¾ã™ã€‚ ã“ã®ã‚ªãƒ¼ãƒãƒ¼ãƒ˜ãƒƒãƒ‰ã®å¤šãã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã‚·ãƒ•ãƒˆãƒ¬ãƒ•ãƒˆã—ã€é–‹ç™ºãƒ¯ãƒ¼ã‚¯ãƒ•ãƒãƒ¼ã®ä¸ã§å¯èƒ½ãªé™ã‚Šæ—©ãæ½œåœ¨çš„ãªå•é¡Œã«å–ã‚Šçµ„ã‚€ã“
yassan0627 2022/02/10
ã„ã„å…·åˆã«ã¾ã¨ã¾ã£ã¦ã¦åŠ©ã‹ã‚‹

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚³ãƒ³ãƒ†ãƒŠ

docker
ãƒªãƒ³ã‚¯
è‡ªå‰Hadoopã‚¯ãƒ©ã‚¹ã‚¿ã¨Apache Rangerã‚’é€£æºã—ã¦ã¿ã‚‹ - GMOã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚°ãƒ«ãƒ¼ãƒ— ã‚°ãƒ«ãƒ¼ãƒ—ç ”ç©¶é–‹ç™ºæœ¬éƒ¨
ã“ã‚“ã«ã¡ã¯ï¼Œæ¬¡ä¸–ä»£ã‚·ã‚¹ãƒ†ãƒ ç ”ç©¶å®¤ã®S.T.ã§ã™ã€‚æœ€è¿‘ã¯FPGAãƒã‚¿ã‚’æ›¸ãã“ã¨ãŒå¤šã‹ã£ãŸã®ã§ã™ãŒï¼Œä»Šå›žã¯Hadoopãƒã‚¿ã§ã™ã€‚Apache Rangerã‚’è‡ªå‰ã®Hadoopã‚¯ãƒ©ã‚¹ã‚¿ã«å°Žå…¥ã—ï¼Œãƒ¦ãƒ¼ã‚¶ã”ã¨ã«æ¨©é™ç®¡ç†ã§ãã‚‹ã“ã¨ã‚’ç¢ºèªã—ã¾ã™ã€‚ä¾‹ã«ã‚ˆã£ã¦ï¼Œãƒ“ãƒ«ãƒ‰ãªã©ã«ãƒãƒžãƒªã¤ã¤å³å¾€å·¦å¾€ã—ãŸçµæžœã‚’ã¾ã¨ã‚ãŸæ§‹ç¯‰æ‰‹é †ã®ã‚ˆã†ãªå†…å®¹ã§ã™ã€‚ã‚ã£ã•ã‚Šæ›¸ã„ã¦ã‚ã‚Šã¾ã™ãŒï¼Œã‚¼ãƒã‹ã‚‰èª¿ã¹ã¦å‹•ã‹ã™ã¨ãªã‚‹ã¨éª¨ãŒæŠ˜ã‚Œã‚‹ã®ã§ï¼ŒåŒã˜ç®‡æ‰€ã§ãƒãƒžã£ã¦ã„ã‚‹æ–¹ã®åŠ©ã‘ã«ãªã‚Œã°ã¨æ€ã„ã¾ã™ã€‚ 1.Apache Rangerã¨ã¯ Apache Rangerã¯ï¼ŒHadoopã‚¯ãƒ©ã‚¹ã‚¿ã®æ¨©é™ç®¡ç†ã‚„auditãƒã‚®ãƒ³ã‚°ã‚’è¡Œã†ãŸã‚ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã™ã€‚HDFSã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚„Hiveã®ãƒ†ãƒ¼ãƒ–ãƒ«ãªã©ã«å¯¾ã—ã¦ï¼Œãƒ¦ãƒ¼ã‚¶ã‚„ã‚°ãƒ«ãƒ¼ãƒ—ã”ã¨ã«æ¨©é™ã‚’è¨å®šã—ã¦ç®¡ç†ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚HDFSã«å¤§è¦æ¨¡ãƒ‡ãƒ¼ã‚¿ã‚’è“„ãˆã¦Hiveã‚„Sparkã§å‡¦ç†ã‚„åˆ†æžã‚’è¡Œã†ï¼Œã¨ã„ã†ã®ãŒä¸€èˆ¬çš„ãªãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼
yassan0627 2022/01/18
hadoop

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Log4jã®æ·±åˆ»ãªè„†å¼±æ€§CVE-2021-44228ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2021å¹´12æœˆ10æ—¥ã€Javaãƒ™ãƒ¼ã‚¹ã®ãƒã‚°å‡ºåŠ›ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã€ŒApache Log4jã€ã®2.xç³»ãƒãƒ¼ã‚¸ãƒ§ãƒ³ï¼ˆä»¥é™ã¯Log4j2ã¨è¨˜è¼‰ï¼‰ã§ç¢ºèªã•ã‚ŒãŸæ·±åˆ»ãªè„†å¼±æ€§ã‚’ä¿®æ£ã—ãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢ä¿‚çµ„ç¹”ã§ã¯éŽåŽ»è©±é¡Œã«ãªã£ãŸHeartbleedã‚„Shellshockã¨åŒãƒ¬ãƒ™ãƒ«ã®è„†å¼±æ€§ã¨ã‚‚è©•ä¾¡ã—ã¦ã„ã¾ã™ã€‚ã“ã“ã§ã¯é–¢é€£ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ ï¼‘ï¼Žä½•ãŒèµ·ããŸã®ï¼Ÿ Javaãƒ™ãƒ¼ã‚¹ã®ãƒã‚°å‡ºåŠ›ãƒ©ã‚¤ãƒ–ãƒ©ãƒªLog4j2ã§æ·±åˆ»ãªè„†å¼±æ€§ï¼ˆCVE-2021-44228ï¼‰ã‚’ä¿®æ£ã—ãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒå…¬é–‹ã•ã‚ŒãŸã€‚ãã®å¾Œã‚‚ä¿®æ£ãŒä¸å®Œå…¨ã§ã‚ã£ãŸã“ã¨ãªã©ã‚’ç†ç”±ã«2ä»¶ã®è„†å¼±æ€§ãŒä¿®æ£ã•ã‚ŒãŸã€‚ åºƒãåˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã§ã‚ã‚‹ãŸã‚å½±éŸ¿ã‚’å—ã‘ã‚‹å¯¾è±¡ãŒå¤šãå˜åœ¨ã™ã‚‹ã¨ã¿ã‚‰ã‚Œã€æ”»æ’ƒãŒå®¹æ˜“ã§ã‚ã‚‹ã“ã¨ã‹ã‚‰2014å¹´ã®Heartbleedã€Shellshockä»¥æ¥ã®å±é™ºæ€§ãŒã‚ã‚‹ã¨ã¿ã‚‹å‘ãã‚‚ã‚ã‚Šã€The Apache Software
yassan0627 2021/12/23
Java

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã‚ˆã‚Šã‚»ã‚ãƒ¥ã‚¢ãªHadoopã®ä½œã‚Šæ–¹ ã€œ ApacheCon Asia 2021ç™»å£‡å ±å‘Š
HDFSã®ãƒ–ãƒãƒƒã‚¯ãƒ‡ãƒ¼ã‚¿è»¢é€ã®æš—å·åŒ– HDFSã®å®Ÿãƒ‡ãƒ¼ã‚¿ã«ç›¸å½“ã™ã‚‹ãƒ–ãƒãƒƒã‚¯ãƒ‡ãƒ¼ã‚¿ã®è»¢é€ã«å¯¾ã™ã‚‹æš—å·åŒ–ã¯RPCæš—å·åŒ–ã¨ã¯ã•ã‚‰ã«åˆ¥ã®ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã§ç®¡ç†ã•ã‚Œã¦ã„ã¾ã™ã€‚ hdfs-siteã® dfs.encrypt.data.transfer ã‚’ true ã«ã€ dfs.encrypt.data.transfer.cipher.suites ã‚’ AES/CTR/NoPadding ã«ãã‚Œãžã‚ŒæŒ‡å®šã™ã‚‹ã“ã¨ã§æœ‰åŠ¹åŒ–ã—ã¾ã™ã€‚ ã“ã®è¨å®šã‚’ç„¡åœæ¢ã§åæ˜ ã™ã‚‹ã«ã‚ãŸã£ã¦ã¯ã€è»¢é€ã®æš—å·åŒ–è¨å®šã®åæ˜ æ¸ˆ/æœªåæ˜ ã‚’åˆ¤åˆ¥ã™ã‚‹ dfs.trustedchannel.resolver.class ã«ã‚ˆã‚‹ãƒŽãƒ¼ãƒ‰ã®å‹•çš„ãªç®¡ç†ã€å ´åˆã«ã‚ˆã£ã¦ã¯æ‹¡å¼µã«ã‚ˆã‚‹ç‹¬è‡ªå®Ÿè£…ãŒå¿…è¦ã¨ãªã‚Šã¾ã™ã€‚ HDFSã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŠã‚ˆã³NameNodeãƒ»DataNodeé–“ã§ dfs.encrypt.data.transfer ã®çœŸå½ãŒä¸€è‡´ã—ã¦ã„ãªã„å ´åˆã¯ãƒ–ãƒãƒƒã‚¯ãƒ‡
yassan0627 2021/12/07
hadoop

HDFS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Improving Git protocol security on GitHub
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
yassan0627 2021/11/02
github

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
FacebookãŒ10æœˆ5æ—¥ã®å…¨é¢ãƒ€ã‚¦ãƒ³ã®è©³ç´°ã‚’å ±å‘Šã€‚ãƒãƒƒã‚¯ãƒœãƒ¼ãƒ³ã®åœæ¢ãŒBGPåœæ¢ã¨ãªã‚Šã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‹ã‚‰é›¢è„±ã€å¤–éƒ¨ã‹ã‚‰ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’å¤±ã„ãƒ‡ãƒ¼ã‚¿ã‚»ãƒ³ã‚¿ãƒ¼ã«ä¹—ã‚Šè¾¼ã‚“ã§å¯¾å¿œ
FacebookãŒ10æœˆ5æ—¥ã®å…¨é¢ãƒ€ã‚¦ãƒ³ã®è©³ç´°ã‚’å ±å‘Šã€‚ãƒãƒƒã‚¯ãƒœãƒ¼ãƒ³ã®åœæ¢ãŒBGPåœæ¢ã¨ãªã‚Šã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‹ã‚‰é›¢è„±ã€å¤–éƒ¨ã‹ã‚‰ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’å¤±ã„ãƒ‡ãƒ¼ã‚¿ã‚»ãƒ³ã‚¿ãƒ¼ã«ä¹—ã‚Šè¾¼ã‚“ã§å¯¾å¿œ FacebookãŠã‚ˆã³Instagramãªã©ãŒæ—¥æœ¬æ™‚é–“ã®10æœˆ5æ—¥åˆå‰0æ™‚40åˆ†é ƒã‹ã‚‰åˆå‰8æ™‚é ƒã¾ã§å…¨é¢çš„ã«ãƒ€ã‚¦ãƒ³ã—ãŸä»¶ã«ã¤ã„ã¦ã€Facebookã¯ãã®çµŒéŽã‚„åŽŸå› ã«ã¤ã„ã¦ã®è©³ç´°ã‚’ã€ŒMore details about the October 4 outageã€ã¨ã—ã¦åŒç¤¾ã®ãƒ–ãƒã‚°ã§å…¬é–‹ã—ã¾ã—ãŸã€‚ ä¸‹è¨˜ã¯åŒç¤¾CTO Mike Schroepferæ°ã®ãƒ„ã‚¤ãƒ¼ãƒˆã€‚ Yesterdayâ€™s outage across our products was a bad one, so weâ€™re sharing some more detail here on exactly what happened, how it happened,
yassan0627 2021/10/07
BGP

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Hadoop and Kerberos
4. Page 4 Â© Hortonworks Inc. 2014 Background: YARNã«ã‚ˆã‚‹Hadoopã®ãƒžãƒ«ãƒãƒ†ãƒŠãƒ³ãƒˆåŒ– â€¢â€¯ Hadoop2ã§å°Žâ¼Šã•ã‚ŒãŸYARNã«ã‚ˆã‚Šã€Hadoopã‚¯ãƒ© ã‚¹ã‚¿ã‚’è¤‡æ•°ã®ã²ã¨ã‚„çµ„ç¹”ã€ãƒ¯ãƒ¼ã‚¯ãƒãƒ¼ãƒ‰ã«ã‚ˆã£ã¦ å…±â½¤ã™ã‚‹ã“ã¨ãŒå®¹æ˜“ã«ãªã£ãŸã€‚ â€¢â€¯ å·¨â¼¤ãªHDFSã‚¯ãƒ©ã‚¹ã‚¿ã«æ§˜ã€…ãªãƒ‡ãƒ¼ã‚¿ã‚’æ ¼ç´ã—ã¦ãŠ ãã€ãã®ãƒ‡ãƒ¼ã‚¿ã«å¯¾ã—ã¦æ§˜ã€…ãªå‡¦ç†ã‚’â¾›ã‚‰ã›ã‚‹ã“ ã¨ãŒå¯èƒ½ã«ã€‚ 5. Page 5 Â© Hortonworks Inc. 2014 1 Â° Â° Â° Â° Â° Â° Â° Â° Â° Â° Â° Â° Â° Â° Â° Â° Â° Â° Â° Â° N HDFS Hadoop Distributed File System DATA MANAGEMENT ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸(HDFS)ã¨ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ ãƒ†ã‚£ãƒ³ã‚°(MapReduce)ãŒçµåˆã—ã¦ ã„ãŸ Before YARN MapReduce ã‚¯ãƒ©ã‚¹ã‚¿å…¨ä½“ã®ãƒª
yassan0627 2021/08/06
hadoop

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

kerberos
ãƒªãƒ³ã‚¯
Terraform, Dockerfile, Kubernetesãªã©IaCã®è„†å¼±ãªè¨å®šã‚’CI/CDã§æ¤œçŸ¥ã™ã‚‹ - knqyf263's blog
æ¦‚è¦ è‡ªåˆ†ã®æ‰€å±žä¼æ¥ã§ã‚ã‚‹Aqua SecurityãŒTFsecã¨ã„ã†OSSã‚’è²·åŽã—ã¾ã—ãŸã€‚ blog.aquasec.com TFsecã¯ã©ã†ã„ã†ãƒ„ãƒ¼ãƒ«ã‹ã¨ã„ã†ã¨Terraformã®é™çš„è§£æžã‚¹ã‚ãƒ£ãƒŠãƒ¼ã§ã™ã€‚Terraformã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’æ¸¡ã™ã“ã¨ã§ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹è¨å®šãƒŸã‚¹ã‚’ä¸»ã«æ¤œçŸ¥ã—ã¦ãã‚Œã¾ã™ã€‚ github.com ãã®ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã«ä¼´ã„ã€TFsecã¯è‡ªåˆ†ãŒé–‹ç™ºã—ã¦ã„ã‚‹è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠãƒ¼ã§ã‚ã‚‹Trivyã«çµ±åˆã•ã‚Œã¾ã—ãŸã€‚Trivyã§ã¯Terraformã«åŠ ãˆDockerfileã‚„Kubernetesãªã©ã€ã„ã‚ã‚†ã‚‹Infrastructure as Codeï¼ˆIaCï¼‰ã®è¨å®šãƒŸã‚¹ã‚’æ¤œçŸ¥ã™ã‚‹ãƒžãƒãƒ¼ã‚¸ãƒ‰ãƒãƒªã‚·ãƒ¼ã‚‚æä¾›ã—ã¦ã„ã¾ã™ã€‚ä»–ã«ã‚‚JSONã‚„YAMLãªã©ä¸€èˆ¬çš„ãªãƒ•ã‚¡ã‚¤ãƒ«ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã«å¯¾å¿œã—ã¦ã„ã‚‹ãŸã‚è‡ªåˆ†ã§ãƒãƒªã‚·ãƒ¼ã‚’æ›¸ãã“ã¨ã§ãã‚Œã‚‰ã®æ¤œçŸ¥ã«ã‚‚ä½¿ãˆã¾ã™ã€‚CloudFormationã‚„Ansib
yassan0627 2021/07/13
terraform

trivy

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Privacy Sandboxã¨ã¯ãªã«ã‹/Privacy Sandbox Explained
ç¬¬10ä»£é»’å¸¯LTã®è³‡æ–™ã§ã™ã€‚
yassan0627 2021/06/24
ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼

google

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Avoiding insecure images from Docker build caching
yassan0627 2021/04/05
Docker

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
The worst so-called â€œbest practiceâ€ for Docker
Introduction to Dockerizing for Production Improve your DevOps skills: learn an iterative process for Dockerizing your code. Get your free ebook The worst so-called â€œbest practiceâ€ for Docker by Itamar Turner-Trauring Last updated 01 Oct 2021, originally created 23 Mar 2021 Somebody is always wrong on the Internet, and bad Docker packaging advice is quite common. But one particular piece of advice
yassan0627 2021/04/05
docker

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
AWS Control Towerã‚’åˆ©ç”¨ã—ãŸãƒžãƒ«ãƒã‚¢ã‚«ã‚¦ãƒ³ãƒˆç®¡ç†ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çµ±åˆ¶
JAWS DAYS 2021ã®ç™»å£‡è³‡æ–™ã§ã™ã€‚ è©³ç´°ã¯ãƒ–ãƒã‚°ã‚’ã”å‚ç…§ãã ã•ã„ã€‚ https://dev.classmethod.jp/articles/jaws-days-2021-control-tower/
yassan0627 2021/03/21
aws

ç®¡ç†

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Top 20 Dockerfile best practices
Learn how to prevent security issues and optimize containerized applications by applying a quick set of Dockerfile best practices in your image builds. If you are familiar with containerized applications and microservices, you might have realized that your services might be micro; but detecting vulnerabilities, investigating security issues, and reporting and fixing them after the deployment is ma
yassan0627 2021/03/13
docker

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

dockerfile
ãƒªãƒ³ã‚¯
1 2 3 4 5 6 7 æ¬¡ã®ãƒšãƒ¼ã‚¸