"Building Immutable Cloud Infrastructure one container at a time!"
The NFS setups we’ve covered so far didn’t have any authentication or encryption setup. To some extent that wasn’t needed since NFS only works inside internal networks. However it is possible to setup authentication+encryption using Kerberos.
Let’s say you want to setup group folder that’s available via nfs. However this time only a particulat Linux group is allowed to have read+write access to this folder. You can do this by ensuring the exported folder is owned by a group, and then setup the SGID. You can follow along this article using […]
Network Files System (NFS) is a protocol that let’s one Linux box (NFS server) to share a folder with another Linux box (NFS Client). On the NFS client this shared folder looks like just an ordinary folder. NFS only works in an internal network so you can share folders over the public internet. This article […]
If you have directories on your machine that you want to share out to other machines then you can do this by setting up your system as an NFS server.
If you want to override the dhcp provided dns server, to a custom dns server, then you need to make the configuration via NetworkManager.
A caching-only DNS server is a server that sits inside an internal network that all the other boxes in the internal network uses when it wants they do a dns lookup. You can follow along with this article using our dns demo vagrant environment. A caching-only DNS server doesn’t have a full dns db, instead […]
This is walktrhough how to generate ssl certificates and then configure https on a CentOS 7 Apache server to use the ssl certificate.
Here’s a simple example of how to use openssl to create a public-private key-pair, then use that key-pair to encrypt and then decrypt some sample data.
Here we discuss what roles CSR files and Certificate Authorities plays in the goal of setting up https on an Apache web server.
Here’s a simple example of how to use openssl to create a public-private key-pair, then use that key-pair to encrypt and then decrypt some sample data.