Found 7 results for: Testing Pipelines
Enforce CIS network sysctl baselines with Ansible, gate deployments on OpenSCAP results, and reject Ingress objects without TLS using an OPA admission policy.
Trivy exits 0 even with CRITICAL findings. I built it from source and made it a real CI gate, then found a secret-scan skip that a green result can hide.
A reference setup for Postfix on CentOS 6 (2012): fix mail rejected or sent to spam with matching DNS, restricted SMTP, TLS submission with SASL, SPF and DKIM.
How to tell when an OpenVZ container is being refused resources: read user_beancounters, interpret failcnt, and shrink MySQL and Apache to fit the limits.
Run containers as non-root, with a read-only filesystem, dropped capabilities and a default-deny NetworkPolicy, so one compromised app has little to work with.
How to keep slow jobs out of the web request path with RabbitMQ, Celery 3.0 and Nginx 1.2 on Debian 7, with corrected configuration and the limits of the setup.
A 2009 reference for choosing between a VPS and a dedicated server. It covers how to find and fix OpenVZ memory-limit failures with user_beancounters.