Currently, I have this command in my bash script for building & pushing an image to Amazon ECR
docker login -u AWS -p "$(aws ecr get-login-password)" "https://$(aws sts get-caller-identity --query 'Account' --output text).dkr.ecr.us-east-1.amazonaws.com"
Which gives the warning "WARNING! Using --password via the CLI is insecure. Use --password-stdin."
How can I change this command to not give the warning? Is this really insecure?
Trying to understand everything while reading http://heartbleed.com/
This sentence Leaked secret keys allows the attacker to decrypt any past and future traffic to the protected services and to impersonate the service at will this sounds pretty serious.
Now there are many private/small company websites that don't necessarily have SSL encryption for their site. Is this kind of malicious behavior also possible without heartbleed and SSL? If so does that mean every non SSL site could be an impersonated version? Is the information obtainable with heartbleed the same information hackers can get if a site is non-ssl encrypted or less/more?
I'm trying to push a file from my local windows machine to an amazon server into the folder /var/www
rsync -e 'ssh -i /cygdrive/d/myaws.pem' /cygdrive/d/web/my_site.jpa [email protected]/var/www
Unsuccessful with this error
rsync: change_dir#3 "/home/mark//[email protected]/var" failed: No such file or directory (2)
I've run into this a few times when a site serves a variable file i try to download
wget http://trac-hacks.org/changeset/latest/tracajaxcommentsplugin?old_path=/&filename=tracajaxcommentsplugin&format=zip
Expected file
tracajaxcommentsplugin-r10913.zip
instead I get a file
tracajaxcommentsplugin\?old_path\=%2F with content
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" ...
This problem is not specific to trac or this pecific file.
I'm getting log notices of activity's such as users trying to access /js/cache/'+opts.iframeSrc+' and other suspicious looking failed Javascript and MYSQL injections.
However these seem to come from an ip addresses that changes daily. (maybe proxies or just a different connection.)
How should I deal with this? Is there a way I can add them to an ip blacklist on Apache for 24 hours, or something? The ip address is changing all the time so I don't want have a massive list of ip's that might at some point belong to potential visitors.
I have quite a basic setup
<Directory "/var/www/example.com/public">
AuthType Basic
AuthName "Restricted Access
AuthUserFile /etc/httpd/conf/users
Require valid-user
</Directory>
This works fine except one aspect, i am using uplodify swfupload and it can't upload files because it triggers a 401 error.
Is there any way the uploader can bypass this?
I have a set of rewrite rules that redirect all pages that don't exist to the index of my site:
RewriteCond %{REQUEST_FILENAME} -s [OR]
RewriteCond %{REQUEST_FILENAME} -l [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^.*$ - [NC,L]
RewriteRule ^.*$ index.php [NC,L]
Basically, the current rule is redirecting every URL that is not a directory or file to index.php, so www.example.com/thispageexists, www.example.com/thispagedoesntexist and also www.example.com/missingfile.xml go to the index.php page. If the URL doesn't exist in the CMS, that will trigger a 404 error back to the user.
I'd like to exclude any URL with certain file extensions, say .(js|css|ico|gif|jpg|png|xml|html|swf|ttf|eot)$, from being redirected, even if the file does not exist.
I still want to continue directing pages that don't exist to index.php but not if the url ends in any of those file extensions.
I'm currently trying to process a bunch of data with apache and php,
I estimate it will take a few hours and I'd like to reduce that time
In my webmin I see following information
CPU usage 25% user, 0% kernel, 19% IO, 55% idle
is there a way i can dedicate more cpu usage to the process temporarily? (even if it means changing configs and restarting apache twice)
it's basically a lot of mysql selects/inserts/updates and regex
The processor is Intel(R) Core(TM)2 Quad CPU Q9400 @ 2.66GHz, 4 cores
Thanks for any tips on how to improve the speed
edit The CPU usage list shows this
ID Owner CPU Command
26841 mysql 38.6 % /usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file ...
5627 www-data 0.3 % /usr/sbin/apache2 -k start
I want to access this page (working)
http://stats.example.com/cgi-bin/awstats.pl?config=www.example.com
via
http://stats.example.com/?config=www.example.com
<VirtualHost *:80>
ServerName stats.example.com
DocumentRoot /usr/lib/cgi-bin/
DirectoryIndex awstats.pl
</VirtualHost>
however this triggers the download of awstats.pl, obviously not my intention. How can I make this work, or is there a concept I am missing?
Filesystem Size Used Avail Use% Mounted on
/dev/sda1 220G 220G 0 100% /
none 1.9G 168K 1.9G 1% /dev
none 1.9G 0 1.9G 0% /dev/shm
none 1.9G 52K 1.9G 1% /var/run
none 1.9G 0 1.9G 0% /var/lock
none 1.9G 0 1.9G 0% /lib/init/rw
none 220G 220G 0 100% /var/lib/ureadahead/debugfs
while panicking searching for answers after what seemed like ages the use decreased
Filesystem Size Used Avail Use% Mounted on
/dev/sda1 220G 9.3G 200G 5% /
none 1.9G 168K 1.9G 1% /dev
none 1.9G 0 1.9G 0% /dev/shm
none 1.9G 52K 1.9G 1% /var/run
none 1.9G 0 1.9G 0% /var/lock
none 1.9G 0 1.9G 0% /lib/init/rw
none 220G 9.3G 200G 5% /var/lib/ureadahead/debugfs
I haven't deleted anything so far and the and now that I'm writing this its back to
/dev/sda1 220G 12G 197G 6% /
What happend?? How can I investigate the cause and set things so it doesn't happen again I prevent this from happening again
During the time of the massage usage I found that the size of the /var folder was constant at 1.8 gigs but I was not able to check all folders
edit gone up to
/dev/sda1 220G 18G 192G 9% /
* update 2* It's going up again
ubuntu /: df -h
Filesystem Size Used Avail Use% Mounted on
/dev/sda1 220G 43G 167G 21% /
none 1.9G 168K 1.9G 1% /dev
none 1.9G 0 1.9G 0% /dev/shm
none 1.9G 52K 1.9G 1% /var/run
none 1.9G 0 1.9G 0% /var/lock
none 1.9G 0 1.9G 0% /lib/init/rw
none 220G 43G 167G 21% /var/lib/ureadahead/debugfs
And checking the command I was given
ubuntu /: du -h --max-depth=1 /
31M /boot
4.0K /selinux
8.0K /srv
7.4M /bin
du: cannot access `/proc/9993/task/9993/fd/4': No such file or directory
du: cannot access `/proc/9993/task/9993/fdinfo/4': No such file or directory
du: cannot access `/proc/9993/fd/4': No such file or directory
du: cannot access `/proc/9993/fdinfo/4': No such file or directory
0 /proc
12K /tmp
2.4G /var
0 /sys
100K /root
4.0K /media
575M /usr
4.0K /opt
16K /lost+found
4.5M /home
270M /lib
168K /dev
4.0K /mnt
6.7M /sbin
6.1M /etc
4.0K /cdrom
3.3G /
note the 3.3G for /
Pinging both www.example.com and example.com show that my ip address is correct
<VirtualHost *:80>
ServerAdmin [email protected]
ServerName example.com
ServerAlias www.example.com example.com
DocumentRoot /var/www/example.com/public
SetEnv APPLICATION_ENV live
</VirtualHost>
Accessing www.example.com works fine, however when I access example.com I see the default it works message (which is storred in /var/www/index.html)
Pinging both www.example.com and example.com show that my ip address is correct, what other steps can I do to figure out the root of the problem?
I have a Ubuntu Lucid Lynx VM which I've been tinkering with. I want to set up a VPN and I am happy to learn how to do it on my own but the vastness of options makes my head spin, so I'm just looking for pointers.
Factors I want considered for my setup
So my questions are:
16 IPSec VPN Tunnels
8 L2TP VPN Tunnels (Dial-in: 4, Dial-out: 4)
8 PPTP VPN Tunnels (Dial-in: 4, Dial-out: 4)
NOTES
What right now http://test.example.com is connecting to my WinXP computer with apache. the router is directing all connections from port 80 to my local ip.
However now I want http://vm.example.com to connect to my linux server running on VMware 7 What network adapter should I use and what method to connect to the VM via http://vm.example.com does the router do this? or should my xp machine?
I am using wamp, have all my projects in
E:\webs\*projectname*\htdocs
I want to access all of them in my browser with
http://*projectname*.loc
is there a way i can set up hosts and vhosts files so i never have to open them again?
note this is for my own personal use, and I can change from .loc to .whatever if ICANN decides to start selling .loc domains.
I'm trying to create a rule using Chinese characters
#RewriteRule ^zh(.*) /中文版$1 [L,R=301]
creates error 500 when i change the file to UTF-8
#RewriteRule ^zh(.*) /%E4%B8%AD%E6%96%87%E7%89%88$1 [L,R=301]
redirects to /%25E4%25B8%25AD%25E6%2596%2587%25E7%2589%2588 (basically replacing % with %25)
Anybody familiar with this problem?
Using Apache I want to prevent people from directly downloading music via url. I just want the flash player to play it. However Baidu MP3 found the files and is establishing direct downloads to my music. Is there a way I can prevent this with htaccess?
How can I set the rewrite base of the rewrite engine to
#access site via http://1.1.1.1/~sitename/
RewriteBase /~sitename/
when it's accessed via http://1.1.1.1/~sitename/ and set it to
#access site http://www.sitname.com
RewriteBase /
when it's accessed via www.sitname.com?
I'd like to have some sort of switch or condition. Because now when I set the RewriteBase to one of the options, the site is not functional when trying to access it with the other url.
EDIT: New site same problem.... so is this unsolvable?
Greetings, I am using ncftpput to transfer a lot of files from on server to the other
ncftpput -f server.txt -vRdb /public_html /var/www/site.com
What happens is, the connection gets cut after about 100 transfers. There are thousands of files that have to be transferred. Problem is after the connection is cut and I reenter the command, it starts from the beginning. Replacing all existing files, making the previous transfer redundant. Is there a way to skip existing files? It's not in the man page so I'm assuming no. So does anybody suggest an alternative command line solution?
SOLVED: The idea is that if the visitor comes from China they have to pass a basic authentication. If you have any other IP address you can visit the site without being hassled (including proxies)
//1400 rules....
SetEnvIf Remote_Addr 222.249.128.0/19 china
SetEnvIf Remote_Addr 222.249.160.0/20 china
SetEnvIf Remote_Addr 222.249.176.0/20 china
AuthType Basic
AuthName "Restricted"
AuthUserFile /www/passwd/users
Require valid-user
Order allow,deny
Allow from All
Deny from env=china
Satisfy any