Andrea Veri's Blog

Table of Contents Introduction The vulnerability Analyzing the shellcode Setting up the lab Setting up rootless Podman Running the exploit inside a container Tracing the exploit mechanism Why rootless containers stopped the escalation Catching the kernel…

Table of Contents Introduction The MCS problem The test script GitLab’s official suggestion and why it falls short How GNOME currently handles this Exploring libkrun Firecracker and the custom executor path What comes next Introduction GNOME’s GitLab runn…

Table of Contents Introduction The problem Architecture overview The VCL layer The POST-to-GET conversion Protecting private repositories The Lua layer Debugging the rollout How we got here Conclusions Introduction One of the most visible signs that GNOME…

Table of Contents Introduction MVP The learning resources Preliminary steps Configuration on ovn-control-plane Configuration on sweetrevenge Configuration on flumina Connectivity test Libvirt Rust The code A quick peek at the web UI License The future Int…

Table of Contents 1.

1.

1.

As you may have noticed from outage and maintenance notes we sent out last week the GNOME Infrastructure has been undergoing a major redesign due to the need of moving to a different datacenter.

During GUADEC 2018 we announced one of the core plans of this and the coming year: it being moving as many GNOME web applications as possible to the GNOME Openshift instance we architected, deployed and configured back in July.

Been a while since GUADEC 2018 has ended but subsequent travels and tasks reduced the time to write up a quick summary of what happened during this year’s GNOME conference.

As a follow-up to the reCAPTCHA v1 post published back in 2014 here it comes an updated version for migrating your Mailman instance off from version 1 (being decommissioned on the 31th of March 2018) to version 2.

Six months since my latest blog post is definitely a lot and reminds me how difficult this year has been for me in many ways.

It’s been a while since my last “what’s been happening behind the scenes” e-mail so I’m here to report on what has been happening within the GNOME Infrastructure, its future plans and my personal sensations about a challenge that started around three (3)…

Many times it happened seeing someone joining the #sysadmin IRC channel requesting participation to the team after having spent around 5 minutes trying to explain what the skills and the knowledge were and why this person felt it was the right figure for…

One of the benefits I originally wanted to bring with the FreeIPA move to GNOME contributors was the introduction of an additional authentication system to connect to to the services hosted on the GNOME Infrastructure.

A few days ago I wrote about the GNOME Infrastructure moving to FreeIPA, the post was mainly an announcement to the relevant involved parties with many informative details for contributors to properly migrate their account details off from the old authent…

As preannounced here the GNOME Infrastructure switched to a new Account Management System which is reachable at https://account.gnome.org.

Coming back from GUADEC has never been easy, so much fun, so much great people to speak with and amazing talks to watch but this year has definitely been harder as I totally felt in love with the city that was hosting the event.

The GNOME and many other infrastructures have been recently attacked by an huge amount of subscription-based spam against their Mailman istances.

I wanted to give Fedy a try yesterday, specifically to install the **Brackets **code editor designed for web developers.

It’s been a while now since the very first time I posed my hands on this shiny new Samsung Chronos Series 7 laptop and oh dear… how much pain did my metallic-grey fellow take me in order to figure out how properly have every single piece of the hardware w…

Fighting with passwords have always been one of my favorite battles in the past and unfortunately the former always won.

Today I’ll be working out how to properly configure DNSSEC on a BIND9 installation, I’ll also make sure to give you all the needed instructions to properly verify if a specific domain is being correctly covered by DNSSEC itself.

I wanna be really honest, getting back home from this year’s GUADEC has been very painful for me but not because of the trip back home.

It’s been two years since my latest blog post about my Linux desktop and many things have changed since then.

I haven’t been blogging so much in the past months as I actually promised myself I would have but given the fact a lot has been done on the GNOME Infrastructure lately it’s time for me to announce all the updates we did since my latest blog post.

I’ve recently spent some time setting up TLS/SSL encryption (SSSD won’t send a password in clear text when an user will try to authenticate against your LDAP server) on an OpenLDAP istance and as you may know the only way for doing that on a RHEL / CentOS…

It’s been more than a month now since I started looking into the many outstanding items we had waiting on our To Do list here at the GNOME Infrastructure.

I’ve been looking around for a possible way to connect to the IPv6 internet for some time now and given the fact my provider didn’t allow me to run IPv6 natively I had to find an alternative solution.

Have you ever heard someone talking extensively about Cloud Computing or generally Clouds?

I live in a little village close to the city and one of the houses close to my property is for rent since more than ten years.

Exactly one week ago I was attending the Fedora Activity Day organized in Milan in concomitance with the Linux Day event being organized in several italian cities.

Logging in into a Linux machine and executing the hundreds commands available is just one of the most common usages of OpenSSH.

I’m an Italian Red Hatter who lives in New York City.

È con piacere che annuncio la mia presenza al Fedora Activity Day di Milano in data 27 Ottobre 2012 e con altrettanto piacere ringrazio gli organizzatori per avermi dedicato uno spazio di trenta minuti in cui discutere ed approfondire le tematiche derivan…

Today I’ll be telling you about an interesting way to build your Debian packages using Deb-o-Matic, a tool developed and maintained by Luca Falavigna.

Ever wondered how you can update your website (in our case a static website with a bunch of HTML and PHP files) by committing to a Git repository hosted on a different server?

Lately (as I earlier pointed out on my blog) I’ve been working on improving GNOME’s infrastructure monitoring services.

As per Wikipedia: Puppet is a tool for managing the configuration of Unix-like systems, declaratively.

A few days ago I blogged about my main computer’s configuration files and desktop’s appearance and today I managed to add a few little tweaks to those, they are: Google’s contacts list integrated into Mutt a cleaner and nicer Login screen Curious to know…

I bought a new PC a few weeks ago and I then decided to renew a bit my Desktop, my Mutt and my Irssi setup.

I’ve actually spent a few hours searching around for a good backup solution for my mailbox until I decided to stick with getmail.

Since some time I’ve been thinking about a possible way to delete my Gmail’s Trash & Spam folders content automatically without having to bother doing it manually every single time I wanted to check my mail and clean it up.

Today we had a great Town Hall meeting kindly hosted and moderated by Kevin Fenzi (nirik).

If you are not subscribed to the fedora-announce mailing list but you are still interested in having a look at my responses about community-asked questions, here they are: What will you be able to accomplish by being elected, that you would not otherwise…

Today I had the possibility to announce a new tool for the Fedora Project, a sub-planet called ‘Edited’ mainly focused on Fedora-related posts and announcements.

Debian maintainer: Some days ago I had the great announcement that my Debian Maintainer‘s application was accepted and thanks to Jonathan McDowell my key is finally into the debian-maintainers keyring.

Pochi giorni fa ho avuto l’onore di essere intervistato da BehindMOTU, vi riporto l’intera intervista (ovviamente in inglese) augurandovi ,inoltre, una buona lettura!

Questo pomeriggio ho eseguito il primo upload nell’archivio di Ubuntu e devo dire che ricevere poco dopo la mail di conferma e di successo dell’operazione è qualcosa di veramente speciale!

Dopo ben 3 mesi dalla mia presentazione al MOTU Council per la candidatura ufficiale a Master of the Universe è giunta ieri la lieta mail di Matt Zimmerman, chairman della tech board di Ubuntu e responsabile di ogni decisione finale per ogni candidatura p…