blog [AdminSysGNULinux]

blog

Table des matières

5 billet(s) pour juin 2025

2026:
- janvier
- février
- mars
- avril
- mai
- juin
- juillet
- août
- septembre

2025:
- mars
- avril
- mai
- juin
- juillet
- août
- septembre
- octobre
- novembre
- décembre

5 billet(s) pour juin 2025

GNU Linux - vérifier un mot de passe système /etc/shadows	2025/06/05 14:40	Jean-Baptiste
Notes cartes - map - GIS	2025/06/05 11:30	Jean-Baptiste
Notes Terminal sympa	2025/06/05 11:05	Jean-Baptiste
Spam être blacklisté à tort	2025/06/04 22:43	Jean-Baptiste
Notes Python Web coté client - Brython Pyodide PyScript	2025/06/02 16:27	Jean-Baptiste

Notes HTTP Strict Transport Security - HSTS

Voir :

https://www.chromium.org/hsts

Pb

Err - Le serveur a présenté des informations de transparence du certificat insuffisantes

Le serveur a présenté des informations de transparence du certificat insuffisantes. Son certificat peut ne pas avoir été rendu public et il peut avoir été émis par erreur.

HTTP Strict Transport Security : false
HTTP Public Key Pinning : false

HTTP Public Key Pinning (HPKP) is an obsolete Internet security Source : https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning

Solution

server {
    server_name wiki.acme.com;
 
    # Ligne à ajouter :
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
    ...
    }

systemctl reload nginx

2026/09/18 11:04 · Jean-Baptiste

brouillon, http, securite, nginx

Notes GNU Linux GPU carte graphiques

Voir : https://linuxfr.org/news/aux-origines-du-premier-gpu-une-bande-de-copains-de-l-ens

2026/09/08 15:49 · Jean-Baptiste

Notes GNU Linux graphique

Serveurs

X11 https://fr.wikipedia.org/wiki/X_display_manager
Wayland

Gestionnaire de session

Voir :

https://fr.wikipedia.org/wiki/Gestionnaire_de_session

Voir :

https://doc.ubuntu-fr.org/fenetre_de_connexion

Compositeur

Voir :

https://fr.wikipedia.org/wiki/Compositeur_(logiciel)

Autres

Display Manager

2026/09/08 15:42 · Jean-Baptiste

Notes urlencoding - passer des mots de passe en HTTPS

Voir un exemple ici : Exemple git clone avec Ansible

from urllib.parse import quote_plus
quote_plus('P@ssw0rd!')

'P%40ssw0rd%21'

Et inversement

from urllib.parse import unquote_plus
unquote_plus('P%40ssw0rd%21')

'P@ssw0rd!'

Autres

from urllib.parse import urlencode
urlencode({'a': 'P@ssw0rd!'}).split('=')[1]

2026/09/03 17:58 · Jean-Baptiste

mdp, encoding, http, python

Namespace - accès aux volumes - podman

Information

podman run --init --entrypoint /bin/sleep docker.io/library/centos:centos5 inf

$ podman ps
CONTAINER ID  IMAGE                             COMMAND     CREATED         STATUS         PORTS       NAMES
0200210cacf3  docker.io/library/centos:centos5  inf         31 minutes ago  Up 31 minutes              vigorous_nobel

$ podman unshare mount | grep $HOME
/dev/sdd on /home/management/.local/share/containers/storage/overlay type ext4 (rw,relatime,discard,errors=remount-ro,data=ordered)
shm on /home/management/.local/share/containers/storage/overlay-containers/0200210cacf387ff1af5fd2d75724779c846710c5ac392338ab4dbb77a7e660b/userdata/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=64000k,uid=1000,gid=1000)
overlay on /home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/merged type overlay (rw,relatime,lowerdir=/home/management/.local/share/containers/storage/overlay/l/BPCGYE43L4DFWORYE7TTH2DWLA,upperdir=/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff,workdir=/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/work,redirect_dir=nofollow,uuid=on,userxattr)

$ podman unshare find /home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/run
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/run/.containerenv
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/etc
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/etc/hostname
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/sys
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/proc

$ podman unshare ls /home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/merged/
bin  dev  etc  home  lib  lib64  lost+found  media  mnt  opt  proc  root  run  sbin  selinux  srv  sys  tmp  usr  var

$ ls /home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/merged/

$ podman inspect 0200210cacf3 | jq -r '.[].GraphDriver.Data'
{
  "LowerDir": "/home/management/.local/share/containers/storage/overlay/5513565ec546b4249cb76fec6551253c611d6ee80184807324c5c4335e4a2964/diff",
  "MergedDir": "/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/merged",
  "UpperDir": "/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff",
  "WorkDir": "/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/work"
}

$ ls /home/management/.local/share/containers/storage/overlay/5513565ec546b4249cb76fec6551253c611d6ee80184807324c5c4335e4a2964/diff
bin  dev  etc  home  lib  lib64  lost+found  media  mnt  opt  root  sbin  selinux  srv  tmp  usr  var

Accès en lecture depuis l'hôte

podman inspect 0200210cacf3 | jq -r '.[].GraphDriver.Data.LowerDir'

2026/08/07 17:45 · Jean-Baptiste

brouillon, conteneur, diff

Anciens billets >>

blog.txt · Dernière modification : 2025/03/24 15:06 de 127.0.0.1