AdminSysGNULinux

Outils pour utilisateurs

Outils du site

Piste : • autres • blog
blog

Table des matières

18 billet(s) pour juin 2026

Notes YubiKey FIDO PIN2026/06/26 23:15Jean-Baptiste
Tester les flux réseaux UDP2026/06/26 17:47 
Notes gitlab - certificats CA2026/06/18 11:42Jean-Baptiste
Notes Gitlab-ci pipeline - API2026/06/17 17:27Jean-Baptiste
Notes API - REST - outils2026/06/16 15:10Jean-Baptiste
PKI - CA - Cert - Ajouter une autorité de certification2026/06/11 15:14Jean-Baptiste
Pb DNS bind92026/06/10 17:43Jean-Baptiste
Notes synchro temps hôte VM NTP vs non NTP2026/06/10 10:45Jean-Baptiste
Notes ntpd - être sa propre horloge système2026/06/08 14:21Jean-Baptiste
Notes conf etc2026/06/08 14:17Jean-Baptiste
Notes - yamllint2026/06/05 11:14Jean-Baptiste
Contrôle parental - bloquer un utilisateur après une certaine heure2026/06/04 17:22Jean-Baptiste
Notes SystemD Timer2026/06/04 17:19Jean-Baptiste
Contrôle parental - Fermer la session après une certaine heure2026/06/04 17:19Jean-Baptiste
Pb podman - network - netns namespace - duplicate default gateway2026/06/04 11:51Jean-Baptiste
Notes SSOT - source unique de vérité2026/06/03 17:00Jean-Baptiste
Notes podman machine2026/06/03 14:19Jean-Baptiste
chroot escape2026/06/02 16:37Jean-Baptiste

Notes HTTP Strict Transport Security - HSTS

Voir :

Pb

Err - Le serveur a présenté des informations de transparence du certificat insuffisantes
Le serveur a présenté des informations de transparence du certificat insuffisantes. Son certificat peut ne pas avoir été rendu public et il peut avoir été émis par erreur.

HTTP Strict Transport Security : false
HTTP Public Key Pinning : false

HTTP Public Key Pinning (HPKP) is an obsolete Internet security Source : https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning

Solution
server {
    server_name wiki.acme.com;
 
    # Ligne à ajouter :
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
    ...
    }
systemctl reload nginx

FIXME

2026/09/18 11:04 · Jean-Baptiste
, , ,

Notes GNU Linux GPU carte graphiques

Voir : https://linuxfr.org/news/aux-origines-du-premier-gpu-une-bande-de-copains-de-l-ens

FIXME

2026/09/08 15:49 · Jean-Baptiste
,

Notes GNU Linux graphique

Serveurs

Gestionnaire de session

Voir :

Voir :

Compositeur

Voir :

Autres

Display Manager

FIXME

2026/09/08 15:42 · Jean-Baptiste

Notes urlencoding - passer des mots de passe en HTTPS

Voir un exemple ici : Exemple git clone avec Ansible 

from urllib.parse import quote_plus
quote_plus('P@ssw0rd!')
'P%40ssw0rd%21'

Et inversement 

from urllib.parse import unquote_plus
unquote_plus('P%40ssw0rd%21')
'P@ssw0rd!'

Autres

from urllib.parse import urlencode
urlencode({'a': 'P@ssw0rd!'}).split('=')[1]

FIXME

2026/09/03 17:58 · Jean-Baptiste
, , ,

Namespace - accès aux volumes - podman

Information

podman run --init --entrypoint /bin/sleep docker.io/library/centos:centos5 inf
$ podman ps
CONTAINER ID  IMAGE                             COMMAND     CREATED         STATUS         PORTS       NAMES
0200210cacf3  docker.io/library/centos:centos5  inf         31 minutes ago  Up 31 minutes              vigorous_nobel

$ podman unshare mount | grep $HOME
/dev/sdd on /home/management/.local/share/containers/storage/overlay type ext4 (rw,relatime,discard,errors=remount-ro,data=ordered)
shm on /home/management/.local/share/containers/storage/overlay-containers/0200210cacf387ff1af5fd2d75724779c846710c5ac392338ab4dbb77a7e660b/userdata/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=64000k,uid=1000,gid=1000)
overlay on /home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/merged type overlay (rw,relatime,lowerdir=/home/management/.local/share/containers/storage/overlay/l/BPCGYE43L4DFWORYE7TTH2DWLA,upperdir=/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff,workdir=/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/work,redirect_dir=nofollow,uuid=on,userxattr)

$ podman unshare find /home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/run
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/run/.containerenv
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/etc
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/etc/hostname
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/sys
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/proc

$ podman unshare ls /home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/merged/
bin  dev  etc  home  lib  lib64  lost+found  media  mnt  opt  proc  root  run  sbin  selinux  srv  sys  tmp  usr  var

$ ls /home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/merged/

$ podman inspect 0200210cacf3 | jq -r '.[].GraphDriver.Data'
{
  "LowerDir": "/home/management/.local/share/containers/storage/overlay/5513565ec546b4249cb76fec6551253c611d6ee80184807324c5c4335e4a2964/diff",
  "MergedDir": "/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/merged",
  "UpperDir": "/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff",
  "WorkDir": "/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/work"
}

$ ls /home/management/.local/share/containers/storage/overlay/5513565ec546b4249cb76fec6551253c611d6ee80184807324c5c4335e4a2964/diff
bin  dev  etc  home  lib  lib64  lost+found  media  mnt  opt  root  sbin  selinux  srv  tmp  usr  var

Accès en lecture depuis l'hôte

podman inspect 0200210cacf3 | jq -r '.[].GraphDriver.Data.LowerDir'
2026/08/07 17:45 · Jean-Baptiste
, ,

Anciens billets >>

blog.txt · Dernière modification : de 127.0.0.1
Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki