PolitePixels
PolitePixels
  • Видео 29
  • Просмотров 109 258
AI Changed Security In 2024
Explore how AI drastically impacted cybersecurity throughout 2024, with a focus on how large language models lowered the barrier to entry for attackers. Highlights include LLM jacking, deepfake-based phishing, and the importance of threat modeling. The discussion also covers the limitations of AI security tools and emphasizes the need for robust system checks, especially as attackers adopt advanced methods to infiltrate networks.
Просмотров: 175

Видео

300,000 Prometheus Endpoints Exposed to DoS Attacks
Просмотров 564Месяц назад
Article by Aqua Security: www.aquasec.com/blog/300000-prometheus-servers-and-exporters-exposed-to-dos-attacks/ Key points covered: - Publicly exposed Prometheus endpoints (servers and exporters). - Risks of denial-of-service (DoS) attacks. - The danger of sensitive data leaking in Prometheus metrics. - The role of profiling endpoints in increasing vulnerabilities. - How Shodan reveals publicly ...
Disaster Recovery Strategies
Просмотров 1162 месяца назад
A comprehensive guide to disaster recovery for organizations of all sizes. Learn foundational strategies for startups, scalable approaches for growing businesses, and advanced enterprise-level solutions like pilot light, warm standby, and active-active architectures. This video covers key concepts like RPO, RTO, backups, infrastructure as code, and cost-effective cloud solutions to help you bui...
Who are PolitePixels?
Просмотров 1052 месяца назад
This video uses multiple stock clips from Pexels for illustration. These do not represent actual clients or teams we’ve worked with, though the examples discussed are based on real projects.
Getting started with ArgoCD
Просмотров 1,2 тыс.2 месяца назад
Our article on how to handle migrations: politepixels.io/articles/managing-migration-jobs-with-argocd
Building Secure Containers
Просмотров 1,3 тыс.2 месяца назад
Whitepaper link: politepixels.io/white-papers Building secure Docker containers begins with minimising the contents of the container to only include what is necessary for the application to function. Start by choosing a lightweight base image, such as Alpine or distroless, as these contain fewer built-in libraries and binaries, reducing the attack surface. Use a multi-stage build process to sep...
Securely Access Kubernetes With Tailscale
Просмотров 1,1 тыс.2 месяца назад
Our whitepaper: politepixels.io/white-papers/secure-remote-working-with-kubernetes Tailscale is a game-changer for anyone needing secure, easy access to internal systems without the hassle of traditional VPN setups. Unlike standard VPNs, Tailscale is built on WireGuard and works as a mesh network, meaning devices connect directly to each other without relying on a central server. This setup mak...
Shift Your Security Left
Просмотров 1993 месяца назад
Our whitepaper: politepixels.io/white-papers/secure-remote-working-with-kubernetes Shifting left in security is a transformative approach that prioritises security from the very beginning of the development process. Rather than treating security as an afterthought, shifting left means embedding security practices into the earliest stages, starting with planning and design. This proactive method...
Future of FluxCD?
Просмотров 1,4 тыс.11 месяцев назад
Weaveworks has officially announced the end of the company.
High Performance Proxmox On Hetzner
Просмотров 2,7 тыс.Год назад
Commands: pastebin.com/1F0ALKPZ In this tutorial, we're taking a significant leap in our network setup by upgrading to a 10 GB ethernet connection. We'll navigate through the limitations of Hetzner's default 1 Gbit connection and delve into why a 10 Gbit/s connection is crucial for handling data-heavy tasks, particularly for configurations with SSDs in CEPH nodes. Discover how we tackle this up...
Clustering Proxmox On Hetzner
Просмотров 4,3 тыс.Год назад
Commands: pastebin.com/1F0ALKPZ Continuing from where we left off in setting up Proxmox on Hetzner's dedicated servers, this video takes a giant leap forward into clustering and resource management. Ready for some advanced infrastructural configurations? Let's dive in! The focus now shifts to expanding our setup with two additional Hetzner machines. We'll tackle the intricacies of assigning uni...
Configuring Proxmox For Hetzner
Просмотров 13 тыс.Год назад
Commands: pastebin.com/1F0ALKPZ Throughout the video, we delve into the nitty-gritty of Proxmox configuration, highlighting key steps such as booting from the drives, setting up network devices, and managing SSH access over Port 2222. I'll walk you through running and connecting to your virtual machines, ensuring you understand every command and its purpose. But that's not all! The tutorial als...
Installing Proxmox On Hetzner
Просмотров 20 тыс.Год назад
Commands: pastebin.com/1F0ALKPZ In this video, I dive deep into the world of infrastructure learning by setting up a personal cloud using Proxmox on Hetzner's dedicated servers. If you're looking for an affordable way to learn and experiment with cloud infrastructures, this tutorial is for you! We start by exploring why mainstream cloud providers like AWS, Azure, and Google might not be the mos...
Efficient Kubernetes Namespace Segmentation
Просмотров 169Год назад
Join us as we delve into the concept of Kubernetes namespaces and how to simplify cluster management by adopting a tenant-based approach. In this video, we'll explore the pragmatic partitioning of namespaces into four essential categories that cater to various operational needs within your Kubernetes environment. Discover the roles of the 'kube-system', 'infra', 'domain', and 'CI/CD' namespaces...
Kubernetes Supply Chain Security
Просмотров 96Год назад
Dive into the realm of supply chain security within Kubernetes clusters, discussing the rise of related attacks and the importance of secure container practices. Unveiling alarming statistics, the episode explores the risks tied to third-party dependencies. Through examples, it discusses actionable security measures like multi-stage containers, Docker Trust Sign, and Trivy for container scannin...
Native Sidecars In Kubernetes 1.28
Просмотров 262Год назад
Native Sidecars In Kubernetes 1.28
Debug Kubernetes With Large Language Models
Просмотров 9 тыс.Год назад
Debug Kubernetes With Large Language Models
What Is Containerisation
Просмотров 6 тыс.Год назад
What Is Containerisation
Build Your Own Firewall With eBPF XDP
Просмотров 11 тыс.Год назад
Build Your Own Firewall With eBPF XDP
Democratising Data With Metalakes
Просмотров 7 тыс.Год назад
Democratising Data With Metalakes
4 Cool Things About Kubernetes 1.27
Просмотров 13 тыс.Год назад
4 Cool Things About Kubernetes 1.27
Building eBPF Programs - Linux Observability
Просмотров 8 тыс.Год назад
Building eBPF Programs - Linux Observability
The Twelve Factor App - DevOps Essentials
Просмотров 2,1 тыс.Год назад
The Twelve Factor App - DevOps Essentials
Mastering Ownership & Borrowing In Rust
Просмотров 1,5 тыс.Год назад
Mastering Ownership & Borrowing In Rust
Uncovering the Story Behind The LastPass Breach
Просмотров 1,4 тыс.Год назад
Uncovering the Story Behind The LastPass Breach
The Future of Linux Observability - EBPF
Просмотров 1,6 тыс.Год назад
The Future of Linux Observability - EBPF
Don't Panic! How To Stay Calm During Outages
Просмотров 1,3 тыс.Год назад
Don't Panic! How To Stay Calm During Outages
Introduction to FinOps: Take Control of Your Cloud Spendings!
Просмотров 133Год назад
Introduction to FinOps: Take Control of Your Cloud Spendings!
3 Cool Things About Kubernetes 1.26
Просмотров 1,5 тыс.2 года назад
3 Cool Things About Kubernetes 1.26

Комментарии

  • @Omobilo
    @Omobilo 6 дней назад

    Followed this guide about a month ago, single IP to my proxmox server and the few vm's i had deployed has net access. But when I try to add a new pub IP cant seem to get it to work. Anything in this guide that is preventing this? VM's with no pub ip are using vmbr2 and work, so this new VM w pub IP should be using vmbr1 right? What am I missing to do? Many pre-thanks!

  • @silverismoney
    @silverismoney 6 дней назад

    I'd rather buy a subnet and give the VMs their own IP than have to SNAT and DNAT

  • @veli33yilmaz
    @veli33yilmaz 18 дней назад

    Thank you so much man. There is a saying in here which you are living proof of that. Which is "We would have build his statue but there is not enogh concrete for his balls.". Great Tutorial.

  • @rajumondal4283
    @rajumondal4283 Месяц назад

    Tell me , tell me you earn in millions from your gigs Otherwise i will be sure that AI will take my job BTW if you ever decide to sell course under 30 dollars USD i will be biying it Also share your knowledge regarding application security and developing

  • @evgenwhatever8225
    @evgenwhatever8225 Месяц назад

    Wow, this method with QEMU is awesome, thank you! I wish Hetzner promoted it themselves. It's so much easier than request for a KVM Console and hassle with attaching ISO there.

  • @cheebadigga4092
    @cheebadigga4092 Месяц назад

    I also recommend to look at their auction servers. I have a beast of a machine (AMD Ryzen 9 5950X, 1TB NVMe + 2x2TB NVMe, 4x32 GB RAM) for basically around 100€ a month. I use it for learning mostly, and we have clustered vSphere/ESXi at work so I use that whenerver I need to learn/implement some clustering stuff. Best of both worlds I guess lol

  • @aditya9462
    @aditya9462 2 месяца назад

    This is very helpful and one of the best guides for eBPF XDP! Good Job

    • @PolitePixels
      @PolitePixels 2 месяца назад

      I am glad you enjoyed the video!

  • @starstreamlab
    @starstreamlab 2 месяца назад

    Awsome video, clean and informative! A interesting follow up would be how to hook this up with the CI part. commit, build test to creating the artifact that is releasable here.

    • @PolitePixels
      @PolitePixels 2 месяца назад

      Hey, I will see about making this the next video as there seems to be some interest. Thank you for the insights.

    • @starstreamlab
      @starstreamlab 2 месяца назад

      @@PolitePixels Awsome! Tekton looks nice :)

  • @MatthewKennedyUK
    @MatthewKennedyUK 2 месяца назад

    That was excellent, very clear and informative, I'm already looking forward to more videos. One question, I am curious what is a good folder structure for a production ArgoCD with several environments and apps.

    • @PolitePixels
      @PolitePixels 2 месяца назад

      So that really depends on your project. To me, it depends more on who your target audience is, and what their competency is regarding infrastructure. I tend to like to keep things in Helm if the people managing it are trained on Kubernetes. I keep these helm charts in the "infra" repo, and I usually have one helm chart, which acts as the master gitops chart which deploys all the rest. You can provide different values.yaml files for different environments, and I might make a follow-up video on how to do exactly that. Then in the application repo, which is usually co-maintained by the developers & infra, I usually like to use Kustomize or a simple helm chart, which little logic. I usually put this at the root of the target repos directory, usually in an /infra folder.

    • @tonycaveirametal
      @tonycaveirametal 2 месяца назад

      great content, where we can find the video with the pipeline integration? Thanks

  • @jarnoruuskanen
    @jarnoruuskanen 2 месяца назад

    This video series has been invaluable. Thanks 👍

  • @Faustetheus
    @Faustetheus 2 месяца назад

    Fundamentally.

  • @random-jq9fp
    @random-jq9fp 2 месяца назад

    any idea how to use OPNsense as the main router for the VMs with a failover IP from Hetzner in a 3 node cluster?

  • @kandarv
    @kandarv 2 месяца назад

    This is hands down one of the best Docker references on RUclips! I've already shared it with my peers-hoping they become even more grateful for my Dockerfile wizardry. 😁 By the way, could you share details about the small tablet you use for drawing? It looks super handy!

    • @PolitePixels
      @PolitePixels 2 месяца назад

      It is a Boox tablet and I am connecting to it wirelessly with ADB and SCRCPY. Thank you for the kind words!

  • @recursivecube44
    @recursivecube44 2 месяца назад

    This was an excellent video! Got recommended it out of the blue and it should definitely have more than a couple hundred views! I use docker on a daily basis for hosting production apps and I will definitely be using the information from this video on them. Thanks sm and keep up the great work! Next thing I'm doing is binging the rest of ur catalog

    • @PolitePixels
      @PolitePixels 2 месяца назад

      Sounds great, if there is any topic you think would be nice for me to cover, please let me know.

  •  2 месяца назад

    I just got this recommended out of nowhere. Most of the time when building Docker containers, I would just copy bits from various Dockerfile's and get it to work somehow, but it would always end up with some unexplained bugs after some months down the line, and I would just franticly try to resolve these issues by copying more stuff around. There was this nag that I should really learn this in a more abstract holistic way, but "there's never time" for something that ends up working just fine for 8 more months after a little bit of stackoverflowing. Watching this got me really excited about building docker images! How cool is that you share all of this! And I love your style in explaining it all by building from fundamentals! Great stuff! Thank you so much for putting it out there! 🫶

    • @PolitePixels
      @PolitePixels 2 месяца назад

      Thanks so much! Glad it got you excited about Docker and that the approach clicked for you.

  • @dovazencot
    @dovazencot 2 месяца назад

    You’ve got some top tier content, keep up the good work, it’s definitely appreciated! 😁

    • @PolitePixels
      @PolitePixels 2 месяца назад

      I am glad you are enjoying the content! 😁

  • @ultrasive
    @ultrasive 2 месяца назад

    Is this like for running / building other peoples code and avoiding it escaping chroot and namespaces?

    • @PolitePixels
      @PolitePixels 2 месяца назад

      It is more about good practices when creating containers to ensure you have reduced possible attack vectors. I am planning on creating another video, in the future, which focuses on how to run containers securely.

    • @ultrasive
      @ultrasive 2 месяца назад

      @ would anything other than kata containers Qemu plus a namespaced wireguard overlay network be necessary for running 3rd party tenants apps?

    • @nislab_
      @nislab_ 2 месяца назад

      Nice to see you again 😊

  • @mask17ful
    @mask17ful 2 месяца назад

    Everything is cool until u can be sure they will not compromise you :) u never know

    • @PolitePixels
      @PolitePixels 2 месяца назад

      That is why having a Zero Trust setup is so important, so even if they get access to a pod, then further authorisation layers still need to be breached.

  • @NrJuan
    @NrJuan 2 месяца назад

    Great video! This ties really well in with fluxcd concept of multitenancy and add a seperation with git sources as well allowing developers to have a cicd setup with in their own repo and deploying from there as well in to their own namespaces that is allocated for them. Regarding resources, wouldn't it be better give every developer team their own namespace and then build resource quotas on that namespace. That will give you fair use in the cluster and it builds a great dashboard for who is using how much.

    • @PolitePixels
      @PolitePixels 2 месяца назад

      Yeah, in that situation I often give each team its own domain namespace. Usually I try to split it up by the logical unit in the organisation, so then the permission structure is really easy to understand from a quick glance. I would also say though that sometimes its worth considering a hard segmentation, depending on your situation, and actually create a different cluster.

  • @zx9rmario
    @zx9rmario 3 месяца назад

    Traffic on vswitch is limited to 1TB/month. Each more TB costs 1 euro.

  • @АлексейЯкимович
    @АлексейЯкимович 3 месяца назад

    Great video! Thanks a lot!

  • @dmitrijit5851
    @dmitrijit5851 3 месяца назад

    Note - You CANNOT join cluster if you have VMs already created on a node !!!

  • @dmitrijit5851
    @dmitrijit5851 3 месяца назад

    Thanks @PolitePixels ! Can you do extra video for simplier more common setups and hetzners failover IP ? Basically 2 machines, wher one replicates from another, and in case of hardware failure failoverIP could be switched to another machine ? Also Proxmox BACKUP server seems very powerfull, and would be good to have video tutorial on that ? Thanks !

  • @souzadavi2409
    @souzadavi2409 3 месяца назад

    PS.: on minute 5:46 when is creating a cluster you should change to vmbr1 and not use vbmr0. On video show the public IP, this is bit confusing, but that should be the private IP 192.168.50.11. If you didn't pay attention this will give a ssl error and the PVE2 not connect. To fix you need change the file: /etc/corosync/corosync.conf in file change ring0_addr: to 192.168.50.11 on totem config change the version number: config_version: 3 Save the file and copy it to cp /etc/corosync/corosync.conf /etc/pve/corosync.conf ...stop all these services pveproxy, pvedaemon, pve-cluster, corosync. .. And delete all files in /var/lib/corosync/* than restart the service at this order: corosync, pve-cluster, pvedaemon, pveproxy ... You need to do this process on all node... thanks for great video!!!

  • @hansun1757
    @hansun1757 3 месяца назад

    eBPF basic example wirte ebpf_probe.c but runner.py path(ebpf_watch.c) ?? not good example indeed

  • @veli33yilmaz
    @veli33yilmaz 3 месяца назад

    Great tutorial! Thank you. How auctions work in hetzner? if i buy a machine from auction will the peocess be same for connecting to the machine or setup

  • @TheXISU
    @TheXISU 3 месяца назад

    Now if I have a bunch of lxcs and few containers inside a Ubuntu vm, how do I access them through the internet?

  • @moddofx
    @moddofx 3 месяца назад

    Hi very nice tutorial. Just a question. Do you have a bug in your DNS setup? I think 4.4.4.4 is not DNS, shouldn't it be 8.8.4.4 from Google?

  • @bmdyy
    @bmdyy 4 месяца назад

    Super helpful video, thank you!

  • @MatthewKennedyUK
    @MatthewKennedyUK 4 месяца назад

    What is this seth thing?

    • @spooterify
      @spooterify 3 месяца назад

      It’s Ceph, it’s an object storage deamon for creating a shared storage pool across 3 nodes.

  • @MatthewKennedyUK
    @MatthewKennedyUK 4 месяца назад

    I would pay for a more in depth version of this that expands on some of the concepts covered, as the last video (Pt 3) went in to some concepts I had absolutely no idea about, and while I can follow along, I would like to understand what and why.

  • @MatthewKennedyUK
    @MatthewKennedyUK 4 месяца назад

    Would be nice if a script existed to take care of a lot of this.

  • @nobewayo
    @nobewayo 4 месяца назад

    After doing sudo ifreload -a i lose all connection to the ssh.... Can still access with VNC though. But after doing everything after that and rebooting out of rescue it won\t connect to the ssh anymore. What is going on here?

    • @moddofx
      @moddofx 3 месяца назад

      Same problem, did you finally solve it?

    • @souzadavi2409
      @souzadavi2409 3 месяца назад

      if you rescue_bridge isn't not set, after sudo ifreload -a you will lose the access, the only way to stay in ssh from rescue mode and not VNC is from rescue_bridge config.

    • @spooterify
      @spooterify 3 месяца назад

      In rescue_bridge conf make sure you remove the source line at the end

  • @JordAuke-s5s
    @JordAuke-s5s 4 месяца назад

    Jones Donald Garcia Dorothy Perez Brian

  • @pawesieniewicz6480
    @pawesieniewicz6480 4 месяца назад

    Hi, could you make a video about pfsense with proxmox? 🙏🙏

  • @flohfloh1157
    @flohfloh1157 4 месяца назад

    What is the reason for the 3 partitions. I guess one is for EFI/Bootloader but for what is the other one?

  • @DarraghMcCarthy
    @DarraghMcCarthy 6 месяцев назад

    also interested to see if SDNs can work seamlessly with Wireguard, rather than using a vSwitch

  • @vivekshinde4761
    @vivekshinde4761 6 месяцев назад

    You made it Unbelievably simple 😊

  • @mithubopensourcelab482
    @mithubopensourcelab482 6 месяцев назад

    Good one.... Ceph on 1 gb network is asking for disaster. I would recommend minimum of 10 G. Secondly, with ceph, you will never get snapshots. I generally prefer a Linux box with max possible drives as storage to Proxmox storage. I also prefer nfs over any other fancy stuff like smb/cifs or iscsi for its simplicity, able to mount any where in case required.

  • @mithubopensourcelab482
    @mithubopensourcelab482 6 месяцев назад

    There is much better way to install Proxmox. Simply install stock Debian. Then you can install proxmox over debian. No need of rescue mode and additional stuff. Always install with default drive and then order additional drives.

  • @ZhivkoKabaivanov
    @ZhivkoKabaivanov 7 месяцев назад

    VNC asks me for a password. In your qemu-system-x86_64 command, you don't specify any password for VNC. Could give me hint what I might be doing wrong?

  • @angelshce
    @angelshce 7 месяцев назад

    How i can acces via RDP to a windows machine?

  • @alphaomega5017
    @alphaomega5017 7 месяцев назад

    At the Current situation we need go to lesser pricing not on the higher side

  • @domjag600
    @domjag600 8 месяцев назад

    Would it make sense to use pfSense or OPNSense to handle the firewall rules and DHCP?

  • @miguelmendez241
    @miguelmendez241 8 месяцев назад

    Awesome video, one the best explanations 👍

  • @frankoonk2670
    @frankoonk2670 8 месяцев назад

    Advice: i found out that sometimes the networkcard has 2 altnames, when i used the second altname i wasn't able to boot into proxmox, but when i use the first altname it works!

    • @alexocarroll5412
      @alexocarroll5412 7 месяцев назад

      thanks pal, that one helped me since I had 2 altnames also. switching from the second to the first (eno1 in my case) allowed me to boot into pve.

    • @Omobilo
      @Omobilo 2 месяца назад

      I also used 2nd: 'enp0s31f6" and after reboot, cant ping either to ssh into server. so I should use 'eno1' instead of 'enp0s31f6"? below my ip addr with the 2 altnames. 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether b4:****62 brd ff:ff:ff:ff:ff:ff altname eno1 altname enp0s31f6 inet 8*****99/27 scope global eth0 valid_lft forever preferred_lft forever

  •  8 месяцев назад

    hi thank you so much. But pastebin link is broken. Can you fix it please

  • @Keaza.
    @Keaza. 8 месяцев назад

    I got it working without rescue mode at one point, but then I restarted the machine and now I cant longer access proxmox, I have to go into rescue mode and boot a vm from rescue mode. Wtf am I doing wrong?

    • @frankoonk2670
      @frankoonk2670 8 месяцев назад

      Same problem over here! Also the fix to comment source /etc/network/interfaces.d/* doesn't work.

  • @cresuso
    @cresuso 8 месяцев назад

    Wow I thought the only way to install proxmox on hetzner was through the installimage script. I've tried with installimage, but had the issue of mdadm raid enabled + wanting to use zfs instead (also bad idea to put zfs on top of mdadm), and couldn't just put the filesystem in the script (it doesn't support zfs). This a very cool way to installing an os on hetzner machines, allows for much more customization thank you very much !!

  • @BunkerFrog
    @BunkerFrog 8 месяцев назад

    After following guide and rebooting (without using backup link and "source /etc/network/interfaces.d/*" ) system is not reachable. I was trying few times to reinstall system.

    • @souzadavi2409
      @souzadavi2409 3 месяца назад

      Before installing PROXMOX there is a trick, he said but if you do not pay attention on video you gone to see the problem when you boot, after boot the server doesn't ping anymore. Before installing PROMOX You should check ls -al /sys/firmware/efi or efibootmgr if is the result is empty, nothing showing, you need to remove -bios /usr/share/ovmf/OVMF.fd from the Command 1 and command 2. If this parameter is wrong the server will be unbootable!!! Five nights without sleep because of this, I hope no one getting into it! The tutorial is awesome!!! thank you!!!