Using Ansible Vault Effectively

Ansible is a great orchestration tool. The low barrier to entry and simplicity of Ansible are why so many people that start using it love it. But there is one feature in Ansible that probably should be used more often. That feature is Ansible Vault. Enter your email I consent to receiving your weekly newsletter, DevOps'ish SUBSCRIBE   “Vault” is a feature of ansible that allows keeping sensitive data such as passwords or keys in encrypted files, rather than as plaintext in your playbooks or roles....

October 17, 2015 · 3 min · Chris Short

Disabling Mac OS X El Capitan System Integrity Protection

Apple has introduced a new security feature in Mac OS X El Capitan (10.11) called System Integrity Protection (sometimes referred to as rootless). Enter your email I consent to receiving your weekly newsletter, DevOps'ish SUBSCRIBE   What is System Integrity Protection? According to Apple’s documentation: A new security policy that applies to every running process, including privileged code and code that runs out of the sandbox....

October 13, 2015 · 2 min · Chris Short

LastPass Sells Out to LogMeIn

If you have not heard, the phenomenal cloud base SaaS password manager, LastPass has agreed to be acquired be the not so customer friendly LogMeIn. The IT world immediately panned the anti-idea as anti-consumer and the security world agreed and raised all sorts of red flags as well. People dislike LogMeIn for a variety of reasons but the main one is that they pulled the rugs out from under a lot of folks who were using LogMeIn to help administer remote computers (I was one of these people)....

October 9, 2015 · 3 min · Chris Short

PHP Memory Directives Relationship

I recently had to templatize PHP configurations using Ansible and Jinja2. I had to do some research to ensure that the memory directives that were being defined were actually valid. The three directives I was tinkering with were: memory_limit upload_max_filesize post_max_size These three directives values' are actually tied together. memory_limit is the max amount of memory that a script can consume. upload_max_filesize defines the largest size a file upload can be....

October 9, 2015 · 1 min · Chris Short

Mac OS X El Capitan and Junos Pulse

I had some Apple Keychain issues after upgrading to Mac OS X El Capitan yesterday. Apple provided a reasonable resolution (blow away the login Apple Keychain and re-create it). As it turns out, my issues weren’t limited to just the El Capitan upgrade. The Juniper Networks' VPN client, Junos Pulse, has some pretty awful issues. Enter your email I consent to receiving your weekly newsletter, DevOps'ish SUBSCRIBE   The behavior went something like this:...

October 6, 2015 · 1 min · Chris Short