update blog.hillion.co.uk
This commit is contained in:
Drone
parent
7b6002c681
commit
4f651671cb
6
blog.hillion.co.uk/404.html
Normal file
6
blog.hillion.co.uk/404.html
Normal file
@ -0,0 +1,6 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>404 Page not found | Jake Hillion</title><meta name=keywords content><meta name=description content="Jake Hillion's Blog"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/404.html><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="404 Page not found"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/404.html"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="404 Page not found"><meta name=twitter:description content="Jake Hillion's Blog"></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><div class=not-found>404</div></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
8
blog.hillion.co.uk/categories/home-server/index.html
Normal file
8
blog.hillion.co.uk/categories/home-server/index.html
Normal file
@ -0,0 +1,8 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Home Server | Jake Hillion</title><meta name=keywords content><meta name=description content="Jake Hillion's Blog"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/categories/home-server/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/categories/home-server/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Home Server"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/categories/home-server/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Home Server"><meta name=twitter:description content="Jake Hillion's Blog"></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><div class=breadcrumbs><a href=https://blog.hillion.co.uk/>Home</a> » <a href=https://blog.hillion.co.uk/categories/>Categories</a></div><h1>Home Server</h1></header><article class="post-entry tag-entry"><header class=entry-header><h2>Drone CI and Crypto Honeypots 💰🍯📚</h2></header><section class=entry-content><p>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait… Something is wrong.
|
||||
htop showing bad things I certainly wasn’t running any jobs involving Tensorflow, and I’m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I’ve taken away from it....</p></section><footer class=entry-footer><span title='2022-03-07 18:00:00 +0000 UTC'>March 7, 2022</span> · 4 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Drone CI and Crypto Honeypots 💰🍯📚" href=https://blog.hillion.co.uk/posts/drone-hack/></a></article></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
21
blog.hillion.co.uk/categories/home-server/index.xml
Normal file
21
blog.hillion.co.uk/categories/home-server/index.xml
Normal file
@ -0,0 +1,21 @@
|
||||
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||||
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
|
||||
<channel>
|
||||
<title>Home Server on Jake Hillion</title>
|
||||
<link>https://blog.hillion.co.uk/categories/home-server/</link>
|
||||
<description>Recent content in Home Server on Jake Hillion</description>
|
||||
<generator>Hugo -- gohugo.io</generator>
|
||||
<lastBuildDate>Mon, 07 Mar 2022 18:00:00 +0000</lastBuildDate><atom:link href="https://blog.hillion.co.uk/categories/home-server/index.xml" rel="self" type="application/rss+xml" />
|
||||
<item>
|
||||
<title>Drone CI and Crypto Honeypots 💰🍯📚</title>
|
||||
<link>https://blog.hillion.co.uk/posts/drone-hack/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/drone-hack/</guid>
|
||||
<description>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait&hellip; Something is wrong.
|
||||
htop showing bad things I certainly wasn&rsquo;t running any jobs involving Tensorflow, and I&rsquo;m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I&rsquo;ve taken away from it.</description>
|
||||
</item>
|
||||
|
||||
</channel>
|
||||
</rss>
|
||||
@ -0,0 +1 @@
|
||||
<!doctype html><html lang=en><head><title>https://blog.hillion.co.uk/categories/home-server/</title><link rel=canonical href=https://blog.hillion.co.uk/categories/home-server/><meta name=robots content="noindex"><meta charset=utf-8><meta http-equiv=refresh content="0; url=https://blog.hillion.co.uk/categories/home-server/"></head></html>
|
||||
6
blog.hillion.co.uk/categories/index.html
Normal file
6
blog.hillion.co.uk/categories/index.html
Normal file
@ -0,0 +1,6 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Categories | Jake Hillion</title><meta name=keywords content><meta name=description content="Jake Hillion's Blog"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/categories/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/categories/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Categories"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/categories/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Categories"><meta name=twitter:description content="Jake Hillion's Blog"></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span class=active>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><h1>Categories</h1></header><ul class=terms-tags><li><a href=https://blog.hillion.co.uk/categories/home-server/>Home Server <sup><strong><sup>1</sup></strong></sup></a></li><li><a href=https://blog.hillion.co.uk/categories/publications/>Publications <sup><strong><sup>1</sup></strong></sup></a></li><li><a href=https://blog.hillion.co.uk/categories/weekly-updates/>Weekly Updates <sup><strong><sup>9</sup></strong></sup></a></li></ul></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
37
blog.hillion.co.uk/categories/index.xml
Normal file
37
blog.hillion.co.uk/categories/index.xml
Normal file
@ -0,0 +1,37 @@
|
||||
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||||
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
|
||||
<channel>
|
||||
<title>Categories on Jake Hillion</title>
|
||||
<link>https://blog.hillion.co.uk/categories/</link>
|
||||
<description>Recent content in Categories on Jake Hillion</description>
|
||||
<generator>Hugo -- gohugo.io</generator>
|
||||
<lastBuildDate>Mon, 06 Jun 2022 14:00:00 +0100</lastBuildDate><atom:link href="https://blog.hillion.co.uk/categories/index.xml" rel="self" type="application/rss+xml" />
|
||||
<item>
|
||||
<title>Publications</title>
|
||||
<link>https://blog.hillion.co.uk/categories/publications/</link>
|
||||
<pubDate>Mon, 06 Jun 2022 14:00:00 +0100</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/categories/publications/</guid>
|
||||
<description></description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Weekly Updates</title>
|
||||
<link>https://blog.hillion.co.uk/categories/weekly-updates/</link>
|
||||
<pubDate>Mon, 02 May 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/categories/weekly-updates/</guid>
|
||||
<description></description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Home Server</title>
|
||||
<link>https://blog.hillion.co.uk/categories/home-server/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/categories/home-server/</guid>
|
||||
<description></description>
|
||||
</item>
|
||||
|
||||
</channel>
|
||||
</rss>
|
||||
7
blog.hillion.co.uk/categories/publications/index.html
Normal file
7
blog.hillion.co.uk/categories/publications/index.html
Normal file
@ -0,0 +1,7 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Publications | Jake Hillion</title><meta name=keywords content><meta name=description content="Jake Hillion's Blog"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/categories/publications/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/categories/publications/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Publications"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/categories/publications/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Publications"><meta name=twitter:description content="Jake Hillion's Blog"></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><div class=breadcrumbs><a href=https://blog.hillion.co.uk/>Home</a> » <a href=https://blog.hillion.co.uk/categories/>Categories</a></div><h1>Publications</h1></header><article class="post-entry tag-entry"><header class=entry-header><h2>Void Processes: Minimising privilege by default</h2></header><section class=entry-content><p>Recently I concluded the work on my Part III (M.Eng) dissertation. This was on Void Processes, a mechanism to statically distribute fine-grained privilege to application processes on Linux.
|
||||
My dissertation is available here. I plan to make a series of posts over the next few weeks documenting my findings in smaller snippets, particularly the experience of voiding mount namespaces. In the future, I hope to produce some work which increases the performance of creating empty namespaces....</p></section><footer class=entry-footer><span title='2022-06-06 14:00:00 +0100 +0100'>June 6, 2022</span> · 2 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Void Processes: Minimising privilege by default" href=https://blog.hillion.co.uk/posts/void-processes/dissertation/></a></article></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
20
blog.hillion.co.uk/categories/publications/index.xml
Normal file
20
blog.hillion.co.uk/categories/publications/index.xml
Normal file
@ -0,0 +1,20 @@
|
||||
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||||
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
|
||||
<channel>
|
||||
<title>Publications on Jake Hillion</title>
|
||||
<link>https://blog.hillion.co.uk/categories/publications/</link>
|
||||
<description>Recent content in Publications on Jake Hillion</description>
|
||||
<generator>Hugo -- gohugo.io</generator>
|
||||
<lastBuildDate>Mon, 06 Jun 2022 14:00:00 +0100</lastBuildDate><atom:link href="https://blog.hillion.co.uk/categories/publications/index.xml" rel="self" type="application/rss+xml" />
|
||||
<item>
|
||||
<title>Void Processes: Minimising privilege by default</title>
|
||||
<link>https://blog.hillion.co.uk/posts/void-processes/dissertation/</link>
|
||||
<pubDate>Mon, 06 Jun 2022 14:00:00 +0100</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/void-processes/dissertation/</guid>
|
||||
<description>Recently I concluded the work on my Part III (M.Eng) dissertation. This was on Void Processes, a mechanism to statically distribute fine-grained privilege to application processes on Linux.
|
||||
My dissertation is available here. I plan to make a series of posts over the next few weeks documenting my findings in smaller snippets, particularly the experience of voiding mount namespaces. In the future, I hope to produce some work which increases the performance of creating empty namespaces.</description>
|
||||
</item>
|
||||
|
||||
</channel>
|
||||
</rss>
|
||||
@ -0,0 +1 @@
|
||||
<!doctype html><html lang=en><head><title>https://blog.hillion.co.uk/categories/publications/</title><link rel=canonical href=https://blog.hillion.co.uk/categories/publications/><meta name=robots content="noindex"><meta charset=utf-8><meta http-equiv=refresh content="0; url=https://blog.hillion.co.uk/categories/publications/"></head></html>
|
||||
13
blog.hillion.co.uk/categories/weekly-updates/index.html
Normal file
13
blog.hillion.co.uk/categories/weekly-updates/index.html
Normal file
@ -0,0 +1,13 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Weekly Updates | Jake Hillion</title><meta name=keywords content><meta name=description content="Jake Hillion's Blog"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/categories/weekly-updates/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/categories/weekly-updates/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Weekly Updates"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/categories/weekly-updates/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Weekly Updates"><meta name=twitter:description content="Jake Hillion's Blog"></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><div class=breadcrumbs><a href=https://blog.hillion.co.uk/>Home</a> » <a href=https://blog.hillion.co.uk/categories/>Categories</a></div><h1>Weekly Updates</h1></header><article class="post-entry tag-entry"><header class=entry-header><h2>Jake's Weekly - 2nd May 2022</h2></header><section class=entry-content><p>Research Project Dissertation draft A block of progress on the stuff learnt so far and how each of the namespaces can be modified to create a void. The work is available here on Overleaf (permissions required), here on Gitea (no permissions required), and a current draft is available here.
|
||||
Finished Table 1 (history of namespaces).
|
||||
I haven’t mentioned it in the write up but this was horrible to firstly find the answers to and secondly to cite....</p></section><footer class=entry-footer><span title='2022-05-02 11:00:00 +0000 UTC'>May 2, 2022</span> · 5 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 2nd May 2022" href=https://blog.hillion.co.uk/posts/weekly-05-02/></a></article><article class="post-entry tag-entry"><header class=entry-header><h2>Jake's Weekly - 25th April 2022</h2></header><section class=entry-content><p>Research Project Dissertation draft A block of progress on the stuff learnt so far and how each of the namespaces can be modified to create a void. The work is available here on Overleaf (permissions required), here on Gitea (no permissions required), and a current draft is available here.
|
||||
Finished Table 1 (history of namespaces).
|
||||
I haven’t mentioned it in the write up but this was horrible to firstly find the answers to and secondly to cite....</p></section><footer class=entry-footer><span title='2022-04-25 11:00:00 +0000 UTC'>April 25, 2022</span> · 5 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 25th April 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-04-25/></a></article><article class="post-entry tag-entry"><header class=entry-header><h2>Jake's Weekly - 28th March 2022</h2></header><section class=entry-content><p>Research Project Programming Built a new VoidBuilder struct to better align with how creating a void is described in the writing (void.rs).
|
||||
A new builder describes a complete Linux void. Methods allow you to make it less of a void as you see fit. This aligns well with the structure in the write up. Creating a void first then adding only precisely what is needed to it. It’s also a much higher level API that’s object oriented....</p></section><footer class=entry-footer><span title='2022-03-28 11:00:00 +0000 UTC'>March 28, 2022</span> · 3 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 28th March 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-03-28/></a></article><article class="post-entry tag-entry"><header class=entry-header><h2>Jake's Weekly - 14th March 2022</h2></header><section class=entry-content><p>Research Project Read Capsicum (Watson et al., 2010) I re-read this paper, but in the context of my project’s work, it provided some incredibly useful insight. I’ve listed the most important takeaways here, but there are more.
|
||||
My niche might now be figured out. Capsicum discusses eliminating dual-coding by only being in the code, at the cost of potential static analysis. By using high-level language integrations, I think that my solution can achieve both being integral to the code and having a static description....</p></section><footer class=entry-footer><span title='2022-03-14 11:00:00 +0000 UTC'>March 14, 2022</span> · 3 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 14th March 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-03-14/></a></article><article class="post-entry tag-entry"><header class=entry-header><h2>Jake's Weekly - 28th Feb 2022</h2></header><section class=entry-content><p>Research Project Process Isolation Expanded the shim with so called PipeTriggers.
|
||||
Wrote an example for this (examples/pipes/main.rs). Wrote the specification for this application to be launched with the shim (examples/pipes/spec.json). I think this is very neat and certainly a focal point of the project. This style of request driven programming that the shim enables with a powerful level of privilege dropping each time should be useful. The spec is also pretty easy to parse and even write for this too....</p></section><footer class=entry-footer><span title='2022-02-28 11:00:00 +0000 UTC'>February 28, 2022</span> · 4 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 28th Feb 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-02-28/></a></article><footer class=page-footer><nav class=pagination><a class=next href=https://blog.hillion.co.uk/categories/weekly-updates/page/2/>Next Page »</a></nav></footer></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
106
blog.hillion.co.uk/categories/weekly-updates/index.xml
Normal file
106
blog.hillion.co.uk/categories/weekly-updates/index.xml
Normal file
@ -0,0 +1,106 @@
|
||||
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||||
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
|
||||
<channel>
|
||||
<title>Weekly Updates on Jake Hillion</title>
|
||||
<link>https://blog.hillion.co.uk/categories/weekly-updates/</link>
|
||||
<description>Recent content in Weekly Updates on Jake Hillion</description>
|
||||
<generator>Hugo -- gohugo.io</generator>
|
||||
<lastBuildDate>Mon, 02 May 2022 11:00:00 +0000</lastBuildDate><atom:link href="https://blog.hillion.co.uk/categories/weekly-updates/index.xml" rel="self" type="application/rss+xml" />
|
||||
<item>
|
||||
<title>Jake's Weekly - 2nd May 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-05-02/</link>
|
||||
<pubDate>Mon, 02 May 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-05-02/</guid>
|
||||
<description>Research Project Dissertation draft A block of progress on the stuff learnt so far and how each of the namespaces can be modified to create a void. The work is available here on Overleaf (permissions required), here on Gitea (no permissions required), and a current draft is available here.
|
||||
Finished Table 1 (history of namespaces).
|
||||
I haven&rsquo;t mentioned it in the write up but this was horrible to firstly find the answers to and secondly to cite.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 25th April 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-04-25/</link>
|
||||
<pubDate>Mon, 25 Apr 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-04-25/</guid>
|
||||
<description>Research Project Dissertation draft A block of progress on the stuff learnt so far and how each of the namespaces can be modified to create a void. The work is available here on Overleaf (permissions required), here on Gitea (no permissions required), and a current draft is available here.
|
||||
Finished Table 1 (history of namespaces).
|
||||
I haven&rsquo;t mentioned it in the write up but this was horrible to firstly find the answers to and secondly to cite.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 28th March 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-03-28/</link>
|
||||
<pubDate>Mon, 28 Mar 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-03-28/</guid>
|
||||
<description>Research Project Programming Built a new VoidBuilder struct to better align with how creating a void is described in the writing (void.rs).
|
||||
A new builder describes a complete Linux void. Methods allow you to make it less of a void as you see fit. This aligns well with the structure in the write up. Creating a void first then adding only precisely what is needed to it. It&rsquo;s also a much higher level API that&rsquo;s object oriented.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 14th March 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-03-14/</link>
|
||||
<pubDate>Mon, 14 Mar 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-03-14/</guid>
|
||||
<description>Research Project Read Capsicum (Watson et al., 2010) I re-read this paper, but in the context of my project&rsquo;s work, it provided some incredibly useful insight. I&rsquo;ve listed the most important takeaways here, but there are more.
|
||||
My niche might now be figured out. Capsicum discusses eliminating dual-coding by only being in the code, at the cost of potential static analysis. By using high-level language integrations, I think that my solution can achieve both being integral to the code and having a static description.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 28th Feb 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-02-28/</link>
|
||||
<pubDate>Mon, 28 Feb 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-02-28/</guid>
|
||||
<description>Research Project Process Isolation Expanded the shim with so called PipeTriggers.
|
||||
Wrote an example for this (examples/pipes/main.rs). Wrote the specification for this application to be launched with the shim (examples/pipes/spec.json). I think this is very neat and certainly a focal point of the project. This style of request driven programming that the shim enables with a powerful level of privilege dropping each time should be useful. The spec is also pretty easy to parse and even write for this too.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 13th Feb 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-02-13/</link>
|
||||
<pubDate>Mon, 14 Feb 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-02-13/</guid>
|
||||
<description>Research Project Process Isolation Built the shim in Rust (clone_shim).
|
||||
Wrote a quite nice to use wrapper for the clone3 syscall in (relatively) safe Rust (clone.rs).
|
||||
Wrote the basis of specification, that should be extensible enough for future features (specification.rs).
|
||||
Currently this reads only JSON specifications, but Rust&rsquo;s serde library has support for a variety of binary formats to try later on. Started tying things together. Currently on the running at startup launches work, but they do launch and it&rsquo;s a strong basis to add more features from.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 31st Jan 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-01-31/</link>
|
||||
<pubDate>Mon, 31 Jan 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-01-31/</guid>
|
||||
<description>Research Project Process Isolation Built three privilege separated test applications.
|
||||
Wrote a privilege separated fib implementation (fib_priv_sep.c).
|
||||
Pretty basic separation as the program is trivial. In the later cp example I did privilege separate the arguments, but I didn&rsquo;t for the purpose of fib. Starting to build up a structure. The files are structured to have a main implementation reminiscent of the eventual shim, while the functions like real_main would come from the eventual binary.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 17th Jan 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-01-17/</link>
|
||||
<pubDate>Sat, 15 Jan 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-01-17/</guid>
|
||||
<description>Research Project Process Isolation Wrote an OCaml binding for the clone3 syscall (clone_shim.ml/clone3_stub.c).
|
||||
Some decisions made to make this feel a bit higher level: List of flags rather than ORed together numbers. Options used where helpful. Looked into using an OCaml callback, but of course this doesn&rsquo;t work (as expected - OCaml didn&rsquo;t like Multicore!). Currently execve&rsquo;s a specific binary (/bin/sh), but should be easy to extend. Tricky to know sometimes what to put in C and what to put in OCaml.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 3rd Jan 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-01-03/</link>
|
||||
<pubDate>Sat, 01 Jan 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-01-03/</guid>
|
||||
<description>Research Project Process Isolation Setup a Fedora testing VM for easier and consistent testing.
|
||||
Fedora 35 uses pure cgroups2 by default - very useful! Sorted out backups for the repo and the above machine. Chose a testing framework for C enabling testing of the assertions to build the project upon.
|
||||
Used Unity. Simple and the examples show that it doesn&rsquo;t do much beyond the minimum - important for this low level code with syscalls.</description>
|
||||
</item>
|
||||
|
||||
</channel>
|
||||
</rss>
|
||||
@ -0,0 +1 @@
|
||||
<!doctype html><html lang=en><head><title>https://blog.hillion.co.uk/categories/weekly-updates/</title><link rel=canonical href=https://blog.hillion.co.uk/categories/weekly-updates/><meta name=robots content="noindex"><meta charset=utf-8><meta http-equiv=refresh content="0; url=https://blog.hillion.co.uk/categories/weekly-updates/"></head></html>
|
||||
@ -0,0 +1,14 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Weekly Updates | Jake Hillion</title><meta name=keywords content><meta name=description content="Jake Hillion's Blog"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/categories/weekly-updates/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/categories/weekly-updates/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Weekly Updates"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/categories/weekly-updates/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Weekly Updates"><meta name=twitter:description content="Jake Hillion's Blog"></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><div class=breadcrumbs><a href=https://blog.hillion.co.uk/>Home</a> » <a href=https://blog.hillion.co.uk/categories/>Categories</a></div><h1>Weekly Updates</h1></header><article class="post-entry tag-entry"><header class=entry-header><h2>Jake's Weekly - 13th Feb 2022</h2></header><section class=entry-content><p>Research Project Process Isolation Built the shim in Rust (clone_shim).
|
||||
Wrote a quite nice to use wrapper for the clone3 syscall in (relatively) safe Rust (clone.rs).
|
||||
Wrote the basis of specification, that should be extensible enough for future features (specification.rs).
|
||||
Currently this reads only JSON specifications, but Rust’s serde library has support for a variety of binary formats to try later on. Started tying things together. Currently on the running at startup launches work, but they do launch and it’s a strong basis to add more features from....</p></section><footer class=entry-footer><span title='2022-02-14 11:00:00 +0000 UTC'>February 14, 2022</span> · 3 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 13th Feb 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-02-13/></a></article><article class="post-entry tag-entry"><header class=entry-header><h2>Jake's Weekly - 31st Jan 2022</h2></header><section class=entry-content><p>Research Project Process Isolation Built three privilege separated test applications.
|
||||
Wrote a privilege separated fib implementation (fib_priv_sep.c).
|
||||
Pretty basic separation as the program is trivial. In the later cp example I did privilege separate the arguments, but I didn’t for the purpose of fib. Starting to build up a structure. The files are structured to have a main implementation reminiscent of the eventual shim, while the functions like real_main would come from the eventual binary....</p></section><footer class=entry-footer><span title='2022-01-31 11:00:00 +0000 UTC'>January 31, 2022</span> · 3 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 31st Jan 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-01-31/></a></article><article class="post-entry tag-entry"><header class=entry-header><h2>Jake's Weekly - 17th Jan 2022</h2></header><section class=entry-content><p>Research Project Process Isolation Wrote an OCaml binding for the clone3 syscall (clone_shim.ml/clone3_stub.c).
|
||||
Some decisions made to make this feel a bit higher level: List of flags rather than ORed together numbers. Options used where helpful. Looked into using an OCaml callback, but of course this doesn’t work (as expected - OCaml didn’t like Multicore!). Currently execve’s a specific binary (/bin/sh), but should be easy to extend. Tricky to know sometimes what to put in C and what to put in OCaml....</p></section><footer class=entry-footer><span title='2022-01-15 11:00:00 +0000 UTC'>January 15, 2022</span> · 3 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 17th Jan 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-01-17/></a></article><article class="post-entry tag-entry"><header class=entry-header><h2>Jake's Weekly - 3rd Jan 2022</h2></header><section class=entry-content><p>Research Project Process Isolation Setup a Fedora testing VM for easier and consistent testing.
|
||||
Fedora 35 uses pure cgroups2 by default - very useful! Sorted out backups for the repo and the above machine. Chose a testing framework for C enabling testing of the assertions to build the project upon.
|
||||
Used Unity. Simple and the examples show that it doesn’t do much beyond the minimum - important for this low level code with syscalls....</p></section><footer class=entry-footer><span title='2022-01-01 11:00:00 +0000 UTC'>January 1, 2022</span> · 5 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 3rd Jan 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-01-03/></a></article><footer class=page-footer><nav class=pagination><a class=prev href=https://blog.hillion.co.uk/categories/weekly-updates/>« Prev Page</a></nav></footer></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
7
blog.hillion.co.uk/comments/index.html
Normal file
7
blog.hillion.co.uk/comments/index.html
Normal file
File diff suppressed because one or more lines are too long
13
blog.hillion.co.uk/index.html
Normal file
13
blog.hillion.co.uk/index.html
Normal file
@ -0,0 +1,13 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta name=generator content="Hugo 0.107.0"><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Jake Hillion</title><meta name=keywords content="Blog"><meta name=description content="Jake Hillion's Blog"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Jake Hillion"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Jake Hillion"><meta name=twitter:description content="Jake Hillion's Blog"><script type=application/ld+json>{"@context":"https://schema.org","@type":"Organization","name":"Jake Hillion","url":"https://blog.hillion.co.uk/","description":"Jake Hillion\u0026#39;s Blog","thumbnailUrl":"https://blog.hillion.co.uk/favicon.ico","sameAs":["https://twitter.com/JakeHillion","https://github.com/JakeHillion","https://www.linkedin.com/in/jakehillion/"]}</script></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><article class="first-entry home-info"><header class=entry-header><h1>Hi there 👋</h1></header><section class=entry-content><p>Welcome to my blog. Here I’ll aim to post <a href=/categories/weekly-updates/>weekly updates</a> on my research progress
|
||||
and other development bits I’ve been up to in the week. With a bit of luck there
|
||||
will be deep dives into topics I’ve discovered something about, particularly when
|
||||
they’re otherwise poorly documented online.</p></section><footer class=entry-footer><div class=social-icons><a href=https://twitter.com/JakeHillion target=_blank rel="noopener noreferrer me" title=Twitter><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M23 3a10.9 10.9.0 01-3.14 1.53 4.48 4.48.0 00-7.86 3v1A10.66 10.66.0 013 4s-4 9 5 13a11.64 11.64.0 01-7 2c9 5 20 0 20-11.5a4.5 4.5.0 00-.08-.83A7.72 7.72.0 0023 3z"/></svg></a><a href=https://github.com/JakeHillion target=_blank rel="noopener noreferrer me" title=Github><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M9 19c-5 1.5-5-2.5-7-3m14 6v-3.87a3.37 3.37.0 00-.94-2.61c3.14-.35 6.44-1.54 6.44-7A5.44 5.44.0 0020 4.77 5.07 5.07.0 0019.91 1S18.73.65 16 2.48a13.38 13.38.0 00-7 0C6.27.65 5.09 1 5.09 1A5.07 5.07.0 005 4.77 5.44 5.44.0 003.5 8.55c0 5.42 3.3 6.61 6.44 7A3.37 3.37.0 009 18.13V22"/></svg></a><a href=https://www.linkedin.com/in/jakehillion/ target=_blank rel="noopener noreferrer me" title=Linkedin><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M16 8a6 6 0 016 6v7h-4v-7a2 2 0 00-2-2 2 2 0 00-2 2v7h-4v-7a6 6 0 016-6z"/><rect x="2" y="9" width="4" height="12"/><circle cx="4" cy="4" r="2"/></svg></a></div></footer></article><article class=post-entry><header class=entry-header><h2>Void Processes: Minimising privilege by default</h2></header><section class=entry-content><p>Recently I concluded the work on my Part III (M.Eng) dissertation. This was on Void Processes, a mechanism to statically distribute fine-grained privilege to application processes on Linux.
|
||||
My dissertation is available here. I plan to make a series of posts over the next few weeks documenting my findings in smaller snippets, particularly the experience of voiding mount namespaces. In the future, I hope to produce some work which increases the performance of creating empty namespaces....</p></section><footer class=entry-footer><span title='2022-06-06 14:00:00 +0100 +0100'>June 6, 2022</span> · 2 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Void Processes: Minimising privilege by default" href=https://blog.hillion.co.uk/posts/void-processes/dissertation/></a></article><article class=post-entry><header class=entry-header><h2>Chia Database Torrents 🌱👨💻🌐</h2></header><section class=entry-content><p>Having trouble keeping your Chia database in sync? Database corruption leading to days or weeks of syncing? These Chia database torrents might help you out.
|
||||
I had the same problem myself, and tried to backup the database file like I would most things. Unfortunately it snapshots and deduplicates incredibly poorly, as much of the file changes almost immediately after restarting. Given that I can’t be the only one having these problems, I extended my backup script to create torrents of the database when I snapshot it....</p></section><footer class=entry-footer><span title='2022-03-22 13:00:00 +0000 UTC'>March 22, 2022</span> · 2 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Chia Database Torrents 🌱👨💻🌐" href=https://blog.hillion.co.uk/posts/chia-db-torrents/></a></article><article class=post-entry><header class=entry-header><h2>Drone CI and Crypto Honeypots 💰🍯📚</h2></header><section class=entry-content><p>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait… Something is wrong.
|
||||
htop showing bad things I certainly wasn’t running any jobs involving Tensorflow, and I’m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I’ve taken away from it....</p></section><footer class=entry-footer><span title='2022-03-07 18:00:00 +0000 UTC'>March 7, 2022</span> · 4 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Drone CI and Crypto Honeypots 💰🍯📚" href=https://blog.hillion.co.uk/posts/drone-hack/></a></article></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
146
blog.hillion.co.uk/index.xml
Normal file
146
blog.hillion.co.uk/index.xml
Normal file
@ -0,0 +1,146 @@
|
||||
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||||
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
|
||||
<channel>
|
||||
<title>Jake Hillion</title>
|
||||
<link>https://blog.hillion.co.uk/</link>
|
||||
<description>Recent content on Jake Hillion</description>
|
||||
<generator>Hugo -- gohugo.io</generator>
|
||||
<lastBuildDate>Mon, 06 Jun 2022 14:00:00 +0100</lastBuildDate><atom:link href="https://blog.hillion.co.uk/index.xml" rel="self" type="application/rss+xml" />
|
||||
<item>
|
||||
<title>Void Processes: Minimising privilege by default</title>
|
||||
<link>https://blog.hillion.co.uk/posts/void-processes/dissertation/</link>
|
||||
<pubDate>Mon, 06 Jun 2022 14:00:00 +0100</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/void-processes/dissertation/</guid>
|
||||
<description>Recently I concluded the work on my Part III (M.Eng) dissertation. This was on Void Processes, a mechanism to statically distribute fine-grained privilege to application processes on Linux.
|
||||
My dissertation is available here. I plan to make a series of posts over the next few weeks documenting my findings in smaller snippets, particularly the experience of voiding mount namespaces. In the future, I hope to produce some work which increases the performance of creating empty namespaces.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 2nd May 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-05-02/</link>
|
||||
<pubDate>Mon, 02 May 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-05-02/</guid>
|
||||
<description>Research Project Dissertation draft A block of progress on the stuff learnt so far and how each of the namespaces can be modified to create a void. The work is available here on Overleaf (permissions required), here on Gitea (no permissions required), and a current draft is available here.
|
||||
Finished Table 1 (history of namespaces).
|
||||
I haven&rsquo;t mentioned it in the write up but this was horrible to firstly find the answers to and secondly to cite.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 25th April 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-04-25/</link>
|
||||
<pubDate>Mon, 25 Apr 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-04-25/</guid>
|
||||
<description>Research Project Dissertation draft A block of progress on the stuff learnt so far and how each of the namespaces can be modified to create a void. The work is available here on Overleaf (permissions required), here on Gitea (no permissions required), and a current draft is available here.
|
||||
Finished Table 1 (history of namespaces).
|
||||
I haven&rsquo;t mentioned it in the write up but this was horrible to firstly find the answers to and secondly to cite.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 28th March 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-03-28/</link>
|
||||
<pubDate>Mon, 28 Mar 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-03-28/</guid>
|
||||
<description>Research Project Programming Built a new VoidBuilder struct to better align with how creating a void is described in the writing (void.rs).
|
||||
A new builder describes a complete Linux void. Methods allow you to make it less of a void as you see fit. This aligns well with the structure in the write up. Creating a void first then adding only precisely what is needed to it. It&rsquo;s also a much higher level API that&rsquo;s object oriented.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Chia Database Torrents 🌱👨💻🌐</title>
|
||||
<link>https://blog.hillion.co.uk/posts/chia-db-torrents/</link>
|
||||
<pubDate>Tue, 22 Mar 2022 13:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/chia-db-torrents/</guid>
|
||||
<description>Having trouble keeping your Chia database in sync? Database corruption leading to days or weeks of syncing? These Chia database torrents might help you out.
|
||||
I had the same problem myself, and tried to backup the database file like I would most things. Unfortunately it snapshots and deduplicates incredibly poorly, as much of the file changes almost immediately after restarting. Given that I can&rsquo;t be the only one having these problems, I extended my backup script to create torrents of the database when I snapshot it.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 14th March 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-03-14/</link>
|
||||
<pubDate>Mon, 14 Mar 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-03-14/</guid>
|
||||
<description>Research Project Read Capsicum (Watson et al., 2010) I re-read this paper, but in the context of my project&rsquo;s work, it provided some incredibly useful insight. I&rsquo;ve listed the most important takeaways here, but there are more.
|
||||
My niche might now be figured out. Capsicum discusses eliminating dual-coding by only being in the code, at the cost of potential static analysis. By using high-level language integrations, I think that my solution can achieve both being integral to the code and having a static description.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Drone CI and Crypto Honeypots 💰🍯📚</title>
|
||||
<link>https://blog.hillion.co.uk/posts/drone-hack/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/drone-hack/</guid>
|
||||
<description>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait&hellip; Something is wrong.
|
||||
htop showing bad things I certainly wasn&rsquo;t running any jobs involving Tensorflow, and I&rsquo;m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I&rsquo;ve taken away from it.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 28th Feb 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-02-28/</link>
|
||||
<pubDate>Mon, 28 Feb 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-02-28/</guid>
|
||||
<description>Research Project Process Isolation Expanded the shim with so called PipeTriggers.
|
||||
Wrote an example for this (examples/pipes/main.rs). Wrote the specification for this application to be launched with the shim (examples/pipes/spec.json). I think this is very neat and certainly a focal point of the project. This style of request driven programming that the shim enables with a powerful level of privilege dropping each time should be useful. The spec is also pretty easy to parse and even write for this too.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 13th Feb 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-02-13/</link>
|
||||
<pubDate>Mon, 14 Feb 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-02-13/</guid>
|
||||
<description>Research Project Process Isolation Built the shim in Rust (clone_shim).
|
||||
Wrote a quite nice to use wrapper for the clone3 syscall in (relatively) safe Rust (clone.rs).
|
||||
Wrote the basis of specification, that should be extensible enough for future features (specification.rs).
|
||||
Currently this reads only JSON specifications, but Rust&rsquo;s serde library has support for a variety of binary formats to try later on. Started tying things together. Currently on the running at startup launches work, but they do launch and it&rsquo;s a strong basis to add more features from.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Comment Policy</title>
|
||||
<link>https://blog.hillion.co.uk/comments/</link>
|
||||
<pubDate>Sat, 12 Feb 2022 18:00:37 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/comments/</guid>
|
||||
<description>Welcome to my blog, where I share some technical bits and generally speak into the void. I imagine keeping this common section clean should be fairly easy, but if I am a bit slow there&rsquo;s only one of me. I&rsquo;ve decided to turn comments on to allow for some interaction, but of course, this is a privilege and not a right. To make sure things are all good, here are the comment guidelines:</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 31st Jan 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-01-31/</link>
|
||||
<pubDate>Mon, 31 Jan 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-01-31/</guid>
|
||||
<description>Research Project Process Isolation Built three privilege separated test applications.
|
||||
Wrote a privilege separated fib implementation (fib_priv_sep.c).
|
||||
Pretty basic separation as the program is trivial. In the later cp example I did privilege separate the arguments, but I didn&rsquo;t for the purpose of fib. Starting to build up a structure. The files are structured to have a main implementation reminiscent of the eventual shim, while the functions like real_main would come from the eventual binary.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 17th Jan 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-01-17/</link>
|
||||
<pubDate>Sat, 15 Jan 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-01-17/</guid>
|
||||
<description>Research Project Process Isolation Wrote an OCaml binding for the clone3 syscall (clone_shim.ml/clone3_stub.c).
|
||||
Some decisions made to make this feel a bit higher level: List of flags rather than ORed together numbers. Options used where helpful. Looked into using an OCaml callback, but of course this doesn&rsquo;t work (as expected - OCaml didn&rsquo;t like Multicore!). Currently execve&rsquo;s a specific binary (/bin/sh), but should be easy to extend. Tricky to know sometimes what to put in C and what to put in OCaml.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 3rd Jan 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-01-03/</link>
|
||||
<pubDate>Sat, 01 Jan 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-01-03/</guid>
|
||||
<description>Research Project Process Isolation Setup a Fedora testing VM for easier and consistent testing.
|
||||
Fedora 35 uses pure cgroups2 by default - very useful! Sorted out backups for the repo and the above machine. Chose a testing framework for C enabling testing of the assertions to build the project upon.
|
||||
Used Unity. Simple and the examples show that it doesn&rsquo;t do much beyond the minimum - important for this low level code with syscalls.</description>
|
||||
</item>
|
||||
|
||||
</channel>
|
||||
</rss>
|
||||
1
blog.hillion.co.uk/page/1/index.html
Normal file
1
blog.hillion.co.uk/page/1/index.html
Normal file
@ -0,0 +1 @@
|
||||
<!doctype html><html lang=en><head><title>https://blog.hillion.co.uk/</title><link rel=canonical href=https://blog.hillion.co.uk/><meta name=robots content="noindex"><meta charset=utf-8><meta http-equiv=refresh content="0; url=https://blog.hillion.co.uk/"></head></html>
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
11
blog.hillion.co.uk/posts/chia-db-torrents/index.html
Normal file
11
blog.hillion.co.uk/posts/chia-db-torrents/index.html
Normal file
File diff suppressed because one or more lines are too long
BIN
blog.hillion.co.uk/posts/drone-hack/images/ci_server_crypto.png
Normal file
BIN
blog.hillion.co.uk/posts/drone-hack/images/ci_server_crypto.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 27 KiB |
BIN
blog.hillion.co.uk/posts/drone-hack/images/large_htop.png
Normal file
BIN
blog.hillion.co.uk/posts/drone-hack/images/large_htop.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 117 KiB |
14
blog.hillion.co.uk/posts/drone-hack/index.html
Normal file
14
blog.hillion.co.uk/posts/drone-hack/index.html
Normal file
File diff suppressed because one or more lines are too long
13
blog.hillion.co.uk/posts/index.html
Normal file
13
blog.hillion.co.uk/posts/index.html
Normal file
@ -0,0 +1,13 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Posts | Jake Hillion</title><meta name=keywords content><meta name=description content="Posts - Jake Hillion"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/posts/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/posts/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Posts"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/posts/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Posts"><meta name=twitter:description content="Jake Hillion's Blog"><script type=application/ld+json>{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Posts","item":"https://blog.hillion.co.uk/posts/"}]}</script></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><div class=breadcrumbs><a href=https://blog.hillion.co.uk/>Home</a></div><h1>Posts</h1></header><article class=post-entry><header class=entry-header><h2>Void Processes: Minimising privilege by default</h2></header><section class=entry-content><p>Recently I concluded the work on my Part III (M.Eng) dissertation. This was on Void Processes, a mechanism to statically distribute fine-grained privilege to application processes on Linux.
|
||||
My dissertation is available here. I plan to make a series of posts over the next few weeks documenting my findings in smaller snippets, particularly the experience of voiding mount namespaces. In the future, I hope to produce some work which increases the performance of creating empty namespaces....</p></section><footer class=entry-footer><span title='2022-06-06 14:00:00 +0100 +0100'>June 6, 2022</span> · 2 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Void Processes: Minimising privilege by default" href=https://blog.hillion.co.uk/posts/void-processes/dissertation/></a></article><article class=post-entry><header class=entry-header><h2>Jake's Weekly - 2nd May 2022</h2></header><section class=entry-content><p>Research Project Dissertation draft A block of progress on the stuff learnt so far and how each of the namespaces can be modified to create a void. The work is available here on Overleaf (permissions required), here on Gitea (no permissions required), and a current draft is available here.
|
||||
Finished Table 1 (history of namespaces).
|
||||
I haven’t mentioned it in the write up but this was horrible to firstly find the answers to and secondly to cite....</p></section><footer class=entry-footer><span title='2022-05-02 11:00:00 +0000 UTC'>May 2, 2022</span> · 5 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 2nd May 2022" href=https://blog.hillion.co.uk/posts/weekly-05-02/></a></article><article class=post-entry><header class=entry-header><h2>Jake's Weekly - 25th April 2022</h2></header><section class=entry-content><p>Research Project Dissertation draft A block of progress on the stuff learnt so far and how each of the namespaces can be modified to create a void. The work is available here on Overleaf (permissions required), here on Gitea (no permissions required), and a current draft is available here.
|
||||
Finished Table 1 (history of namespaces).
|
||||
I haven’t mentioned it in the write up but this was horrible to firstly find the answers to and secondly to cite....</p></section><footer class=entry-footer><span title='2022-04-25 11:00:00 +0000 UTC'>April 25, 2022</span> · 5 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 25th April 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-04-25/></a></article><article class=post-entry><header class=entry-header><h2>Jake's Weekly - 28th March 2022</h2></header><section class=entry-content><p>Research Project Programming Built a new VoidBuilder struct to better align with how creating a void is described in the writing (void.rs).
|
||||
A new builder describes a complete Linux void. Methods allow you to make it less of a void as you see fit. This aligns well with the structure in the write up. Creating a void first then adding only precisely what is needed to it. It’s also a much higher level API that’s object oriented....</p></section><footer class=entry-footer><span title='2022-03-28 11:00:00 +0000 UTC'>March 28, 2022</span> · 3 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 28th March 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-03-28/></a></article><article class=post-entry><header class=entry-header><h2>Chia Database Torrents 🌱👨💻🌐</h2></header><section class=entry-content><p>Having trouble keeping your Chia database in sync? Database corruption leading to days or weeks of syncing? These Chia database torrents might help you out.
|
||||
I had the same problem myself, and tried to backup the database file like I would most things. Unfortunately it snapshots and deduplicates incredibly poorly, as much of the file changes almost immediately after restarting. Given that I can’t be the only one having these problems, I extended my backup script to create torrents of the database when I snapshot it....</p></section><footer class=entry-footer><span title='2022-03-22 13:00:00 +0000 UTC'>March 22, 2022</span> · 2 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Chia Database Torrents 🌱👨💻🌐" href=https://blog.hillion.co.uk/posts/chia-db-torrents/></a></article><footer class=page-footer><nav class=pagination><a class=next href=https://blog.hillion.co.uk/posts/page/2/>Next Page »</a></nav></footer></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
137
blog.hillion.co.uk/posts/index.xml
Normal file
137
blog.hillion.co.uk/posts/index.xml
Normal file
@ -0,0 +1,137 @@
|
||||
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||||
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
|
||||
<channel>
|
||||
<title>Posts on Jake Hillion</title>
|
||||
<link>https://blog.hillion.co.uk/posts/</link>
|
||||
<description>Recent content in Posts on Jake Hillion</description>
|
||||
<generator>Hugo -- gohugo.io</generator>
|
||||
<lastBuildDate>Mon, 06 Jun 2022 14:00:00 +0100</lastBuildDate><atom:link href="https://blog.hillion.co.uk/posts/index.xml" rel="self" type="application/rss+xml" />
|
||||
<item>
|
||||
<title>Void Processes: Minimising privilege by default</title>
|
||||
<link>https://blog.hillion.co.uk/posts/void-processes/dissertation/</link>
|
||||
<pubDate>Mon, 06 Jun 2022 14:00:00 +0100</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/void-processes/dissertation/</guid>
|
||||
<description>Recently I concluded the work on my Part III (M.Eng) dissertation. This was on Void Processes, a mechanism to statically distribute fine-grained privilege to application processes on Linux.
|
||||
My dissertation is available here. I plan to make a series of posts over the next few weeks documenting my findings in smaller snippets, particularly the experience of voiding mount namespaces. In the future, I hope to produce some work which increases the performance of creating empty namespaces.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 2nd May 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-05-02/</link>
|
||||
<pubDate>Mon, 02 May 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-05-02/</guid>
|
||||
<description>Research Project Dissertation draft A block of progress on the stuff learnt so far and how each of the namespaces can be modified to create a void. The work is available here on Overleaf (permissions required), here on Gitea (no permissions required), and a current draft is available here.
|
||||
Finished Table 1 (history of namespaces).
|
||||
I haven&rsquo;t mentioned it in the write up but this was horrible to firstly find the answers to and secondly to cite.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 25th April 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-04-25/</link>
|
||||
<pubDate>Mon, 25 Apr 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-04-25/</guid>
|
||||
<description>Research Project Dissertation draft A block of progress on the stuff learnt so far and how each of the namespaces can be modified to create a void. The work is available here on Overleaf (permissions required), here on Gitea (no permissions required), and a current draft is available here.
|
||||
Finished Table 1 (history of namespaces).
|
||||
I haven&rsquo;t mentioned it in the write up but this was horrible to firstly find the answers to and secondly to cite.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 28th March 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-03-28/</link>
|
||||
<pubDate>Mon, 28 Mar 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-03-28/</guid>
|
||||
<description>Research Project Programming Built a new VoidBuilder struct to better align with how creating a void is described in the writing (void.rs).
|
||||
A new builder describes a complete Linux void. Methods allow you to make it less of a void as you see fit. This aligns well with the structure in the write up. Creating a void first then adding only precisely what is needed to it. It&rsquo;s also a much higher level API that&rsquo;s object oriented.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Chia Database Torrents 🌱👨💻🌐</title>
|
||||
<link>https://blog.hillion.co.uk/posts/chia-db-torrents/</link>
|
||||
<pubDate>Tue, 22 Mar 2022 13:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/chia-db-torrents/</guid>
|
||||
<description>Having trouble keeping your Chia database in sync? Database corruption leading to days or weeks of syncing? These Chia database torrents might help you out.
|
||||
I had the same problem myself, and tried to backup the database file like I would most things. Unfortunately it snapshots and deduplicates incredibly poorly, as much of the file changes almost immediately after restarting. Given that I can&rsquo;t be the only one having these problems, I extended my backup script to create torrents of the database when I snapshot it.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 14th March 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-03-14/</link>
|
||||
<pubDate>Mon, 14 Mar 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-03-14/</guid>
|
||||
<description>Research Project Read Capsicum (Watson et al., 2010) I re-read this paper, but in the context of my project&rsquo;s work, it provided some incredibly useful insight. I&rsquo;ve listed the most important takeaways here, but there are more.
|
||||
My niche might now be figured out. Capsicum discusses eliminating dual-coding by only being in the code, at the cost of potential static analysis. By using high-level language integrations, I think that my solution can achieve both being integral to the code and having a static description.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Drone CI and Crypto Honeypots 💰🍯📚</title>
|
||||
<link>https://blog.hillion.co.uk/posts/drone-hack/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/drone-hack/</guid>
|
||||
<description>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait&hellip; Something is wrong.
|
||||
htop showing bad things I certainly wasn&rsquo;t running any jobs involving Tensorflow, and I&rsquo;m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I&rsquo;ve taken away from it.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 28th Feb 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-02-28/</link>
|
||||
<pubDate>Mon, 28 Feb 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-02-28/</guid>
|
||||
<description>Research Project Process Isolation Expanded the shim with so called PipeTriggers.
|
||||
Wrote an example for this (examples/pipes/main.rs). Wrote the specification for this application to be launched with the shim (examples/pipes/spec.json). I think this is very neat and certainly a focal point of the project. This style of request driven programming that the shim enables with a powerful level of privilege dropping each time should be useful. The spec is also pretty easy to parse and even write for this too.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 13th Feb 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-02-13/</link>
|
||||
<pubDate>Mon, 14 Feb 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-02-13/</guid>
|
||||
<description>Research Project Process Isolation Built the shim in Rust (clone_shim).
|
||||
Wrote a quite nice to use wrapper for the clone3 syscall in (relatively) safe Rust (clone.rs).
|
||||
Wrote the basis of specification, that should be extensible enough for future features (specification.rs).
|
||||
Currently this reads only JSON specifications, but Rust&rsquo;s serde library has support for a variety of binary formats to try later on. Started tying things together. Currently on the running at startup launches work, but they do launch and it&rsquo;s a strong basis to add more features from.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 31st Jan 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-01-31/</link>
|
||||
<pubDate>Mon, 31 Jan 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-01-31/</guid>
|
||||
<description>Research Project Process Isolation Built three privilege separated test applications.
|
||||
Wrote a privilege separated fib implementation (fib_priv_sep.c).
|
||||
Pretty basic separation as the program is trivial. In the later cp example I did privilege separate the arguments, but I didn&rsquo;t for the purpose of fib. Starting to build up a structure. The files are structured to have a main implementation reminiscent of the eventual shim, while the functions like real_main would come from the eventual binary.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 17th Jan 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-01-17/</link>
|
||||
<pubDate>Sat, 15 Jan 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-01-17/</guid>
|
||||
<description>Research Project Process Isolation Wrote an OCaml binding for the clone3 syscall (clone_shim.ml/clone3_stub.c).
|
||||
Some decisions made to make this feel a bit higher level: List of flags rather than ORed together numbers. Options used where helpful. Looked into using an OCaml callback, but of course this doesn&rsquo;t work (as expected - OCaml didn&rsquo;t like Multicore!). Currently execve&rsquo;s a specific binary (/bin/sh), but should be easy to extend. Tricky to know sometimes what to put in C and what to put in OCaml.</description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Jake's Weekly - 3rd Jan 2022</title>
|
||||
<link>https://blog.hillion.co.uk/posts/weekly-2022-01-03/</link>
|
||||
<pubDate>Sat, 01 Jan 2022 11:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/weekly-2022-01-03/</guid>
|
||||
<description>Research Project Process Isolation Setup a Fedora testing VM for easier and consistent testing.
|
||||
Fedora 35 uses pure cgroups2 by default - very useful! Sorted out backups for the repo and the above machine. Chose a testing framework for C enabling testing of the assertions to build the project upon.
|
||||
Used Unity. Simple and the examples show that it doesn&rsquo;t do much beyond the minimum - important for this low level code with syscalls.</description>
|
||||
</item>
|
||||
|
||||
</channel>
|
||||
</rss>
|
||||
1
blog.hillion.co.uk/posts/page/1/index.html
Normal file
1
blog.hillion.co.uk/posts/page/1/index.html
Normal file
@ -0,0 +1 @@
|
||||
<!doctype html><html lang=en><head><title>https://blog.hillion.co.uk/posts/</title><link rel=canonical href=https://blog.hillion.co.uk/posts/><meta name=robots content="noindex"><meta charset=utf-8><meta http-equiv=refresh content="0; url=https://blog.hillion.co.uk/posts/"></head></html>
|
||||
16
blog.hillion.co.uk/posts/page/2/index.html
Normal file
16
blog.hillion.co.uk/posts/page/2/index.html
Normal file
@ -0,0 +1,16 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Posts | Jake Hillion</title><meta name=keywords content><meta name=description content="Posts - Jake Hillion"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/posts/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/posts/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Posts"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/posts/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Posts"><meta name=twitter:description content="Jake Hillion's Blog"><script type=application/ld+json>{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Posts","item":"https://blog.hillion.co.uk/posts/"}]}</script></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><div class=breadcrumbs><a href=https://blog.hillion.co.uk/>Home</a></div><h1>Posts</h1></header><article class=post-entry><header class=entry-header><h2>Jake's Weekly - 14th March 2022</h2></header><section class=entry-content><p>Research Project Read Capsicum (Watson et al., 2010) I re-read this paper, but in the context of my project’s work, it provided some incredibly useful insight. I’ve listed the most important takeaways here, but there are more.
|
||||
My niche might now be figured out. Capsicum discusses eliminating dual-coding by only being in the code, at the cost of potential static analysis. By using high-level language integrations, I think that my solution can achieve both being integral to the code and having a static description....</p></section><footer class=entry-footer><span title='2022-03-14 11:00:00 +0000 UTC'>March 14, 2022</span> · 3 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 14th March 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-03-14/></a></article><article class=post-entry><header class=entry-header><h2>Drone CI and Crypto Honeypots 💰🍯📚</h2></header><section class=entry-content><p>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait… Something is wrong.
|
||||
htop showing bad things I certainly wasn’t running any jobs involving Tensorflow, and I’m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I’ve taken away from it....</p></section><footer class=entry-footer><span title='2022-03-07 18:00:00 +0000 UTC'>March 7, 2022</span> · 4 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Drone CI and Crypto Honeypots 💰🍯📚" href=https://blog.hillion.co.uk/posts/drone-hack/></a></article><article class=post-entry><header class=entry-header><h2>Jake's Weekly - 28th Feb 2022</h2></header><section class=entry-content><p>Research Project Process Isolation Expanded the shim with so called PipeTriggers.
|
||||
Wrote an example for this (examples/pipes/main.rs). Wrote the specification for this application to be launched with the shim (examples/pipes/spec.json). I think this is very neat and certainly a focal point of the project. This style of request driven programming that the shim enables with a powerful level of privilege dropping each time should be useful. The spec is also pretty easy to parse and even write for this too....</p></section><footer class=entry-footer><span title='2022-02-28 11:00:00 +0000 UTC'>February 28, 2022</span> · 4 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 28th Feb 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-02-28/></a></article><article class=post-entry><header class=entry-header><h2>Jake's Weekly - 13th Feb 2022</h2></header><section class=entry-content><p>Research Project Process Isolation Built the shim in Rust (clone_shim).
|
||||
Wrote a quite nice to use wrapper for the clone3 syscall in (relatively) safe Rust (clone.rs).
|
||||
Wrote the basis of specification, that should be extensible enough for future features (specification.rs).
|
||||
Currently this reads only JSON specifications, but Rust’s serde library has support for a variety of binary formats to try later on. Started tying things together. Currently on the running at startup launches work, but they do launch and it’s a strong basis to add more features from....</p></section><footer class=entry-footer><span title='2022-02-14 11:00:00 +0000 UTC'>February 14, 2022</span> · 3 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 13th Feb 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-02-13/></a></article><article class=post-entry><header class=entry-header><h2>Jake's Weekly - 31st Jan 2022</h2></header><section class=entry-content><p>Research Project Process Isolation Built three privilege separated test applications.
|
||||
Wrote a privilege separated fib implementation (fib_priv_sep.c).
|
||||
Pretty basic separation as the program is trivial. In the later cp example I did privilege separate the arguments, but I didn’t for the purpose of fib. Starting to build up a structure. The files are structured to have a main implementation reminiscent of the eventual shim, while the functions like real_main would come from the eventual binary....</p></section><footer class=entry-footer><span title='2022-01-31 11:00:00 +0000 UTC'>January 31, 2022</span> · 3 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 31st Jan 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-01-31/></a></article><footer class=page-footer><nav class=pagination><a class=prev href=https://blog.hillion.co.uk/posts/>« Prev Page</a>
|
||||
<a class=next href=https://blog.hillion.co.uk/posts/page/3/>Next Page »</a></nav></footer></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
9
blog.hillion.co.uk/posts/page/3/index.html
Normal file
9
blog.hillion.co.uk/posts/page/3/index.html
Normal file
@ -0,0 +1,9 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Posts | Jake Hillion</title><meta name=keywords content><meta name=description content="Posts - Jake Hillion"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/posts/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/posts/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Posts"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/posts/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Posts"><meta name=twitter:description content="Jake Hillion's Blog"><script type=application/ld+json>{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Posts","item":"https://blog.hillion.co.uk/posts/"}]}</script></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><div class=breadcrumbs><a href=https://blog.hillion.co.uk/>Home</a></div><h1>Posts</h1></header><article class=post-entry><header class=entry-header><h2>Jake's Weekly - 17th Jan 2022</h2></header><section class=entry-content><p>Research Project Process Isolation Wrote an OCaml binding for the clone3 syscall (clone_shim.ml/clone3_stub.c).
|
||||
Some decisions made to make this feel a bit higher level: List of flags rather than ORed together numbers. Options used where helpful. Looked into using an OCaml callback, but of course this doesn’t work (as expected - OCaml didn’t like Multicore!). Currently execve’s a specific binary (/bin/sh), but should be easy to extend. Tricky to know sometimes what to put in C and what to put in OCaml....</p></section><footer class=entry-footer><span title='2022-01-15 11:00:00 +0000 UTC'>January 15, 2022</span> · 3 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 17th Jan 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-01-17/></a></article><article class=post-entry><header class=entry-header><h2>Jake's Weekly - 3rd Jan 2022</h2></header><section class=entry-content><p>Research Project Process Isolation Setup a Fedora testing VM for easier and consistent testing.
|
||||
Fedora 35 uses pure cgroups2 by default - very useful! Sorted out backups for the repo and the above machine. Chose a testing framework for C enabling testing of the assertions to build the project upon.
|
||||
Used Unity. Simple and the examples show that it doesn’t do much beyond the minimum - important for this low level code with syscalls....</p></section><footer class=entry-footer><span title='2022-01-01 11:00:00 +0000 UTC'>January 1, 2022</span> · 5 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Jake's Weekly - 3rd Jan 2022" href=https://blog.hillion.co.uk/posts/weekly-2022-01-03/></a></article><footer class=page-footer><nav class=pagination><a class=prev href=https://blog.hillion.co.uk/posts/page/2/>« Prev Page</a></nav></footer></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
File diff suppressed because one or more lines are too long
Binary file not shown.
BIN
blog.hillion.co.uk/posts/weekly-05-02/dissertation.pdf
Normal file
BIN
blog.hillion.co.uk/posts/weekly-05-02/dissertation.pdf
Normal file
Binary file not shown.
14
blog.hillion.co.uk/posts/weekly-05-02/index.html
Normal file
14
blog.hillion.co.uk/posts/weekly-05-02/index.html
Normal file
File diff suppressed because one or more lines are too long
13
blog.hillion.co.uk/posts/weekly-2022-01-03/index.html
Normal file
13
blog.hillion.co.uk/posts/weekly-2022-01-03/index.html
Normal file
File diff suppressed because one or more lines are too long
11
blog.hillion.co.uk/posts/weekly-2022-01-17/index.html
Normal file
11
blog.hillion.co.uk/posts/weekly-2022-01-17/index.html
Normal file
File diff suppressed because one or more lines are too long
14
blog.hillion.co.uk/posts/weekly-2022-01-31/index.html
Normal file
14
blog.hillion.co.uk/posts/weekly-2022-01-31/index.html
Normal file
File diff suppressed because one or more lines are too long
17
blog.hillion.co.uk/posts/weekly-2022-02-13/index.html
Normal file
17
blog.hillion.co.uk/posts/weekly-2022-02-13/index.html
Normal file
File diff suppressed because one or more lines are too long
11
blog.hillion.co.uk/posts/weekly-2022-02-28/index.html
Normal file
11
blog.hillion.co.uk/posts/weekly-2022-02-28/index.html
Normal file
File diff suppressed because one or more lines are too long
BIN
blog.hillion.co.uk/posts/weekly-2022-03-14/dissertation.pdf
Normal file
BIN
blog.hillion.co.uk/posts/weekly-2022-03-14/dissertation.pdf
Normal file
Binary file not shown.
11
blog.hillion.co.uk/posts/weekly-2022-03-14/index.html
Normal file
11
blog.hillion.co.uk/posts/weekly-2022-03-14/index.html
Normal file
File diff suppressed because one or more lines are too long
11
blog.hillion.co.uk/posts/weekly-2022-03-28/index.html
Normal file
11
blog.hillion.co.uk/posts/weekly-2022-03-28/index.html
Normal file
File diff suppressed because one or more lines are too long
BIN
blog.hillion.co.uk/posts/weekly-2022-04-25/dissertation.pdf
Normal file
BIN
blog.hillion.co.uk/posts/weekly-2022-04-25/dissertation.pdf
Normal file
Binary file not shown.
14
blog.hillion.co.uk/posts/weekly-2022-04-25/index.html
Normal file
14
blog.hillion.co.uk/posts/weekly-2022-04-25/index.html
Normal file
File diff suppressed because one or more lines are too long
3
blog.hillion.co.uk/robots.txt
Normal file
3
blog.hillion.co.uk/robots.txt
Normal file
@ -0,0 +1,3 @@
|
||||
User-agent: *
|
||||
Disallow:
|
||||
Sitemap: https://blog.hillion.co.uk/sitemap.xml
|
||||
80
blog.hillion.co.uk/sitemap.xml
Normal file
80
blog.hillion.co.uk/sitemap.xml
Normal file
@ -0,0 +1,80 @@
|
||||
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||||
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
|
||||
xmlns:xhtml="http://www.w3.org/1999/xhtml">
|
||||
<url>
|
||||
<loc>https://blog.hillion.co.uk/categories/</loc>
|
||||
<lastmod>2022-06-06T14:00:00+01:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/</loc>
|
||||
<lastmod>2022-06-06T14:00:00+01:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/posts/</loc>
|
||||
<lastmod>2022-06-06T14:00:00+01:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/categories/publications/</loc>
|
||||
<lastmod>2022-06-06T14:00:00+01:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/posts/void-processes/dissertation/</loc>
|
||||
<lastmod>2022-06-06T14:00:00+01:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/posts/weekly-05-02/</loc>
|
||||
<lastmod>2022-05-02T11:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/categories/weekly-updates/</loc>
|
||||
<lastmod>2022-05-02T11:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/posts/weekly-2022-04-25/</loc>
|
||||
<lastmod>2022-04-25T11:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/posts/weekly-2022-03-28/</loc>
|
||||
<lastmod>2022-03-28T11:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/posts/chia-db-torrents/</loc>
|
||||
<lastmod>2022-03-22T13:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/posts/weekly-2022-03-14/</loc>
|
||||
<lastmod>2022-03-14T11:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/tags/continuous-integration/</loc>
|
||||
<lastmod>2022-03-07T18:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/tags/drone/</loc>
|
||||
<lastmod>2022-03-07T18:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/posts/drone-hack/</loc>
|
||||
<lastmod>2022-03-07T18:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/tags/gitea/</loc>
|
||||
<lastmod>2022-03-07T18:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/tags/home-lab/</loc>
|
||||
<lastmod>2022-03-07T18:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/categories/home-server/</loc>
|
||||
<lastmod>2022-03-07T18:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/tags/proxmox/</loc>
|
||||
<lastmod>2022-03-07T18:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/tags/</loc>
|
||||
<lastmod>2022-03-07T18:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/posts/weekly-2022-02-28/</loc>
|
||||
<lastmod>2022-02-28T11:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/posts/weekly-2022-02-13/</loc>
|
||||
<lastmod>2022-02-14T11:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/comments/</loc>
|
||||
<lastmod>2022-02-12T18:00:37+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/posts/weekly-2022-01-31/</loc>
|
||||
<lastmod>2022-01-31T11:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/posts/weekly-2022-01-17/</loc>
|
||||
<lastmod>2022-01-15T11:00:00+00:00</lastmod>
|
||||
</url><url>
|
||||
<loc>https://blog.hillion.co.uk/posts/weekly-2022-01-03/</loc>
|
||||
<lastmod>2022-01-01T11:00:00+00:00</lastmod>
|
||||
</url>
|
||||
</urlset>
|
||||
6
blog.hillion.co.uk/ssh.keys
Normal file
6
blog.hillion.co.uk/ssh.keys
Normal file
@ -0,0 +1,6 @@
|
||||
ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBOt74U+rL+BMtAEjfu/Optg1D7Ly7U+TupRxd5u9kfN7oJnW4dJA25WRSr4dgQNq7MiMveoduBY/ky2s0c9gvIA= jake@jake-gentoo
|
||||
ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBC0uKIvvvkzrOcS7AcamsQRFId+bqPwUC9IiUIsiH5oWX1ReiITOuEo+TL9YMII5RyyfJFeu2ZP9moNuZYlE7Bs= jake@jake-mbp
|
||||
|
||||
ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAyFsYYjLZ/wyw8XUbcmkk6OKt2IqLOnWpRE5gEvm3X0V4IeTOL9F4IL79h7FTsPvi2t9zGBL1hxeTMZHSGfrdWaMJkQp94gA1W30MKXvJ47nEVt0HUIOufGqgTTaAn4BHxlFUBUuS7UxaA4igFpFVoPJed7ZMhMqxg+RWUmBAkcgTWDMgzUx44TiNpzkYlG8cYuqcIzpV2dhGn79qsfUzBMpGJgkxjkGdDEHRk66JXgD/EtVasZvqp5/KLNnOpisKjR88UJKJ6/buV7FLVra4/0hA9JtH9e1ecCfxMPbOeluaxlieEuSXV2oJMbQoPP87+/QriNdi/6QuCHkMDEhyGw== jake@jake-mbp
|
||||
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw4lgH20nfuchDqvVf0YciqN0GnBw5hfh8KIun5z0P7wlNgVYnCyvPvdIlGf2Nt1z5EGfsMzMLhKDOZkcTMlhupd+j2Er/ZB764uVBGe1n3CoPeasmbIlnamZ12EusYDvQGm2hVJTGQPPp9nKaRxr6ljvTMTNl0KWlWvKP4kec74d28MGgULOPLT3HlAyvUymSULK4lSxFK0l97IVXLa8YwuL5TNFGHUmjoSsi/Q7/CKaqvNh+ib1BYHzHYsuEzaaApnCnfjDBNexHm/AfbI7s+g3XZDcZOORZn6r44dOBNFfwvppsWj3CszwJQYIFeJFuMRtzlC8+kyYxci0+FXHn jake@jake-gentoo
|
||||
|
||||
@ -0,0 +1,8 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Continuous Integration | Jake Hillion</title><meta name=keywords content><meta name=description content="Jake Hillion's Blog"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/tags/continuous-integration/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/tags/continuous-integration/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Continuous Integration"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/tags/continuous-integration/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Continuous Integration"><meta name=twitter:description content="Jake Hillion's Blog"></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><div class=breadcrumbs><a href=https://blog.hillion.co.uk/>Home</a> » <a href=https://blog.hillion.co.uk/tags/>Tags</a></div><h1>Continuous Integration</h1></header><article class="post-entry tag-entry"><header class=entry-header><h2>Drone CI and Crypto Honeypots 💰🍯📚</h2></header><section class=entry-content><p>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait… Something is wrong.
|
||||
htop showing bad things I certainly wasn’t running any jobs involving Tensorflow, and I’m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I’ve taken away from it....</p></section><footer class=entry-footer><span title='2022-03-07 18:00:00 +0000 UTC'>March 7, 2022</span> · 4 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Drone CI and Crypto Honeypots 💰🍯📚" href=https://blog.hillion.co.uk/posts/drone-hack/></a></article></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
21
blog.hillion.co.uk/tags/continuous-integration/index.xml
Normal file
21
blog.hillion.co.uk/tags/continuous-integration/index.xml
Normal file
@ -0,0 +1,21 @@
|
||||
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||||
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
|
||||
<channel>
|
||||
<title>Continuous Integration on Jake Hillion</title>
|
||||
<link>https://blog.hillion.co.uk/tags/continuous-integration/</link>
|
||||
<description>Recent content in Continuous Integration on Jake Hillion</description>
|
||||
<generator>Hugo -- gohugo.io</generator>
|
||||
<lastBuildDate>Mon, 07 Mar 2022 18:00:00 +0000</lastBuildDate><atom:link href="https://blog.hillion.co.uk/tags/continuous-integration/index.xml" rel="self" type="application/rss+xml" />
|
||||
<item>
|
||||
<title>Drone CI and Crypto Honeypots 💰🍯📚</title>
|
||||
<link>https://blog.hillion.co.uk/posts/drone-hack/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/drone-hack/</guid>
|
||||
<description>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait&hellip; Something is wrong.
|
||||
htop showing bad things I certainly wasn&rsquo;t running any jobs involving Tensorflow, and I&rsquo;m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I&rsquo;ve taken away from it.</description>
|
||||
</item>
|
||||
|
||||
</channel>
|
||||
</rss>
|
||||
@ -0,0 +1 @@
|
||||
<!doctype html><html lang=en><head><title>https://blog.hillion.co.uk/tags/continuous-integration/</title><link rel=canonical href=https://blog.hillion.co.uk/tags/continuous-integration/><meta name=robots content="noindex"><meta charset=utf-8><meta http-equiv=refresh content="0; url=https://blog.hillion.co.uk/tags/continuous-integration/"></head></html>
|
||||
8
blog.hillion.co.uk/tags/drone/index.html
Normal file
8
blog.hillion.co.uk/tags/drone/index.html
Normal file
@ -0,0 +1,8 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Drone | Jake Hillion</title><meta name=keywords content><meta name=description content="Jake Hillion's Blog"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/tags/drone/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/tags/drone/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Drone"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/tags/drone/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Drone"><meta name=twitter:description content="Jake Hillion's Blog"></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><div class=breadcrumbs><a href=https://blog.hillion.co.uk/>Home</a> » <a href=https://blog.hillion.co.uk/tags/>Tags</a></div><h1>Drone</h1></header><article class="post-entry tag-entry"><header class=entry-header><h2>Drone CI and Crypto Honeypots 💰🍯📚</h2></header><section class=entry-content><p>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait… Something is wrong.
|
||||
htop showing bad things I certainly wasn’t running any jobs involving Tensorflow, and I’m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I’ve taken away from it....</p></section><footer class=entry-footer><span title='2022-03-07 18:00:00 +0000 UTC'>March 7, 2022</span> · 4 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Drone CI and Crypto Honeypots 💰🍯📚" href=https://blog.hillion.co.uk/posts/drone-hack/></a></article></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
21
blog.hillion.co.uk/tags/drone/index.xml
Normal file
21
blog.hillion.co.uk/tags/drone/index.xml
Normal file
@ -0,0 +1,21 @@
|
||||
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||||
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
|
||||
<channel>
|
||||
<title>Drone on Jake Hillion</title>
|
||||
<link>https://blog.hillion.co.uk/tags/drone/</link>
|
||||
<description>Recent content in Drone on Jake Hillion</description>
|
||||
<generator>Hugo -- gohugo.io</generator>
|
||||
<lastBuildDate>Mon, 07 Mar 2022 18:00:00 +0000</lastBuildDate><atom:link href="https://blog.hillion.co.uk/tags/drone/index.xml" rel="self" type="application/rss+xml" />
|
||||
<item>
|
||||
<title>Drone CI and Crypto Honeypots 💰🍯📚</title>
|
||||
<link>https://blog.hillion.co.uk/posts/drone-hack/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/drone-hack/</guid>
|
||||
<description>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait&hellip; Something is wrong.
|
||||
htop showing bad things I certainly wasn&rsquo;t running any jobs involving Tensorflow, and I&rsquo;m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I&rsquo;ve taken away from it.</description>
|
||||
</item>
|
||||
|
||||
</channel>
|
||||
</rss>
|
||||
1
blog.hillion.co.uk/tags/drone/page/1/index.html
Normal file
1
blog.hillion.co.uk/tags/drone/page/1/index.html
Normal file
@ -0,0 +1 @@
|
||||
<!doctype html><html lang=en><head><title>https://blog.hillion.co.uk/tags/drone/</title><link rel=canonical href=https://blog.hillion.co.uk/tags/drone/><meta name=robots content="noindex"><meta charset=utf-8><meta http-equiv=refresh content="0; url=https://blog.hillion.co.uk/tags/drone/"></head></html>
|
||||
8
blog.hillion.co.uk/tags/gitea/index.html
Normal file
8
blog.hillion.co.uk/tags/gitea/index.html
Normal file
@ -0,0 +1,8 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Gitea | Jake Hillion</title><meta name=keywords content><meta name=description content="Jake Hillion's Blog"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/tags/gitea/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/tags/gitea/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Gitea"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/tags/gitea/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Gitea"><meta name=twitter:description content="Jake Hillion's Blog"></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><div class=breadcrumbs><a href=https://blog.hillion.co.uk/>Home</a> » <a href=https://blog.hillion.co.uk/tags/>Tags</a></div><h1>Gitea</h1></header><article class="post-entry tag-entry"><header class=entry-header><h2>Drone CI and Crypto Honeypots 💰🍯📚</h2></header><section class=entry-content><p>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait… Something is wrong.
|
||||
htop showing bad things I certainly wasn’t running any jobs involving Tensorflow, and I’m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I’ve taken away from it....</p></section><footer class=entry-footer><span title='2022-03-07 18:00:00 +0000 UTC'>March 7, 2022</span> · 4 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Drone CI and Crypto Honeypots 💰🍯📚" href=https://blog.hillion.co.uk/posts/drone-hack/></a></article></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
21
blog.hillion.co.uk/tags/gitea/index.xml
Normal file
21
blog.hillion.co.uk/tags/gitea/index.xml
Normal file
@ -0,0 +1,21 @@
|
||||
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||||
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
|
||||
<channel>
|
||||
<title>Gitea on Jake Hillion</title>
|
||||
<link>https://blog.hillion.co.uk/tags/gitea/</link>
|
||||
<description>Recent content in Gitea on Jake Hillion</description>
|
||||
<generator>Hugo -- gohugo.io</generator>
|
||||
<lastBuildDate>Mon, 07 Mar 2022 18:00:00 +0000</lastBuildDate><atom:link href="https://blog.hillion.co.uk/tags/gitea/index.xml" rel="self" type="application/rss+xml" />
|
||||
<item>
|
||||
<title>Drone CI and Crypto Honeypots 💰🍯📚</title>
|
||||
<link>https://blog.hillion.co.uk/posts/drone-hack/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/drone-hack/</guid>
|
||||
<description>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait&hellip; Something is wrong.
|
||||
htop showing bad things I certainly wasn&rsquo;t running any jobs involving Tensorflow, and I&rsquo;m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I&rsquo;ve taken away from it.</description>
|
||||
</item>
|
||||
|
||||
</channel>
|
||||
</rss>
|
||||
1
blog.hillion.co.uk/tags/gitea/page/1/index.html
Normal file
1
blog.hillion.co.uk/tags/gitea/page/1/index.html
Normal file
@ -0,0 +1 @@
|
||||
<!doctype html><html lang=en><head><title>https://blog.hillion.co.uk/tags/gitea/</title><link rel=canonical href=https://blog.hillion.co.uk/tags/gitea/><meta name=robots content="noindex"><meta charset=utf-8><meta http-equiv=refresh content="0; url=https://blog.hillion.co.uk/tags/gitea/"></head></html>
|
||||
8
blog.hillion.co.uk/tags/home-lab/index.html
Normal file
8
blog.hillion.co.uk/tags/home-lab/index.html
Normal file
@ -0,0 +1,8 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Home Lab | Jake Hillion</title><meta name=keywords content><meta name=description content="Jake Hillion's Blog"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/tags/home-lab/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/tags/home-lab/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Home Lab"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/tags/home-lab/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Home Lab"><meta name=twitter:description content="Jake Hillion's Blog"></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><div class=breadcrumbs><a href=https://blog.hillion.co.uk/>Home</a> » <a href=https://blog.hillion.co.uk/tags/>Tags</a></div><h1>Home Lab</h1></header><article class="post-entry tag-entry"><header class=entry-header><h2>Drone CI and Crypto Honeypots 💰🍯📚</h2></header><section class=entry-content><p>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait… Something is wrong.
|
||||
htop showing bad things I certainly wasn’t running any jobs involving Tensorflow, and I’m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I’ve taken away from it....</p></section><footer class=entry-footer><span title='2022-03-07 18:00:00 +0000 UTC'>March 7, 2022</span> · 4 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Drone CI and Crypto Honeypots 💰🍯📚" href=https://blog.hillion.co.uk/posts/drone-hack/></a></article></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
21
blog.hillion.co.uk/tags/home-lab/index.xml
Normal file
21
blog.hillion.co.uk/tags/home-lab/index.xml
Normal file
@ -0,0 +1,21 @@
|
||||
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||||
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
|
||||
<channel>
|
||||
<title>Home Lab on Jake Hillion</title>
|
||||
<link>https://blog.hillion.co.uk/tags/home-lab/</link>
|
||||
<description>Recent content in Home Lab on Jake Hillion</description>
|
||||
<generator>Hugo -- gohugo.io</generator>
|
||||
<lastBuildDate>Mon, 07 Mar 2022 18:00:00 +0000</lastBuildDate><atom:link href="https://blog.hillion.co.uk/tags/home-lab/index.xml" rel="self" type="application/rss+xml" />
|
||||
<item>
|
||||
<title>Drone CI and Crypto Honeypots 💰🍯📚</title>
|
||||
<link>https://blog.hillion.co.uk/posts/drone-hack/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/drone-hack/</guid>
|
||||
<description>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait&hellip; Something is wrong.
|
||||
htop showing bad things I certainly wasn&rsquo;t running any jobs involving Tensorflow, and I&rsquo;m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I&rsquo;ve taken away from it.</description>
|
||||
</item>
|
||||
|
||||
</channel>
|
||||
</rss>
|
||||
1
blog.hillion.co.uk/tags/home-lab/page/1/index.html
Normal file
1
blog.hillion.co.uk/tags/home-lab/page/1/index.html
Normal file
@ -0,0 +1 @@
|
||||
<!doctype html><html lang=en><head><title>https://blog.hillion.co.uk/tags/home-lab/</title><link rel=canonical href=https://blog.hillion.co.uk/tags/home-lab/><meta name=robots content="noindex"><meta charset=utf-8><meta http-equiv=refresh content="0; url=https://blog.hillion.co.uk/tags/home-lab/"></head></html>
|
||||
6
blog.hillion.co.uk/tags/index.html
Normal file
6
blog.hillion.co.uk/tags/index.html
Normal file
@ -0,0 +1,6 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Tags | Jake Hillion</title><meta name=keywords content><meta name=description content="Jake Hillion's Blog"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/tags/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/tags/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Tags"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/tags/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Tags"><meta name=twitter:description content="Jake Hillion's Blog"></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span class=active>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><h1>Tags</h1></header><ul class=terms-tags><li><a href=https://blog.hillion.co.uk/tags/continuous-integration/>Continuous Integration <sup><strong><sup>1</sup></strong></sup></a></li><li><a href=https://blog.hillion.co.uk/tags/drone/>Drone <sup><strong><sup>1</sup></strong></sup></a></li><li><a href=https://blog.hillion.co.uk/tags/gitea/>Gitea <sup><strong><sup>1</sup></strong></sup></a></li><li><a href=https://blog.hillion.co.uk/tags/home-lab/>Home Lab <sup><strong><sup>1</sup></strong></sup></a></li><li><a href=https://blog.hillion.co.uk/tags/proxmox/>Proxmox <sup><strong><sup>1</sup></strong></sup></a></li></ul></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
55
blog.hillion.co.uk/tags/index.xml
Normal file
55
blog.hillion.co.uk/tags/index.xml
Normal file
@ -0,0 +1,55 @@
|
||||
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||||
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
|
||||
<channel>
|
||||
<title>Tags on Jake Hillion</title>
|
||||
<link>https://blog.hillion.co.uk/tags/</link>
|
||||
<description>Recent content in Tags on Jake Hillion</description>
|
||||
<generator>Hugo -- gohugo.io</generator>
|
||||
<lastBuildDate>Mon, 07 Mar 2022 18:00:00 +0000</lastBuildDate><atom:link href="https://blog.hillion.co.uk/tags/index.xml" rel="self" type="application/rss+xml" />
|
||||
<item>
|
||||
<title>Continuous Integration</title>
|
||||
<link>https://blog.hillion.co.uk/tags/continuous-integration/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/tags/continuous-integration/</guid>
|
||||
<description></description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Drone</title>
|
||||
<link>https://blog.hillion.co.uk/tags/drone/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/tags/drone/</guid>
|
||||
<description></description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Gitea</title>
|
||||
<link>https://blog.hillion.co.uk/tags/gitea/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/tags/gitea/</guid>
|
||||
<description></description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Home Lab</title>
|
||||
<link>https://blog.hillion.co.uk/tags/home-lab/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/tags/home-lab/</guid>
|
||||
<description></description>
|
||||
</item>
|
||||
|
||||
<item>
|
||||
<title>Proxmox</title>
|
||||
<link>https://blog.hillion.co.uk/tags/proxmox/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/tags/proxmox/</guid>
|
||||
<description></description>
|
||||
</item>
|
||||
|
||||
</channel>
|
||||
</rss>
|
||||
8
blog.hillion.co.uk/tags/proxmox/index.html
Normal file
8
blog.hillion.co.uk/tags/proxmox/index.html
Normal file
@ -0,0 +1,8 @@
|
||||
<!doctype html><html lang=en dir=auto><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=robots content="index, follow"><title>Proxmox | Jake Hillion</title><meta name=keywords content><meta name=description content="Jake Hillion's Blog"><meta name=author content="Jake Hillion"><link rel=canonical href=https://blog.hillion.co.uk/tags/proxmox/><link crossorigin=anonymous href=/assets/css/stylesheet.min.48a18943c2fc15c38a372b8dde1f5e5dc0bc64fa6cb90f5a817d2f8c76b7f3ae.css integrity="sha256-SKGJQ8L8FcOKNyuN3h9eXcC8ZPpsuQ9agX0vjHa3864=" rel="preload stylesheet" as=style><link rel=icon href=https://blog.hillion.co.uk/favicon.ico><link rel=icon type=image/png sizes=16x16 href=https://blog.hillion.co.uk/favicon-16x16.png><link rel=icon type=image/png sizes=32x32 href=https://blog.hillion.co.uk/favicon-32x32.png><link rel=apple-touch-icon href=https://blog.hillion.co.uk/apple-touch-icon.png><link rel=mask-icon href=https://blog.hillion.co.uk/safari-pinned-tab.svg><meta name=theme-color content="#2e2e33"><meta name=msapplication-TileColor content="#2e2e33"><link rel=alternate type=application/rss+xml href=https://blog.hillion.co.uk/tags/proxmox/index.xml><noscript><style>#theme-toggle,.top-link{display:none}</style><style>@media(prefers-color-scheme:dark){:root{--theme:rgb(29, 30, 32);--entry:rgb(46, 46, 51);--primary:rgb(218, 218, 219);--secondary:rgb(155, 156, 157);--tertiary:rgb(65, 66, 68);--content:rgb(196, 196, 197);--hljs-bg:rgb(46, 46, 51);--code-bg:rgb(55, 56, 62);--border:rgb(51, 51, 51)}.list{background:var(--theme)}.list:not(.dark)::-webkit-scrollbar-track{background:0 0}.list:not(.dark)::-webkit-scrollbar-thumb{border-color:var(--theme)}}</style></noscript><script async src="https://www.googletagmanager.com/gtag/js?id=G-4CXXF49E7M"></script>
|
||||
<script>var doNotTrack=!1;if(!doNotTrack){window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date),gtag("config","G-4CXXF49E7M",{anonymize_ip:!1})}</script><meta property="og:title" content="Proxmox"><meta property="og:description" content="Jake Hillion's Blog"><meta property="og:type" content="website"><meta property="og:url" content="https://blog.hillion.co.uk/tags/proxmox/"><meta property="og:site_name" content="Jake Hillion"><meta name=twitter:card content="summary"><meta name=twitter:title content="Proxmox"><meta name=twitter:description content="Jake Hillion's Blog"></head><body class=list id=top><script>localStorage.getItem("pref-theme")==="dark"?document.body.classList.add("dark"):localStorage.getItem("pref-theme")==="light"?document.body.classList.remove("dark"):window.matchMedia("(prefers-color-scheme: dark)").matches&&document.body.classList.add("dark")</script><header class=header><nav class=nav><div class=logo><a href=https://blog.hillion.co.uk/ accesskey=h title="Jake Hillion (Alt + H)">Jake Hillion</a>
|
||||
<span class=logo-switches><button id=theme-toggle accesskey=t title="(Alt + T)"><svg id="moon" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M21 12.79A9 9 0 1111.21 3 7 7 0 0021 12.79z"/></svg><svg id="sun" xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentcolor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="5"/><line x1="12" y1="1" x2="12" y2="3"/><line x1="12" y1="21" x2="12" y2="23"/><line x1="4.22" y1="4.22" x2="5.64" y2="5.64"/><line x1="18.36" y1="18.36" x2="19.78" y2="19.78"/><line x1="1" y1="12" x2="3" y2="12"/><line x1="21" y1="12" x2="23" y2="12"/><line x1="4.22" y1="19.78" x2="5.64" y2="18.36"/><line x1="18.36" y1="5.64" x2="19.78" y2="4.22"/></svg></button></span></div><ul id=menu><li><a href=https://blog.hillion.co.uk/categories/ title=categories><span>categories</span></a></li><li><a href=https://blog.hillion.co.uk/tags/ title=tags><span>tags</span></a></li></ul></nav></header><main class=main><header class=page-header><div class=breadcrumbs><a href=https://blog.hillion.co.uk/>Home</a> » <a href=https://blog.hillion.co.uk/tags/>Tags</a></div><h1>Proxmox</h1></header><article class="post-entry tag-entry"><header class=entry-header><h2>Drone CI and Crypto Honeypots 💰🍯📚</h2></header><section class=entry-content><p>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait… Something is wrong.
|
||||
htop showing bad things I certainly wasn’t running any jobs involving Tensorflow, and I’m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I’ve taken away from it....</p></section><footer class=entry-footer><span title='2022-03-07 18:00:00 +0000 UTC'>March 7, 2022</span> · 4 min · Jake Hillion</footer><a class=entry-link aria-label="post link to Drone CI and Crypto Honeypots 💰🍯📚" href=https://blog.hillion.co.uk/posts/drone-hack/></a></article></main><footer class=footer><span>© 2023 <a href=https://blog.hillion.co.uk/>Jake Hillion</a></span>
|
||||
<span>Powered by
|
||||
<a href=https://gohugo.io/ rel="noopener noreferrer" target=_blank>Hugo</a> &
|
||||
<a href=https://git.io/hugopapermod rel=noopener target=_blank>PaperMod</a></span></footer><a href=#top aria-label="go to top" title="Go to Top (Alt + G)" class=top-link id=top-link accesskey=g><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 12 6" fill="currentcolor"><path d="M12 6H0l6-6z"/></svg></a><script>let menu=document.getElementById("menu");menu&&(menu.scrollLeft=localStorage.getItem("menu-scroll-position"),menu.onscroll=function(){localStorage.setItem("menu-scroll-position",menu.scrollLeft)}),document.querySelectorAll('a[href^="#"]').forEach(e=>{e.addEventListener("click",function(e){e.preventDefault();var t=this.getAttribute("href").substr(1);window.matchMedia("(prefers-reduced-motion: reduce)").matches?document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView():document.querySelector(`[id='${decodeURIComponent(t)}']`).scrollIntoView({behavior:"smooth"}),t==="top"?history.replaceState(null,null," "):history.pushState(null,null,`#${t}`)})})</script><script>var mybutton=document.getElementById("top-link");window.onscroll=function(){document.body.scrollTop>800||document.documentElement.scrollTop>800?(mybutton.style.visibility="visible",mybutton.style.opacity="1"):(mybutton.style.visibility="hidden",mybutton.style.opacity="0")}</script><script>document.getElementById("theme-toggle").addEventListener("click",()=>{document.body.className.includes("dark")?(document.body.classList.remove("dark"),localStorage.setItem("pref-theme","light")):(document.body.classList.add("dark"),localStorage.setItem("pref-theme","dark"))})</script></body></html>
|
||||
21
blog.hillion.co.uk/tags/proxmox/index.xml
Normal file
21
blog.hillion.co.uk/tags/proxmox/index.xml
Normal file
@ -0,0 +1,21 @@
|
||||
<?xml version="1.0" encoding="utf-8" standalone="yes"?>
|
||||
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
|
||||
<channel>
|
||||
<title>Proxmox on Jake Hillion</title>
|
||||
<link>https://blog.hillion.co.uk/tags/proxmox/</link>
|
||||
<description>Recent content in Proxmox on Jake Hillion</description>
|
||||
<generator>Hugo -- gohugo.io</generator>
|
||||
<lastBuildDate>Mon, 07 Mar 2022 18:00:00 +0000</lastBuildDate><atom:link href="https://blog.hillion.co.uk/tags/proxmox/index.xml" rel="self" type="application/rss+xml" />
|
||||
<item>
|
||||
<title>Drone CI and Crypto Honeypots 💰🍯📚</title>
|
||||
<link>https://blog.hillion.co.uk/posts/drone-hack/</link>
|
||||
<pubDate>Mon, 07 Mar 2022 18:00:00 +0000</pubDate>
|
||||
|
||||
<guid>https://blog.hillion.co.uk/posts/drone-hack/</guid>
|
||||
<description>One gloomy Tuesday evening, I SSHed into my CI server and ran htop as I had hundreds of times before. The machine is pinned running my jobs, but wait&hellip; Something is wrong.
|
||||
htop showing bad things I certainly wasn&rsquo;t running any jobs involving Tensorflow, and I&rsquo;m not in the habit of mining cryptocurrencies on my CI server.
|
||||
This post will cover the series of events that lead to this happening, what happened, and the learnings I&rsquo;ve taken away from it.</description>
|
||||
</item>
|
||||
|
||||
</channel>
|
||||
</rss>
|
||||
1
blog.hillion.co.uk/tags/proxmox/page/1/index.html
Normal file
1
blog.hillion.co.uk/tags/proxmox/page/1/index.html
Normal file
@ -0,0 +1 @@
|
||||
<!doctype html><html lang=en><head><title>https://blog.hillion.co.uk/tags/proxmox/</title><link rel=canonical href=https://blog.hillion.co.uk/tags/proxmox/><meta name=robots content="noindex"><meta charset=utf-8><meta http-equiv=refresh content="0; url=https://blog.hillion.co.uk/tags/proxmox/"></head></html>
|
||||
Loading…
Reference in New Issue
Block a user