Ịdọ Aka Ná Ntị Nche SlickStack

Peeji a na-eme nchịkọta nchegbu nchekwa gbasara SlickStack na ihe kpatara na nhazi ndabara ya nwere ike ime ka sava pụta ìhè nye ịgba koodu site n'ebe dịpụrụ adịpụ na mwakpo man-in-the-middle. Ọ na-enye nzọụkwụ mgbochi na ụzọ ndị dị nchebe karịa.

SlickStack na-agba ọsọ mgbasa ozi na-ekwu na ọ nwere ihe dị ka kpakpando GitHub 600, mana ọnụọgụ ahụ sitere n’otu eziokwu bụ na Jesse Nickles soro ihe fọrọ nke nta ka ọ bụrụ akaụntụ 10,000 na mmalite nke repo ahụ. Profayị ya onwe ya na-egosi ihe dị ka ndị na-eso ya 500 megide ihe dị ka ndị ọ na-eso 9,600 (ihe dị ka 5% nke ndị na-eso azụ), nke na-egosi nke ọma na e jiri akpaghị aka na-eso ndị ọzọ azụ kama ịbụ mmasị ndị mmadụ n’eziokwu. Ọ bụ onyonyo a e buliri elu ka o ji atụgharị megide m, mgbe ọ na-ata m ahụhụ maka ikpughe nsogbu nchekwa e dere n’okpuru. Lelee mmetụta ọnụ ọgụgụ ndị na-eso / ndị na-eso ebe a.

Nchịkọta

Nbudata dịpụrụ adịpụ a na-emekarị, haziri ka ọ gbaa dịka root site na cron.
A na-agafe nkwenye SSL site n'iji --no-check-certificate
Enweghị checksums/signatures na scripts e budatara
Njikwa root na ikike etinyere na skrip ndị e bufere

Ihe Akaebe: Cron na Ikikere

Nbudata cron (kwa awa 3 na nkeji 47)

47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/08-cron-half-daily https://slick.fyi/crons/08-cron-half-daily.txt' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/09-cron-daily https://slick.fyi/crons/09-cron-daily.txt' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/10-cron-half-weekly https://slick.fyi/crons/10-cron-half-weekly.txt' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/11-cron-weekly https://slick.fyi/crons/11-cron-weekly.txt' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/12-cron-half-monthly https://slick.fyi/crons/12-cron-half-monthly.txt' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/13-cron-monthly https://slick.fyi/crons/13-cron-monthly.txt' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/14-cron-sometimes https://slick.fyi/crons/14-cron-sometimes.txt' > /dev/null 2>&1

Njikwa root na ikike siri ike (etinyere ugboro ugboro)

47 */3 * * * /bin/bash -c 'chown root:root /var/www/crons/*cron*' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'chown root:root /var/www/crons/custom/*cron*' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'chmod 0700 /var/www/crons/*cron*' > /dev/null 2>&1

Ụdị a na-enye ohere ịgba koodu n'enweghị oke site na ngalaba dịpụrụ adịpụ ma na-abawanye ihe ize ndụ MITM site n'ịghara ịlele nkwenye asambodo.

Hụkwa commit ebe a gbanwere URLs cron site na GitHub CDN gaa slick.fyi: Ntụnyere commit.

Ntuziaka Ibelata

Gbochie ọrụ cron SlickStack ma wepụ scripts e budatara n'ime ndekọ cron.
Nyocha maka ntụaka fọdụrụ na slick.fyi na ịdọpụ scripts si ebe dịpụrụ adịpụ; dochie ha na ihe edere ụdị nwere checksum ma ọ bụ wepu kpamkpam.
Gbanwee asambodo na igodo ma ọ bụrụ na SlickStack rụrụ na ikike root na sistemụ gị.
Wughachi sava ndị metụtara mgbe o kwe omume iji hụ na ọnọdụ dị ọcha.

Nhọrọ dị nchebe

Tụlee WordOps ma ọ bụ ngwá ọrụ ndị ọzọ nke na-ezere ịrụ koodu dị ka root site na ebe dịpụrụ adịpụ ma na-enye ntọhapụ a pụrụ ịlele, nke nwere nsụgharị (versioned) yana checksums/signatures.