P10.pdf
241.5 KB
The Power of Ten –
Rules for Developing Safety Critical Code
NASA/JPL Laboratory for Reliable Software
Rules for Developing Safety Critical Code
NASA/JPL Laboratory for Reliable Software
🔥1
1. Migrate to Proxmox VE https://pve.proxmox.com/wiki/Migrate_to_Proxmox_VE
2. smartmontools homepage https://www.smartmontools.org
3. OpenZFS dRAID https://openzfs.github.io/openzfs-docs/Basic%20Concepts/dRAID%20Howto.html
4. Systems installed with Proxmox VE 6.4 or later, EFI systems installed with Proxmox VE 5.4 or later
5. https://bugzilla.proxmox.com/show_bug.cgi?id=2350
6. https://github.com/openzfs/zfs/issues/11688
7. acme.sh https://github.com/acmesh-official/acme.sh
8. These are all installs with root on ext4 or xfs and installs with root on ZFS on non-EFI systems
9. Booting ZFS on root with GRUB https://openzfs.github.io/openzfs-docs/Getting%20Started/Debian/Debian%20Bookworm%20Root%20on%20ZFS.html
10. GRUB Manual https://www.gnu.org/software/grub/manual/grub/grub.html
11. Systems using proxmox-boot-tool will call proxmox-boot-tool refresh upon update-grub.
12. votequorum_qdevice_master_wins manual page https://manpages.debian.org/stable/libvotequorum-dev/votequorum_qdevice_master_wins.3.en.html
13. token_coefficient in the corosync manual page https://manpages.debian.org/stable/corosync/corosync.conf.5.en.html#token_coefficient
14. token in the corosync manual page https://manpages.debian.org/stable/corosync/corosync.conf.5.en.html#token
15. consensus in the corosync manual page https://manpages.debian.org/stable/corosync/corosync.conf.5.en.html#consensus
16. Ceph User Management
17. RBD configuration reference https://docs.ceph.com/en/tentacle/rbd/rbd-config-ref/
18. Ceph intro https://docs.ceph.com/en/tentacle/start/
19. Ceph architecture https://docs.ceph.com/en/tentacle/architecture/
20. Ceph glossary https://docs.ceph.com/en/tentacle/glossary
21. Full Mesh Network for Ceph https://pve.proxmox.com/wiki/Full_Mesh_Network_for_Ceph_Server
22. Ceph Monitor https://docs.ceph.com/en/tentacle/rados/configuration/mon-config-ref/
23. Ceph Manager https://docs.ceph.com/en/tentacle/mgr/
24. Ceph Bluestore https://ceph.com/community/new-luminous-bluestore/
25. Ceph config sources https://docs.ceph.com/en/latest/rados/configuration/ceph-conf/#config-sources
26. Ceph MON DB commands https://docs.ceph.com/en/latest/rados/configuration/ceph-conf/#commands
27. PG calculator https://web.archive.org/web/20210301111112/http://ceph.com/pgcalc/
28. Placement Groups https://docs.ceph.com/en/tentacle/rados/operations/placement-groups/
29. Automated Scaling https://docs.ceph.com/en/tentacle/rados/operations/placement-groups/#automated-scaling
30. Ceph pool operation https://docs.ceph.com/en/tentacle/rados/operations/pools/
31. Ceph Erasure Coded Pool Recovery https://docs.ceph.com/en/tentacle/rados/operations/erasure-code/#erasure-coded-pool-recovery
32. Ceph Erasure Code Profile https://docs.ceph.com/en/tentacle/rados/operations/erasure-code/#erasure-code-profiles
33. Ceph Erasure Code https://docs.ceph.com/en/tentacle/rados/operations/erasure-code/
34. https://ceph.com/assets/pdfs/weil-crush-sc06.pdf
35. CRUSH map https://docs.ceph.com/en/tentacle/rados/operations/crush-map/
36. Configuring multiple active MDS daemons https://docs.ceph.com/en/tentacle/cephfs/multimds/
37. Ceph scrubbing https://docs.ceph.com/en/tentacle/rados/configuration/osd-config-ref/#scrubbing
38. Ceph troubleshooting https://docs.ceph.com/en/tentacle/rados/troubleshooting/
39. Ceph log and debugging https://docs.ceph.com/en/tentacle/rados/troubleshooting/log-and-debug/
40. See this benchmark on the KVM wiki https://www.linux-kvm.org/page/Using_VirtIO_NIC
41. See this benchmark for details https://events.static.linuxfound.org/sites/events/files/slides/CloudOpen2013_Khoa_Huynh_v3.pdf
42. TRIM, UNMAP, and discard https://en.wikipedia.org/wiki/Trim_%28computing%29
43. Meltdown Attack https://meltdownattack.com/
44. spectre-meltdown-checker https://meltdown.ovh/
45. PCID is now a critical performance/security feature on x86 https://groups.google.com/forum/m/#!topic/mechanical-sympathy/L9mHTbeQLNU
46. https://en.wikipedia.org/wiki/Non-uniform_memory_access
2. smartmontools homepage https://www.smartmontools.org
3. OpenZFS dRAID https://openzfs.github.io/openzfs-docs/Basic%20Concepts/dRAID%20Howto.html
4. Systems installed with Proxmox VE 6.4 or later, EFI systems installed with Proxmox VE 5.4 or later
5. https://bugzilla.proxmox.com/show_bug.cgi?id=2350
6. https://github.com/openzfs/zfs/issues/11688
7. acme.sh https://github.com/acmesh-official/acme.sh
8. These are all installs with root on ext4 or xfs and installs with root on ZFS on non-EFI systems
9. Booting ZFS on root with GRUB https://openzfs.github.io/openzfs-docs/Getting%20Started/Debian/Debian%20Bookworm%20Root%20on%20ZFS.html
10. GRUB Manual https://www.gnu.org/software/grub/manual/grub/grub.html
11. Systems using proxmox-boot-tool will call proxmox-boot-tool refresh upon update-grub.
12. votequorum_qdevice_master_wins manual page https://manpages.debian.org/stable/libvotequorum-dev/votequorum_qdevice_master_wins.3.en.html
13. token_coefficient in the corosync manual page https://manpages.debian.org/stable/corosync/corosync.conf.5.en.html#token_coefficient
14. token in the corosync manual page https://manpages.debian.org/stable/corosync/corosync.conf.5.en.html#token
15. consensus in the corosync manual page https://manpages.debian.org/stable/corosync/corosync.conf.5.en.html#consensus
16. Ceph User Management
17. RBD configuration reference https://docs.ceph.com/en/tentacle/rbd/rbd-config-ref/
18. Ceph intro https://docs.ceph.com/en/tentacle/start/
19. Ceph architecture https://docs.ceph.com/en/tentacle/architecture/
20. Ceph glossary https://docs.ceph.com/en/tentacle/glossary
21. Full Mesh Network for Ceph https://pve.proxmox.com/wiki/Full_Mesh_Network_for_Ceph_Server
22. Ceph Monitor https://docs.ceph.com/en/tentacle/rados/configuration/mon-config-ref/
23. Ceph Manager https://docs.ceph.com/en/tentacle/mgr/
24. Ceph Bluestore https://ceph.com/community/new-luminous-bluestore/
25. Ceph config sources https://docs.ceph.com/en/latest/rados/configuration/ceph-conf/#config-sources
26. Ceph MON DB commands https://docs.ceph.com/en/latest/rados/configuration/ceph-conf/#commands
27. PG calculator https://web.archive.org/web/20210301111112/http://ceph.com/pgcalc/
28. Placement Groups https://docs.ceph.com/en/tentacle/rados/operations/placement-groups/
29. Automated Scaling https://docs.ceph.com/en/tentacle/rados/operations/placement-groups/#automated-scaling
30. Ceph pool operation https://docs.ceph.com/en/tentacle/rados/operations/pools/
31. Ceph Erasure Coded Pool Recovery https://docs.ceph.com/en/tentacle/rados/operations/erasure-code/#erasure-coded-pool-recovery
32. Ceph Erasure Code Profile https://docs.ceph.com/en/tentacle/rados/operations/erasure-code/#erasure-code-profiles
33. Ceph Erasure Code https://docs.ceph.com/en/tentacle/rados/operations/erasure-code/
34. https://ceph.com/assets/pdfs/weil-crush-sc06.pdf
35. CRUSH map https://docs.ceph.com/en/tentacle/rados/operations/crush-map/
36. Configuring multiple active MDS daemons https://docs.ceph.com/en/tentacle/cephfs/multimds/
37. Ceph scrubbing https://docs.ceph.com/en/tentacle/rados/configuration/osd-config-ref/#scrubbing
38. Ceph troubleshooting https://docs.ceph.com/en/tentacle/rados/troubleshooting/
39. Ceph log and debugging https://docs.ceph.com/en/tentacle/rados/troubleshooting/log-and-debug/
40. See this benchmark on the KVM wiki https://www.linux-kvm.org/page/Using_VirtIO_NIC
41. See this benchmark for details https://events.static.linuxfound.org/sites/events/files/slides/CloudOpen2013_Khoa_Huynh_v3.pdf
42. TRIM, UNMAP, and discard https://en.wikipedia.org/wiki/Trim_%28computing%29
43. Meltdown Attack https://meltdownattack.com/
44. spectre-meltdown-checker https://meltdown.ovh/
45. PCID is now a critical performance/security feature on x86 https://groups.google.com/forum/m/#!topic/mechanical-sympathy/L9mHTbeQLNU
46. https://en.wikipedia.org/wiki/Non-uniform_memory_access
47. if the command numactl --hardware | grep available returns more than one node, then your host system has a NUMA architecture
48. A good explanation of the inner workings of the balloon driver can be found here https://rwmj.wordpress.com/2010/07/17/virtio-balloon/
49. https://www.kraxel.org/blog/2014/10/qemu-using-cirrus-considered-harmful/ qemu: using cirrus considered harmful
50. See the OVMF Project https://github.com/tianocore/tianocore.github.io/wiki/OVMF
51. Alex Williamson has a good blog entry about this https://vfio.blogspot.co.at/2014/08/primary-graphics-assignment-without-vga.html
52. Microsoft support article about the issue https://support.microsoft.com/en-us/topic/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e
53. Looking Glass: https://looking-glass.io/
54. Official vmgenid Specification https://docs.microsoft.com/en-us/windows/desktop/hyperv_v2/virtual-machine-generation-identifier
55. Online GUID generator http://guid.one/
56. https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/virtual-dc/virtualized-domain-controller-architecture
57. this includes all newest major versions of container templates shipped by Proxmox VE
58. for example Alpine Linux
59. /etc/os-release replaces the multitude of per-distribution release files https://manpages.debian.org/stable/systemd/os-release.5.en.html
60. AppId https://developers.yubico.com/U2F/App_ID.html
61. Multi-facet apps: https://developers.yubico.com/U2F/App_ID.html
62. Lempel–Ziv–Oberhumer a lossless data compression algorithm https://en.wikipedia.org/wiki/Lempel-Ziv-Oberhumer
63. gzip - based on the DEFLATE algorithm https://en.wikipedia.org/wiki/Gzip
64. Zstandard a lossless data compression algorithm https://en.wikipedia.org/wiki/Zstandard
65. pigz - parallel implementation of gzip https://zlib.net/pigz/
66. see man 7 systemd.time for more information
48. A good explanation of the inner workings of the balloon driver can be found here https://rwmj.wordpress.com/2010/07/17/virtio-balloon/
49. https://www.kraxel.org/blog/2014/10/qemu-using-cirrus-considered-harmful/ qemu: using cirrus considered harmful
50. See the OVMF Project https://github.com/tianocore/tianocore.github.io/wiki/OVMF
51. Alex Williamson has a good blog entry about this https://vfio.blogspot.co.at/2014/08/primary-graphics-assignment-without-vga.html
52. Microsoft support article about the issue https://support.microsoft.com/en-us/topic/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e
53. Looking Glass: https://looking-glass.io/
54. Official vmgenid Specification https://docs.microsoft.com/en-us/windows/desktop/hyperv_v2/virtual-machine-generation-identifier
55. Online GUID generator http://guid.one/
56. https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/virtual-dc/virtualized-domain-controller-architecture
57. this includes all newest major versions of container templates shipped by Proxmox VE
58. for example Alpine Linux
59. /etc/os-release replaces the multitude of per-distribution release files https://manpages.debian.org/stable/systemd/os-release.5.en.html
60. AppId https://developers.yubico.com/U2F/App_ID.html
61. Multi-facet apps: https://developers.yubico.com/U2F/App_ID.html
62. Lempel–Ziv–Oberhumer a lossless data compression algorithm https://en.wikipedia.org/wiki/Lempel-Ziv-Oberhumer
63. gzip - based on the DEFLATE algorithm https://en.wikipedia.org/wiki/Gzip
64. Zstandard a lossless data compression algorithm https://en.wikipedia.org/wiki/Zstandard
65. pigz - parallel implementation of gzip https://zlib.net/pigz/
66. see man 7 systemd.time for more information
Richard WM Jones
Virtio balloon
After someone asked me a question about “balloons” (in the virtualization sense) today, I noticed that there is not very much documentation around. This post explains what the KVM virti…
https://developer.hashicorp.com/vault/tutorials/policies/policies?variants=vault-deploy%3Aselfhosted
Access controls with Vault policies | Vault | HashiCorp Developer
Vault policies provide a declarative way to allow or deny access to certain paths and operations in Vault. Start with defining policies using HCL, attaching them to tokens, and then ensuring secure access controls function.