• 0 Posts
  • 14 Comments
Joined 2 years ago
cake
Cake day: September 14th, 2023

help-circle

  • I would copy the existing system onto a new system:

    1. Update system to the latest packages
    2. Create a new base system using the same distro
    3. Check which packages are not on the new system, add them to your playbook
    4. Install packages on new system
    5. This will take some time. Run a find of all files and pass them to md5sum or sha512sum to get a list of files with their checksum. Compare the list from the old system to the new system.
    6. Update your playbook with these findings. Template is probably the way to go, Lineinfile might be good as well, use copy if nothimg else works.
    7. Check firewall settings and update your playbook.

    Anyhow this will take some iterations, but while you have a copy of your ‘production’ system, you can test on your ‘test’ machine until you have the same functionality.






  • bushvin@lemmy.worldtoMemes@lemmy.mlthats crazy
    link
    fedilink
    arrow-up
    14
    arrow-down
    4
    ·
    edit-2
    1 year ago

    You assume I would think you’re wrong. I do not.

    Morally, assassination is despicable. But so is fascism.

    I applaud you for taking the high road, while I just say Fuck ‘em all. Fascism should not be tolerated, even in a democracy.







  • There is nothing more important than security patches on a system.

    I used to work at an FMI, which’s motto was “keep things stable”. Even the ciso department bought that crap. Until we hired a white hat hacker. The only thing given was the name of the company. He managed to get into the building, access an employee’s workstation and install a root kit on one of the most important financial message tracking systems (you know, the one that instructs other systems to transfer money), using a security bug, which would have been patched if they kept a regular (security) update cycle. After shit hit the fan, many people were fired and an update cycle was introduced.

    No system is important enough to not patch. And if you believe it is, you’re wrong.