Did you know it's been 11 years since ARMv8 was introduced? And 6 years since the release of the Raspberry Pi 3 Model B, the first mainstream SBC to use it, making 64-bit ARM (aarch64) devices available to just about anyone who wanted one? Well it has. At this point it's all but impossible to buy 32...

Table Of Contents:

• Introduction
• Routing All Traffic Through WireGuard
• Routing Docker Container Traffic Through WireGuard
  • Setting up a container to use the WireGuard container's network stack
  • Routing a container's traffic through the WireGuard container via routing table
    • Incoming Po...

Introduction

Zero Trust Architecture is the practice of designing systems based on the principle of never trust, always verify, as opposed to the traditional trust, but verify principle . It has become quite a popular buzz word of late, in light of all the recent successful cyber attacks, comp...

CrowdSec is a free, open-source and collaborative IPS; it's like Fail2Ban but you share your bans with all of the other users to try and pre-emptively block malicious hosts. We recently published a docker mod to add the CrowdSec nginx bouncer to our swag and nginx containers so it seemed a good o...

SWAG Dashboard is a mod powered by GoAccess that provides a comprehensive overview of SWAG's operation.

Setup

Follow latest the instructions on the mod's readme to set it up.

Navigate to dashboard.yourdomain.com from your LAN to view the dashboard.

Note that the dashboard only allows...

Or: How To Be Helpful Rather Than Annoying

Tools that scan Docker containers for vulnerabilities have been around for a while; Trivy, Snyk, Grype, Clair, etc. all give you the option of throwing an image at them and in response they'll dump out a list of all the known CVEs they find. With the publ...

Modern web browsers have become powerful cross platform tools for running applications. Recently my interest in running retro emulators in a web browser was fueled by the current and last generation of Xbox consoles getting an update to their Edge browser to be chromium based which opens up the abil...

We've now been working with Scarf for a little over a month and so I thought it would be fun to dig through the stats we've gathered so far and see if I can pull anything interesting out them. Now obviously a lot of our pulls are still via Docker Hub and GHCR, so this isn't in any way comprehensiv...

It has somehow been over a year since we switched to promoting the Github Container Registry (GHCR) as our primary repository for docker images after Docker Hub introduced pull limits (which we were subsquently able to obtain an exemption from), so we figured it was about time for something new.

I