Jerry George jerrygb

Container security notes

Internet references

Kernel and architecture

namespaces - overview of Linux namespaces http://man7.org/linux/man-pages/man7/namespaces.7.html
mount_namespaces - overview of Linux mount namespaces

2018 Update: Easiest option is Justin's repo and image

Just run this from your Mac terminal and it'll drop you in a container with full permissions on the Moby VM. This also works for Docker for Windows for getting in Moby Linux VM (doesn't work for Windows Containers).

docker run -it --rm --privileged --pid=host justincormack/nsenter1

more info: https://github.com/justincormack/nsenter1

Hub as a Gateway

Miners are required to have a public IP address and a properly configured firewall to make all things work properly. But sometimes it is not possible due to either security, privacy or provider limitations. This also includes miners behind the NAT.

To be able to work with these miners a Hub can be configured as a gateway.

Note: we assume that it is possible to build a private network between Hub and miners.

	You are Manus, an AI agent created by the Manus team.

	You excel at the following tasks:
	1. Information gathering, fact-checking, and documentation
	2. Data processing, analysis, and visualization
	3. Writing multi-chapter articles and in-depth research reports
	4. Creating websites, applications, and tools
	5. Using programming to solve various problems beyond development
	6. Various tasks that can be accomplished using computers and the internet

	{
	"APIGatewayServiceRolePolicy": {
	"Arn": "arn:aws:iam::aws:policy/aws-service-role/APIGatewayServiceRolePolicy",
	"AttachmentCount": 0,
	"CreateDate": "2019-10-22T18:22:01+00:00",
	"DefaultVersionId": "v6",
	"Document": {
	"Statement": [
	{
	"Action": [

	#!/usr/bin/python

	import os
	import sys

	import requests

	schema_registry_url = sys.argv[1]
	topic = sys.argv[2]
	schema_file = sys.argv[3]

	# module list (generated by listmodules.py)
	#
	# timestamp='20160226T200954Z'
	# sys.version='2.7.10 (default, Dec 8 2015, 18:25:23) \n[GCC 4.8.3 20140911 (Red Hat 4.8.3-9)]'
	# sys.platform='linux2'
	# platform='Linux-4.1.13-19.31.amzn1.x86_64-x86_64-with-glibc2.2.5'
	#
	BaseHTTPServer
	Bastion
	CDROM

	acm.amazonaws.com
	apigateway.amazonaws.com
	application-autoscaling.amazonaws.com
	appstream.application-autoscaling.amazonaws.com
	appsync.amazonaws.com
	athena.amazonaws.com
	autoscaling.amazonaws.com
	batch.amazonaws.com
	channels.lex.amazonaws.com
	clouddirectory.amazonaws.com

	#####################
	# Create The Cluster #
	######################

	# Follow the instructions from https://github.com/weaveworks/eksctl to intall `eksctl`

	export AWS_ACCESS_KEY_ID=[...] # Replace [...] with AWS access key ID

	export AWS_SECRET_ACCESS_KEY=[...] # Replace [...] with AWS secret access key

	# Generate AWS credentials through https://console.aws.amazon.com/iam/home#/security_credential if you do NOT have them already

	export AWS_ACCESS_KEY_ID=[...] # Replace [...] with the AWS Access Key ID

	export AWS_SECRET_ACCESS_KEY=[...] # Replace [...] with the AWS Secret Access Key

	export AWS_DEFAULT_REGION=us-east-2

	# If Windows, use `tr '\r\n' ', '` instead of `tr '\n' ','`
	export ZONES=$(aws ec2 describe-availability-zones \