Domino 10 is due in October and if you want to take advantage of all the new feature goodness, you need to know Linux. Domino for Docker is a Linux only release, for example, and now IBM supports RHEL 7 natively with all three V10 server products. Staying current here is critical: RHEL 7 is not the usual Linux upgrade. Join BillMal Your Linux Pal to cover as much RHEL 7 info as he can in an hour: Domino 10 status, systemd, journald, administration, and upgrade tips. This is a very technical session. Let's get ready for October!
Presented the morning of the 2nd day of the Engage conference onboard the SS Rotterdam. IBM Domino Domain Monitoring presentation by IBM Champion Keith Brooks.
Domino tweets. Salesforce and SedrviceNow integrations included in the deck.
Keith Brooks / KBMSG
Bill Malchisky / Effective Software Solutions, LLC
Leaving a mail system and going to Domino, or Connections Cloud, there are some basic things one must do, and not do.
Caution: Worst practices are here!
Comparison of two different migrations and how to make sure yours ends up as a completed mission. Including changing Operating Systems, hosted/on premises, project plans and arbitrary deadlines.
Domino 10 has some amazing self-healing capabilities that are going to make every admin’s life much easier. Learn how automatic cluster database symmetry works to ensure both NSFs and DAOS content are kept in sync across cluster mates. Understand how the repair engine remedies any missing databases or NLOs, rebuilds full text indexes, and detects and repairs corrupt NSFs and NLOs. You will also learn how to use the new commands to manually invoke corruption repair and how the new replica synchronization tool and replication currency monitoring work. Get the ins and outs of the functionality of automatic hot view updating and how to setup deletion logging so you know who/what deleted a document.
Presented the morning of the 2nd day of the Engage conference onboard the SS Rotterdam. IBM Domino Domain Monitoring presentation by IBM Champion Keith Brooks.
Domino tweets. Salesforce and SedrviceNow integrations included in the deck.
Keith Brooks / KBMSG
Bill Malchisky / Effective Software Solutions, LLC
Leaving a mail system and going to Domino, or Connections Cloud, there are some basic things one must do, and not do.
Caution: Worst practices are here!
Comparison of two different migrations and how to make sure yours ends up as a completed mission. Including changing Operating Systems, hosted/on premises, project plans and arbitrary deadlines.
Domino 10 has some amazing self-healing capabilities that are going to make every admin’s life much easier. Learn how automatic cluster database symmetry works to ensure both NSFs and DAOS content are kept in sync across cluster mates. Understand how the repair engine remedies any missing databases or NLOs, rebuilds full text indexes, and detects and repairs corrupt NSFs and NLOs. You will also learn how to use the new commands to manually invoke corruption repair and how the new replica synchronization tool and replication currency monitoring work. Get the ins and outs of the functionality of automatic hot view updating and how to setup deletion logging so you know who/what deleted a document.
On September 8, 2020 Andy Higgins and Heather Hottenstein presented Integrating HCL Domino and Microsoft 365 at DNUG. This was an upgraded presentation from the one they did in Boston at Collabsphere 2019, discussing technology that has been introduced in the last year.
For more information reach out to info@rprwyatt.com or visit rprwyatt.com
Planning & Completing An IBM Connections UpgradeGabriella Davis
Presentation from ICON UK in London Sept 2015 on approaches to upgrading IBM Connections whether it's a WebSphere iFix, TDI, DB2 or the Connections applications themselves
MES102 - Verse on Premises 2.0 Best PracticesDylan Redfield
In July 2020 Verse on Premises 2.0 was released, delivering a slew of new features. And when V12 of Notes and Domino ships, iNotes will be officially deprecated in favor of VoP. Join me to learn about the functionality that VoP 2.0 brings. Additionally, learn about deployment and administrative best practices to ensure your VoP offering meets your user’s needs.
What We Wish We Had Known: Becoming an IBM Connections AdministratorGabriella Davis
Presentation on IBM Connections given by Gab Davis and Paul Mooney at IBM Connect 2014. In this session we shared our experiences of Connections as administrators and what we feel is useful information for every admin to know.
Domino V10 and How to Get There - IBM Think 2019Dylan Redfield
Domino V10 is here and organizations are trying to prepare a strategy to best optimize the new available features. With a wide range of powerful new enhancements and features, implementations can quickly get overwhelming for an IT manager. Before IT managers roll out Domino 10, its crucial to have a firm understanding of the overview of these exciting new offerings. In addition, an in-depth plan must be established with a main goal of not disrupting current business workflows. This session with help establish a high level of understanding for the entire overview of new offerings and enhancements in Domino 10. A main focus will be placed on migration strategies that will reduce disruption of business workflows.
INF107 - Integrating HCL Domino and Microsoft 365Dylan Redfield
Is your organization flirting with a move to Microsoft 365? Or are you managing an infrastructure that includes both Domino servers and Microsoft 365 cloud services? As Microsoft 365’s footprint grows, many HCL Domino environments are finding the need for the two technologies to coexist. This session will discuss best practices, native options and third-party tools to allow the two environments to work together, ultimately reducing your overhead and allowing your users to be productive. Just because you are running dual environments, does not mean you have to duplicate efforts to manage them. Let us give you tips on how to save time and give your users a cohesive experience.
AdminP is an elementary server task for your IBM Lotus Domino Administration. This session explains which administration processes are available and how those can make your day-to-day administration tasks easier. We will cover the best practices for setup and troubleshooting using AdminP, in projects like recertifications and server consolidations.
IBM Connect 2016 - 60+ in 60 - Admin Tips Power HourChris Miller
See the full slides at http://idonot.es/60in60for2016
With a guaranteed minimum of 60 administration tips in 60 minutes you will walk out with a list of items to immediately help you tune your collaboration environment. Covering IBM Domino, Sametime, Connections, Traveler and more will have you eager to get back and implement some of the ideas. We will take best practices from the my SocialBizUg Admin Tips newsletter, customer case stories and other best practices. Have no fear, we will move faster that you can write so everything will be available for you to download. This is an ode to the hundreds of tips brought to you by the letters M and G (Mooney and Gab) over the years.
Best Practices for Installing IBM Verse on PremisesTimsterC
IBM's local edition of Verse for email is hitting many enterprises. If you have not yet tried this out for yourself, then come and find out just how easy it is.Learn the tips and tricks that go into a successful deployment with a hands-on demo of the places to look out for and the finished product.We'll also show the integrations with Connections Files, Profiles and Box.
1084: Planning and Completing an IBM Connections UpgradeGabriella Davis
So we have IBM Connections installed, but now it’s time to consider what and when to update. It could be a WebSphere fix or a DB2 fixpack, a new application, or database scheme. Some updates are for security, some for performance and some for new features. In this session we'll discuss how you can decide when and what to upgrade, how to plan for and perform a safe upgrade, test when it’s complete and what things can trip you up along the way. All of this is based on lessons learned over hundreds of deployments.
Harness the power of XPages in Lotus Dominodominion
One of the latest additions to the Domino Web developers\' toolkit of technologies,
XPages, is also arguably its most powerful and revolutionary to date. XPages allows
for functionality and capabilities previously thought impossible to achieve in Domino
application development.
engage 2019 - 15 Domino v10 Admin features we LOVEChristoph Adler
Domino 10 shipped jam-packed with new features that will make administrators' lives a breeze. In this talk, we'll share everything we know and love about our 15 new favorites—from the long-awaited NSF size limit boost, to brand-new gems like Domino General Query Facility (DGQF), deletion logging and more. You'll learn how to get the most out of all of them, proven through practical customer examples. You'll walk away from this fast-paced, in-depth session with a solid understanding of the new way to administer Domino 10, as well as a hands-on guide to properly put these great features to use!
IBM Connect 2014 BP103: Ready, Aim, Fire: Mastering the Latest in the Adminis...Benedek Menesi
This session has been presented in the Best Practices track at the IBM Connect conference in Orlando, FL, USA, January 2014.
--
Being armed with the newest set of weapons is crucial for not being left behind when it comes to efficiently administering your servers. The number of new features added to recent IBM releases is staggering, yet workload time constraints cause us to stick to our old ways of doing things despite the opportunity to increase our effectiveness and thereby efficiency. In this in-depth, problem/solution formatted session we’ll discuss some of the latest and greatest features for administering IBM Domino, IBM iNotes and IBM Traveler through customer examples and real world scenarios. We’ll share best practices that allowed us to successfully solve architecture challenges in critical areas such as security, mail routing, replication, web/mobile capabilities and more.
Bewährte Praktiken für HCL Notes/Domino-Sicherheit Teil 1: Der Notes-Clientpanagenda
Aufnhame: http://pan.news/20210316_DE
Abstract: Mussten Sie in Ihrem Unternehmen kurzfristig Änderungen vornehmen, um Ihren Mitarbeitern Telearbeit zu ermöglichen? Damit sind Sie nicht allein. Eine große Anzahl von Menschen arbeitet derzeit von zu Hause aus. Dennoch benötigen sie Zugriff auf Informationen, die hinter den Firewalls des Unternehmens gespeichert sind. Außerdem bewahren sie viele dieser Daten auf Geräten auf, die sich außerhalb Ihrer Kontrolle befinden und anfällig für Verlust und Diebstahl sind.
Aber sind Unternehmen darauf vorbereitet, auf unbestimmte Zeit so weiterzumachen? Die Aufmerksamkeit verlagert sich nun zu Recht auf Sicherheitsthemen. Fernarbeit entwickelt sich momentan von einer temporären zu einer dauerhaften Lösung. Nahezu alle Unternehmen beschäftigen sich jetzt die damit verbundenen Sicherheitsrisiken.
HCL Notes hat den wohlverdienten Ruf, eine felsenfeste Plattform zu sein. Sie wurde speziell für diese Szenarien entwickelt. Allerdings muss Notes richtig konfiguriert werden, um von den leistungsstarken Sicherheitsfunktionen zu profitieren.
Die Schlüsselfrage ist die folgende: Sind Sie SICHER, dass Sie nicht etwas in IHRER Umgebung übersehen haben?
Wir stellen die besten Sicherheitsmaßnahmen für Notes-Clients vor. Und es wird garantiert nicht langweilig werden. Also, auf geht's, damit wir alle sicher durch das Jahr 2021 und darüber hinaus kommen.
Was Sie in diesem Webinar erwartet:
- Die Grundlagen der Sicherheit für Ihre Notes- und Nomad-Clients
- Sichere Client-Server-Kommunikation über jeden Port (mit und ohne SafeLinx)
- Absicherung von Daten in lokalen Replikaten
- Den Client von nicht vertrauenswürdigem Code schützen
- Bei Sicherheitsupdates auf dem Laufenden bleiben
UPGRADING FROM ORACLE ENTERPRISE MANAGER 10G TO CLOUD CONTROL 12C WITH ZERO D...Leighton Nelson
A step-by-step description of using the 2-System Method to upgrade from Oracle Enterprise Manager 10g to Enterprise Manager Cloud Control 12c while upgrading database and migrating platforms with near zero downtime.
On September 8, 2020 Andy Higgins and Heather Hottenstein presented Integrating HCL Domino and Microsoft 365 at DNUG. This was an upgraded presentation from the one they did in Boston at Collabsphere 2019, discussing technology that has been introduced in the last year.
For more information reach out to info@rprwyatt.com or visit rprwyatt.com
Planning & Completing An IBM Connections UpgradeGabriella Davis
Presentation from ICON UK in London Sept 2015 on approaches to upgrading IBM Connections whether it's a WebSphere iFix, TDI, DB2 or the Connections applications themselves
MES102 - Verse on Premises 2.0 Best PracticesDylan Redfield
In July 2020 Verse on Premises 2.0 was released, delivering a slew of new features. And when V12 of Notes and Domino ships, iNotes will be officially deprecated in favor of VoP. Join me to learn about the functionality that VoP 2.0 brings. Additionally, learn about deployment and administrative best practices to ensure your VoP offering meets your user’s needs.
What We Wish We Had Known: Becoming an IBM Connections AdministratorGabriella Davis
Presentation on IBM Connections given by Gab Davis and Paul Mooney at IBM Connect 2014. In this session we shared our experiences of Connections as administrators and what we feel is useful information for every admin to know.
Domino V10 and How to Get There - IBM Think 2019Dylan Redfield
Domino V10 is here and organizations are trying to prepare a strategy to best optimize the new available features. With a wide range of powerful new enhancements and features, implementations can quickly get overwhelming for an IT manager. Before IT managers roll out Domino 10, its crucial to have a firm understanding of the overview of these exciting new offerings. In addition, an in-depth plan must be established with a main goal of not disrupting current business workflows. This session with help establish a high level of understanding for the entire overview of new offerings and enhancements in Domino 10. A main focus will be placed on migration strategies that will reduce disruption of business workflows.
INF107 - Integrating HCL Domino and Microsoft 365Dylan Redfield
Is your organization flirting with a move to Microsoft 365? Or are you managing an infrastructure that includes both Domino servers and Microsoft 365 cloud services? As Microsoft 365’s footprint grows, many HCL Domino environments are finding the need for the two technologies to coexist. This session will discuss best practices, native options and third-party tools to allow the two environments to work together, ultimately reducing your overhead and allowing your users to be productive. Just because you are running dual environments, does not mean you have to duplicate efforts to manage them. Let us give you tips on how to save time and give your users a cohesive experience.
AdminP is an elementary server task for your IBM Lotus Domino Administration. This session explains which administration processes are available and how those can make your day-to-day administration tasks easier. We will cover the best practices for setup and troubleshooting using AdminP, in projects like recertifications and server consolidations.
IBM Connect 2016 - 60+ in 60 - Admin Tips Power HourChris Miller
See the full slides at http://idonot.es/60in60for2016
With a guaranteed minimum of 60 administration tips in 60 minutes you will walk out with a list of items to immediately help you tune your collaboration environment. Covering IBM Domino, Sametime, Connections, Traveler and more will have you eager to get back and implement some of the ideas. We will take best practices from the my SocialBizUg Admin Tips newsletter, customer case stories and other best practices. Have no fear, we will move faster that you can write so everything will be available for you to download. This is an ode to the hundreds of tips brought to you by the letters M and G (Mooney and Gab) over the years.
Best Practices for Installing IBM Verse on PremisesTimsterC
IBM's local edition of Verse for email is hitting many enterprises. If you have not yet tried this out for yourself, then come and find out just how easy it is.Learn the tips and tricks that go into a successful deployment with a hands-on demo of the places to look out for and the finished product.We'll also show the integrations with Connections Files, Profiles and Box.
1084: Planning and Completing an IBM Connections UpgradeGabriella Davis
So we have IBM Connections installed, but now it’s time to consider what and when to update. It could be a WebSphere fix or a DB2 fixpack, a new application, or database scheme. Some updates are for security, some for performance and some for new features. In this session we'll discuss how you can decide when and what to upgrade, how to plan for and perform a safe upgrade, test when it’s complete and what things can trip you up along the way. All of this is based on lessons learned over hundreds of deployments.
Harness the power of XPages in Lotus Dominodominion
One of the latest additions to the Domino Web developers\' toolkit of technologies,
XPages, is also arguably its most powerful and revolutionary to date. XPages allows
for functionality and capabilities previously thought impossible to achieve in Domino
application development.
engage 2019 - 15 Domino v10 Admin features we LOVEChristoph Adler
Domino 10 shipped jam-packed with new features that will make administrators' lives a breeze. In this talk, we'll share everything we know and love about our 15 new favorites—from the long-awaited NSF size limit boost, to brand-new gems like Domino General Query Facility (DGQF), deletion logging and more. You'll learn how to get the most out of all of them, proven through practical customer examples. You'll walk away from this fast-paced, in-depth session with a solid understanding of the new way to administer Domino 10, as well as a hands-on guide to properly put these great features to use!
IBM Connect 2014 BP103: Ready, Aim, Fire: Mastering the Latest in the Adminis...Benedek Menesi
This session has been presented in the Best Practices track at the IBM Connect conference in Orlando, FL, USA, January 2014.
--
Being armed with the newest set of weapons is crucial for not being left behind when it comes to efficiently administering your servers. The number of new features added to recent IBM releases is staggering, yet workload time constraints cause us to stick to our old ways of doing things despite the opportunity to increase our effectiveness and thereby efficiency. In this in-depth, problem/solution formatted session we’ll discuss some of the latest and greatest features for administering IBM Domino, IBM iNotes and IBM Traveler through customer examples and real world scenarios. We’ll share best practices that allowed us to successfully solve architecture challenges in critical areas such as security, mail routing, replication, web/mobile capabilities and more.
Bewährte Praktiken für HCL Notes/Domino-Sicherheit Teil 1: Der Notes-Clientpanagenda
Aufnhame: http://pan.news/20210316_DE
Abstract: Mussten Sie in Ihrem Unternehmen kurzfristig Änderungen vornehmen, um Ihren Mitarbeitern Telearbeit zu ermöglichen? Damit sind Sie nicht allein. Eine große Anzahl von Menschen arbeitet derzeit von zu Hause aus. Dennoch benötigen sie Zugriff auf Informationen, die hinter den Firewalls des Unternehmens gespeichert sind. Außerdem bewahren sie viele dieser Daten auf Geräten auf, die sich außerhalb Ihrer Kontrolle befinden und anfällig für Verlust und Diebstahl sind.
Aber sind Unternehmen darauf vorbereitet, auf unbestimmte Zeit so weiterzumachen? Die Aufmerksamkeit verlagert sich nun zu Recht auf Sicherheitsthemen. Fernarbeit entwickelt sich momentan von einer temporären zu einer dauerhaften Lösung. Nahezu alle Unternehmen beschäftigen sich jetzt die damit verbundenen Sicherheitsrisiken.
HCL Notes hat den wohlverdienten Ruf, eine felsenfeste Plattform zu sein. Sie wurde speziell für diese Szenarien entwickelt. Allerdings muss Notes richtig konfiguriert werden, um von den leistungsstarken Sicherheitsfunktionen zu profitieren.
Die Schlüsselfrage ist die folgende: Sind Sie SICHER, dass Sie nicht etwas in IHRER Umgebung übersehen haben?
Wir stellen die besten Sicherheitsmaßnahmen für Notes-Clients vor. Und es wird garantiert nicht langweilig werden. Also, auf geht's, damit wir alle sicher durch das Jahr 2021 und darüber hinaus kommen.
Was Sie in diesem Webinar erwartet:
- Die Grundlagen der Sicherheit für Ihre Notes- und Nomad-Clients
- Sichere Client-Server-Kommunikation über jeden Port (mit und ohne SafeLinx)
- Absicherung von Daten in lokalen Replikaten
- Den Client von nicht vertrauenswürdigem Code schützen
- Bei Sicherheitsupdates auf dem Laufenden bleiben
UPGRADING FROM ORACLE ENTERPRISE MANAGER 10G TO CLOUD CONTROL 12C WITH ZERO D...Leighton Nelson
A step-by-step description of using the 2-System Method to upgrade from Oracle Enterprise Manager 10g to Enterprise Manager Cloud Control 12c while upgrading database and migrating platforms with near zero downtime.
Learn Red Hat Enterprise Linux 7.1 for IBM z Systems by Examples. This session shows what's new in the installation method, systemd management, rescue mode and how to use the automatic LUN scanning for NPIV FCP devices.
This is the document which explain the step by step procedure to upgrade PowerVC from 1.3.0.2 to 1.3.2.0. I've added useful information in the documents.
The Linux audit framework as shipped with many Linux distributions system provides a framework that reliably collects information about any security-relevant events. The audit records can be examined to determine whether any violation of the security policies has been committed, and by whom. Linux audit helps make your system more secure by providing you with a means to analyze what is happening on your system in great detail. It does not, however, provide additional security itself—it does not protect your system from code malfunctions or any kind of exploits. Instead, Audit is useful for tracking these issues and helps you take additional security measures to prevent them. This session provides a basic understanding of how audit works, how it can be set up, and how to use various utilities to display, query and archive the audit trail and how Linux Audit can be part of any overall Defense in Depth strategy.
Inspection and maintenance tools (Linux / OpenStack)Gerard Braad
This handout is part of the training at UnitedStack and will introduce you to several inspection and maintenance tools.
It is generated from the slides at: http://gbraad.gitlab.io/tools-training/
Source: https://gitlab.com/gbraad/tools-training
2008-07-30 IBM Teach the Teacher (IBM T3), Red Hat Update for System zShawn Wells
Red Hat Update at IBM Teach the Teacher (IBM T3) Conference in Endicott, NY. Covering Red Hat's community development model, System z announcements, SELinux, SCAP, and Red Hat Network Satellite for Systems Management.
Engage 2016 - Adm01 - Back from the Dead: When Bad Code Kills a Good ServerBill Malchisky Jr.
It's Friday and a new customer calls. Their mission critical app is taking :05 to open documents and the users are quite concerned. Where do you start when handed a 20 year old application you have never seen, on a server you barely know? Join two IBM Champions as they dissect a complex Domino performance problem from both the administration and development side to provide a complete customer solution. The session includes best practices around problem solving techniques and a checklist you can use internally to solve quickly problems you encounter.
Linux School: Advanced Administration for IBM SoftwareBill Malchisky Jr.
We've covered the basics before, now let's deep dive and get to the advanced items. We'll quickly review partition approaches, then demo many command line tools and skills that can help save you time with your Linux installation and maintenance tasks -- customized for IBM/Lotus software. Tips, knowledge, techniques, and as much information as I can provide in an hour. This is a new session for the IBM/Lotus Community, debuted at Engage User Group, in Breda, The Netherlands.
Infrastructure Fitness and Design Simplicity for IBM Mobile ConnectBill Malchisky Jr.
Given at IBM Connect 2013, 31 January 2013
Most companies are unaware of IBM Mobile Connect - the hidden authentication jewel in the IBM Collaboration portfolio. No matter if you want to start with it or if you've learned in last year's conference how to setup IBM Mobile Connect - it's now time for optimization and tuning. This session will provide you a deep dive on different installation considerations and deployment design. Join to get real-world information about topics like how to install IMC on Linux 64bit, specific problems of different operating systems and how to setup IMC in High Availability. Last but not least we'll introduce to you the new capabilities of IMC 6.1.5 which enable it to be used with Sametime Mobile, Connections Mobile and Traveler High Availability.
Considering The Cloud? Thinking Beyond The Readme FileBill Malchisky Jr.
As the Cloud computing's popularity continues to climb, should your firm become an adopter? If so, what architecture model is best for your firm? Do you know the queries to pose that can aide your business in making an informed decision? This session's focus is to reduce the set of unknowns that can create buyer's remorse. Learn to ask the direct revealing questions that normally do not get raised unless you have a skilled advisor at your side.
The Ultimate IBM and Lotus on Linux Workshop for Windows AdminsBill Malchisky Jr.
Linux is quite simple to learn and understand when you have proper comprehension of the fundamentals. So let's teach attendees about the insights into administering a Linux server, allowing you to manage your IBM/Lotus applications with ease. You will receive highlights of the full training course Bill teaches his clients: application install tips, Linux shell techniques, basic scripting, and your questions answered throughout the class.
Given at Midwest LUG 2012 and UKLUG 2012
Management Track edition. Addressing objections to moving to a Linux desktop, which users should be targeted, and how to save money with a Linux Desktop running Lotus Software, including Notes, Sametime.
http://tinyurl.com/5sq2cbz
The need for Lotus admins to assist across intra-company teams while ensuring regulatory compliance is increasing. Whether your firm received a disclosure motion from district attorney, is being sued, or is concerned about either internal litigation or future actions, register for this session. Will your company be ready? Are your response measures taking too long? Will you be able to meet your goals? Join Bill as he provides a brief foray into the area of compliance and data management while providing tips to enhance your implementations. If you've never thought about this topic, or are having internal discussions, tune-in for some exciting and important information.
Lotusphere2010 presentation, session ID: SMART203; learn how to increase your ROI by 30% and decrease your TCO by 50% with Smart Work tools from IBM -- one of the four component of their Smarter Planet initiative.
Covers the IBM - Lotus commitment to Linux and ways a business customer can create business saves by running their supported Lotus product offerings on Linux. Includes a few admin tips and tricks too.
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...UiPathCommunity
💥 Speed, accuracy, and scaling – discover the superpowers of GenAI in action with UiPath Document Understanding and Communications Mining™:
See how to accelerate model training and optimize model performance with active learning
Learn about the latest enhancements to out-of-the-box document processing – with little to no training required
Get an exclusive demo of the new family of UiPath LLMs – GenAI models specialized for processing different types of documents and messages
This is a hands-on session specifically designed for automation developers and AI enthusiasts seeking to enhance their knowledge in leveraging the latest intelligent document processing capabilities offered by UiPath.
Speakers:
👨🏫 Andras Palfi, Senior Product Manager, UiPath
👩🏫 Lenka Dulovicova, Product Program Manager, UiPath
Securing your Kubernetes cluster_ a step-by-step guide to success !KatiaHIMEUR1
Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster.
However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks.
In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.
Key Trends Shaping the Future of Infrastructure.pdfCheryl Hung
Keynote at DIGIT West Expo, Glasgow on 29 May 2024.
Cheryl Hung, ochery.com
Sr Director, Infrastructure Ecosystem, Arm.
The key trends across hardware, cloud and open-source; exploring how these areas are likely to mature and develop over the short and long-term, and then considering how organisations can position themselves to adapt and thrive.
The Art of the Pitch: WordPress Relationships and SalesLaura Byrne
Clients don’t know what they don’t know. What web solutions are right for them? How does WordPress come into the picture? How do you make sure you understand scope and timeline? What do you do if sometime changes?
All these questions and more will be explored as we talk about matching clients’ needs with what your agency offers without pulling teeth or pulling your hair out. Practical tips, and strategies for successful relationship building that leads to closing the deal.
Essentials of Automations: Optimizing FME Workflows with ParametersSafe Software
Are you looking to streamline your workflows and boost your projects’ efficiency? Do you find yourself searching for ways to add flexibility and control over your FME workflows? If so, you’re in the right place.
Join us for an insightful dive into the world of FME parameters, a critical element in optimizing workflow efficiency. This webinar marks the beginning of our three-part “Essentials of Automation” series. This first webinar is designed to equip you with the knowledge and skills to utilize parameters effectively: enhancing the flexibility, maintainability, and user control of your FME projects.
Here’s what you’ll gain:
- Essentials of FME Parameters: Understand the pivotal role of parameters, including Reader/Writer, Transformer, User, and FME Flow categories. Discover how they are the key to unlocking automation and optimization within your workflows.
- Practical Applications in FME Form: Delve into key user parameter types including choice, connections, and file URLs. Allow users to control how a workflow runs, making your workflows more reusable. Learn to import values and deliver the best user experience for your workflows while enhancing accuracy.
- Optimization Strategies in FME Flow: Explore the creation and strategic deployment of parameters in FME Flow, including the use of deployment and geometry parameters, to maximize workflow efficiency.
- Pro Tips for Success: Gain insights on parameterizing connections and leveraging new features like Conditional Visibility for clarity and simplicity.
We’ll wrap up with a glimpse into future webinars, followed by a Q&A session to address your specific questions surrounding this topic.
Don’t miss this opportunity to elevate your FME expertise and drive your projects to new heights of efficiency.
GraphRAG is All You need? LLM & Knowledge GraphGuy Korland
Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs.
1. Unifying Large Language Models and Knowledge Graphs: A Roadmap.
https://arxiv.org/abs/2306.08302
2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs:
https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Elevating Tactical DDD Patterns Through Object CalisthenicsDorra BARTAGUIZ
After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!
Connector Corner: Automate dynamic content and events by pushing a buttonDianaGray10
Here is something new! In our next Connector Corner webinar, we will demonstrate how you can use a single workflow to:
Create a campaign using Mailchimp with merge tags/fields
Send an interactive Slack channel message (using buttons)
Have the message received by managers and peers along with a test email for review
But there’s more:
In a second workflow supporting the same use case, you’ll see:
Your campaign sent to target colleagues for approval
If the “Approve” button is clicked, a Jira/Zendesk ticket is created for the marketing design team
But—if the “Reject” button is pushed, colleagues will be alerted via Slack message
Join us to learn more about this new, human-in-the-loop capability, brought to you by Integration Service connectors.
And...
Speakers:
Akshay Agnihotri, Product Manager
Charlie Greenberg, Host
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf91mobiles
91mobiles recently conducted a Smart TV Buyer Insights Survey in which we asked over 3,000 respondents about the TV they own, aspects they look at on a new TV, and their TV buying preferences.
5. ● If you do anything that causes you or your
company harm with what you see here,
neither the presenter nor anyone connected
with the conference is responsible
● But, my services are available to assist if you
need help. :-)
Disclaimer
6. Many of the new features of
RHEL 7.x are provided through
open source projects Red Hat
does not run
Thus, they inherit the work and
the changes
Important Notation
7. This is consistent across all versions
− Handy if you are touching a box built
by another admin
− Or if you suspect your documentation
is incorrect/incomplete
Finding the Current Release (Good)
8. The redhat-release file can be edited to
install some third party apps,
destroying accuracy
Instead, doublecheck with RPM
But… This is Better
10. ● Domino on Docker will be built
on CentOS
A Linux only offering
● Release target is Oct 10, 2018
● Support to provide best effort
for CentOS
A Few Useful Tidbits on Domino 10 Linux
11. ● Tips and opinions for changes to
file locations, filesystem sizing,
memory requirements all remain
under NDA—-as of this writing
● When I can discuss the details, I
will update——-if needed——-my
previous recommendations on
filesystem partitioning for IBM
software plus planning
particulars
Domino 10 Installation Status
13. ● Ext4 now supports 50TB file system size
Previously, 16TB
● XFS is the default FS
− Automatically assigned to / via Anaconda
− Very difficult to resize an XFS
filesystem
− Best for partitions > 50TB; up to 500TB
● The directories /bin, /sbin, /lib, and /lib64
are now nested under /usr.
Filesystem Changes in RHEL 7
14. Red Hat offers Preupgrade Assistant
− Assesses the current system
− Provides list of potential issues
“An in-place upgrade requires a lot of troubleshooting and planning and
should only be done if there is no other choice.”
--RHEL 7 Installation Guide, Chapter 3, “Planning for Installation...”
In-place Upgrade vs. Clean Install
15. In case the last slide wasn't clear... go clean!
preupgrade-assistant risk check found EXTREME risks
for this upgrade.
Run preupg --riskcheck --verbose to view these risks.
Continuing with this upgrade is not recommended.
In-place Upgrade vs. Clean Install (2)
19. RHEL7 provides new terminology to
better capture what technology
offers
Old Term New Term
Runlevels Target units
Tasks Units
init scripts Systemd service units
Updated Linux Lexicon
20. Good News on Transitioning
To ease into the new terminology and
system commands, systemd will accept
——-for now——-the RHEL6 command set
Examples:
1. service
2.chkconfig
3. runlevel
4.init
# chkconfig cups on
Note: Forwarding request to 'systemctl enable cups.service'.
Source: “Overview of systemd for RHEL 7” https://access.redhat.com/articles/754933
21. ● RHEL7 utilizes firewalld
● New Dynamic Firewall
● Project homepage: http://www.firewalld.org/
● Beginners Guide
https://www.certdepot.net/rhel7-get-
started-firewalld/
● Red Hat's Thomas Woerner's Training Video
https://www.youtube.com/watch?
v=XhwvT05Puhs
Security Changes: Bye, Bye iptables
22. ● “Why am I having network problems after
firewalld is restarted?”
https://success.docker.com/article/why-am-
i-having-network-problems-after-firewalld-
is-restarted
● With systemd, firewalld starts before Docker
● “If you start or restart firewalld after
Docker, you need to restart the Docker
daemon to enable the iptables rules again.”
Docker Conflict with firewalld & systemd
23. Firewalld can be disabled for iptables
− CertDepot has an article with the full
command set to install iptables, enable it,
and disable the firewalld unit
− https://www.certdepot.net/rhel7-disable-
firewalld-use-iptables/
Falling Back to iptables
24. If “rescue” appears on kernel
command line, system automatically
enters rescue mode
(rescue.target or runlevel 1)
Remember — New Boot Behavior
25. • Check overall system state
#systemctl is-system-running
• List installed timer units with elapse next
#systemctl list-timers
• Display unit's original unit file to display
full configuration
#systemctl cat {unit_pattern}
Useful Commands in systemd 219
26. Source: systemctl man page
Help — systemctl Output Table
systemctl is-system-running command states
28. A few thousand lines of files displayed
Running the update command
(Future reference)
Checking for any available security updates
How to Install Just the Security Updates
31. A few useful commands: list, status, attach
Red Hat transitioned to Red Hat Subscription Management (RHSM) for
all Red Hat products July 31st, 2017
Subscription Management Creates Simplicity
32. ● Basic Registration with or without
parameters
#subscription-manager register --username
<username> --password <password>
● List all available subscriptions
#subscription-manager list --available –all
● Attach to appropriate subscription
− #subscription-manager attach –-auto
OR
− #subscription-manager attach –pool=<poolID>
Three Fundamental RHSM Commands
33. List all available subscriptions
[root@server1 ~]# subscription-manager list --available
+-------------------------------------------+
Available Subscriptions
+-------------------------------------------+
ProductName: RHEL for Physical Servers
ProductId: MKT-rhel-server
PoolId: ff8080812bc382e3012bc3845ca000cb
Quantity: 10
Expires: 2011-09-20
Footnote: Output provided via the Red Hat Subscription Manual, Section 4.3.1
“How Do I Find My Pool ID?”
34. Two key directory paths where
confirmation information is stored:
− /etc/pki/{consumer, entitlement, product}/*.pem
− /etc/rhsm/{rhsm.conf, facts/}
Key RHSM Directories
35. Red Hat provides three convenient
ways to attach your server to a
subscription certificate
kickstartfirstboot
Manually run
RHSM
Red Hat
Subscription
Registration
Registering Your New Server Three Ways
38. Relevancy: post version 1.1.9-1, attach
supersedes the now deprecated
subscribe
Determining the RHSM Version
39. • Access via
-h or
–-help
• Attach and
Register
offer the
most
options
Subscription Manager Notation — Help
Primary Subscription Manager commands
provide sub-commands
40. Powerful option: attach's -–quantity command
− Allows assignment for multiple subscriptions
to cover multi-socket servers
− [root@server1 ~]# subscription-manager
attach --pool=XYZ01234567 –-quantity=2
Footnote: Output provided via the Red Hat Subscription Manual, Section 4.4
Handling Multiple Socket Servers
41. • Two Quick Use Cases
1. Sans Internet access, you are unable to
access Red Hat's subscription server
2. Allocate a license before installation
• Solution
Easy, with import
− Get subscription file (.pem) via Customer Portal
− Run this command:
− # subscription-manager import --certificate {/path/to/
file.pem}
– # subscription-manager import --certificate=/root/certs/
607687452896356798.pem
– Successfully imported certificate 607687452896356798.pem
My (Pre-Prod) Server is Not Online Yet
42. Recycling Subscriptions is easy – ensure you
use the correct method
− Remove expunges the subscribed
certificate(s) assigned to the system,
BUT keeps it registered with RHSM
− Unregister removes and deletes the
system's registration record
Removal vs. Unregister
43. ● Each registered product provides an
identifying X.509 certificate
/etc/pki/entitlement/<serial_number>.pem
● To remove a product's subscription, use the
above certificate(s)' respective serial
number(s)
If a product's serial number is “527”, then:
− #subscription-manager remove –-serial=527
− #subscription-manager remove –-all
Precise Removal
44. ● #subscription-manager list
No installed products to list
● Check to ensure /etc/pki/product-default has a respective .pem file
● Ensure file permissions of 644 are set, with root:root
Error: “No Installed Products Found”
• You can also verify the RHSM log file:
/var/log/rhsm/rhsm.log
45. One of the best methods to learn
about RHSM is to RTFM
$man subscription-manager
Finally, to Acquire Additional Information
47. Creating systemd Jargon Lucidity
Name Function
systemd The system and service manager
Controls start, stop, and management of services
Collection of daemons, utilities, targets, libraries,
and core programs
Grown to be much more than an init service
systemdctl Command to query/manage systemd actions
48. ● Is backwards compatible with SysV init scripts
● On-demand daemon activation
● System state snapshots
● Never loses initial log messages
● Kills all service components cleanly
● Server boots faster
− Uses fewer scripts
− Increased task (unit) parallelization
• Requires more reboots for patch installation than previously
“What Does systemd Do For Me?”
49. ● Systemd uses binary log files
● Binary logs can become corrupted
Cases of/references to systemd log
corruption found online
● Backup the systemd Journal frequently
to avoid pain later
Safety Tip
50. Path Provides
/etc/systemd Global systemd configuration
/etc/systemd/system/ Systemd unit files created by
systemctl enable, plus administrator
created and managed units
Supersedes runtime units (/run/
systemd/system)
/run/systemd/system/ Systemd units created at runtime
/usr/lib/systemd/system Service configuration files
/etc/systemd/system Custom service configuration files
/usr/lib/systemd/system/ RPM packages' distributed units
Systemd’s Distributed File Locations
51. Command Provides
# systemctl --version Systemd version
# systemctl start sshd Start a service
# systemctl stop sshd Stop a service
# systemctl {enable,
disable} sshd
Enable/disable a service at boot
# systemctl status sshd Display current sevice status
# systemctl status --all Display status for all status
Note: You can also include the .service extension above
Use systemctl for System Interactions
Basic command set for systemctl
52. Command Provides
# systemd-analyze Startup/boot-up duration
# systemd-analyze critical-
chain [<app>.service] |
[unit.target]
Linked list of boot-time tasks &
times; examples -
service = rcdomino.service
target = basic.target
# systemd-analyze dump Provides long human-readable
serialization of boot process
Advanced Analysis Queries
Basic command set for systemd-analyze
54. The previous slide's robust table provided via:
RHEL 7 System Administration Guide, Table 8.1
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/
html/System_Administrators_Guide/chap-
Managing_Services_with_systemd.html#tabl-Managing_Services_with_systemd-
Introduction-Units-Types
Available systemd Unit Types — Attribution
55. Use the following command:
#systemctl
Displaying Currently Active Units
56. It’s a long list. Here is the concluding output
Displaying Currently Active Units (2)
57. Use the following command:
#systemctl list-unit-files
Determining Installed Units
Note: systemctl
command output
now pipes into
more
58. “You thought that was fast? I thought it was
fast. Well was it?” —Annabelle in Maverick
RHEL 7.2
RHEL 7.5
Boot Process Time Check
59. Note: Some output can provide a false positive as time may be dependent upon socket
activation and unit parallel execution
Boot Process Critical-Chain Time Check
63. Creating Journal Jargon Lucidity
Name Function
Journal New systemd log file
journald The Journal service (daemon)
journalctl Tool allowing access to the Journal logs
64. • Systemd manages the RHEL7 system log
through the Journal component
− Written via systemd-journald.service
− Run #journalctl
• Notations
− Listed time stamps converted to local time zone
of your system
− Beginning of a boot is tagged for parsing
− Color coded fonts for errors, warning, and
notices
Searching the systemd Journal
65. ● Print recent sshd entries, refresh as written
#journalctl `which sshd` -f
● Print most recent 100 lines
#journalctl -n 100
● Reverse display order
#journalctl -r
● List time-based subset
− #journalctl --since=yesterday
− From previous boot: #journalctl -b
Only helpful if just recently booted
Useful Journald Query Commands
66. ● Display recent boots
#journalctl -–list-boots
● Display all messages for current
user or system
− #journalctl –-user
− #journalctl --system
Useful Journald Query Commands (2)
67. ● Filter by priority
− #journalctl -p {emerg, alert, crit, err, warning,
notice, info, debug}
− #journalctl -p crit
● Filter by (output) forms
#journalctl -o {14 values}; eg. verbose, export, json
● Filter by log fields: $man system.journal-fields for a list
− #journalctl -F {fieldname}
− #journalctl fieldname={value}
● Combine queries for surgical precision
#journalctl —p warning --since=“2018-7-25 01:00:00”
● Live feed - last ten lines in real-time
#journalctl -f
Useful Journald Query Commands (3)
68. ● Data stored in /run/log/journal
But are purged after each reboot
● If permanency is desired – one way is below:
− #mkdir /var/log/journal
− #echo “SystemMaxUse=75M” >> /etc/systemd/
journald.conf
● Append the parameter to the journald.conf file
● You could use vi as well to append the line
− #systemctl restart systemd-journald
Journal Useful Tips
69. Journald provides a simple command:
#journalctl –-disk-usage
Let’s See How Big the Journal Is
71. ● CollabSphere contains great content via its sessions
● Two such cases discuss Docker Containers
1. IS101 - Adopt Domino running in Docker Containers
by Slobodan Lohja
2. IS102 - An Introduction to Configuring Domino for
Docker by Gabriella Davis
● Thus, this section provides an OS level taste
Stating the Section’s Scope
72. What are they?
Source: “What are Linux containers?”, Red Hat site article
https://www.redhat.com/en/insights/containers
Linux® containers keep applications and their runtime
components together
by combining lightweight application
isolation with an image-based deployment method.
Containers package applications with the files
on which they depend. This reduces the friction between
development and operations, simplifies application deployment,
and accelerates delivery
cycles—allowing
you to deliver value to customers faster.
Containers Conundrum
73. Let’s Get Visual
Source: “What are Linux containers?”, Red Hat site article
https://www.redhat.com/en/insights/containers
74. Collaborate Compose Modernize
Dev and Ops get
apps in prod faster
Enables microservices
deployment and recycling
Avoid maintaining
physical environments
with traditional
applications
Mobile, Social, Web, Cloud
All make good deployment candidates
Three Ways Containers Can Help Admins
Source: “What are Linux containers?”, Red Hat site article
https://www.redhat.com/en/insights/containers
75. Just because an application is contained,
does not imply it is secure...
“Security is just as important
Inside a container as
it is anywhere else
in your Infrastructure.”
--Josh Bressers
Red Hat
Security Strategist
Source: “What are Linux containers?”, Red Hat site article
https://www.redhat.com/en/insights/containers
Security is of the Utmost Importance
76. ● Buildah – fully supported now
Simplifies Docker container image creation
● OverlayFS: Docker container storage default
● Kubernetes RPMs, container images, plus
docker-latest package deprecated
See Red Hat OpenShift for full support
Footnotes: Red Hat –
https://rhelblog.redhat.com/2018/04/10/container-related-changes-in-red-hat-
enterprise-linux-7-5/
https://www.redhat.com/en/resources/The-Business-Value-of-Red-Hat-OpenShift
There Are Container Changes in RHEL 7.5
78. ● RHEL6+ you are required to create
a user with firstboot
● User attributes are minimized
● Solution: create an ephemeral
account
● Login as root
● Create new accounts properly
● Expunge the ephemeral account
Mandatory User Account Creation at Install
79. Use findmnt to locate a new filesystem
● e.g. USB drive, second HDD
● $findmnt
Finding Mounted Hardware
80. ● Primary vendor documentation
http://partnerweb.vmware.com/GOSIG/
RHEL_7.html
● VMware Knowledge Base articles on RHEL7
https://kb.vmware.com/s/global-search/
%40uri#q=%22rhel%207%22&sort=relevancy
VMware Tips
82. ● Understanding Linux Filesystems: ext4
and Beyond
https://opensource.com/article/
18/4/ext4-filesystem
● XFS and Other File Systems in Red
Hat Enterprise Linux 7
https://access.redhat.com/articles/
796293
Understanding Linux Filesystems: ext4 and Beyond
83. ● Migration from EXT4 to XFS
https://access.redhat.com/documentation/en-us/
red_hat_enterprise_linux/7/html/
storage_administration_guide/migrating-ext4-
xfs#differences-ext4-xfs
● Appendix E. Reference Table for ext4 and XFS
Commands
https://access.redhat.com/documentation/en-us/
red_hat_enterprise_linux/7/html/
installation_guide/appe-ext4-to-xfs-command-
reference
Understanding Linux Filesystems: ext4 and Beyond (2)
84. “New Red Hat Enterprise Linux 7
Security Feature: systemd-journald”
https://access.redhat.com/blogs/
766093/posts/1976263
Security: systemd-journald vs. syslog
85. systemd Cheat Sheet for Red Hat
Enterprise Linux 7
https://access.redhat.com/
articles/systemd-cheat-sheet
A Great systemd Command Reference
86. ● Containers, Microservices, and
Orchestrating the Whole Symphony
https://opensource.com/business/14/12/
containers-microservices-and-
orchestrating-whole-symphony
● Red Hat Experts Author The Containers Blog
http://rhelblog.redhat.com/tag/containers/
Container Enablement
87. “Securing Containers Before They
Take Over the World” – The Stack
https://thestack.com/security/
2016/01/21/red-hat-insider-
securing-containers-before-
they-take-over-the-world/
Container Security
88. Performance Tuning View CertDepot
https://www.certdepot.net/rhel7-
apply-tuning-profile-server/
Red Hat Server Tuning Profiles
89. Red Hat offers a nice step-by-step
guide here
https://access.redhat.com/
documentation/en-US/
Red_Hat_Enterprise_Linux/7/
html/Installation_Guide/sect-
making-usb-media.html
Need Help Burning an ISO Image to USB
90. • Co-founder of Linuxfest at Lotusphere/Connect
• Speaker at 40+ Lotus®/IBM® LUGs/Conferences
• Co-authored two Linux IBM Redbooks
• IBM Champion for Collaboration Solutions
2018, 2017, 2016, 2015, 2014, 2013, 2011-2012
• Linux aficionado
Quick Background