Vinicios Barretos viniciosbarretos

DevSecOps Maturity Model

DevSecOps has finally become popular within the wider IT industry in 2019. I started as a web developer in 2001, learned about testing automation, system deployment automation, and "infrastructure as code" in 2012, when DevOps was becoming a popular term. DevOps became common after the release of The Phoenix Project in Jan 2013. It has taken 7+ years for security to become integrated within the DevOps methodology. The following is a list of concepts I go through with project owners, project managers, operations, developers, and security teams, to help establish how mature their DevOps and security automation is, and to help them increase that maturity over time. This model is based on experience consulting with a variety of US Financial, Healthcare, and Department of Defense, organizations, and combines:

PCI DSS
NYDFS
[HITRUST CSF](https://hitrustalliance.net/product-tool/hitrus

Safest way to clean up boot partition - Ubuntu 14.04LTS-x64, Ubuntu 16.04LTS-x64

Reference

Case I: if /boot is not 100% full and apt is working

1. Check the current kernel version

$ uname -r

How to configure multiple deploy keys for different private github repositories on the same computer without using ssh-agent

Let's say alice is a github.com user, with 2 or more private repositories repoN. For this example we'll work with just two repositories named repo1 and repo2

https://github.com/alice/repo1

https://github.com/alice/repo2

You need to be to pull from these repositories without entering a passwords probably on a server, or on multiple servers.

VirtualBox Host-Only Static IP

My typical setup for a development box in VirtualBox uses two NICs. The first uses NAT to allow the box to communicate with the outside world through my host computer’s network connection. (NAT is the default, so shouldn't require any setup.) The second is a "host-only" connection that allows my host and guest to interact.

To create a host-only connection in VirtualBox, start by opening the preferences in VirtualBox. Go to the "Network" tab, and addd a Host-only Network. Modify the host-only network, and disable DHCP. Make a note of the IP address. (Feel free to set the IP address as well, if you like.)

Next, assign this host-only adapter to the virtual machine. Select the VM and press "Settings". Go to the "Network" tab, and select "Adpater 2". Enable the adapter, set it to a "Host-only Adapter", and select the adpater you created above.

	# best practice: linux
	nano ~/.pgpass
	:5432::username:password
	chmod 0600 ~/.pgpass

	# best practice: windows
	edit %APPDATA%\postgresql\pgpass.conf
	:5432::username:password

	# linux

	import boto3

	boto3.setup_default_session(profile_name='IAM')

	resource = boto3.resource('iam')
	client = boto3.client("iam")

	KEY = 'LastUsedDate'

	for user in resource.users.all():

	#!/bin/bash

	mkdir -p ~/.ssh

	# generate new personal ed25519 ssh keys
	ssh-keygen -o -a 100 -t ed25519 -f ~/.ssh/id_ed25519 -C "rob thijssen <rthijssen@gmail.com>"
	ssh-keygen -o -a 100 -t ed25519 -f ~/.ssh/id_robtn -C "rob thijssen <rob@rob.tn>"

	# generate new host cert authority (host_ca) ed25519 ssh key
	# used for signing host keys and creating host certs

	<?php
	/* Caveat: I'm not a PHP programmer, so this may or may
	* not be the most idiomatic code...
	*
	* FPDF is a free PHP library for creating PDFs:
	* http://www.fpdf.org/
	*/
	require("fpdf.php");

	class PDF extends FPDF {