Older blog entries for amits (starting at number 108)

Let’s Encrypt on OpenShift

Let’s Encrypt have lauched their public beta, and they’re now offering SSL certificates to everyone.  The process is very easy and quite easy to automate.  However, there’s a catch: these certificates expire in a few days (90 days as of now), so they have to be renewed often.  That’s where having the process be simple and automatable helps.

OpenShift doesn’t yet have a way to automate SSL certificate installs; so adding an SSL cert to this blog is going to be a manual process every few days.  I’m on the OpenShift silver tier (not yet available in my region, but it’s a perk available to Red Hat employees), so I get to attach a custom cert to my site.

Here’s what I did to get an SSL cert for this blog and enable it: installed the letsencrypt package from the Fedora repos, and ran this command:

$ letsencrypt --text --email=<email-id> --domains log.amitshah.net --agree-tos --renew-by-default --manual certonly --config-dir ~/.letsencrypt/etc --work-dir ~/.letsencrypt/var-lib/ --logs-dir ~/.letsencrypt/var-log/

I had to verify that I actually own the log.amitshah.net domain, so I logged into the OpenShift instance and created a file there as instructed by the prompts during the above command.

This article on the Fedora Magazine has more detail on the letsencrypt command.  I gave custom paths for the log, work, and config dirs, as I didn’t want to run the tool as root.

That’s it; I had the certs available in ~/.letsencrypt/etc/.  I then went to the OpenShift Online web console and uploaded the files there, and SSL was instantly available on the site.

Syndicated 2015-12-16 11:25:51 (Updated 2015-12-16 11:35:11) from Think. Debate. Innovate.

30 Years of GNU and Software Freedom Day

It’s 30 years of GNU — 30 years of freedom and 30 years of owning one’s computers. I can’t imagine a life where I don’t have control over the software I run. I’m going to be eternally thankful to RMS and Linus for starting the mass movements that have not only transformed an entire industry, but also shaped my thinking and my career.

A few Red Hatters (including yours truly) have shared stories of their first brush with free software here — give it a read, it’s a good trip down the memory lane, as well as some inspiring anecdotes from people who have been involved with free software for a really long time.

Here’s wishing everyone a liberating Software Freedom Day (Sep 19th), and many more years of freedom to everyone!

Syndicated 2015-09-18 17:48:45 from Think. Debate. Innovate.

7 Sep 2015 (updated 10 Sep 2015 at 17:06 UTC) »

QEMU Maintainers on the 2.4 Release

QEMU is the software that creates virtual hardware which guest operating systems run on top of.  All (well, almost all — see note below[*]) the hardware that a guest OS has access to is actually written to some specifications in software — i.e. no physical hardware is involved.  For the QEMU/KVM hypervisor, most of these devices are written in the QEMU source repository.  A few devices are part of the KVM code in the Linux kernel.  QEMU also handles a lot of host-specific stuff, like storage and networking for the virtual machines.

[* Exception: physical hardware devices assigned to guests.]

Many contributors to the QEMU and KVM projects meet at the annual KVM Forum conference to talk about new features, new developments, what changed since the last conference, etc.

The QEMU project released version 2.4 just a week before the 2015 edition of KVM Forum.  I thought that was a good opportunity to gather a few developers and maintainers, and get them on video where we can see them speak about the improvements they made in the 2.4 release, and what we can expect in the 2.5 release.