cloud2030 the2030.cloud Podcast

We continue our TechOps series, this case diving deep and cheap into out of band management. One of the things about out of band management is that it quickly turns into an alphabet soup of protocol names, vendor names, specific pieces and even the way we talk about out of band management. We have different acronyms for the same action.

In this conversation. Greg Althouse reckons CTO and my co-founder explores lessons learned and things that you need to understand for technical details and a really core understanding of how to build BMC integrations.
We even cover why it's so hard to do this well. Even if you have no plans in ever touching an out of band interface, the architectural lessons will help you.

Transcript: https://otter.ai/u/Feahh05PQI-1fxVXDRuiFDkgt5M?utm_source=copy_url

System D is our topic for today discussing system processes, how do you manage and control processes, services, and fundamental components of Linux operating systems. In this discussion, we cover how to think about it, how it works, alternatives, process controls, and even how they get applied to containers.

Containers were a nice bridge from our previous discussions when we were talking about container management systems. If you are interested in Linux and Linux management, Linux automation, this is a good episode for you!

Transcript: https://otter.ai/u/KCK3f95lbUEAEzLgA60k-HbDlGk?utm_source=copy_url

Edge technology versus OT was the focus of discussion today, and in this conversation we cover infrastructure information technology versus operations technology, and the ongoing dilemma of edge sites specifically.

This includes factories, retail locations, data center technology and 10th standard cloud with operational tech. Operational tech being vendor locked, narrowly controlled siloed technologies versus general purpose technology. In this case, we're talking about OT as specific vendor locked islands of technology versus IP, which is multipurpose, multifunction shared infrastructure technologies.

This podcast addresses the tension and how to resolve it between those two technology approaches.

Transcript: https://otter.ai/u/8-ufJsQAb0yrCXkZTBoUM8Detdc?utm_source=copy_url

In the wake of the Baltimore Key Bridge collapse, we discuss how we can improve resilience in the systems that we manage.

DHCP PXE is our subject today. We cover UEFI BIOS and all of the things necessary to do network installs of servers. This incidentally includes thin clients, PCs and other network switches. Specifically, we talked about the process of having secure and robust network provisioning. We go through all the pieces that you need to know how the processes work, both in legacy and in modern current systems

Transcript: https://otter.ai/u/F1u-2ipyfIZ93yp5qdzcpArLtOg?utm_source=copy_url

This episode really highlights the danger of contributor burnout and overload. But it also shows that we're not very good as an industry at sustaining work.

Today we dissect what the XZ SSH intrusion attack is, how it happened, what the social engineering was, and the pressure that involved to make that happen.

Transcript: https://otter.ai/u/kRqADDwa6DmoZcnQEmqQD1UaxZ8?utm_source=copy_url

References
https://www.openwall.com/lists/oss-security/2024/03/29/4
https://news.ycombinator.com/item?id=39865810
https://arstechnica.com/security/2024/04/what-we-know-about-the-xz-utils-backdoor-that-almost-infected-the-world/