sysadmin
Detect security threats in real time
Falco is a cloud-native security tool designed for Linux systems. It employs custom rules on kernel events, which are enriched with container and Kubernetes metadata, to provide real-time alerts. Falco helps you gain visibility into abnormal behavior, potential security threats, and compliance violations, contributing to comprehensive runtime security.
Related contents:
- k8s-custom-detections @ GitHub.
- Réagir à temps aux menaces dans Kubernetes avec Falco (Rachid Zarouali, Thomas Labarussias) @ Voxxed Days Luxembourg's YouTube :fr:.
- Extending Falco for Bitcoin @ sysdig.
- Falcoctl: Artifact Management for Falco @ Cloud Native Computing Foundation.
- How Falco and Stratoshark close the gap between open source runtime detection and deep forensic analysis @ sysdig.
- Blueprinting Security in CI/CD: Building Trust Through Open Source @ CD Foundation.
- Episode #540 consacré à Falco @ NoLimitSecu :fr:.
Enterprise-grade open source web application firewall library. Coraza is an open source, high performance, Web Application Firewall ready to protect your beloved applications.
Podman is a daemonless container engine for developing, managing, and running OCI Containers on your Linux System. Containers can either be run as root or in rootless mode. Simply put: alias docker=podman.
Related contents:
- Replacing Kubernetes with systemd @ Yaakov's Blog.
- Auto-updating podman containers with systemd @ fedora Magazine.
- Connecter un conteneur Podman à Open vSwitch @ Nicolas Massé :fr:.
- Why I Ditched Docker for Podman (And You Should Too) @ Codesmash.
- Automatic container updates with Podman quadlets @ Major Hayden.
- podman : Utiliser podman comme docker avec les mêmes commandes @ Linuxtricks.fr :fr:.
- The Docker Alternative Most People DON'T KNOW @ CodeHead's YouTube.
- Grand saut dans le déploiement sur site d'un serveur LLM à moindres privilèges @ Synacktiv :fr:.
🐶 Kubernetes CLI To Manage Your Clusters In Style!
K9s is a terminal based UI to interact with your Kubernetes clusters. The aim of this project is to make it easier to navigate, observe and manage your deployed applications in the wild. K9s continually watches Kubernetes for changes and offers subsequent commands to interact with your observed resources.
IPAM IP address management software. phpipam is an open-source web IP address management application (IPAM). Its goal is to provide light, modern and useful IP address management. It is php-based application with MySQL database backend, using jQuery libraries, ajax and HTML5/CSS3 features.
Related contents:
The Machine Learning Toolkit for Kubernetes The Kubeflow project is dedicated to making deployments of machine learning (ML) workflows on Kubernetes simple, portable and scalable. Our goal is not to recreate other services, but to provide a straightforward way to deploy best-of-breed open-source systems for ML to diverse infrastructures. Anywhere you are running Kubernetes, you should be able to run Kubeflow.
Related contents:
XenServer Based, Community Powered. Turnkey Open Source Hypervisor. Based on XenServer, XCP-ng is the result of massive cooperation between individuals and companies, to deliver a product without limits. No restrictions on features and every bit available on GitHub!
Related contents:
The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Related contents:
- Sécuriser son homelab (et les PC des ados) avec Wazuh : une plateforme open source qui a tout d’une grande @ Cyril Beaufrere's LinkedIn :fr:.
- Wazuh - The FREE SIEM You Need to Try! - Installation Guide [Part 1] @ Jim's Garage's YouTube.
- You Probably Have 1000s of Vulnerabilities... Wazuh Walkthrough @ Jim's Garage's YouTube.
The cron schedule expression editor. The quick and simple editor for cron schedule expressions by Cronitor.
Personal Server at Home - Run your digital services from your home
FreedomBox is a private server for non-experts: it lets you install and configure server applications with only a few clicks. It runs on cheap hardware of your choice, uses your internet connection and power, and is under your control.
LDAP Tool Box project
Because even LDAP administrators need help
World's Most Widely Used Host Intrusion Detection System - HIDS. OSSEC offers comprehensive host-based intrusion detection across multiple platforms including Linux, Solaris, AIX, HP-UX, BSD, Windows, Mac and VMware ESX.
The Samhain host-based intrusion detection system (HIDS) provides file integrity checking and log file monitoring/analysis, as well as rootkit detection, port monitoring, detection of rogue SUID executables, and hidden processes.
The network configuration abstraction renderer
Netplan is a utility for easily configuring networking on a linux system. You simply create a YAML description of the required network interfaces and what each should be configured to do. From this description Netplan will generate all the necessary configuration for your chosen renderer tool.
MongoDB GUI Admin for 21st century. The best GUI for MongoDB Get your MongoDB data under control
Free multi-platform database tool for developers, database administrators, analysts and all people who need to work with databases. Supports all popular databases: MySQL, PostgreSQL, SQLite, Oracle, DB2, SQL Server, Sybase, MS Access, Teradata, Firebird, Apache Hive, Phoenix, Presto, etc.
Easy, proactive monitoring of processes, programs, files, directories, filesystems and hosts.
Monit is a small Open Source utility for managing and monitoring Unix systems. Monit conducts automatic maintenance and repair and can execute meaningful causal actions in error situations.
IPTraf-ng is a console-based network monitoring program for Linux that displays information about IP traffic. It returns such information as:
Current TCP connections
UDP, ICMP, OSPF, and other types of IP packets
Packet and byte counts on TCP connections
IP, TCP, UDP, ICMP, non-IP, and other packet and byte counts
TCP/UDP counts by ports
Packet counts by packet sizes
Packet and byte counts by IP address
Interface activity
Flag statuses on TCP packets
LAN station statistics
An open source network configuration analysis tool
Batfish finds errors and guarantees the correctness of planned or current network configurations. It enables safe and rapid network evolution, without the fear of outages or security breaches.
Monitor and restart unhealthy docker containers. This functionality was proposed to be included with the addition of HEALTHCHECK, however didn't make the cut.
A container-based solution for automating Docker container base image updates.
With watchtower you can update the running version of your containerized app simply by pushing a new image to the Docker Hub or your own image registry. Watchtower will pull down your new image, gracefully shut down your existing container and restart it with the same options that were used when it was deployed initially.
Containerrr's Watchtower fork.
Database management in a single PHP file.
Adminer (formerly phpMinAdmin) is a full-featured database management tool written in PHP. Conversely to phpMyAdmin, it consist of a single file ready to deploy to the target server. Adminer is available for MySQL, MariaDB, PostgreSQL, SQLite, MS SQL, Oracle, Elasticsearch, MongoDB and others via plugin.
A tool for exploring each layer in a docker image. A tool for exploring a docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image.
Go binary to change Docker container user/group and file permissions at runtime. fixuid is a Go binary that changes a Docker container's user/group and file permissions that were set at build time to the UID/GID that the container was started with at runtime. Primary use case is in development Docker containers when working with host mounted volumes.
s6 overlay for containers (includes execline, s6-linux-utils & a custom init) s6-overlay is an easy-to-install (just extract a tarball or two!) set of scripts and utilities allowing you to use existing Docker images while using s6 as a pid 1 for your container and process supervisor for your services.
Swarmpit provides nice & clean way to manage your Docker Swarm cluster.
Diagrams lets you draw the cloud system architecture in Python code.
It was born for prototyping a new system architecture without any design tools. You can also describe or visualize the existing system architecture as well.
The playground allows you to learn about systemd interactively, right from your browser! Create examples without the danger of breaking your system, and without being distracted by hundreds of unrelated unit files.
Version control for your database
Robust schema evolution across all your environments. With ease, pleasure, and plain SQL.
A fancy self-hosted monitoring tool. It is a self-hosted monitoring tool like "Uptime Robot".
Debian Live system / CD for sysadmins and texttool-users. Grml is a bootable live system (Live-CD) based on Debian. Grml includes a collection of GNU/Linux software especially for system administrators. Users don't have to install anything on fixed storage. Grml is especially well suited for administrative tasks like installation, deployment and system rescue.
Related contents:
Analyzes resource usage and performance characteristics of running containers. cAdvisor (Container Advisor) provides container users an understanding of the resource usage and performance characteristics of their running containers. It is a running daemon that collects, aggregates, processes, and exports information about running containers. Specifically, for each container it keeps resource isolation parameters, historical resource usage, histograms of complete historical resource usage and network statistics. This data is exported by container and machine-wide.
Quick Reference Cheat Sheet Here are some cheatsheets and quick references contributed by open source angels.
The Log File Navigator, lnav for short, is an advanced log file viewer for the small-scale. It is a terminal application that can understand your log files and make it easy for you to find problems with little to no setup.
Talos is a modern OS designed to be secure, immutable, and minimal. Its purpose is to host Kubernetes clusters, so it is tightly integrated with Kubernetes.
Related contents:
- Proxmox Kubernetes Install with Talos Linux @ Virtualization Howto.
- Talos, Proxmox and OpenTofu: Beginner's Guide - Part 1 @ Eleni Grosdouli.
- Talos, Proxmox and OpenTofu: Beginner's Guide - Part 2 @ Eleni Grosdouli.
- Talos, Proxmox and OpenTofu: Beginner's Guide - Part 3 @ Eleni Grosdouli.
- A Simple Way to Install Talos Linux on Any Machine, with Any Provider @ Linux.com.
- No SSH? What Is Talos, This Linux Distro for Kubernetes? @ The New Stack.
- Rebuilding My Talos Cluster from Bare Metal @ Nerdz.
The Kubernetes IDE The largest and most advanced Kubernetes platform in the world
Mailu, Docker based mail server Mailu is a simple yet full-featured mail server as a set of Docker images. It is free software (both as in free beer and as in free speech), open to suggestions and external contributions. The project aims at providing people with an easily setup, easily maintained and full-featured mail server while not shipping proprietary software nor unrelated features often found in popular groupware.
Duc is a collection of tools for inspecting and visualizing disk usage.
Checkov scans cloud infrastructure configurations to find misconfigurations before they're deployed.
Checkov uses a common command line interface to manage and analyze infrastructure as code (IaC) scan results across platforms such as Terraform, CloudFormation, Kubernetes, Helm, ARM Templates and Serverless framework.
Related contents:
HPCng is an open community of people and organizations interested in the broad modernization of HPC capabilities across a wide range of use-cases ranging from traditional HPC to enterprise and hyper-scale workloads.
Apptainer is an open source container platform designed to be simple, fast, and secure. Many container platforms are available, but Apptainer is designed for ease-of-use on shared systems and in high performance computing (HPC) environments.
a fully featured network monitoring system that provides a wealth of features and device support.
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems including Cisco, Linux, FreeBSD, Juniper, Brocade, Foundry, HP and many more.
Apache Guacamole is a clientless remote desktop gateway. It supports standard protocols like VNC, RDP, and SSH.
We call it clientless because no plugins or client software are required. Thanks to HTML5, once Guacamole is installed on a server, all you need to access your desktops is a web browser.
Client/Server Open Source Network Backup for Windows and Linux. UrBackup is an easy to setup Open Source client/server backup system, that through a combination of image and file backups accomplishes both data safety and a fast restoration time.
TiDB is a distributed NewSQL database compatible with MySQL protocol TiDB (The pronunciation is: /'taɪdiːbi:/ tai-D-B, etymology: titanium) is a distributed SQL database. Inspired by the design of Google F1, TiDB supports the best features of both traditional RDBMS and NoSQL.
Related contents:
Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is done with a single command takes ~3 minutes. It will create a VPC with proper security groups. It spins up a tagged ec2 instance and configures OpenVPN software. Once instance is configured an OpenVPN configuration file is downloaded and ready to use. There is also functionality to see which instances are running in which region and ability to terminate the instance when done. Additional functionality includes specifying instance type, generate ssh keypairs, specify custom ami, change login user and more to come.
Visual Web Log Analyzer.
GoAccess is an open source real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.
It provides fast and valuable HTTP statistics for system administrators that require a visual server report on the fly.
Take back control of your email with this easy-to-deploy mail server in a box.
LTB project is a compilation of tools for LDAP administrators, to ease their rough life:
Monitoring: Nagios and Cacti scripts
OpenLDAP packaging and extensions
Scripting: LDAP massive batch operations
Self Service Password: Web interface to change password
White pages: Web interface to browse entries
Kimchi is an HTML5 based management tool for KVM. It is designed to make it as easy as possible to get started with KVM and create your first guest.
Kimchi runs as a Wok plugin.
Kimchi manages KVM guests through libvirt. The management interface is accessed over the web using a browser that supports HTML5.
Remote terminal application that allows roaming, supports intermittent connectivity, and provides intelligent local echo and line editing of user keystrokes.
Related contents:
Modern Open Source Build Automation.
Gradle is a build tool with a focus on build automation and support for multi-language development. If you are building, testing, publishing, and deploying software on any platform, Gradle offers a flexible model that can support the entire development lifecycle from compiling and packaging code to publishing web sites. Gradle has been designed to support build automation across multiple languages and platforms including Java, Scala, Android, Kotlin, C/C++, and Groovy, and is closely integrated with development tools and continuous integration servers including Eclipse, IntelliJ, and Jenkins.
Related contents:
Tank is a very high performance distributed log, inspired in part by Kafka, and other similar services and technologies.
frp is a fast reverse proxy that allows you to expose a local server located behind a NAT or firewall to the Internet. It currently supports TCP and UDP, as well as HTTP and HTTPS protocols, enabling requests to be forwarded to internal services via domain name.
Terraform provides a common configuration to launch infrastructure — from physical and virtual servers to email and DNS providers. Once launched, Terraform safely and efficiently changes infrastructure as the configuration is evolved.
Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
Related contents:
Babushka is a humble tool for automating computing chores.
For each job, a test, and the code to make that test pass. On the left is a babushka dep, and on the right, what happens when it's run.
Skydive is an open source real-time network topology and protocols analyzer. It aims to provide a comprehensive way of understanding what is happening in the network infrastructure.
Skydive agents collect topology informations and flows and forward them to a central agent for further analysis. All the informations a stored in an Elasticsearch database.
Skydive is SDN-agnostic but provides SDN drivers in order to enhance the topology and flows informations. Currently only the Neutron driver is provided but more drivers will come soon.
NIST Certified SCAP 1.2 toolkit. The oscap program is a command line tool that allows users to load, scan, validate, edit, and export SCAP documents.
The OpenSCAP ecosystem provides multiple tools to assist administrators and auditors with assessment, measurement and enforcement of security baselines. We maintain great flexibility and interoperability, reducing costs of performing security audits.
Related contents: