Nuffnang

Friday, October 18, 2013

OpenStack Havana

On October 17, OpenStack's Havana, the eighth release of this IaaS for public, private, and hybrid clouds, brings its enterprise customers several new improvements.

In the real world, OpenStack sees these features playing out in the following ways:

Application­ Driven Capabilities: OpenStack Orchestration is a template­ driven service for describing and automating the deployment of compute, storage and networking resources for an application. The new global clusters feature for Object Storage enables you to cut costs and improve performance by replicating and delivering data around the world, and the new QoS capability across Block Storage drivers allows you to guarantee performance requirements for an application. Docker support was also added to speed application deployment using virtualization containers.
Improved Operational Experience: The Dashboard user interface (UI) has also been improved. OpenStack Metering now provides managers with a single source of usage data across OpenStack services for activities like enterprise chargebacks and feeding systems monitoring tools.
More Enterprise Features: OpenStack continues to mature and support enterprise­ driven features such as end-­to-end encryption across all Block Storage drivers, Secure Socket Layer (SSL) support across all service application programming interfaces (APIs), new virtual private network (VPN) and Firewall-­as-­a-­Service (FaaS) capabilities. All users will be happy to see better support for rolling upgrades and boot from volume, which provides the foundation for live migration. Last, but not least, popular storage and networking providers continue to improve and write new plug-ins for OpenStack, making it easier for enterprises to work with their trusted vendors and take advantage of existing infrastructure.

Saturday, October 5, 2013

How to create an encrypted zip file on Linux

The zip command line tool provides an encryption option. The encryption algorithm used by zip command is PKZIP stream cipher. The PKZIP algorithm is known to be insecure. Also, the fact that the password is typed and shown in plain text makes it even more vulnerable.

To create an encrypted zip file with zip:
$ zip --password MY_SECRET secure.zip doc.pdf doc2.pdf doc3.pdf
To uncompress a zip file that is encrypted with zip command:
$ unzip secure.zip
Archive:  secure.zip
[secure.zip] doc.pdf password: