Jenkins
guest@6admin.io:~$ ls ~/tags/jenkins
One Blocking Pin, Four CVEs: The Band-Aid That Wins Is the One That Disappears
How a security audit on a Dockerized Foreman stack turned into merged contributions in Foreman core, Dynflow and Jenkins.
Jenkins on Windows Server: what not to do
A Jenkins controller on a domain-joined Windows host, the built-in node on the controller, the 8080 in the open, AD credentials in cleartext: the anatomy of a compromise chain and how to take it apart.
Surviving Windows Update in the middle of a build
Disabling updates for the duration of a build, then restoring the exact prior state, under concurrency and crash-proof. Persisted ref counting and a named mutex.
A segfault in the JVM and an EDR at the bottom of the stack
A Jenkins controller crash-looping on EXCEPTION_ACCESS_VIOLATION, a JDK migration done with no post-mortem and an EDR DLL showing up at the bottom of every crash dump. How to read a stack honestly and confirm a cause by elimination rather than conviction.
A reverse proxy in front of Perforce, or not: the pros and cons
Four ways to put TLS in front of a Perforce server and what each one costs: nginx layer-4 termination, p4d native TLS, SNI passthrough and the in-house tools P4Broker and P4P. With the client-IP trap everyone forgets.
Nginx on Windows in front of Jenkins: the proxy, the logs and the upgrades
Nginx on Windows Server terminating TLS in front of Jenkins: the UI and the WebSocket agents in a single location, the certificate through simple-acme and above all the two operational nuisances nobody writes about on Windows, log rotation and the Chocolatey upgrade.