CI/CD and secure supply chain

https://www.sigstore.dev/ ( & cosig https://github.com/sigstore/cosign )

https://in-toto.io/

(cf. red hat trusted software supply chain which actually embeds those open source tools)

+ backstage.io for "platform engineering"

MVT + Adb : how to use this consensual forensics tool to analyse whether your phone has been compromised by the pegasus/NSO discoveries. Forensics, long time no see !

Following pegasus revelations, I decided to play a bit with the tool provided by Amnesty International Security Lab in July 2021. 

Forensics, long time no see !

Sources : https://github.com/mvt-project/mvt

Doc : https://docs.mvt.re/en/latest/android/download_apks.html

Pretty strait-forward, once you have ADB installed on your computer.

the following steps are for and android phone + mac OS laptop

Step 0 : set your phone in "developper mode". For me I had to go to the settings and press 7 times on the release logo. 

Step 1 : plug your phone in USB, enabling USB debugging https://developer.android.com/studio/debug/dev-options#enable%3E

Step 2 : install ADB

brew install android-platform-tools

Check that you see your device, and then stop adb (not required after).

adb devices

adb kill-server

Step 3 : install mvt

pip3 install mvt
Step 4 : run mvt over your phone

mkdir output && mvt-android download-apks --output ./output --all-checks

Lastest stable version of firefox

Directly from mozilla, have the repository point directly to firefox (found looking for the ubuntu release of firefox 4).

sudo add-apt-repository ppa:mozillateam/firefox-stable
sudo apt-get update && sudo apt-get upgrade

Aptitude, apt & cie. (Mainly for Debian, but Ubuntu works on the same way)

Ce post tourne autour des commandes apt, aptitude et dpkg

Installer une selection de paquets :

D'un côté :

$ dpkg --get-selections > liste-pkg

De l'autre côté :

# dpkg --set-selections < liste-pkg
# apt-get dselect-upgrade

Ressources non officielles de paquets pour Debian

• apt-get.org


• mentors.debian.net


• backports.org

Paquets installés automatiquement (jeux de dépendance)

$ aptitude why python-notify

Update automatique sans interaction humaine

export DEBIAN_FRONTEND=noninteractive
yes '' | apt-get -y -o Dpkg::Options::="--force-confdef" -o
X Dpkg::Options::="--force-confold" dist-upgrade

(originaire de : http://www.ouaza.com/livre/admin-debian/
site web du livre "Cahier de l'admin, sur GNU/Linux «Lenny» " )

Utile également :
https://help.ubuntu.com/community/Repositories/CommandLine