Security Archives - Page 3 of 18 - ITFROMZERO

How to Sign and Verify Docker Images with Sigstore Cosign: Neutralize Supply Chain Risks

By IT From Zero October 11, 2026

A practical guide to signing and verifying Docker images with Sigstore Cosign. Lock down your CI/CD pipeline and block rogue containers on production servers.

Git

Setting Up Gitleaks: Prevent API Key and Password Leaks from Git Hooks to CI/CD Pipelines

By IT From Zero October 11, 2026

A hands-on guide to configuring Gitleaks: Prevent leaked tokens, passwords, and API keys with Git pre-commit hooks and GitHub Actions CI/CD pipelines.

Ubuntu

Ubuntu Server Security Auditing with Lynis: Vulnerability Scanning and Practical Hardening

By IT From Zero October 10, 2026

A hands-on guide to installing Lynis on Ubuntu Server, analyzing Hardening Index reports, fixing common security flaws, and automating audits via cron.

Git

Keyless Git Commit Signing with Gitsign and Sigstore: Modern Identity Verification

By IT From Zero October 10, 2026

Sign Git commits without GPG keys using Gitsign and Sigstore. Learn how to configure keyless signing via GitHub or Google OIDC to protect repos from identity spoofing.

Docker

How to Configure User Namespace Remapping (userns-remap) in Docker

By IT From Zero October 10, 2026

Configuring userns-remap in Docker maps root containers to unprivileged users on the host, eliminating privilege escalation risks and securing your servers.

Linux

Configuring DNS-over-TLS with systemd-resolved on Linux: Boost Security for DNS Resolution

By IT From Zero October 8, 2026

A guide to configuring DNS-over-TLS and DNSSEC with systemd-resolved on Linux — encrypting DNS queries to block ISP eavesdropping and man-in-the-middle attacks. Includes a 5-minute quick start, DNSSEC configuration, per-link DNS, and debugging tips from real production experience.

Centos

Configuring LUKS and Clevis/Tang on CentOS Stream 9: Automatic Disk Encryption (NBDE)

By IT From Zero October 8, 2026

A guide to configuring Network-Bound Disk Encryption (NBDE) on CentOS Stream 9 using LUKS, Clevis, and Tang server. Servers automatically unlock their disks on boot within the internal network, no manual passphrase needed — ideal for DevOps environments and compliance requirements.

Ubuntu

How to Set Up Two-Factor Authentication (2FA) for SSH on Ubuntu with Google Authenticator

By IT From Zero October 7, 2026

Step-by-step guide to setting up two-factor authentication (2FA) for SSH on Ubuntu with Google Authenticator. Combine SSH keys and TOTP codes for robust server security.

Security

How to Install and Configure Fail2ban on Linux: Hands-On Defense Against SSH and Nginx Brute Force

By IT From Zero October 7, 2026

A step-by-step guide to installing and configuring Fail2ban on Linux to block SSH and Nginx brute-force attacks, with real-world unban tips and incremental ban rules for repeat offenders.

Security

Securing PostgreSQL Server on Linux: Hands-on with pg_hba.conf, pgcrypto, and pgaudit

By IT From Zero October 6, 2026

Protect PostgreSQL on Linux across 3 layers: restrict IPs with pg_hba.conf, encrypt sensitive columns with pgcrypto, and audit logs for SOC2/PCI-DSS with pgaudit.