Login to AWS ECR using systemd

First try without systemd During my previous mission, we used AWS ECR to manage the docker images. Amazon EC2 Container Registry (ECR) is a fully-managed Docker container registry that makes it easy for developers to store, manage, and deploy Docker container images. To be able to store/retrieve docker images, you have to be authenticated. AWS CLI provides a command which takes your credentials and generate a token, authenticating the user for 12 hours. ...

May 7, 2019 · 2 min

Http is dead

In a previous article I talked about switching to https. Since the 3rd December, Let’s Encrypt is in public beta1, that means that everybody can have free trusted ssl certificates. That’s right, you heard it. What would be an agileek article without a little bit of Docker in it? Goal I will show you how to generate and use an ssl certificate with nginx. First, you generate the certificate with: docker run -it --rm -p 443:443 --name letsencrypt -v /etc/letsencrypt:/etc/letsencrypt -v /var/lib/letsencrypt:/var/lib/letsencrypt quay.io/letsencrypt/letsencrypt:latest --server https://acme-v01.api.letsencrypt.org/directory certonly -a standalone -d hello.bitard.fr ...

December 5, 2015 · 2 min

Raspberry Pi, RFXCom and Domoticz

This begins a serie of home automation articles. First step I recommend to start with something easy. I tried a remote controllable wall socket a few years ago, and it really works very well. I use it to control 4 lights area in my living room. Now it’s time to take it to the next level! Choose wisely There are 2 main wireless protocols to communicate with your devices, 433.92 MHz and Z-wave. ...

December 5, 2015 · 2 min

Playing with docker and cpuset

For my client I need to benchmark a multi-threaded/multi-server solution. Unfortunately, we only have a big server (128 GB, 32 cores,…) and we are putting all our instances on this single server. As each instance is multi-threaded, we noticed that they often get in each others way, resulting in bad performances (context swapping, …). We solved this problem in 2 ways. On one hand we used thread affinity in the application in order to bind some thread to a given CPU, and on the other hand we used docker to authorize a given application to access only some CPUs (via cpuset). ...

August 6, 2014 · 1 min