Pb
Le serveur a présenté des informations de transparence du certificat insuffisantes. Son certificat peut ne pas avoir été rendu public et il peut avoir été émis par erreur.
HTTP Strict Transport Security : false
HTTP Public Key Pinning : false
HTTP Public Key Pinning (HPKP) is an obsolete Internet security Source : https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning
Solution
server {
server_name wiki.acme.com;
# Ligne à ajouter :
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
...
}
systemctl reload nginx
Voir un exemple ici : Exemple git clone avec Ansible
from urllib.parse import quote_plus
quote_plus('P@ssw0rd!')
'P%40ssw0rd%21'
Et inversement
from urllib.parse import unquote_plus
unquote_plus('P%40ssw0rd%21')
'P@ssw0rd!'
Autres
from urllib.parse import urlencode
urlencode({'a': 'P@ssw0rd!'}).split('=')[1]
podman run --init --entrypoint /bin/sleep docker.io/library/centos:centos5 inf
$ podman ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
0200210cacf3 docker.io/library/centos:centos5 inf 31 minutes ago Up 31 minutes vigorous_nobel
$ podman unshare mount | grep $HOME
/dev/sdd on /home/management/.local/share/containers/storage/overlay type ext4 (rw,relatime,discard,errors=remount-ro,data=ordered)
shm on /home/management/.local/share/containers/storage/overlay-containers/0200210cacf387ff1af5fd2d75724779c846710c5ac392338ab4dbb77a7e660b/userdata/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=64000k,uid=1000,gid=1000)
overlay on /home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/merged type overlay (rw,relatime,lowerdir=/home/management/.local/share/containers/storage/overlay/l/BPCGYE43L4DFWORYE7TTH2DWLA,upperdir=/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff,workdir=/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/work,redirect_dir=nofollow,uuid=on,userxattr)
$ podman unshare find /home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/run
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/run/.containerenv
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/etc
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/etc/hostname
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/sys
/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff/proc
$ podman unshare ls /home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/merged/
bin dev etc home lib lib64 lost+found media mnt opt proc root run sbin selinux srv sys tmp usr var
$ ls /home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/merged/
$ podman inspect 0200210cacf3 | jq -r '.[].GraphDriver.Data'
{
"LowerDir": "/home/management/.local/share/containers/storage/overlay/5513565ec546b4249cb76fec6551253c611d6ee80184807324c5c4335e4a2964/diff",
"MergedDir": "/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/merged",
"UpperDir": "/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/diff",
"WorkDir": "/home/management/.local/share/containers/storage/overlay/fa0297061b69f1acd265c66d797c50ecedcdcf3565272bdd1db78c614c3d9b87/work"
}
$ ls /home/management/.local/share/containers/storage/overlay/5513565ec546b4249cb76fec6551253c611d6ee80184807324c5c4335e4a2964/diff
bin dev etc home lib lib64 lost+found media mnt opt root sbin selinux srv tmp usr var
Accès en lecture depuis l'hôte
podman inspect 0200210cacf3 | jq -r '.[].GraphDriver.Data.LowerDir'