https://raghavxk8s.com/categories/k8s/ Recent content in K8s on AI Infra Hugo -- gohugo.io en-us Wed, 14 Sep 2022 05:02:26 +0000 https://raghavxk8s.com/post/cks/ Wed, 14 Sep 2022 05:02:26 +0000 https://raghavxk8s.com/post/cks/ // TODO: Refer mkDoks SSH security Restrict Kernal modules Open Ports & Listening ports netstat -an | grep -w LISTEN Check ports are used by which services cat /etc/services | grep -w 53 List processes and thier ports netstat -natp netstat -natp | grep "9090" Certificates Check .csr certs information openssl req -text -noout -verify -in CSR.csr SSH adduser username [enter password on the prompt] # Add user to sudo visudo raghav ALL=(ALL:ALL) ALL # Allow passwordless sudo execution raghav ALL=(ALL) NOPASSWD:ALL # Modify user group usermod <user> -G admin # List members of a group groupmems -g <group> -l # SSH config file cat /etc/ssh/sshd_config # Copy public key to remote host ssh-copy-id -i ~/.