I have been in DevOps related jobs for past 6 years dealing mainly with Kubernetes in AWS and on-premise as well. I spent quite a lot …
CKS Reduce Attack Surface
Overview
- only purpose (remove unneceassary services)
- node recycling (should be ephemeral, created from images)
- ubuntu, centos
systemctl list-units | grep <service-name>
systemctl list-units --type=service | grep <service-name>
systemctl list-units --type=service --state=running | grep <service-name>