Post

CKS Reduce Attack Surface

CKS Reduce Attack Surface

Overview
  • only purpose (remove unneceassary services)
  • node recycling (should be ephemeral, created from images)
  • ubuntu, centos

Image

1
2
3
4
5
6
systemctl list-units | grep <service-name>
systemctl list-units --type=service | grep <service-name>
systemctl list-units --type=service --state=running | grep <service-name>



This post is licensed under CC BY 4.0 by the author.