Use a secret manager?

Cert is a secret, add a small agent to your containers that pings your secret manager and gets back the current cert. Then saves / imports it (or whatever is appropriate).

Check out Fez if you haven’t already. Also Tunic does a great job of starting out basic & breaking precedent.

The reality of Texas green energy is so detached from the political rhetoric from politicians… The state making the most wind energy has leaders in the capital demonizing it while the state finances (and citizens) clearly benefit. I wish the voters of Texas paid more attention and called out such obvious gaslighting :(

https://www.usda.gov/media/blog/2017/01/13/cost-raising-child

Usually these costs are including education and childcare. In the US you can easily expect to pay around $1K / Month for full time child care between the ages of 6 months and 5 years (when they’ll start public school). Here’s a recent summary for major cities in Texas reflecting that amount: https://tootris.com/edu/blog/parents/child-care-in-texas-can-cost-up-to-10000/

That’s over $40K just in childcare costs before entering school. Now, many people don’t have to pay this because they have family (or a non-working spouse) who assist; but from a cost perspective it’s fair to include.

Add on to that food, clothing and such… between ages it’s easy to see how some estimates can reach over $200K through age 18.

Both strengthening relations with Russia recently too.

Reference Modi’s recent trip to Moscow: https://www.bbc.com/news/articles/cpd91pe5r9go

For those not keeping up: this is the fallout from Erdogan ignoring economics and keeping interest rates low for years; only in the past year or so having conceding to reality and finally letting rates rise. They’ll likely continue suffering fallout from his prior stance on interest rates for the remainder of the decade.

From last summer:

https://www.cnn.com/2023/06/22/economy/turkey-hikes-interest-rates/index.html

and

https://www.cnbc.com/2023/06/14/turkeys-erdogan-agrees-to-monetary-policy-turnaround-under-simsek.html

Since the other reply was unhelpful: apps are supposed to have limited privileges and isolation from each other, yes… But the whole point of malware like this is that they figure out ways to break those restrictions and get escalated privileged.

You can get more technical detail from reading the report, in this case it looks like the app does not contain malware, but instead requests an update after install that contains the bad code and then breaks the app limitations and scans for the target banking applications and copies the security certificates.

*Senator

“The goal is to make the town progress by improving the resilience of its inhabitants,”

Sounds a bit like Stardew Valley?

I’d suggest Podman over docker if someone is starting fresh. I like Podman running as rootless, but moving an existing docker to Podman was a pain. Since the initial docker setup was also a pain, I’d rather have only done it once :/

For me the use case of K8s only makes sense with large use cases (in terms of volume of traffic and users). Docker / Podman is sufficient to self-host something small.