Open Source

Falco plugin for OVHcloud MKS Audit Logs

Enhancing Kubernetes Security: Detecting Threats in OVHcloud Managed Kubernetes cluster (MKS) Audit Logs with Falco

Several month ago we discovered Falco, a Cloud Native near real-time threats detection tool, and we saw how to install it on an OVHcloud MKS cluster. Today we will connect our Falco instance to a MKS cluster in order to retrieve Kubernetes Audit Logs events and watch if everything is OK in our cluster. Concretely, […]

Enhancing Kubernetes Security: Detecting Threats in OVHcloud Managed Kubernetes cluster (MKS) Audit Logs with Falco Read More »

Backdoor in xz/liblzma (CVE-2024-3094)

On March 29th, Andres Freund, a Postgres developer, working at Microsoft, identified a response time while authenticating to openSSH on a Debian Sid installation that was about 500 ms longer as usual. He investigated the behaviour and concluded that liblzma, part of the xz library, was compromised by a complex backdoor injected into distribution packages

Backdoor in xz/liblzma (CVE-2024-3094) Read More »

Hacktober Fest logo

OVHcloud and Hacktober Fest 2023

During October, 2023, the Hacktober Fest is taking place. What is Hacktober Fest? Hacktoberfest is DigitalOcean’s annual event that encourages people to contribute to open source throughout October. It’s a way to highlight open source projects with boosting the participation of resolving issues by reward the committers. You have to fix at list 4 issues

OVHcloud and Hacktober Fest 2023 Read More »

Benchmarking Prometheus promql performance

Benchmarking Prometheus promql performance

Here @OVHCloud, we try to replace our legacy metrics oriented infrastructure. This infrastructure matters a lot for us as internal teams use it to supervise the core services of OVH, so before making any choices, we wanted to apply a bullet proof test to the challengers. You can do two main things with a storage

Benchmarking Prometheus promql performance Read More »

Prometheus love remote storage

Welcome to Prometheus world of remote storage

At OVHcloud, we recently made a change to our internal Observability stack. After testing and comparing the different solutions on the market, we opted for on open source solution. With this blog post, we’re starting a series of articles to provide feedback on our selection process and what we’ve learned along the way. Our mission

Welcome to Prometheus world of remote storage Read More »

streamlit app for eda and interactive prediction

Deploy a custom Docker image for Data Science project – Streamlit app for EDA and interactive prediction (Part 2)

A guide to deploy a custom Docker image for a Streamlit app with AI Deploy. Welcome to the second article concerning custom Docker image deployment. If you haven’t read the previous one, you can read it on the following link. It was about Gradio and sketch recognition. When creating code for a Data Science project,

Deploy a custom Docker image for Data Science project – Streamlit app for EDA and interactive prediction (Part 2) Read More »

Deploy a custom Docker image for Data Science project – Gradio sketch recognition app (Part 1)

A guide to deploy a custom Docker image for a Gradio app with AI Deploy. When creating code for a Data Science project, you probably want it to be as portable as possible. In other words, it can be run as many times as you like, even on different machines. Unfortunately, it is often the

Deploy a custom Docker image for Data Science project – Gradio sketch recognition app (Part 1) Read More »

Venom 1.0

Venom 🐍 1.0 – Manage and run your integration tests with efficiency

Venom, our tool that aim to manage and run your integration tests with efficiency, have been released few weeks ago in 1.0! We will discover in this blog post, new features and changes contained in this major release. Venom Venom is a tool written in Golang, created in 2017, open-sourced and available on GitHub. It

Venom 🐍 1.0 – Manage and run your integration tests with efficiency Read More »

How to protect my cloud workloads (Log4Shell)

Log4shell, how to protect my cloud workloads

Update 22/12: 2 new vulnerabilities have been identify. Those vulnerabilities are also impacting the initial patchs (2.15.0 and 2.16.0): CVE-2021-45105 : Risk of Denial of Service (DOS) CVE-2021-45046 : Risk of information leak and remote code execution in some environments and local code execution in all environments Update 22/12: Updated table assessing the risks at

Log4shell, how to protect my cloud workloads Read More »