Hello techies, welcome to the real world of programming. Today, we are going to talk about the Git command line. Whether you will read this article fully so, I’ll do promise that you will get all control over the git commands until the end. It means as many commands, after this article, you will learn yourself through the command line, you can use full git. It is the best way because if you use GUI directly on any website, GUI comes in understand that all right but doing directly upload, this is not a right way, it is a practical process. What you will do, when the file will be large. This thing we are going to do through git command line that very command comes in the hands of the programmer. If we use a command line. So, let’s start with the elaborative part of this article. This article till the last, if you will have fear regarding command line becomes black from behind so, all your fear will vanishes.

How to install git on windows 10?  

So, let’s look. What you will do first? First, you will do a search on the web like git for windows download through enter click. You will get all downloads over there. As you will open by clicking the first option then it will directly reach you in windows. And there, your download will be started, what so if you will do manually then download will be started. One of the websites like git scm.com, from this you will download that git. So, this is not big stuff to install this, the normal default setting is there next-next as you install. Likely, you will install it. When the git will be downloaded then you will click on it, they will ask for permission. After doing the default setting, next-next, you will install that. When the installation will have done so, you will make a new folder from the name all about git. Under that folder, you will use git. If you want to check git is installed or not then you will do one right-click and you will see two options there like git bash here, and git GUI here. These two commands will come if you will do one right-click. You have a folder from the name all about GIT, if you want to do all work in that folder so, you will use the GIT bash here option according to the git command line, instead of GIT GUI here.

GIT command line tutorial

You will open the GIT bash here. There will open with the dialog box, you will do resize with maximize option. What will you do next, firstly, if you would install GIT on your desktop? So, what types of things, you will have to do. That is not so important to do but you have to do so, your name, who are making and uploading on GitHub, all this information comes from there. Now, let’s do configurations of these, first, we shall write like this 

            $ git config ¥- global user.name Mohan and as you will press the enter key then configuration key name will come like this,

          Mohan@LAPTOP- CR327854 MINGw64  ~/Desktop/All about git (master)

Usually, we will do a configuration of email,

            $ git config – -global user.email beaproplayer24@gamil.com and it will save like this,

Mohan@LAPTOP- CR327854 MINGw64  ~/Desktop/All about git (master). At the apex, there will be written like a master, you will understand about all this thing in upcoming part. How can you make a branch of your own and do a clone of it? Now, you have to check that your configuration has done or not so, you will right like this way, 

            $ git config – -global user.name Mohan, only you will write much like then your name will be print like this way,

            Mohan@LAPTOP- CR327854 MINGw64  ~/Desktop/All about git (master)

Git configurations

Now, the Configuration has been done. All that command, you were doing in previous then only you will put some key so, all of your commands will be done. If you put $ code . So, this is a shortcut to open your vs code through the terminal. So, your next query will be what is terminal? It is the terminal of UNIX that you are using in your windows. That terminal in mac which has UNIX- based, that GIT, is also a Unix-based terminal, you can also use it as a terminal. When you put $ code .  In that the vs code will open so, every file you will make in that. Those you want to upload in GitHub so, let’s have a look at how you can do that. If the new file you have to make, whenever you use GIT then what command do you move in first.

Initializing GIT repository

Whenever you make a repository, what command do you make first? A repository is a folder in that your projects may exist, whenever you move GIT. So, to the name of $ git init, you have to move that. When you do GIT init then there will come in written like initialized empty GIT repository in C: /users/Mohan/Desktop/All about GIT/.git/ it means to the name.GIT folder has come in file explorer but you will not see then after doing click on hidden items then to the name.GIT folder will have arrived there but you will not tease them and will hide them again. So that, you will again go to the command line and you want to see in the command line what type of folder is hidden there. So, there will be commands like $ ls – lart, all your hidden files will show you. This is the command, you can easily get it. There is a command, you will always use in GIT for knowing status such as $ git status then it will show information like branch master, commit yet, and untracked files. These all happen as untracked, modified, unmodified, and staged areas, firstly you, let’s understand about this. You have made a command line, installed and you are using it.

As Kubernetes gains more prominence, concern is mounting over how we gauge its effectiveness and mitigate container security vulnerabilities. Such vulnerabilities could leave a cluster unsecured or a container compromised, open to misuse by malicious users for things such as cryptomining. I recently spoke with Rory McCune, principal security consultant at NCC Group, to discover what common vulnerabilities exist in today’s containers and container orchestration environments. McClune will be leading the Mastering Container Security IV training, a deep two-day dive into mastering container security, during the Black Hat virtual conference Aug. 3–4.

Common Docker Security Issues

McCune notes that hackers are finding new methods to escalate access and invoke Docker commands. Remote container command execution is especially worrisome. If left open to the internet without the proper configurations, container ecosystems become very vulnerable.

One strategy hackers have used for years is to insert malicious code into Docker images on Docker Hub. But as companies become more aware of this tactic, black hats are quick to adapt, finding ways to build nefarious software directly on compromised machines.

Docker has a rather dangerous installation model, McCune says. Docker Image installers are inherently at risk and should vet packages carefully before allowing any new installation privileged access to a Docker socket or daemon.

Another issue is patching. Many container images simply haven’t been updated in five to seven years. These images may not intentionally hold malicious code, yet they may be just as vulnerable. As we’ve covered before, container images require continual updates and auditing to keep pace with the constant flow of new exploits and security benchmarks.

Therefore, McCune believes that, ideally, engineers “should always maintain their own images.” Yet, he acknowledges that image reusability is necessary and that developers may not always have the resources available. “There’s an inevitable trade-off here.”

Kubernetes Vulnerabilities

“Docker is quite simple,” says McCune. “At the end of the day, you could understand it.” Kubernetes, on the other hand, is a whole different story.

The complexity of Kubernetes does limit its accessibility quite a bit. The disconnect is even spurring new UX layers to address K8s visibility hangups.

Security issues inherently arise when a technical subject matter is only partially understood. Kubernetes bandwagon-ers may not realize its maintenance hurdles upfront. This confusion can lead to complications around patches and upgrades, thus decreasing security.

A surefire way to welcome a hack is by using outdated software. “You need to upgrade every nine months,” McCune says. Kubernetes Deprecation Policy clearly states that GA API versions are only supported for 12 months, and Beta releases are actively supported for nine months. Traditional companies unaccustomed to that sort of release frequency should take stock of Kubernetes best practices before diving in.

Kubernetes also has a large attack service. “You could have a half a dozen services on a network,” says McCune. If one service is compromised, it could affect an entire cluster or machine. Kubernetes’ networking insecurities were a severe problem two to three years ago, but McCune acknowledges that they are improving.

What is still a prevalent threat is the possibility of Privileged Escalation. K8s is a multi-user system, designed to have many groups of developers working on independent applications. Not all should have access to manage an entire cluster. Also, since Kubernetes allows every application access to talk with the main API, permissions could be escalated quickly if misconfigured.

To help lock down your network, Kubernetes does supply network policies with a native access control system. However, manually analyzing permissions is tedious. Commercial solutions from Aqua Security, Twistlock, NeuVector and others could help manage access control from a friendlier web GUI.

In general, be careful not to supply more rights than intended. Authorization is key.

Final Thoughts

“Kubernetes is very complicated, and it’s very easy to make a mistake on how you configure it,” says McCune. If unpatched, Kubernetes and container vulnerabilities could result in catastrophic breaches.

Nowadays, it doesn’t take much effort to discover vulnerable online systems. For example, the Shodan search engine analyzes the entire internet for exploits, and could easily be utilized to locate vulnerable Internet-connected devices.

Attackers value Kubernetes as a means to access compute power to crypto mine on machines. “If you have a cluster that is misconfigured, you will be compromised quite quickly.”

Click to share on Twitter (Opens in new window)Click to share on Facebook (Opens in new window)Click to share on LinkedIn (Opens in new window)Click to share on Reddit (Opens in new window)