I've (well, mostly Claude did) created a module that unloads the active AF_ALG (builtin) module and mitigates the exploit without having to reboot.
Tested on almalinux8/9
https://gist.github.com/42wim/2e3cc3c92333e4c2730541e6f0e038...
YMMV
HN user
[ my public key: https://keybase.io/42wim; my proof: https://keybase.io/42wim/sigs/bSJGQ9t6-Cc1oSl921JqUoINrRbn9GCBas6bgRKbehM ]
I've (well, mostly Claude did) created a module that unloads the active AF_ALG (builtin) module and mitigates the exploit without having to reboot.
Tested on almalinux8/9
https://gist.github.com/42wim/2e3cc3c92333e4c2730541e6f0e038...
YMMV
I've done the same with https://github.com/42wim/ssh-agentx/ Originally used to sign git commits with pgp in the sshagent, before ssh git commit signing was a thing.
Nowadays, I'm using it for signing code remotely on a server with a yubikey on the local laptop. (needs a patched relic - https://github.com/42wim/relic/tree/sshtoken)
Also works with windows as it uses https://github.com/buptczq/WinCryptSSHAgent that did the hard work to get it to talk with almost everything that exists in windows/wsl/putty etc.
Another person here who isn't using k8s.
We're running 1000+ containers on it and it just works, needs almost no maintenance and the Nomad upgrades are with zero downtime.
One of the reasons we choose nomad was because it had decent ipv6 support way before kubernetes (and I'm not sure if it's already decent nowadays). See my blog for more info: https://blog.42.be/2020/11/using-nomad-to-deploymanage-conta...
People looking for simplicity should really give Nomad (https://www.nomadproject.io/) a chance.
I'm running this in almost IPv6-only setup (https://blog.42.be/2020/11/using-nomad-to-deploymanage-conta...). I'm so glad I don't have to mess with overlays and NAT.
https://github.com/42wim/matterircd for example You can use your favorite irc client to connect with the ircd to talk to slack (of course it has almost the same limited irc issues)
Take a look at https://github.com/42wim/matterbridge which bridges a lot of protocols.
It only support public channels at the moment, but we're planning to add user/user communication too.
Check out matterbridge (https://github.com/42wim/matterbridge) which bridges gitter, irc and much more :-)
Yes, it does mark them all as read. (because they're technically read by the irc client, even if you haven't yet)
I'm open for ideas on how to fix this, eg manually sending a /quote read command is maybe an option with irc client plugins.
(feel free to open issues with feature requests btw)
Maybe https://github.com/42wim/matterircd can help you. It also supports slack (experimental)
Maybe https://github.com/42wim/matterircd could be useful.
Originally made for mattermost, but I'm adding slack support (currently in master and only basic).
Owner here, site is almost 6 years old. There is no point to it, I was just trying out some fun things to do that wasn't possible with ipv4.
It's also not made for much traffic :)
Made something similar, but for pinging multiple hosts at the same time - https://github.com/42wim/gomphs