Linux Kernel open source pioneered infrastructure stacks

LAMP

Linux, Apache, mysql, php

Original vector for open source adoption

Linux Kernel Open Source is a code forward methodology

Meaning architecture, apparently, isn't necessary because proposing fetures requires showing the code

This is complete rubbish

Linus torvalds required something he called "taste"

Which is architectural thinking demonstrated in readable code

So in reality, architecture is ebedded in the design process

However, code forward open source ties architecture deeply to infrastructure

showing the code and encouraging proving by using can't be divorced from the infrastructure context

Security is an easy target so let's take a few pot shots

Security people think deeply about subtle problems

They rarely think simply about user issues

How do I create a Java Web Token in Python using a Yubikey?

Using python jwcrypto library should be able to plug in and sign

Actually no; let's see why

Python cryptography can't address USB tokens

Because OpenSSL file API doesn't recognise token URIs

OpenSSL requires you to use a special pkcs11 engine

One solution was to replace all python crypto with a gnutls stack which can

Months of work

Another pot shot at security oriented architectural thinking

pkcs11:model=SoftHSM%20v2; manufacturer=SoftHSM%20project; serial=6927071f73076f39; token=testhsm;id=%a1%b2; object=MY%20KEY;type=private

There's no URI for "I've only got one token, just use it"

Precise transport of immutable infrastructure is the foundation of DevOps

This is a paradigm shift from hypervisors which always mutated as they executed

This paradigm shift is providing the impetus for Container adoption

Containers Provide Immutable Infrastructure

Wrong: System Containers (LXC) are fully mutable

The Docker image file provides Ephemeral Infrastructure

Ephemeral is Mutable but all state is lost on restart so all persistent objects must be in the original image

So is Ephemeral the same as Immutable?