aus_

These are handy when you are stuck on a connection that blocks everything but HTTP(S), like many corporate environments.

Many of these web-based ssh tools are based of the excellent term.js[0].

[0]: https://github.com/chjj/term.js

Someone is submitting false keys in their POST data :D

  -----BEGIN RSA PRIVATE KEY-----
  MIIEowIBAAKCAQEAwYUYN1fR2/z+Net8DdDhNR7poeX608gwFNDVTQZNjldwi503
  cLCaFbPpGkkh84sxpsL0PqrMx9OprdNaMPe0ewuTjjZyb1MaqzfXz/XCiOaT7kWZ
  P9bRae2cI5CETZHD/CvWjsxZ+0exFRSGtph+3esDuvwGQprfYY8d2PIpPOFDgIW7
  gCX6/xTpB+3PCt8lQYbrYiOIogrI+1xpqp5WBCHRzL6La/Zhav1Q6rrSHk1woGdk
  gJBNr3k8NsOjFfNbJgLTgsOz7Yu7Wh6UiV7Y5BMxzuK0eMlJey9ODkyFwhG/pnMg
  qeMf4j1bfaA9AdI8sffSd+1hY9tbt4vfZhBphQIDAQABAoIBACGh/glwS9rN52h7
  mr3T9bADxVsL20H/YsvbV5bhZ407iSXalw4Qw1bOQ877stje8iwnaceSa7C3CqBZ
  QS2Nf2J7KpPmxpCugs4LEIjmD383g7I/iljb/t1IHIDZ1wScNtGW1N1QirrvRMmD
  Hb6SVko/VBClSHk+7V/JPci8nYok1vWytXyi/QJ8EaQ5FPglm3n+QHBnFdl3A8qn
  cWpK3t6BYijkJAK5PNIc1g0YxkSerG5hwCqWleRt29V5QPZqgEc0raSFolN0XOo6
  8us1z37IDRGvm0sHbGgKfi3/Mj+b3Npa+0cQgsGVmymLjyMSf/cLiF0c3rDpHamY
  NqsFj8ECgYEA4JHeIM0M/MVCbUaqCFOtGYmRK9CL8eoAGVJgXa96Z+gP7W/bAjw9
  IEe9NeGIwr2KidZljyv23CwK1Fn7nDuloG5ZXvzpP3jNRJ62Z0Y6RkICpWgpN1HL
  uUG6R4LlB3mXyYE4UGoNAxfgWRcPAn0vsKIuY5/N69FBXiE9h6cjHVkCgYEA3Jq8
  v/qx7T73p9iUFAFDUNF/poQShqimGdfubMSbhUBXGkx5hPyKYUrzUwwZTlLwo4SB
  +nP1cuJUdnEY+ZlzSxvh/EADvxiq20aUm7R+o+GXc68JZBmUKg+tQVSTw+Us8uds
  w1jhFa+b4UpSR+ZHOhR5Hhiw1mdRPu5TAwdtzA0CgYBJpQxnTVdY/YePNoFEQcye
  d1K4P6flKYvmwfEASC+oK54ti2UTEpYpI92U8eVbl7T7Bug/T3ehNIBIq0msLpNe
  TVHZqK8FNaR7QGEo9QrfR35+p+38SkK4+ikQkohxLxrr5giFtoGV5hqYnMs7Ubp1
  /nmgCiQJlZIOQHBhMBp/4QKBgEog3OgNz5gPHp0SE8AdJIeVvjUwECGbriTlAEMg
  VboTArHdnL/pNH649sajPCWrjR0FO7/zEzlFgGhEXMYSoEFO30MqJ5ghK9h/ARTJ
  M/zRo1jGKnuudLElj2xyhSzAZ7g/t7Z0uT3WQqUTmk56vNhxZLmORm3lTdG9t7s+
  1dBJAoGBAJWKz/T/0PQLOOggof0KzEciehWuLcV0eLid16DaNWwiVkm88zt54MdB
  FkbsXWJpQxYpKCxt4XaZGBVP5yLIkrWjElWMtrZPh3pYR8WJQTwosv74n7roBt80
  9ejTR8GQ7401BS7foMjCnVevrl2UwN5SPvtYsLLEMxYGGgSwfz9D
  -----END RSA PRIVATE KEY-----

I work for a large financial company. At our shop, we are currently building out an internal cloud infrastructure where we build on too of the OpenStack API to provide users with self service deployment much like AWS.

In order to deploy to production, we mandate a process requiring users to have an existing chef recipe before any production guest can be deployed. We also restrict logins to existing production nodes unless there is an emergency. (This attempts to keep configuration management entropy to a minimum.) all of this works ok, but I think it could be better with Docker.

In a few weeks, I have a chance to present a new idea to senior executives. I'd like to pitch Docker, at least as something to keep an eye on. Any thoughts on what points I should drive home?

I just saw Wolf of Wall Street this weekend. Has anyone in sales been asked "sell me this pen" in an interview?

Definitely. He did some amazing stuff with the original Xbox. Somewhat dated, but worth a read.

His ebook has been made freely available in memory of Aaron Swartz:

http://bunniefoo.com/nostarch/HackingTheXbox_Free.pdf

ZFS is great. But one thing scares me away from using it. With ZFS, you can't just simply add a new disk raidz set. You have to either build a new pool to send your data to, or :

1. Buy the same amount of (but larger) hard-disks 2. Replace them one by one 3. After the last disk is done, the size will grow. 4. Sell your old hard-disks.

Much more painful then other raid solutions.

This is more than a terminal in your browser. It is an HTTP server that serves a Javascript-powered terminal connected to the box. You effectively have a secure shell connection encapsulated in HTTP(S). Perfect for restrictive environments.

Similar Web-based SSH[0] projects include:

• shellinabox

• GateOne

• AnyTerm

• AjaxTerm

• tty.js

I currently use GateOne. It's a little bloated and buggy though. I may give tty.js a shot. I've heard good things.

[0]: http://en.wikipedia.org/wiki/Web-based_SSH

The Secure Shell Chrome Extension is actually quite different than what is being offered here. The Chrome extensions is effectively a SSH client, like PuTTY, in a browser. You still need a network path to the host.

Onion Terminal is a HTTP server that serves a Javascript-powered terminal connected to the box through HTTP in your browser.

The benefit of the latter is you can get a shell on your box behind a restrictive firewall where only HTTP(S) traffic is allowed.

You're right. They would never allow you to create a business out of offering mainframe-as-a-service. But internally, offering this service to your developers in a large enterprise is feasible.

This isn't actually too far fetched. IBM has a product called Rational Developer and Test Environment for System z[0] which allows you to run z/OS or any other s390 architecture in their hypervisor. Think of it as an enterprise version of Hercules that runs the latest version mainframe software. (Hercules can but licensing prevents this.) You could then essentially build a real "mainframe-as-a-service" (as you said) by deploying a Linux VM that has RDT installed and configured. Mainframe developers can spin up their VMs for on-demand dev and QA enivornments.

I know, because I am the system programmer who set this up internally at my company.

[0]: http://www-03.ibm.com/software/products/en/ratideveandtesten...

The killer feature is I/O and proximity to mainframe data. With hipersockets, you get memory-to-memory speed networking to your mainframe data. You just can't replicate that in VMware.

Nationwide is the poster child of consolidating on zLinux. [1] But of course, that's all marketing from IBM. I believe their target market is to customers who already have the z hardware being used for their z/OS processing. The infrastructure is already there, then customers just pay for the increasing in IFLs.

[1]: http://www-01.ibm.com/software/success/cssdb.nsf/CS/JSTS-7JE...

Mainframer here. Hercules is a pretty amazing piece of software. (Fun fact: One of the main developers, Jay Maynard [1], is also known as the "Tron guy") Unfortunately, Hercules is as close as the average person can get to the platform without working for a corporation that runs z/OS (the modern successor to MVS) or Linux for System z (s390x Linux running on mainframe hardware) in their shop.

The platform has a big image problem. I personally blame IBM for not maintaining relationships with their education customers in the early 80s. The high cost of the hardware drove universities to adopt the new and exciting (ie cheaper) distributed platforms, and thus breeding a generation of distributed-minded graduates never even hearing about the mainframe platform except in history books. I know, because I was one of them.

Now the industry is now facing an exodous of their mainframe experts as most near retirment. The average age is something like 55-60, ready to retire [2]. There just isn't any young, talented mainframers being educated. IBM has realized this, and they've started the "IBM Academic Initative" to partner with schools and incorporate mainframe into their curriculum. It's a start, but the damage is done.

The technology, however, is top notch. The closed-source software/hardware model provides a lot of performance gains over the open source model. z/OS is updated every year and IBM releases new, faster hardware every year. And it's not always more expensive. An EC10 can consolidate several racks of Linux blades into its zVM hypervisor (btw IBM has been doing virtualization for 30+ years) while processing 145,000 credit card transactions per second into a single refrigerator-size machine 24x7x365.

If you are looking for a new career, consider mainframe [3]. It's the backbone of financial, retail and data processing industries. It may not be as glamorous, but it's not going anywhere. And when all that old mainframe talent retires, you can write your own check.

[1]: http://en.wikipedia.org/wiki/Jay_Maynard [2]: http://www.businessweek.com/stories/2010-08-03/big-tech-prob... [3]: http://www.forbes.com/sites/rogerkay/2012/01/30/kids-see-a-f...

PCWorld reports he "hacked IBM mainframes". [1] I would be interested in knowing the details of this. I am a sysprog for z/OS for a financial institution by day, and I have never heard of any sort of intrusion like this. Not that these systems are completely bulletproof, but I expect there is some fabrication in these statements. These systems are usually deep in the backend and obscurely buried in archaic and proprietary architectures. Unless Warg had any experience with this platform or some sort of inside help, I highly doubt this allegation.

[1]: http://www.pcworld.com/article/2034733/pirate-bay-cofounder-...

I'd like to thank the developers for this great project. I finally convinced my team to switch over from SVN to git after I showed them Gitlab. (GitHub was never an option due to corporate data security policies. Even for GitHub private repos.)

I believe the developers chose to develop on GitHub so the project would get more exposure to the open source community. And because Gitlab.com is more oriented to private repository hosting. [1]

[1]: https://github.com/gitlabhq/gitlabhq/issues/3187