Richard Chamberlain

Embark on a journey to better Linux security and smarter home labs. Discover SSH security, firewalls, Proxmox VMs, and more with Sebos Cyber Quest!

[Richard Chamberlain @SebosInfo]

I used to have two dogs that looked scary but always wanted to play.

A lot of IT monitoring is the same — looks like it's watching. Nobody's actually watching.

This Grafana dashboard actually watches.

Build it → https://t.co/mA5wE9mBej

[Richard Chamberlain @SebosInfo]

Prometheus. Loki. OpenSCAP. Three tools.
Three separate places to look .

Grafana fixes that:
→ One dashboard connecting all three
→ Unified alerting from one platform

Full guide → https://t.co/4RT3PidiKB

#Linux #Grafana #Observability #SinglePaneOfGlass #Prometheus #Loki

[Richard Chamberlain @SebosInfo]

OpenSCAP scans Rocky Linux, Ubuntu, and Kinoite desktops against CIS Benchmarks automatically.

SCAPinoculars puts the results in Prometheus. Grafana alerts when compliance drifts.

No clipboards required.

Full guide → https://t.co/V0AoJ4vyU2

#OpenSCAP #Prometheus #Grafana

[Richard Chamberlain @SebosInfo]

Prometheus tells you how your systems behave.

Loki tells you what happened.

Full observability stack. Open source. No vendor lock-in.

Full guide → https://t.co/kWJ2VO9MzH

#Linux #Loki #Grafana #LogAggregation #Observability #Promtail #SysAdmin

[Richard Chamberlain @SebosInfo]

Servers: Monitored with Prometheus.

Desktops: Ignored until they fail.

Better approach: → node_exporter on every desktop → Prometheus time-series metrics → Historical trend analysis → Proactive detection
Full guide → https://t.co/yqbLIQIfNW

[Richard Chamberlain @SebosInfo]

Kinoite + OSTree + Ansible = → Custom images per department → Test-before-production → Atomic updates → Instant rollback

Zero configuration drift. Complete control.

Full guide → https://t.co/MkGoc1RpJm

#Linux #Kinoite #DesktopManagement #Automation #OSTree #DevOps

[Richard Chamberlain @SebosInfo]

Built an OSTree repository for corporate Kinoite deployments.

No more "update and pray." Just test, deploy, rollback if needed.

Full configuration guide → https://t.co/wdo5NyQPJw

#Linux #OSTree #rpm-ostree #Kinoite #SysAdmin #Updates

[Richard Chamberlain @SebosInfo]

Built an internal Flatpak repository to end the corporate audit week panic cycle.

No more uninstalling tools before audits. No more shadow IT. Just approved software, clear audit trails, and happy developers.

Full technical walkthrough → https://t.co/pSOZeacsy9

[Richard Chamberlain @SebosInfo]

🔒 One free charging cable = potential compromise

Immutable Linux distros change the security equation:

Read-only base (malware can't persist)
Atomic updates (no partial failures)
30-second rollback (vs hours of recovery)

https://t.co/rcnq2HfNlJ

[Richard Chamberlain @SebosInfo]

Should East Coast users be able to print to West Coast printers? Managing 100+ CUPS printers nationwide taught me: printer-level security matters. I

📖 https://t.co/B0s9rWJHG1

[Richard Chamberlain @SebosInfo]

Prototyping a large SMB infrastructure in Proxmox: 11+ VMs, 8 VLANs with OPNSense routing, Ansible automation, dual backup layers. Testing everything virtually before production deployment. Here's my approach to infrastructure prototyping.

📖 https://t.co/SeTPVHgkhg

[Richard Chamberlain @SebosInfo]

Why give every user admin access to your CUPS print servers? CUPS supports role-based access control (RBAC) to assign permissions per user role. Here's how to secure your print infrastructure with granular access control.

📖 https://t.co/8ODfgrVOId

[Richard Chamberlain @SebosInfo]

"The most dangerous phrase: 'We've always done it this way.'" — Grace Hopper

Building enterprise Linux security for small business: Samba AD, SELinux, Auditd, Ansible.

Zero licensing costs. Enterprise-grade protection.

Project series: https://t.co/3c5ZWwdZai

[Richard Chamberlain @SebosInfo]

🔒 New article: Remote Verification for AIDE

Explored distributed verification for Linux file integrity monitoring — moving from single-node trust to independent validation.

🔗 https://t.co/TQoSckUOUY

#Linux #Security #AIDE #CyberSecurity

[Richard Chamberlain @SebosInfo]

What if file permissions could describe your day?

Would 400 be quiet reflection — or a “leave me alone” kind of mood?

Would 440 be when you share that idea with a friend, just to get it out there?

https://t.co/UEJnl8qWl5

[Richard Chamberlain @SebosInfo]

👀 NSA-built. Open-source. Root-proof.

That’s #SELinux—Linux’s most powerful (and misunderstood) security system.

Learn how it works, why people disable it (and why they shouldn't):
🔗 https://t.co/UOGrg2XzF1

#Linux #DevSecOps #Infosec #SecurityTools

[Richard Chamberlain @SebosInfo]

Hit a wall trying to secure #ROS2 with SELinux? I did too. 🤯
Switched to AppArmor—quick setup, but colcon didn't play nice.

🛠️ Here's why AppArmor wasn't the right fit:
👉 https://t.co/yddDrpHoGx

#LinuxSecurity #AppArmor #SELinux #DevSecOps #Robotics

[Richard Chamberlain @SebosInfo]

"🛡️ Complete Guide to Fail2Ban: Protect Your SSH Server from Brute Force Attacks " by @SebosInfo #DEVCommunity https://t.co/ZCA7JjVFvN

[Richard Chamberlain @SebosInfo]

Learn how to monitor and secure your projects using #Auditd and #Linux tools. Don't wait for a breach—audit and secure NOW! "🛡️ Securing ROS2 Robotic Projects with Auditd: A Practical Guide" by @SebosInfo #DEVCommunity https://t.co/HRgOMMIcDG

[Richard Chamberlain @SebosInfo]

Secure your ROS 2 robot with real-time network monitoring! Learn how to install and configure #Suricata on Ubuntu 24.04 to detect suspicious traffic like DDS and ICMP. Part of our full #ROS2 security series for robotic systems.
@SebosInfo #DEVCommunity https://t.co/5DJPiphK4S