Get the most recent info and news about Swapzone on HackerNoon, where 10k+ technologists publish stories for 4M+ monthly readers.

Swapzone is an instant cryptocurrency exchange aggregator. Browse by rates, user reviews, and exchange time to swap 600+ crypto assets instantly on Swapzone.

Swapzone

swapzone

It provides a simple and easy-to-use interface for swapping cryptocurrencies conveniently. Swapzone is an instant crypto exchange aggregator that helps you find the best deals available. It compares rates from over 15 registered crypto exchanges worldwide ...

Cryptocurrency Exchanges for Secure Trading

Where to Buy Volt Inu Purchasing Volt Inu can be a challenge, but one option is to buy it from Swapzone. Other platforms include Uniswap (V2), Gate.io, Poloniex, and MEXC. For storing Volt Inu tokens on the Ethereum and BSC network, the token is compatible ...

Volt Inu Price: Complete VOLT Breakdown for 2023

One such strategy involves utilizing cryptocurrency exchange platforms like Swapzone to optimize your crypto holdings. How Swapzone Can Help Swapzone is a cryptocurrency exchange aggregator that ...

Swapzone Predicts Crypto Market Trends in 2023-2024

LetsExchange, an industry-leading exchange platform supporting the largest number of cryptocurrencies worldwide, and Concordium, a public-permissionless Layer 1 blockchain enabling identification ...

LetsExchange Lists the CCD Coin and Initiates Cooperation with Concordium

SHIB, BONE, LEASH listed on crypto exchange aggregator Swapzone, a noncustodial crypto exchange aggregator, now supports the Shiba Inu trifecta: Shiba Inu (SHIB), Bone ShibaSwap (BONE), and Doge Killer (LEASH). Huobi, a Seychelles-based exchange ...

Shiba Inu (SHIB) Added to Verifiable Assets on Binance: Details

Instead of endlessly hopping between multiple platforms in search of the best rates, cryptocurrency exchange aggregators could become your next go-to solution for seamless crypto swapping. In this blog post, we will explore crypto exchange aggregators, what makes these resource-efficient services popular, and how they can help you whether you are a professional crypto trader or a regular user looking to simplify your experience. Let’s dive right in! Nice… But What is a Crypto Exchange Aggregator? First and foremost, a is a platform that provides users with a consolidated view of different exchanges and their rates. Instead of manually searching through various services to find the most favorable conditions, an aggregator does all the legwork for you in one place. These aggregators gather data from multiple cryptocurrency exchanges and present it to users in a clear and user-friendly format. They allow traders to compare prices, fees, and available trading pairs across different platforms without needing to navigate between multiple tabs or windows. There are different types of crypto exchange aggregators available in the market. Some focus on comparing spot prices across various exchanges, while others specialize in finding the best liquidity or offering advanced trading features like limit orders or margin trading. The primary function of these aggregators is to save time and effort for traders by streamlining the process of finding optimal trading opportunities. By presenting the most up-to-date information from multiple exchanges, they empower users to make informed decisions about when and where to execute their trades. crypto exchange aggregator Let’s Talk Benefits! Okay, okay, we get it! Crypto exchange aggregators are so cool, but how do we actually benefit from using one? Well, when it comes to trading cryptocurrencies, having access to multiple exchanges can be a game-changer. This is where crypto exchange aggregators come into play. These platforms allow you to compare and swap cryptocurrencies across different exchanges and on top of that save your time and - yes - possibly even your money! By collecting prices from various exchanges, aggregators give you real-time information on the most favorable rates available. This means that you can get more value for your trades and potentially increase your profits. Crypto exchange aggregators prevent users from wasting your money on unnecessary fees, when there is another service that can do the same swap for $0. In addition to these benefits, using a reputable crypto exchange aggregator also ensures enhanced security for your transactions. These platforms typically do not require KYC and only integrate with established exchanges that have robust security measures in place, reducing the risk of fraudulent activities or hacks. Can You Drop Some Names? Of course! When it comes to choosing the best crypto exchange aggregator, there are several factors to consider. Each aggregator has its own unique features and functionalities that cater to different needs and preferences of users. However, one aggregator that stands out from the rest is . Swapzone supports over 1600+ (!) cryptocurrencies. For instance, if you want to change your USDT, you can choose between 20+ networks without switching between multiple services. With just a few clicks, users can compare rates from different exchanges and find the most suitable deal available in real time. Swapzone One of the key advantages of using Swapzone is its transparency. The platform provides all relevant information such as exchange rates, fees, and estimated transaction times upfront so users can make informed decisions before initiating a swap. This level of transparency builds trust among users and eliminates any hidden surprises or unexpected costs. Another standout feature of Swapzone is its extensive network of trusted exchanges. By partnering with reputable exchanges, Swapzone ensures that users get access to liquidity pools with competitive rates while minimizing the risk associated with engaging lesser-known platforms. In addition to these benefits, Swapzone also prioritizes privacy, therefore there is no KYC requirement and your data will not be stolen or sold to third parties. Besides, to give users peace of mind, there is 24/7 online chat support available. According to the Swapzone team: Crypto is more about the idea, and fintech in general is about making it easier for the user to interact with tools and services. At Swapzone we solve this exact problem - helping users save money, time, and personal data by aggregating the most compelling exchange offers in just one interface. When it comes to finding the best crypto exchange aggregator for your swapping needs, Swapzone emerges as a great choice thanks to its intuitive interface, transparent approach, extensive network of exchanges, and commitment towards security. Final words In today's fast-paced and ever-evolving world of cryptocurrencies, having a reliable and efficient platform to swap your digital assets is crucial. Crypto exchange aggregators offer a multitude of benefits that make them an excellent all-in-one solution for both novice and experienced traders. From saving time and effort through rate comparisons on multiple exchanges to gaining access to an extensive selection of cryptocurrencies while prioritizing security – these benefits make using a crypto exchange aggregator highly appealing.

Cryptocurrency Exchange Aggregators - Your Next Go-To Solution For Crypto Swaps

Introduction, or running ahead of the locomotive So, the about the connection between two DAOs showed that the topic of NFTs has not faded in the hearts of readers. Therefore, today we will try to delve deeper into the and uncover the most interesting vector of Web 3.0: the market of programmable assets and, in particular, NFT 2.0. first article forest How to absorb NFT new formats? I understand that not everyone is interested in an academic format as it can be tedious, boring, and lengthy. However, if you are a true , I recommend the following research on the topic (just in case?): netstalker : , , Opportunities & Challenges; Non-Fungible Token (NFT) Overview Evaluation — The Interactive NFTs; NFT 2.0 : Unlocking NFT Liquidity; MetaFi NFTs; Wrapped . A Deep Dive into the Financialization of NFTs; NFTs & DeFi to Wrapped NFTs; A Beginner’s Guide NFT 2.0?; What is of NFT 2.0; A Brief Overview : New Era of NFTs. NFT 2.0 Certainly! Now that you understand that the topic was not created by me, but has been researched by me for the past three years, let's dive deeper. Shall we? Let's do it! Projects Here are some projects that I was able to study before writing this text: Abacus, Arcade, Bailout, Bend DAO, Cally, Cardinal, Charged Particles, Drops, DAO Envelop, Floor DAO, Fuku, Hook, JPEG’d, JpeX, Meta block,s Mimicr,  Mnemonichq, Mycelium, Nested, Nextround, NFT2point, NFTembe,  NFTfi, NFTftrade, NFTperp, NFTx, NIFTY, Options, OpenLand, Opensky, Optic.xyz, PartyBid, Putty, reNFT, Reservoir, Rmrk.app, Solv protocol, Spicy, Stater, SudoSwap, Swap.net, Taker, Themis, Theos, Triber3, TrustNFT, UpShot,  Vinci, YAWWW. "In total, over the course of three years, there have been more than 50 such projects. And I present this list to you for one purpose, so that you can finally understand that this is indeed a , not just a collection of thoughts on the subject. Well, knowing this, let's try to answer the first important question: "what types of NFT 2.0 are there?" Shall we try? Easily! trend NFT 2.0 types It seems that all the articles listed above lack depth and detail in terms of practicality, and therefore realism. Shall we try to fill this gap? Yes, of course! The following terms can be considered as general (collective): (sometimes mixed with NFT 1.5, such as financial NFTs); NFT 2.0 (although sometimes a subset called dNFTs is understood under this term); Interactive NFTs (there is also no standardized approach here); Smart NFTs ; NFTs Programmable There are also a number of rarer categories. There are also several other less common categories. Of course, this list will be open-ended, but here is a list that appears in the overwhelming majority of research, which tries to divide NFTs by functionality: Fractionalization (Fractional, Unic.ly, NFT20, etc.); Landing (TrustNFT, BendDAO, JPEG'd, etc.); Indexes (Envelop, NFTx, BridgeSplit, Index, etc.); Investment DAOs (The LAO, Flamingo, Palm, Pleasr, etc.); Marketplaces (OpenSea, Rarible, Gem, etc.); Derivatives (Envelop, Fuku, Putty, Nifty Options, etc.); Financial NFTs (Axie, Sandbox, StepN, etc.); Rental (Unitbox, Rentable, Prom, reNFT, etc.); Pricing (UpShot, Taker, SudoSwap, etc.); Analytics (Dune, NFTgo, Nansen, etc.) The problem with this approach is that it mixes NFT 1.0 (on OpenSea, for example), NFT 1.5 (NFTx), and NFT 2.0 (Envelop, JPEG'd, etc.) together. Moreover, there are many projects that will always be at the intersection of these categories: . example Let's try to categorize specifically NFT 2.0. Dynamic NFT (dNF) Example: . chain.link/education-hub/dynamic-nft-use-cases Many GameFi projects are developing this type of NFT (such as through controlled smart contract updates, through NFT rental cycles across different services, and so on), but the most interesting vector appears to be at Chainlink: verifiable data change is crucial for industries such as weather forecasting or insurance, and even more so if they are combined. SharkRace Unitbox Therefore, the essence of dynamic NFTs can be defined as follows: these are NFTs whose metadata can change depending on external (or occasionally internal) conditions. There are several types of dynamic NFTs: Sports-related: The Association; LaMelo Ball; Art-related: Jackson NFT; ; Ogcrystals ; Botanicatrees NFTofDAY; Game-related: Aavegotchi; SharkRace; Major League Baseball (MLB) Real-world sector: The Eternal Pump; Regenerative Resources (RRC); Gold Change NFT; Many others. However, a more nuanced categorization of dNFTs can be based on a deeper basis: , where metadata changes through an oracle (Chainlink and its analogs) dNFT , where metadata changes through joint creation and multisig signing (NFTof.day); cNFT , where metadata affects gameplay and changes on-chain rather than off-chain entities. gdNFT As for , these are so-called "community NFTs" that are created gradually and by different actors, and then changes are sent to the blockchain. This is a kind of synthetic act of creation. cNFT In this sense, the evolution from static NFTs (sNFT) to dynamic ones (dNFT) can be achieved in several ways: through cNFT; through changeable metadata (including with Verifiable Randomness Function (VRF)); by adjusting smart contract variables (SharkRace). So, a (dNFT), or a "living NFT", is an NFT that can change depending on external conditions. In the static NFT model, each NFT can be distinguished from another using a single token identifier and a unique contract address. Metadata, such as images, video files, or other data, can be attached to it, which means that you can own a token that represents a unique digital object. dynamic NFT If you want to learn more about dNFTs, I recommend this and this , or alternatively, this “ . Let's keep going! article supplement ” material Wrapped NFT (wNFT) Despite the fact that different projects call these NFTs differently, it is still worth acknowledging that they all have the same essence in the process: by wrapping interchangeable tokens and/or coins, as well as other NFTs, assets of a completely different order are created. And the term "wrapping" should be strictly technical and organizational, as we all know: wBTC as a custodial solution for transferring BTC to the Ethereum network; Wrapped assets of first-generation cross-chain bridges; Various derivatives created using this technology; Other assets. Among the projects that specifically create wNFTs, I would highlight: (2020 - idea, 2021 - MVP, 2022 - release); DAO Envelop (2020, 2021, 2022); Charge Particles (2021-2023). Solv Finance It should be noted that the emergence of these small projects has influenced much older and larger services, such as Rarible, which since June 2021 has from an NFT marketplace to a protocol; AAVE has tested its approach to programmable assets; and even in the Ethereum ecosystem, the standard was born. Not to mention much initiatives (but no less at the same time). requalified ERC-3525 smaller important Initially, is the process by which a token is locked on the blockchain through a smart contract, and its equivalent is "recreated" on the destination blockchain. is the replacement of one set of token interaction standards with another set. wrapping Token wrapping As for (wrapped NFTs), these are modernized NFTs with extended functional capabilities such as economic setting, on-chain royalties, rental mechanism, time/cost/event locking, protection against devaluation, and . wNFTs fraud protection system Hence, I call wNFTs - NFT 2.0, because this approach seeks to change the principles and rules of fundraising in particular and some other industries as a whole. An example of a general explanation. Approaches related to wrapping are generally similar, although details can always be distinguished: №01, №02, №03. And on these examples, we clearly do not finish, but we need to take one more step. Forward! example example example Financial NFT (fNFT) This passage discusses financial NFTs, which can be classified as both NFT 1.5 and 2.0 depending on their usage: If NFTs are used as collateral for services, then they fall under the 1.5 category, whereas if they are programmable to create innovative practices, then they are considered 2.0. NFTs are an improved version of NFTs with a new token standard that allows for multidimensional asset attributes to be expressed in token form. Financial Several projects have used NFTs in financial applications, such as for fixed-rate lending, for insurance token coverage, and NIFTEX for financing NFTs using ERC-20. The most well-known implementation of financial NFTs is probably the LP token of Uniswap v3, which allows for transferring NFTs with liquidity, high trading ranges, and uncollected fees, making it easier and also providing protection against vampire mining. 88mph Armor Finance pre-embedded encompasses fractionalization, lending markets, investment DAOs, derivatives, and pricing, among other things. This market is evolving rapidly and has a lot of potential. For instance, the growth of lending markets that utilize NFT mechanics has led Uniswap to enter into negotiations with leading NFT protocols for loans and credits in 2022. NFT x DeFi The reasons are: , the obvious conclusion is that evolution is inevitable. Firstly , we can move from a general statement to specifics: for example, the gradual growth of credit markets involving various NFT mechanics has led, in particular, to Uniswap starting negotiations with leading NFT protocols for loans/credit in 2022 (see ). Secondly link From here, we can discover an obvious discrepancy in indicators. What kind? I will show it now. Let's compare : Graph №01 Where we see a clear increase in the "Utility" category. And in this case, the priority remains explicitly with another category, namely, "PFP", which indicates a discrepancy between existing (widely accepted) and emerging (unnoticed) trends. The data can be verified at this link: . nftgo.io/analytics/market-overview But the question is becoming increasingly irrelevant. A lively and innovative sub-market, known as ( + ), emerged around NFT financing - regardless of how creators want to classify the nature of their projects. NFTFi Non-fungible-token Finance It is hardly surprising that such a market has emerged. In 2021, the trading volume on the NFT market was $17.6 billion. This is a staggering 27% of the sales volume in the world's traditional art markets ($65B) in the same year. You know what happened next. But there is something that not everyone pays attention to. For example, one can imagine that NFTFi is . It allows for more efficient forms of NFT trading - from swapping, hedging, fractionalization, and valuation - to full-fledged, automated rentals. simply DeFi applied to NFT Let's look at the largest sub-sectors in NFTFi: loans/credits. Financial applications and tools have emerged on the market that address NFT issues aimed at increasing and improving certainty in asset pricing, as well as improving the use of funds on NFT markets by combining NFTs and other finances to create a better user experience on the NFT market, collectively referred to as " ". liquidity dAPPs NFTfi Until 2022, almost nothing was heard about NFT lending/borrowing, but it gradually began to appear in conversations. There are two main ways of NFT lending/borrowing: P2P (peer to peer) and P2Pool (peer to pool). Representatives here include protocols such as and . They differ in transaction frequency, volume, and price discovery efficiency, but these are details. The main thing is that the overall market is still relatively small compared to the market for interchangeable tokens. And coins. NFTfi BendDAO Current NFT lending/borrowing remains in the realm of "blue chips"; as for low- and mid-level NFTs, they have not yet gained wide recognition in the market due and . to high price volatility the lack of oracles In short, NFTs are becoming suitable for various financial instruments such as collateral, staking, and leverage for exchange tokens or stocks. And? In the future, when the accumulation of historical trading prices gradually complements the NFT quotation mechanism, the NFT market will become more liquid than ever. \But a couple of important theses are still to come. NFT-based lending The Rocket LP DAO cryptocurrency lending platform once issued a loan secured by the brantly.eth domain name of the Ethereum Name Service (ENS). In turn, the press service of the NFT marketplace X2Y2 announced that from October 9, 2022, users could use their own NFT digital collectibles as collateral to borrow Ethereum (ETH) from other lenders. And do you know what all this is about? That the lending market in the DeFi segment will never be the same again. Interesting? Then here are three more articles: , , . one two three But this market is not the only one going through harsh turbulence. What else? You will find out now! Royalties 2.0 Creators of Ethereum-based NFT collections have earned over $1.8 billion in royalties. Impressive, right? By the time this article is published, the figure will likely be even higher. But if a billion dollars doesn't impress you, then there's not much that can. At the time when the staggering sum of $1,800,000,000 was reached, just 10 organizations accounted for 27% of all royalties earned, while 482 NFT collections accounted earned at that time. for 80% of all royalties Since then, much has changed. The DeGods ecosystem removed royalties from all of its affiliated NFT collections (DeGods, y00ts), even though DeGods founder Frank had defended royalties on Twitter and still believes that royalties are between operators and holders of NFT collections. the best mechanism for aligning incentives Fast-forward to 2023 and the showdown between . Interesting, right? OpenSea and Blur "Some marketplaces have also changed their royalty payouts (or removed them), for example, x2y2, while the largest marketplace, OpenSea, has not". First of all, now everyone is following suit. In addition, the largest Solana NFT marketplace, Magic Eden, made a controversial move by making all royalties on its platform completely optional. Magic Eden's latest move to eradicate royalties is especially noteworthy given that they announced MetaShield, a controversial tool aimed at improving royalty control, back in September 2022. Royalty supporters are worried that normalizing their removal will return the NFT space to the dark ages of traditional creator structures, as happened with Van Gogh. incentivization On the other hand, opponents of royalties claim that mechanisms for compulsory collection are impossible on a chain without serious compromises, which negate many of the advantages of blockchain. permissionless If you're interested, I recommend reading this . And as for us, let's move on! thread Fractionalization There are quite a few services here: Fractional.Art, Teller, and . But personally, I'm interested in why so many are focused on a special feature (fractionalizing indivisible assets), when in reality, it's just a small spectrum of the possibilities of NFT 2.0 as a whole. others Rent There are two fundamentally different vectors: Renting through (w)NFT; Renting actual NFTs. These processes are interconnected but can still be separated as distinct. Prom & Unitox, for example, offer similar but different approaches to solving the integration of these processes. In turn, BendDAO and JPED'd have implemented an efficient liquidity model called "peer-to-pool", which connects supply and demand in a customizable liquidity pool, eliminating the need to make bids and wait for requests. Another example is Cyan, the largest and brightest BNPL protocol. Additional information can be found , , or even . But the furthest in the connection of these mechanics is Unitbox - a project based on the DAO Envelop . here here here protocol And what about us? Let's try to combine all the ingredients together and the NFT 2.0 . taste dish NFT 2.0 as understood by ChatGPT Of course I couldn't help but give the floor to one of the protagonists of the start of 2023. Here's what he thinks of NFT 2.0. NFT 2.0" is not an established or standardized term within the NFT (Non-Fungible Token) space, and there is no widely accepted definition of what it encompasses. However, it generally refers to new and innovative developments in the NFT ecosystem that aim to improve the technology and user experience. Some possible features that could be included in an NFT 2.0 include: Interoperability: The ability for NFTs to interact with each other and other blockchain-based assets, allowing for more complex and integrated applications. Programmability: The ability for NFTs to have embedded functionality, enabling them to perform specific actions or operations when triggered. Sustainability: The ability for NFTs to have a smaller environmental impact, through the use of more energy-efficient or carbon-neutral technologies. Decentralization: The ability for NFTs to be more decentralized, removing the need for centralized authorities or intermediaries. Fractionalization: The ability for NFTs to be divided into smaller parts, allowing for greater accessibility and liquidity. Dynamic and Adaptive properties: The ability for NFTs to change or evolve over time, through smart contracts that allow for dynamic or adaptive properties. It's worth noting that these features are not exclusive to an "NFT 2.0" and many are already being developed and implemented by various NFT projects and platforms. NFT technology is still evolving rapidly, and new features and innovations are likely to emerge as the ecosystem continues to grow and mature. Problems Does this market have problems? Plenty. Firstly, there are standards: what we call them are not actually standards (take this or this , or many others). Secondly, there are no leaders, which is good for business, but for the user... they will have to make an effort not just to understand the trends, but also to "taste them" in practice. Finally, there is a lot of chaff in this market, connecting hype with hype (insignificant NFT collections with liquid markets... tokens that are of little use to anyone, for example). example one But none of these problems is evidence that the market will not continue to develop. Rather, they are a consequence of the of this sphere. evolution Outlook I can't tell you about all the vectors in this article, so I've chosen the ones that are closest to me. Unstoppable NFT Now there are already solutions ( ) where NFT connects with decentralized, tokenized storage, but it is much more interesting when the programmable NFT itself pays for storage of its metadata for IPFS/SWARM and other nodes. So far the solutions require oracle and centralization, but I believe the next 2-3 years will see a move towards decentralization. example ОТС Not using such solutions for trading is strange: the secondary market for tokens is highly in demand and reaches tens of billions of dollars, but there are -fledged solutions yet, and funds are quite conservative in their practices, so here too we will have to wait for at least 2-3, or even 4-5 years. OTC not so many full ZKP For me, this is probably the most promising direction, as bridge hacks (Wormhole, Allbridge, Binance Hub, etc.) and CEXs are all about liquidity centralization, and achieving its normal decentralization can be done through -NFTs, which require different approaches: both oracle software and oracle (humans), and improvements to existing concepts. cross verifiers Add in and you get a lot of interesting things. By the way, if this topic turns out to be in demand, I'll talk about it, but for now that's all. cross/multi-chain mechanics Bye!

NFT 2.0: the Era of Programmable Assets

This guide will help you to install Frappe and ERNext 14 on a Ubuntu 22.04 LTS hosted on Digitalocean by providing easy-to-follow instructions Table of contents Create a new droplet on Digitalocean with Ubuntu 22.04 Install all the preliminary software required to install Frappe and ERPNext Add SWAP to your server Update your server and install the LOCALES Install the NGINX HTTP server Install the MySQL database server Install the Ubuntu packages required for Python3, etc. Add a system user 'frappe' to install ERPNext Create your MySQL database SSH into your server using the 'frappe' user in a new console or terminal window Install some python3-based packages such as setuptools, etc Install wkhtmltopdf Install the Redis Cache Server Install nodejs by using NVM Install the Frappe full-stack web framework and ERPNext web application Install bench (Installing Frappe Bench CLI) Upgrade pip Install bench apps Add a new site to the bench Install bench app to bench site Test bench on port 8000 Setup production server using NGINX for your ERPNext instance Add HTTPS Start using ERPNext ERPnext is a 100% open source and FREE software developed and maintained by a -promoting company, Frappe Technologies Pvt. Ltd., based out of India's financial capital . Enterprise Resource Planning FOSS Mumbai ERPNext is the best among FREE ERPs available in 2023 such as Dolibarr, Odoo, etc. In 2018, ERPNext was rated among the top 5 user-friendly ERP systems by Gartner, surpassing Microsoft, SAP, Bexio, and several other ERP systems. ERPNext is available as a self-hosted software for your small to medium business to install on your own servers helping you to maintain your data privacy without paying a dime for the licensing fee (except the server costs). However, it is not easy for non-technical users to get the hang of it. My ERPNext installation guide below is an easy-to-follow set of instructions helping you to easily install ERPNext version 14 on a 4GB droplet hosting Ubuntu 22.04 LTS. Let's get started:- Create a new droplet on Digitalocean with Ubuntu 22.04 Signup for a new account or log in to your already existing account on Digitalocean. Once you are on the page of your Digitalocean account, click on the green "Create" button on the top right and select " from the dropdown. This will take you to the page. "projects" droplet" "Create Droplets" On the page you can configure your server by following the instructions on this page such as:- "Create Droplet" I usually pick Bengaluru or Singapore because those are the nearest to my location. Your server's data center: I usually prefer the latest Ubuntu LTS. Currently, the LTS version of Ubuntu is 22.04. An operating system image for your server: I usually pick and with 4GB RAM for a new ERPNext installation. The CPU size for your server: Basic Regular I would recommend a minimum RAM for ERPNext of 2GB with 4GB SWAP. After you have configured the server add your key for easy access to your server from your PC. SSH If you are on Windows then you can use Putty to access your server else you can simply run on your Linux terminal or Mac Command. ssh root@-your-droplet-ip-address Finally, hit the button to create a new server for your ERPNext 14 installation. "Create Droplet" Install all the preliminary software required to install Frappe and ERPNext To install Frappe and ERPNext we need to install a few essential software such as , , , etc. gcc python mariadb Follow the instructions below:- Login to your server from your PC for easy access. As I use ArchLinux thus I just have to open a window and then just into my server. Terminal ssh Replace my server's IP address with your droplet's IP address. Note:- I will delete my server post-publishing this article. $ssh root@-your-droplet-ip-address Add SWAP to your server Though 4GB RAM is enough for an ERPNext instance, however, just in case there might be a RAM-eating process so to keep our instance running it would be nice to have some SWAP. I usually prefer a SWAP of 2x of your server RAM but you can add a 4GB swap too to save disk space. . Follow the guide here to add swap: https://www.digitalocean.com/community/tutorials/how-to-add-swap-space-on-ubuntu-22-04 Verify if you already have a SWAP:- Create an 8GB SWAP:- Make your SWAP permanent so that when you restart your server then also you will have your SWAP. Adjust or tune your SWAP settings and :- swappiness vfs_cache_pressure Update your server and install the LOCALES $ sudo apt update $ sudo apt upgrade After you have completely upgraded your Ubuntu 22.04 server, then you can install which are required by ERPNext. LOCALES $ sudo localectl set-keymap us && sudo localectl set-locale LANG=en_US.utf8 If you get an error then you can follow the instructions given at to resolve this error and continue with installing ERPNext 14. Note:- Failed to set keymap: Keymap us is not installed. https://www.claudiokuenzler.com/blog/1257/how-to-fix-missing-keymaps-debian-ubuntu-localectl-failed-read-list $ sudo nano /etc/environment (and copy-paste the following at the bottom of the file after $PATH ) ####################
LC_ALL=en_US.UTF-8
LC_CTYPE=en_US.UTF-8
LANG=en_US.UTF-8
#################### Now, reboot your server for the locales and server updates. $ sudo reboot Install the NGINX HTTP server $ sudo apt install nginx (and test by opening your-droplet-ip-address in a browser window) The below section is optional, however, if you want to access your ERPNext instance using then you must follow these optional instructions. HTTPS://DOMAIN_NAME OPTIONAL Install ( doesn’t support required by thus we will use to install to generate SSL certificates manually using lets-encrypt). certbot ubuntu 20.04 certbot-auto erpnext—frappe-bench snap certbot classic $ sudo service nginx stop $ sudo snap install --classic certbot Generate a lets-encrypt SSL certificate for your domain name(s) - the certificate will be saved under at -your-domain-name-folder-name- /etc/letsencrypt/live $ sudo certbot certonly --standalone (your domain name(s) will be asked here) $ sudo service nginx start OPTIONAL ENDS Install the MySQL database server $ sudo apt install mariadb-server $ sudo apt install python3-mysqldb libmysqlclient-dev $ sudo mysql_secure_installation $ sudo systemctl stop mariadb $ sudo nano /etc/mysql/mariadb.conf.d/mariadb.cnf (and copy-paste the following to save file) https://gist.github.com/chetanmittaldev/28ea822b9815feac891d2c809f8d2598 Restart the MySQL server:- $ sudo systemctl start mariadb $ sudo systemctl enable mariadb Install the Ubuntu packages required for Python3, etc. $ sudo DEBIAN_FRONTEND=noninteractive apt install -y curl build-essential python3-testresources python3-setuptools python3-dev libffi-dev python3-pip libcurl4 dnsmasq fontconfig git htop libcrypto++-dev libfreetype6-dev liblcms2-dev libwebp-dev libxext6 libxrender1 libxslt1-dev libxslt1.1 libffi-dev ntpdate postfix python3-dev python-tk screen vim xfonts-75dpi xfonts-base zlib1g-dev apt-transport-https libsasl2-dev libldap2-dev libcups2-dev pv libjpeg8-dev libtiff5-dev tcl8.6-dev tk8.6-dev libdate-manip-perl logwatch Add a system user 'frappe' to install ERPNext Add user with password by running the commands below in your terminal:- 'frappe' 'password' $ adduser frappe $ usermod -aG sudo frappe $ rsync --archive --chown=frappe:frappe ~/.ssh /home/frappe/ Create your MySQL database Add a MySQL database with user and password by running the commands below:- 'frappe' 'frappe' 'password' $ mysql $ MariaDB [(none)]> CREATE DATABASE frappe; $ MariaDB [(none)]> SHOW DATABASES; $ MariaDB [(none)]> GRANT ALL PRIVILEGES ON . TO 'frappe'@'%' IDENTIFIED BY 'password' WITH GRANT OPTION; $ MariaDB [(none)]> SELECT host, user, Super_priv FROM mysql.user; $ MariaDB [(none)]> FLUSH PRIVILEGES; $ MariaDB [(none)]> exit SSH into your server using the 'frappe' user in a new console or terminal window $ ssh frappe@-your-droplet-ip-address Install some python3-based packages such as setuptools, etc $ sudo -H python3 -m pip install --upgrade setuptools cryptography psutil Install wkhtmltopdf install as erpnext12 requires 0.12.5 version (i am not sure about erpnext13 or erpnext14 but installed just in case):- wkhtmltopdf $ cd /tmp $ wget https://github.com/wkhtmltopdf/wkhtmltopdf/releases/download/0.12.5/wkhtmltox_0.12.5-1.bionic_amd64.deb Now, needs libssl1.1 package which is not available on Ubuntu 22.04 LTS thus we will add the packages repo for Ubuntu 20.04 and then install libssl1.1 from there:- wkhtmltopdf $ echo "deb http://security.ubuntu.com/ubuntu focal-security main" | sudo tee /etc/apt/sources.list.d/focal-security.list $ sudo apt-get update $ sudo apt-get install libssl1.1 $ sudo dpkg -i wkhtmltox_0.12.5-1.bionic_amd64.deb $ sudo cp /usr/local/bin/wkhtmlto* /usr/bin/ $ cd ~ $ sudo chmod a+x /usr/bin/wk* $ sudo rm /etc/apt/sources.list.d/focal-security.list Install the Redis Cache Server $ sudo apt install git python-dev-is-python3 python3-dev redis-server $ sudo apt-get install software-properties-common $ sudo apt-get install xvfb libfontconfig wkhtmltopdf $ sudo systemctl enable redis-server Install nodejs by using NVM $ curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.3/install.sh | bash (required to run nvm command) $ sudo reboot SSH into 'frappe' user again $ nvm install --lts (install the LTS version of NodeJS; currently, it is v18.15.0) $ npm install -g yarn Verify nodejs, npm, yarn installations:- $ yarn --version $ npm -v $ node -v Let’s summarize what we have accomplished so far. Up to this point, you have installed all the major components required by ERPNext 14, which include:- Nginx Certbot SSL Certificate Generate Python3 MariaDB DB Nodejs, NPM The Yarn package manager A Redis database cache The wkhtmltopdf PDF documents generator Whether you are installing the ERP system for development or for production, you are now ready for the next step, which is installing the Frappe full-stack framework and the actual ERPNext 14 web application. Install the Frappe full-stack web framework and ERPNext web application SSH 'frappe' system user in a new console or terminal window:- $ ssh frappe@-your-droplet-ip-address Install bench (Installing Frappe Bench CLI) $ cd ~ $ sudo chown frappe -R /home/frappe $ sudo pip3 install frappe-bench $ bench --version $ sudo apt install python3.10-venv $ bench init frappe-bench $ cd frappe-bench $ echo fs.inotify.max_user_watches=524288 | sudo tee -a /etc/sysctl.conf && sudo sysctl -p $ ./env/bin/pip install numpy && ./env/bin/pip install pandas Upgrade pip $ /home/frappe/frappe-bench/env/bin/python -m pip install --upgrade pip Install bench apps $ bench get-app erpnext Add a new site to the bench $ bench new-site -your-domain-name-or-droplet-ip-address- --admin-password -your-admin-password- --mariadb-root-username frappe --mariadb-root-password 'password' Install bench app to bench site $ bench --site -your-domain-name-or-droplet-ip-address- install-app erpnext Test bench on port 8000 $ bench start Open a new browser window and open to test:- -your-domain-name-or-droplet-ip-address-:8000 Setup production server using NGINX for your ERPNext instance SSH your server using user in a new console or terminal window:- 'frappe' $ ssh frappe@-your-droplet-ip-address $ cd /home/frappe/frappe-bench $ sudo bench setup production frappe --yes Verify if the required services work on your server:- $ sudo supervisorctl stop all $ sudo supervisorctl start all $ systemctl list-unit-files | grep 'fail2ban|nginx|supervisor' After confirming that everything is working as expected, you can test ERPNext 14 live on your server. Open your favorite browser and navigate to -your-domain-name-or-droplet-ip-address-, or wherever you are hosting your ERPNext 14 application. After a few seconds, you should see the ERPNext 14 login screen. Use for the username (email) and the you created previously for the password. Administrator erpnext_admin_password The NGINX conf file is saved in the path below:- $ sudo nano /etc/nginx/conf.d/frappe-bench.conf Add HTTPS $ sudo -H bench setup add-domain -your-cname-domain-name- $ sudo -H bench setup nginx $ sudo service nginx reload Turn on multi-tenancy for HTTPS to work:- $ sudo -H bench config dns_multitenant on $ sudo -H bench setup nginx $ sudo service nginx reload (lets-encrypt) to bench site (install HTTPS on apex domain) - frappe-bench uses the same path /etc/letsencrypt/live to get SSL certificates:- Add SSL certificate $ sudo -H bench setup lets-encrypt -your-domain-name-or-droplet-ip-address- —custom-domain -your-cname-domain-name- $ sudo -H bench setup nginx $ sudo service nginx reload {or $ sudo service nginx start} Start using ERPNext Open in a browser window. -your-domain-name-or-droplet-ip-address- Known Issues during then you can follow the instructions at . WARN Cannot connect to redis_cache to update assets_json bench init https://discuss.frappe.io/t/issue-w-redis-during-bench-init-step/87134 Bench runs fine on port 8000, however, during production it doesn't run. This might be due to the redis-server not being run on port 11000. To fix this open file and change the port to 11000. Do not forget to reload the redis-server again. Follow the instructions at . sudo nano /etc/redis/redis.conf https://linuxhint.com/change-default-port-redis/ Let me know in the comments if you encounter any issues! Originally published . here

Simplified Installation of ERPNext 14 on Ubuntu 22.04 LTS via DigitalOcean Droplet

The beating heart of any Linux installation is the kernel. Most distributions that you'll come across add unique features and capabilities to this foundation, but the kernel is the common unifying piece of software across all distributions that calls themselves Linux. Unlike a commercial operating system, the kernel is both very configurable and can be completely customized by any user. Why would you want to tinker with your kernel configuration? While the stock kernel provided by your distribution is a reasonable option, there are unique sets of patches that can fundamentally change how the kernel behaves and, in some cases, may tune your system to be even more effective for your particular use case. Let's take a look at the landscape of specialized Linux kernels! Kernel Basics: The Upstream The web site is the ultimate source of truth for the mainline Linux kernel that the kernel team releases on a regular basis. If you take a look at the landing page, you may see a variety of different kernel versions listed: kernel.org If you're a Linux user, you may have never actually seen this page for the entirety of your time actually Linux. What gives? using A distribution like usually selects a kernel version that's known to be reliable and stable, applies any necessary in order to customize it as they see fit, and then provides the compiled kernel to all their users so that that actual compilation process (which can take a while!) occurs on their end instead of your desktop's. This means that two up-to-date users of Ubuntu 22.04, for example, are likely using the same kernel build, which simplifies supporting a wide variety of users across a range of different installations. It also permits the engineers developing Ubuntu to focus on providing a single kernel build that is well-tested and meets most of their user's needs. Ubuntu patch sets If you were to compare the running kernel on two up-to-date Linux distributions, though, their versions would almost certainly be different. While the kernel has an excellent reputation for stability, some distributions choose to be cautious about when to make the jump to a newer kernel. This is typically a good idea - the numbers between two kernel versions like 5.18.16 and 5.10.135 seem large, but kernel developers are conservative about adding and removing features, so there typically aren't massive practical differences between them. If one Linux distribution sticks a few versions behind the latest kernel, doing so in order to achieve more predictable releases is often worth the tradeoff. different But while the kernel doesn't make massive leaps between releases, different developers maintain collections of changes that can fundamentally alter how the kernel behaves. Some of these include: default downstream CPU scheduler changes. This is one of the core functions of the kernel and dictates how different processes on your machine are chosen to get executed on your processor. I/O scheduler changes. The kernel supports different scheduler methods like or which can make a significant impact upon the performance of disk operations, particularly for spinning disks where the physical realities of spindles and read heads impact how quickly data can be accessed. deadline cfq Security. Some patch sets make significant changes to attempt to the Linux kernel against potential exploit vectors. harden The beauty of running Linux is that all of these different options are completely open to you! Let's take a look at a few of them. Delicious, Default Vanilla The default Linux kernel doesn't have any flashy customizations, but there are still quite a few settings that are still under a user's control without any need to recompile their kernel or make changes to the source code. For example, the aforementioned I/O scheduler dictates how the kernel prioritizes pending operations to either read from or write to persistent storage. This is an important setting for a variety of reasons. Does the kernel push through a document that you're trying to save to the disk first to improve desktop latency, or should it flush the system journal to disk to ensure that its available in the event of a crash? These sort of I/O scheduler decisions factor in a large number of variables like time spent waiting on the kernel, the urgency of the request, and more. Like nearly all low-level Linux settings, you can directly inspect which I/O scheduler your system is using by using a filesystem path. This information is controlled on a per-device basis using the virtual filesystem. On my system, I can find this by inserting the device that I'm interested in, , to a path in : sys sda /sys $ cat /sys/block/sda/queue/scheduler
[mq-deadline] kyber none This indicates that my drive is using the scheduler with the other methods, and , available for use but not actively chosen at this time. The scheduler is described as " ", which sounds good to me! sda mq-deadline kyber none mq-deadline [a] good all-rounder with fairly low CPU overhead You can also many of these settings using a similarly simple interface. The explains this well. In short, simply sending the desired scheduler name to the same path as before is sufficient. The following command would change the scheduler for this particular device to use the scheduler. Note that access is necessary to change these types of settings. change Linux Kernel documentation kyber root $ echo kyber > /sys/block/sda/queue/scheduler Per-device schedulers are just one of the runtime-tunable settings available on a running kernel. Check out these other settings for additional options: swappiness net.core Long Term Support Kernels: Oldies, but Goodies What if new, fancy features seem great, but you're primarily concerned about support and stability? The long-term support kernel, or , is a version of the Linux kernel specially optimized for support over a much longer period of time than a typical kernel. For systems that favor predictable, stable upgrades, using a kernel package suffixed with is often a very good choice. While no special patches have been applied, using a kernel like 5.15 means that support is guaranteed until October 2023 instead of any earlier. If you were to have adopted kernel 4.9 when it was released in December 2016, it will have been supported until January 2023 – that's a long time to not have to worry about breaking changes! LTS -lts The long-term support kernel is probably the most widely available kernel variant outside the mainline version. Some distributions like Ubuntu LTS ship with a long-term support kernel by default, but most other distributions provide the option to use an LTS kernel by installing and enabling a package with names similar to . Your chosen distribution likely has guides explaining how to install and use different kernels, so to try out the rock-solid LTS kernel, look for kernel packages ending with and follow your chosen distribution's instructions for using an alternate kernel package. linux-lts -lts Hardened Kernels: For the Security-minded Within information security, refers to the process of shoring up specific areas to mitigate potential exploits and vulnerabilities. The mainstream Linux kernel obviously tries to achieve this degree of security as much as reasonably possible, but some users may choose to constrain their kernel and its feature in order to trade them for increased security. The provides this. hardening hardened Linux kernel Typically, the hardened Linux kernel behaves very similarly to a typical kernel, though there are tradeoffs. For example, some applications may simply not work on a hardened kernel, and many pre-compiled kernel modules may need to use their equivalent in order to properly integrate with a hardened kernel. Nevertheless, for mission-critical applications where security is a priority, a hardened kernel is often the right choice. DKMS stands for "dynamic kernel module support" and is a feature that permits users to use the source code for kernel modules that do not have pre-compiled support for a desired kernel. For example, the project must be installed as a kernel module in order to use the ZFS filesystem on Linux. Many distributions provide a package that will install the pre-compiled module ready for use, which avoids lengthy compilation times and potential incompatibilities, but may not function correctly when using a custom kernel. An OpenZFS DKMS module, on the other hand, can compile itself on-the-fly against your chosen kernel in order to ensure that it functions as expected. DKMS OpenZFS on Linux Achieving Enlightenment with Zen The is one of the more widely supported community-based patch sets. While not a massive departure from the upstream Linux kernel, the zen (or Liquorix) kernel makes changes in order to supercharge performance. From the Liquorix web site: zen kernel Liquorix is a distro kernel replacement built using the best configuration and kernel sources for desktop, multimedia, and gaming workloads. One change, for example, is to alter the aforementioned I/O scheduler to select the algorithm by default, which optimizes for system responsiveness. Another set of changes compresses swap storage and uses an alternative caching algorithm to perform well under high memory load. bfq As one of the more well-established patch sets, there may already be a package in your distribution of choice ready to use – however, the also provides a tutorial explaining how to use this kernel if you need additional options. linux-zen project documentation Pushing FPS with Gaming Kernels The kernel is a specialized set of patches specifically designed to optimize gaming performance. Squeezing as many FPS as possible out of a graphics card can be a strenuous exercise, but changes in the tkg patch set can offer additional gains with focused changes to critical pieces of the Linux kernel. linux-tkg For example, additional CPU schedulers have been added, like the scheduler or the patch set. Network algorithms like are enabled by default, as are optimized compilation flags like to squeeze as much performance out of compiled code as possible. Project C -ck Cake -O2 The patch set is less ubiquitous than the LTS or Zen kernels, but the provide a comprehensive guide detailing how to compile and install the custom kernel. -tkg installation steps on GitHub The patch set provides a similar set of features targeting users that require a low-latency, high-performance kernel suitable for use cases like gaming. In either case, the tkg and XanMod kernels offer a very specialized form of Linux kernel that can still function as a day-to-day operating system with additional benefits on gaming machines. XanMod Real-time Kernels The term "real-time computing" refers to the concept of a system that aims to guarantee that certain operations run an a given window of time. For example, a system that controls the brakes of a car or the wings of an aircraft cannot afford to be interrupted by a flush of pending writes to a disk or drawing images on a screen. The project provides a set of patches that offer this functionality. While these features are often very specialized and not typically suited for desktop or server applications, they can nevertheless be critically important in the right situation. For projects that have applications in particular industries, these real-time patches are a necessity. Real Time Linux The suite of kernels have a much more targeted audience but are often more widespread than kernels optimized for gaming or low-latency due to their importance where they remain in-use. Your distribution's package manager may provide these types of kernels under names like or . -rt linux-rt linux-rt-lts Hybrid Kernels There are many more specialized kernels out there that we explore, but we'd be here all day! With that said, there's even more ways to customize a kernel using the different types we've talked about already. An interesting trait of many of these patches is that they're often into kernels that blend their features into one kernel source tree. For example, a critical piece of operational machining infrastructure may require the real-time capabilities of an kernel but also benefit from the additional security of a hardened kernel. As long as different patches can be applied cleanly together, nothing stops you from mixing and matching kernels tailored to your exact needs. combined -rt Some distributions provide this simply by combining patch sets into the kernel's package name. For example, the Arch Linux User repository provides the package, which combines the real-time and long-term support kernel features. Ubuntu provides packages like specialized with various changes to optimize the kernel for operation in AWS EC2. linux-rt-lts linux-image-*-aws Regardless of your chosen distribution, if you're interested in running a custom kernel, be sure to explore your distribution's packages for available kernels. They provide the simplest and quickest way to get started with a specialized version of the Linux kernel. Go forth and Tinker! This article has only scratched the surface of the Linux kernel landscape. While many of these kernels are widespread and commonly found in the majority of distribution repositories, some more esoteric patch sets exist that push the kernel even further. With an open-source kernel, you could even modify the kernel yourself to compile one custom to your own needs, but that's a guide for another time. Until then, check out some of these resources for more information and find a kernel that you'd like to try for yourself! ArchWiki - Kernel Ubuntu kernels from Canonical The Linux Kernel Archives

Faster, Stronger, and 100% More Custom: A Grand Tour of Linux Kernels

Más rápido, más fuerte y 100 % más personalizado: un gran recorrido por los kernels de Linux

Plus rapide, plus puissant et 100 % plus personnalisé : un grand tour des noyaux Linux

तेज़, मजबूत, और 100% अधिक कस्टम: Linux कर्नेल का एक भव्य भ्रमण

より速く、より強く、100% よりカスタム: Linux カーネルのグランド ツアー

Mais rápido, mais forte e 100% mais personalizado: um grande tour pelos kernels do Linux

Nhanh hơn, mạnh hơn và tùy chỉnh nhiều hơn 100%: Chuyến tham quan lớn về các nhân Linux

更快、更强和 100% 更多自定义：Linux 内核的盛大之旅

Tutorial: Extending Sonic With Limit Orders Using ic-cron Library

💾 Iso Prep Download the iso and check the gpg signature via the website mount the iso in a usb via something like balena etcher 🚀 Launch Install make sure the bios have the disable and boot on the iso secure boot 🎹 Set Up the Keyboard Layout By default the layout is set to . US If you want to list all the layouts available do . ls /usr/share/kbd/keymaps/**/*.map.gz Use a layout with, for example, (here German layout). loadkeys de-latin1 🛰️ Go to the Internet Wifi dosent work out of the box but ethernet yes Check your network interface name via . ip link Check the status of your wifi card with . If your card is blocked, unblocked them with . rfkill rfkill unblock your-card-id For the wifi connection you have to use the package. Hopefully arch include the package in the iso. iwd Open the prompt with and : iwctl list all your device with device list launch a scan station [device name] scan get the list of the available network station [device name] get-network connect to the network with station [device name] connect [SSID] enter the password check the connection with and station [device name] show ping archlinux.org done :) automatically stores network passphrases in the directory and uses them to auto-connect in the future. iwd /var/lib/iwd 🕛 Update System Clock Just do . Check the service status with . timedatectl set-ntp true timedatectl status 💽 Disk Partitioning warning : this step erase all the data in your disk if you confirm the operation ! List your drive with and note the one you want to use. fdisk -l Open the prompt on the right disk with . fdisk /dev/[your disk] remind to delete the old partition before the following command.
Do that with command and the id of the partition. d Let's create the partition, in the open fdisk prompt : Here we create a gpt partition because I do a EFI install create a new gpt label with g add the first partition with (efi) n partition number is 1 the first sector is the default one (just hit enter) the last sector is for 550mb +550M add the second partition with (swap) n partition number is 2 the first sector is the default one the last sector is (handle the size of your swap like you want, minimum 2gb is ok) +4G add the last partition with (primary/data) n partition number is 3 the first sector is the default one the last sector is the default one Ok now we need to change the partition type with the command : t chose for partition the type (list all the partition type with if your are not sure 1 1 L chose for partition the type 2 19 don't change the partition 3 Just enter to write the partition table. w 🗃️ Make the File System For the efi partition, we need to have a FAT32 file system, do it with mkfs.fat -F32 /dev/[your partition 1] For the swap we need a swap filesystem, do it with mkswap /dev/[your partition 2] and activate the swap with swapon /dev/[your partition 2] For the main partition we do a ext4 filesytem : mkfs.ext4 /dev/[your partition 3] ⚡ Mount the Big Partition in the Live Environment Simply do mount /dev/[your partition 3] /mnt 🧬 Install the Base System We do it via .
Here is the arch system, the kernel. pacstrap /mnt base linux linux-firmware base linux 🧫 Generate the fstab Simply do . genfstab -U /mnt >> /mnt/etc/fstab 🔑 Log to the Newly Installed Arch Do . arch-chroot /mnt 🌍 Set the Timezone here the region and city is in the file /usr/share/zoneinfo do ln -sf /usr/share/zoneinfo/_Region_/_City_ /etc/localtime and generate with /etc/adjtime hwclock --systohc 🏴‍☠️ Set the Locale you need to install nano if you want to use it Edit the file , and uncomment the good option for you. locale.gen nano /etc/locale.gen For example for the generic qwerty. en_US.UTF-8 UTF-8 And generate the local with . locale-gen Add the following line to : . /etc/locale.conf LANG=en_US.UTF-8 👽 Set the Hostname and the Host Just add the wanted hostname in . /etc/hostname For the host open and add the following line : /etc/hosts 127.0.0.1 localhost
::1       localhost
127.0.1.1 [your-hostname].localdomain [your-hostname] 🤓 Create the User set the password the root password with passwd create a user with useradd -m username set the password of the new user passwd username set the group for the user usermod -aG wheel,audio,video,optical,storage username 🎛 Install Sudo and Authorize the User to Use Wheel Group install with pacman -S sudo and open with and uncomment the line. visudo EDITOR=nano visudo %whell ALL=(ALL) ALL Here we use nano but if you want to use vi remove EDITOR=nano, if you don’t want nano nor vi replace nano with your loved one 📟 Install Grub and Basic Package just do pacman -S grub efibootmgr dosfstools os-prober mtools 🎬 Make the EFI Directory and Mount It Do and mkdir /boot/EFI mount /dev/[your efi partition] /boot/EFI 🪃 Init grub install grub (for efi) with grub-install --target=x86_64-efi --bootloader-id=grub_uefi --recheck create the config grub-mkconfig -o /boot/grub/grub.cfg 📦 The Other Stuff (Networking, etc...) Here we install the package, because after the final reboot the package will no longer be available. networkmanager iwd We install too. git pacman -S networkmanager git Enable network manager with . systemctl enable NetworkManager ♻️ Reboot Before reboot exit and unmount : exit
umount -R /mnt And ! reboot 📡 Reconnect WiFi after the Login If the ping command failed after the installation you need to relogin to your wifi. For that we use the previously installed package. nmcli Check if the radio is on with , if not open up with . nmcli radio wifi nmcli radio wifi on Check the wifi point with . nmcli dev wifi list Check your device with . nmcli dev status And connect with . sudo nmcli dev wifi connect [network-ssid] password [network-password] If you want to look all the saved connection do . nmcli con show 📽️ Video Driver For nvidia do pacman -S nvidia nvidia-settings nvidia-utils For other check the wiki 🎞️ Xorg Server Actually we use xorg but if you want another display server check the wiki Install with . xorg-server If needed install check the wiki to know if you need it. xorg-apps It usefull to install xmessage too . pacman -S xorg-xmessage 🧮 Base Devel for Makepkg Mandatory for the use of the AUR package Just do a pacman -S --needed base-devel 🍱 The Essential Package List of, my, essential package to have on a fresh install : unzip pacman -S unzip nerd font Warning: This is a large size repo clone the repo https://github.com/ryanoasis/nerd-fonts.git run for installing all the font ./install.sh bluetooth pacman -S bluez-utils paru (for easy gestion of the aur package) clone https://aur.archlinux.org/paru.git cd into the repo build it makepkg -si 🔏 Activate the Num Lock This method is good because is activate the numlock in the early bootup stage, usefull for the psw prompt in the full-disk encryption for example. Install the AUR package. mkinitcpio-numlock Add in the line (before encrypt if present) in . numlock HOOKS /etc/mkinitcpio.conf Usually between modconf and block ⁉️ And Now What? Now you have Arch and the minimum for booting correctly. All you have to do is install the window manager or the desktop environment you want! Check for information. the wiki page For example, if you want KDE : pacman -S plasma kde-applications If you want some tutorial stuff for XMonad I'm writing a story in a few days, wait for the update! Happy arching mate 🖖

Step-by-Step Guide to Installing Arch Linux 

Let’s talk about Kubernetes security As Kubernetes continues to grow in adoption, it is important for us to know how to secure it. In a dynamic infrastructure platform such as Kubernetes, detecting and addressing threats is important but also challenging at the same time. Falco, the open source cloud native runtime security project, is one of the leading open source Kubernetes threat detection engines. Falco was created by Sysdig in 2016 and is the first runtime security project to join CNCF as an incubation-level project. Falco detects unexpected application behaviour and alerts on threats at runtime. Why is it difficult? Security is one of the harder challenges of running Kubernetes according to . The reason it is difficult is that there are multiple moving layers in a cloud native stack, hence operators may not focus on security early on. Another contributor is that some distributions of Kubernetes may not be secure by default, contrary to what operators assume. this analysis Prevention and Detection Information security is a process that moves through phases building and strengthening itself along the way. Security is a journey, not a destination. Although the Information Security process has multiple strategies and activities, we can group them all into three distinct phases - prevention, detection, and response. Preventive measures Preventive measures include having proper access control, authentication and authorization in place. No matter what level of protection a system may have, it will get compromised given a greater level of motivation and skill. There is no foolproof “silver bullet” security solution. A defense in-depth strategy should be deployed so when each layer fails, it fails safely to a known state and sounds an alarm. The most important element of this strategy is timely detection and notification of a compromise. Detective measures An example of detective measures includes sending logs from security and network devices like host-based intrusion detection systems (HIDS) and network intrusion detection systems (NIDS) to an SIEM and building rules to alert when suspicious activity is seen. According to the defense in-depth approach, we should be auditing and placing detection triggers on multiple layers of the technology stack, from looking at cloud audit logs (like Cloudtrail), the Kubernetes cluster, containers, application code, host OS and the kernel. We will take a look at the detective measures in this blog which will further help us to respond to these threats. Image credit: @leodido Setting Falco up on Kubernetes The most secure way to run Falco is to install Falco directly on the host system so that Falco is isolated from Kubernetes in the case of compromise. Then the Falco alerts can be consumed via read-only agents running in Kubernetes. Falco can also be run directly in Kubernetes if isolation is not a concern. We will be setting Falco up using Helm in this tutorial, but you should be aware of the pros and cons of the method you are choosing. Prerequisite: We need a working Kubernetes setup for this. You can use a cloud Kubernetes offering from AWS/GCP or set one up yourself locally using . We also require kubectl and to be installed on your client machine. Steps minikube Helm Let’s start with the installation of Falco. 1. Add the falcosecurity repo in Helm $ helm repo add falcosecurity https: $ helm repo update
Hang tight we grab the latest your chart repositories...
...Successfully got an update the chart repository
...Successfully got an update the chart repository
Update Complete. ⎈Happy Helming!⎈ //falcosecurity.github.io/charts while from from "falcosecurity" from "stable" 2. Installing the chart $ helm install falco falcosecurity/falco
NAME: falco
LAST DEPLOYED: Mon Nov : : NAMESPACE: STATUS: deployed
REVISION: TEST SUITE: None
NOTES:
Falco agents are spinning up on each node your cluster. After a few
seconds, they are going to start monitoring your containers looking security issues.
No further action should be required. 9 22 09 28 2020 default 1 in for 3. After a few seconds Falco should be running, to verify, you will see the pods you created in a moment. $ helm ls
$ kubectl get pods Setting up the environment We will need an environment to emulate the attacks and detect them. Let us set it up. We will be using Helm for this. Let’s add Helm’s stable repository and install chart from it. mysql-db $ helm repo add stable https: $ helm repo update
Hang tight we grab the latest your chart repositories...
...Successfully got an update the chart repository
...Successfully got an update the chart repository
Update Complete. ⎈Happy Helming!⎈ //charts.helm.sh/stable while from from "falcosecurity" from "stable" $ helm install mysql-db stable/mysql
NAME: mysql-db
LAST DEPLOYED: Mon Nov : : NAMESPACE: STATUS: deployed
REVISION: NOTES:
MySQL can be accessed via port on the following DNS name within your cluster:
mysql-db.default.svc.cluster.local
... 9 22 11 07 2020 default 1 3306 from Let us now monitor Falco logs: $ kubectl get pods
NAME                      READY  STATUS   RESTARTS  AGE
falco rr9r / Running m
mysql-db-d5dc6b85d hrm / Running m
ubuntu / Running m

$ kubectl logs -f falco rr9r # Replace your Falco pod name here -6 1 1 0 49 -77 1 1 0 47 1 1 0 43 -6 with Analyzing Falco’s logs The first steps when an attacker does after they gain access to a Kubernetes cluster is to enumerate available network hosts. An attacker will try to find their way around a seemingly new environment. They can try to use safe/less noisy commands to gain more insights from the cluster. Let us go through the steps an attacker might do and look at the corresponding detection signals from Falco. We will use the default ruleset which comes with Falco, these rules can be tuned as per your needs in your environment. You can find Falco’s default rules here: https://github.com/falcosecurity/falco/tree/master/rules Terminal shell in container Description: Detecting terminal shells being spawned in pods. We open a terminal shell on a running pod to replicate the scenario. $ kubectl exec -it mysql-db-d5dc6b85d hrm -- bash -il # Replace the mysql pod name you have -77 with Detection: : : : Notice A shell was spawned a container an attached terminal (user=root user_loginuid= k8s.ns= k8s.pod=mysql-db-d5dc6b85d hrm container= fc8155f9d1a shell=bash parent=runc cmdline=bash -il terminal= container_id= fc8155f9d1a image=mysql) k8s.ns= k8s.pod=mysql-db-d5dc6b85d hrm container= fc8155f9d1a 18 08 40.584075795 in with -1 default -77 3 34816 3 default -77 3 Contact Kubernetes API Server From Container Description: We run kube-recon, which is a tool which does initial reconnaissance in a Kubernetes environment. This rule detects attempts to contact the Kubernetes API Server from a container. $ kubectl run kuberecon --tty -i --image octarinesec/kube-recon
/ # ./kube-recon / / : : Testing K8S API permissions / / : : Your K8S API Server is configured properly / / : : Running Nmap on the discovered IPs / / : : Getting local ip address and subnet / / : : Trying to download EICAR file / / : : Downloaded EICAR successfully. No malware protection is place 2020 11 09 18 21 22 2020 11 09 18 21 23 2020 11 09 18 21 23 2020 11 09 18 21 23 2020 11 09 18 21 23 2020 11 09 18 21 23 in Detection: : : : Notice A shell was spawned a container an attached terminal (user=root user_loginuid= k8s.ns= <NA> container=4f63870599d0 shell=sh parent=<NA> cmdline=sh terminal=34816 container_id=4f63870599d0 image=octarinesec/kube-recon) k8s.ns=<NA> k8s.pod=<NA> container=4f63870599d0
18:21:22.657590195: Warning Docker or kubernetes client executed in container (user=root user_loginuid=-1 k8s.ns=default k8s.pod=kuberecon container=4f63870599d0 parent=kube-recon cmdline=kubectl get pods image=octarinesec/kube-recon:latest) k8s.ns=default k8s.pod=kuberecon container=4f63870599d0
18:21:22.723707794: Notice Unexpected connection to K8s API Server from container (command=kubectl get pods k8s.ns=default k8s.pod=kuberecon container=4f63870599d0 image=octarinesec/kube-recon:latest connection=172.17.0.5:56972->10.96.0.1:443) k8s.ns=default k8s.pod=kuberecon container=4f63870599d0 18 20 45.927730981 in with -1 k8s.pod= < > NA Checking if shell is a container environment (Change thread namespace) Description: amicontained is a tool to check whether the shell is a containerized environment. The rule detects an attempt to change a program/thread’s namespace. $ cd /tmp; curl -L -o amicontained https: Output: 
Container Runtime: docker
Has Namespaces:
  pid: user: AppArmor Profile: kernel
Capabilities:
  BOUNDING -> chown dac_override fowner fsetid kill setgid setuid setpcap net_bind_service net_raw sys_chroot mknod audit_write setfcap
Seccomp: disabled    
Blocked Syscalls ( ):
  MSGRCV SYSLOG SETSID VHANGUP PIVOT_ROOT ACCT SETTIMEOFDAY UMOUNT2 SWAPON SWAPOFF REBOOT SETHOSTNAME SETDOMAINNAME INIT_MODULE DELETE_MODULE LOOKUP_DCOOKIE KEXEC_LOAD OPEN_BY_HANDLE_AT FINIT_MODULE //github.com/genuinetools/amicontained/releases/download/v0.4.7/amicontained-linux-amd64; chmod 555 amicontained; ./amicontained true false 19 Detection: : : : Notice Namespace change (setns) by unexpected program (user=root user_loginuid= command=amicontained parent=bash k8s.ns= k8s.pod=kuberecon container=c6112967b4f2 container_id=c6112967b4f2 image=octarinesec/kube-recon:latest) k8s.ns= k8s.pod=kuberecon container=c6112967b4f2
Mon Nov : : : Falco internal: syscall event drop. system calls dropped last second. : : : Critical Falco internal: syscall event drop. system calls dropped last second. (ebpf_enabled= n_drops= n_drops_buffer= n_drops_bug= n_drops_pf= n_evts= ) 18 43 37.288344192 -1 default default 9 18 43 37 2020 9 in 18 43 37.970973376 9 in 0 9 0 0 9 15232 Next steps In this tutorial, we looked at the basics of Kubernetes security monitoring and how Falco allows us to use rules to achieve the detection of security issues. The default detection ruleset of Falco is enough to get yourself up and running, but you will most likely need to build on top of the default ruleset. We will explore building and tuning these rules in the upcoming posts on security. That’s a wrap folks! Do share your thoughts in the comment section below. Previously published at https://www.infracloud.io/blogs/introduction-kubernetes-security-falco/

Kubernetes Security 101: Cloud Native Runtime Security with Falco

Welcome to the new way of scraping the web. In the following guide, we will scrape BestBuy product pages, without writing any parsers, using one simple library: Scrapezone SDK. This SDK does all of the heavy lifting for us, so all we need to do is import it and start scraping. The library allows scraping most of the leading eCommerce sites, but to keep it specific we will use it to scrape Best Buy here. Specifically, we will get the title, description, price, and rating information. This data can be used in so many interesting scenarios, and if are building a software product that uses parsed data from eCommerce websites, this can save you thousands of dollars and months of development. The SDK will avoid anti-bot detections for you, use different IP addresses and user fingerprints, and scale the scrape you send over thousands of parallel workers - so the rate and amounts of data you can scrape are almost endless. Why Scraping as a Sevice? You must have heard a lot about SAAS solutions, and maybe even building one yourself. The internet software world is turning into one that allows you to focus only on what you are building, without needing to deal with writing code that is already implemented as a product somewhere. Just like you don’t implement your own servers anymore or your eMail service, Scraping as a service is turning web scraping into an easy, usable service that just gets you the data you need. Before we start, let's set up the work environment In order to sarpe the BestBuy product details, we will use the Scrapzone Node.JS SDK. Node allows us to import and use external libraries in a breeze. If you are unfamiliar with Node.JS, download and install it according to the . After installing you can validate that node is installed on your system using the command: installation guide ``` node --version ``` If you see the version printed, you are all set. My current version is v14.15.0, but any node version above 8.0 should do. If you don’t have one yet, register for a free Scrapezone Account . This account will be loaded with 1,000 free scraping credits, which should get you started. After verifying your email address, you should log in to to get your scraping username and password. The details will be in Home -> API Information. here Scrapezone Dashboard Create a new folder named bestbuy scraper, and initialize a new node project in it. Open Terminal and type: ``` mkdir bestbuy_scraper cd bestbuy_scraper npm init ``` This will create a new standard npm project named ‘bestbuy_scraper’ in this folder. As you can see, the folder now contains a ‘package.json’ file. If you are new to Node.js, package.json is the file that defines the dependencies and project information. Now to install Scrapezone SDK type the line: ``` npm install scrapezone-node-sdk ``` This will add scrapezone-node-sdk to the project as a library. Scraping BestBuy Products: The Code Create a new file and name it ‘index.js’. Open it in your favourite editor and paste the following code: ``` const ScrapezoneClient = require('scrapezone-node-sdk'); const scrapezoneClient = new ScrapezoneClient("<YOUR_USER>", "<YOUR_PASS>"); scrapezoneClient.scrape({ scraper_name: amazon_product_display, query: [     'https://www.bestbuy.com/site/sony-wh-1000xm4-wireless-noise-cancelling-over-the-ear-headphones-black/6408356.p?skuId=6408356',    'https://www.bestbuy.com/site/sony-wi-1000xm2-wireless-noise-canceling-in-ear-headphones-black/6395364.p?skuId=6395364' ]}).then(results => console.log(results)); ``` Paste the username and password from Scrapezone Dashboard instead of <YOUR_USER>, <YOUR_PASS>, and you’re all set. What this code does is send an API request to Scrapezone and polling the results. For two product pages, the scraping time should be under 20 seconds, and for 1000 pages under 8 minutes. In this code, we use a BestBuy scraper, but you can use any of the official Scrapezone Scrapers, documented . here The code is very basic. The SDK receives an object with 2 parameters: scraper_name, and query. The scraper name specifies which scraper will be used, and the query is a list of URLs to scrape. To run the code, open terminal in this folder and type: ``` node index.js ``` Once the pages are scraped, the SDK will return a parsed JSON response, which we print to the console. The SDK is limited to 1,000 URLs in one query, so in case you need to scrape more URLs, it is possible to split the request into multiple chunks and send them in parallel. I hope this guide saved you a lot of precious time and that you find it very useful. Good luck and I hope you will be building amazing products using this cool technology.

How to Scrape Bestbuy Products with Scrapezone SDK

Bitcoin remains a strong buy, and its future is overall positive. If you want to sell your underperforming altcoins and buy bitcoins, then atomic swaps can help you to achieve that. With the use of atomic swaps, many cryptocurrency users now have a better option when it comes to trading their altcoins for bitcoins, rather than relying on centralized exchanges. Issues with Exchanges Today, trading altcoins mostly takes place on centralized marketplaces called . exchanges Centralized exchange platforms like Gemini, Binance, Coinbase, and others are the financial institutions of the crypto world. To some extent, centralized exchanges have become important gatekeepers for crypto trading. Currently, most centralized exchanges compel traders to transfer crypto assets via a wallet that is hosted and controlled by the exchange. These funds are stored in a “hot wallet” But traders don’t control their private key for hot wallets. Therefore, this places their investment at the mercy of exchanges. Centralized exchanges, therefore, expose users to loss of their funds through hacks of those platforms or straight-up scams where owners disappear with the funds. This emphasizes a pearl of common wisdom in this cryptocurrency ecosystem: “not your keys, not your funds.” If we don’t control the private key of the account with the assets, then we don’t own the funds. Furthermore, exchanges are known to charge fees that hit customers’ portfolios. Several exchanges also require KYC, a requirement that crypto-anarchists see as harmful to their privacy. A Solution for Cross-Chain Trading With , you can trade different altcoins directly to other traders and investors. Atomic swaps are completely decentralized, allowing traders to exchange cryptocurrencies without the need for centralized exchanges – third-party intermediaries – that are prone to mismanagement, hacking, and attacks. atomic swaps Atomic swaps connect users directly without an intermediary and allow for a virtually infinite number of trading markets to be created on the fly. Any crypto-asset becomes interchangeable with any other offering on the market at that time. Everything can be performed on one smooth motion, which is what users actively seek in this era. Moreover, atomic swaps leave crypto holders in complete control of their crypto at all times, thus eliminating the hacking risk. When using centralized trading platforms, there are always some fees you’ll pay. Whether it’s on the withdrawal or deposit side, you will pay either way. But through atomic swaps, deposits and withdrawals fees are non-existent. Users will only pay on-chain transaction fees for sending money to other users, which is normal. Such trades take place across their individual networks or blockchains. How Do Atomic Swaps Work? While several projects are working in various DEX protocols, few of them have developed decentralized exchanges that execute the atomic swaps. Such decentralized exchange platforms include , , , , and . These are wallets, which crypto traders who want to dump their altcoins using atomic swaps, can use. Liquid wallet Atomic wallet Atomicswapwallet.io Swap.Online AtomicDEX Such atomic swap wallets are designed in a manner that prevents any of the involved parties from cheating. Hashed Time Lock Contract (HTLC) is the technique that enables trading tokens in an atomic swap. Now let’s understand how such protocols work, . For example, Alice would like to trade her Litecoin for Bitcoin. step-by-step Step 0 Alice (the Maker), therefore, posts a trade order on the decentralized exchange wallets mentioned above. This step is listed as 0 because it occurs before the atomic swap starts. Step 1: DEX Fee Payment The Taker (i.e., in our case is Bob) sees the Maker’s offer and accepts it. Bob commits to the trade by paying the DEX fee that is only 0.15% of the total trade amount. The DEX fee plays a crucial purpose as it ensures that the Taker doesn’t spam the network with rapid requests. However, the Maker doesn’t pay any trading fees on the DEX wallets. Once the Taker has paid the DEX fee, the atomic swap has started officially. The Maker receives the fee payment and generates the second step. Step 2: Maker Payment Is Sent The Maker deposits her Litecoin into the HTLC contract and specifies Bob as the beneficiary. The funds are locked with the hash. Alice then generates a key to access the hash and shares it with Bob. Step 3: Taker Payment Is Sent Bob uses the hash and key sent by Alice to deposit his Bitcoin into the HTLC contract. He then specifies Alice as the beneficiary. Step 4: Claim Process Alice has the original key, which was used to produce the hash. She then uses the key to initiate the claim button on the HTLC contract so that to claim the trade payment and receive the Bitcoins from Bob. As soon as Alice claims the Bitcoin, Bob also is able to claim the Litecoin, and the swap is now complete. That’s all how atomic swaps work. The process ensures a trustless, secure, peer-to-peer exchange. There are no intermediaries. Only a cleverly designed protocol leverages cryptographic techniques to ensure neither party can cheat in the trade. It is an atomic process that implies either (a) the swap happens exactly as Alice and Bob agree, or (b) nothing takes place, and both Alice’s and Bob’s funds are returned to them. The HTLC contract has , which allow the parties to get their money back from the contract’s lockbox in case the deal fell apart. timeout features Conclusion Several altcoins have reached all-time lows, with some losing 99% of their value from their all-time highs. One way to diversify your investment is to sell the underperforming altcoins and buy bitcoins. You could think of diversifying your investment and buying some bitcoins and remain with some major altcoins. The crucial consideration is to make an informed purchase and minimize your risk. Thanks to technological advancement. Decentralized exchanges have evolved, and now you don’t have to rely on centralized exchanges. Crypto users now have access to a truly decentralized means of trading cryptocurrencies through atomic swaps, while being able to control over their crypto assets at all times.

Trading Your Altcoins for Bitcoin with the Power of Atomic Swaps [A How To Guide]

Production issues are never fun. They always seem to happen when you’re not at work, and the cause always seems to be silly. We recently had issues in our production Kubernetes cluster with nodes running out of memory, but the node recovered very quickly without any noticeable interruptions. In this story we will go over the specific issue that happened in our cluster, what the impact was, and how we will avoid this issue in the future. First, a little background. I work for Blue Matador, a monitoring alert automation service for AWS and Kubernetes. We use our product on our own system that is running in AWS with Kubernetes. This story was created from one of our talented software engineers and is in his own words. The First Occurrence 5:12 pm - Saturday, June 15 2019 Blue Matador creates an alert saying that one of the Kubernetes nodes in our production cluster had a SystemOOM event. 5:16 pm Blue Matador creates a warning saying that EBS Burst Balance is low on the root volume for node that had a SystemOOM event. While the Burst Balance event came in after the SystemOOM event, the actual CloudWatch data shows that burst balance was at its lowest point at 5:02pm. The delay is due to the fact that EBS metrics are consistently 10-15 minutes behind, so our system cannot catch everything in real-time. 5:18 pm This is when I actually start to notice the alert and warning. I do a quick to see what the impact is, and am surprised to see that of our application pods died. Using also does not show that the node in question is having memory issues—it had already recovered, and memory usage was at ~60%. It's just after 5 o'clock, and I did not want my Session IPA to get warm. After confirming that the node was healthy, and no pods were impacted, I assumed there must have been a fluke. Definitely something I can investigate on Monday. kubectl get pods zero kubectl top nodes Here's the entire Slack conversation between myself and the CTO that evening: The Second Occurrence 6:02 pm - Sunday, June 16 2019 Blue Matador generates an alert that a node had a SystemOOM event. My CTO must have been staring at his phone, because his immediately responds and has me jump on the event since he can't access a computer (time to reinstall Windows again?). Once again, everything seems fine. None of our pods have been killed, and node memory usage is sitting just below 70%. different 6:06 pm Once again Blue Matador generates a warning for EBS Bust Balance. Since this is the second time in as many days that we had an issue, I can't let this one slide. CloudWatch looks the same as before, with burst balance declining over around 2.5 hours before the issue occurred. 6:11 pm I log into Datadog and take a look at memory consumption. I notice that the node in question did indeed have high memory usage right before the SystemOOM event, and am able to quickly track it down to our fluentd-sumologic pods. You can clearly see a sharp decline in memory usage right around the time the SystemOOM events happened. I deduce that these pods were the ones taking up all the memory, and when the SystemOOM happened, Kubernetes was able to figure out that these pods can be killed and restarted to reclaim all the memory it needed without affecting my other pods. Very impressive, Kubernetes. So why didn't I notice this on Saturday when I tried to see which pods had restarted? I'm running fluentd-sumologic pods in a separate namespace, and did not think to look there in my haste. Check all your namespaces when checking for restarted pods Takeaway 1: With this information I'm able to calculate that the other nodes will not run out of memory within the next 24 hours, but I go ahead and restart all the sumologic pods anyways so they are starting out at low memory. Sprint planning is the next morning, so I can work this issue into my normal work week without stressing too hard on a Sunday evening. 11:00 pm Just finished one of the new episodes of Black Mirror (I actually liked the Miley one) and decided to check up on things. Memory usage looks fine, I am definitely okay to let things settle for the night. The Fix On Monday I'm able to dedicate some time to this issue. I definitely don't want to deal with this every evening. What I know so far: 1. The fluentd-sumologic containers are using a lot of memory 2. Before the SystemOOM, there is a lot of disk activity, but I don't know what At first I thought the fluentd-sumologic containers would be using a lot of memory if there was a sudden influx of logs. After checking Sumologic though, I can see that our log usage has been fairly steady, and there was no increase in log data around the times we had issues. Some quick googling led me to which suggests that some Ruby configuration can be used to keep memory usage lower. I went ahead and added the environment variable to my pod spec and deployed it: this github issue - RUBY_GC_HEAP_OLDOBJECT_LIMIT_FACTOR env: name: value: "0.9" While I’m looking at my fluentd-sumologic manifest, I notice that I did not specify any resource requests or limits. I’m already suspicious that the RUBY_GCP_HEAP fix will do anything amazing, so specifying a memory limit makes a lot of sense at this point. Even if I cannot fix the memory issue this time, I can at least contain the memory usage to just this set of pods. Using I can get a good idea of how much resources to request: kubectl top pods | grep fluentd-sumologic resources: requests: memory: "128Mi" cpu: "100m" limits: memory: "1024Mi" cpu: "250m" Specify resource limits, especially for third-party applications Takeaway 2: Follow-up After a few days I was able to confirm that the above fix worked. Memory usage on our nodes was stable and we were not having any issues with any component in Kubernetes, EC2, or EBS. I realize how important it is to set resource requests and limits for all of the pods I run, so it’s now on our backlog to implement some combination of and . default resource limits resource quotas The last remaining mystery is the EBS Burst Balance issues that correlated with the SystemOOM event. I know that when memory is low, the OS will use swap space to avoid completely running out of memory. But this isn’t my first rodeo, and I know that Kubernetes won’t even start on servers that have swap enabled. Just to be sure, I SSH’d into my nodes to see if swap was enabled using both and , and it was not. free swapon -s Since swapping is not the issue, I actually do not have any more leads on what caused the increase in disk IO while the node was running out of memory. My current theory is that the fluentd-sumologic pod itself was writing a ton of log messages at the time, perhaps a log message related to the Ruby GC configuration? It’s also possible that there are other Kubernetes or journald log sources that become chatty when memory is low, and I may have them filtered out in my fluentd configuration. Unfortunately, I do not have access to the log files from right before the issue occurred anymore, and do not have a way to dig deeper at this time. Dig deeper for the root cause on all issues you see while you still can Takeaway 3: Conclusion Even though I do not have a root cause for every issue I was seeing, I am confident that I do not need to put more effort into preventing this issue again. Time is valuable, and I’ve already spent enough time on this issue and then writing this post to share. Since we use , we actually have very good coverage for issues like this, which allows me to let some mysteries slide in favor of getting back to work on our product. Blue Matador

Post Mortem: Kubernetes Node OOM

In centralized cryptocurrency exchanges, orders and trades are recorded off-chain on a private database. While this solution is used in the mainstream financial world, it creates, in the cryptocurrency market, counterparty and operational risks such as hacks and thefts (i.e. Mt. Gox and Bitfinex scandals). Also, centralized exchanges are more vulnerable to government censorship. Exchanges can easily have their operating licenses revoked and their funds seized. There have been several instances in the past, such as in India and China, where governments have banned and forced exchanges to shut down. Having control of user’s assets also means that they can impose their own terms on block users assets or accounts without notice. Not to mention manipulating trading orders and wash trading exercised by centralized crypto exchanges to create the “impression” that a particular trading pair is attractive and cause a massive pump and dump scenario. These increasing concerns make decentralized cryptocurrency exchanges a safer and attractive option. Since orders in a DEX are matched and executed directly peer to peer, it makes the whole process more secure, transparent and easy to identify fake trading volume. Additionally, users of DEXs may benefit from lower withdrawal fees. However, despite benefits like security and full control over assets, DEXs have failed to gain mass adoption. Some of the key reasons are : Liquidity Concerns One of the leading reasons contributing to this low liquidity problem is the fact that today most DEXs don’t support a wide range of cryptocurrencies and lack of interpretability between blockchain network limits trading pairs to specific network issued token. Today, in a few DEX platforms there is the possibility to trade other network tokens. These are known as proxy tokens meaning you have escrowed your tokens for storing to a custodian, meaning end-users are under the same counterparty risk that exists in centralized exchanges. Furthermore, the process of trading with proxy tokens requires the use of gateways to convert external native coins (such as Bitcoin) to and from the affiliated proxy tokens adding complexity for end-users. Difficult to use: Current DEX platforms are not intuitive or easy to use and require a high level of technical know-how. Most new cryptocurrency traders will opt for the easy option, i.e. centralized exchanges. Slow performance: Another important disadvantage of DEXs is that they process transactions relatively slower than centralized exchanges. DEXs require thousands of different computers to sync with each other and leading to longer block confirmations and slower transaction speeds. A quick comparison table of centralized Vs Decentralized exchange Note in decentralized cryptocurrency exchanges, transactions speed depends on underlying protocol, usually in one of two ways: In Option One, the DEX maintains an on-chain order book where the trading of tokens is facilitated by smart contracts (transaction speed depends on network congestion which can be slow). As a result, any transaction (action like placing an order, canceling) may cost users a network fee. This is why most DEXs today are based on a hybrid approach, Option Two. A quick comparison table of DEX (Use Option One for a complete decentralized solution and highest security) — Data as of 24th Mar 2019 10:00 AM CET. Note- Next generation DEX today use Atomic swap. More explained in the later section. In Option Two, the DEX maintains an off-chain order book and then facilitates transactions online for final settlement. In such an arrangement, you never have to leave your tokens sitting on an exchange, it’s faster, and provides a near centralized exchange experience. Basically, you run an order book off-chain, have the “exchange” match orders, and then send them to settle through a smart contract. This means traders still rely on a trusted third party to maintain the correct order book or price-time priority, but that’s a much smaller risk relative to the custodial risk of transferring crypto into a centralized exchange’s wallet. A quick comparison table of existing DEX (Option Two for near centralized exchange experience) — Data as of 24th Mar 2019 10:00 AM CET A decentralized exchange alternative that seeks to successfully remove the threats and limitations of centralized cryptocurrency exchanges must feature the same speed, liquidity, and convenience of a centralized exchange. As of today, no decentralized exchange has successfully replaced any of their centralized counterparts. A Next Generation DEX For Complete Solution Today, the highest volumes in any centralized exchange are for crypto assets which are paired with BTC as a base price, however, adding a BTC pair in a DEX is a challenge due to long transaction confirmation times which could be up to 10 mins, along with cross-chain interpretability. This issue is solved with atomic swap technology. Atomic swap is a cryptographically powered smart contract technology that enables two parties to exchange different cryptocurrencies/tokens without depending on a third party or an escrow manager plus there is no default risk on either side. It is a more secure and user-friendly option than DEXs who use proxy tokens to add tokens from other networks or blockchain projects. By adding atomic swap, exchanges can provide more trading pairs to ensure better liquidity. Exchanges who are working on integrating atomic swap in their exchanges are Komodo, ResDex, Atomic Wallet, Swap.Online etc. has an edge over its counterparts in terms of transaction speed, advanced privacy features, and a partnership with Huobi to ensure better liquidity on the platform. Resistance (ResDEX) Resistance allows users to perform trades on ResDEX in under a minute. ResDEX removes the need for the trader to wait on these block confirmations and instead lets each party in the trade make the swap immediately. InstantSwap For wide availability of crypto asset options, ResDex implements atomic swap which allows the user to trade up to 95% of existing cryptocurrencies directly with one another. In addition, the Resistance partnership with Huobi will allow liquidity of more than 300 cryptocurrencies on the ResDEX exchange. Liquidity: Another barrier to entry for DEXs is their lack of support for fiat to crypto offerings. With ResDex users can buy crypto asses with credit/debit cards. Fiat gateway: ResDEX provides the end-users (uses Zero-knowledge proof, zk-SNARK, and TOR) during the order-matching process allowing the investor to trade in private. advanced privacy options

Cryptocurrency Exchange: A DEX Offering The Complete Solution

This list is but and some . You may use them as a checklist or or to for your next . This list is not exhaustive enumerates only technical basic, must-know skills, random thoughts to evaluate yourself someone else prepare DevOps/SRE job interviews opinionated. Disclaimer This work was done by both and . We already published the first version of it here ( ). This article is an update of the latest one. Sahil Sharma me The Must Know Checklist For DevOps & Site Reliability Engineers We want to hear your feedback and suggestions about: This list, obviously. What kind of technologies would you like to learn? (please share it with us). We are going to launch a DevOps online academy and we want you to be our first contributor, so share your recommendation and don’t be shy! Other stuff that we will be sharing with you in the future and we will be glad to hear your opinion and feedback about it! In order to get in touch, please subscribe to one or more of our online communities, as it’s a good way to stay up to date and keep in touch with us as well as the community: , a community of aspiring DevOps professionals and practitioners from all over the world. DevOpsLinks DevOpsLinks - Join The DevOps Community - Newsletter, Slack Team Chat, DevOps Job Board .. , a community focused on technologies like serverless computing and FaaS and other interesting topics. Shipped An Independent Newsletter Focused On Serverless, Containers, CaaS, FaaS & Other Interesting Stuff : A Kubernetes community hub, hand-curated newsletter, team chat, training & more (coming soon). Kaptain ★ Welcome to Kaptain: A #Kubernetes Community Hub ★ What’s NEXT? Be more familiar with the DevOps ecosystem: First of all, be sure to understand the importance of the cultural points: read more here The 15-point DevOps Check List You should master *nix systems and have a good understanding of how Linux distributions work. Pick one OS for your production set-up. No need to get master of every OS out there. It would make your job difficult down the line. Pick one and get a grip over it. Be at ease with Terminal. You may have GUIs to manage your servers but you have to LOVE the terminal no matter what’s the case, it is faster, secure and honestly it is easier once you master it. How to get the CPU/system info (cat /proc/version, /proc/cpuinfo, uptime, et. al.) How cron jobs works. Set cron jobs on specific days/time/month. How to know what OS you are running on your machine (cat /etc/lsb-release) Learn the difference between different *nix OSs and how to know what OS you are running on your machine (e.g. cat /etc/lsb-release) Difference between shells: sh/dash/bash/ash/zsh .. How to set and unset ENV variables. Exporting ENV variable is temporary, how to export permanent variables ? What are shell configuration files : ~/.bashrc, .bash_profile, .environment .. How to “source” settings for program initialization files ? Knowing Vim, its configuration (.vimrc) and some of its basic tips is a must. How logging works in *nix systems, what are logging levels and how to work with log management tools (rsyslog, logstash, fluentd, logwatch, awslogs ..) How swapping works. What is swappiness. (swapon -s, /proc/sys/vm/swappiness, sysctl vm.swappiness ..) Be at ease with scripting languages. Bash is a must (Other scripting languages are very useful like Python, Perl..). Master useful commands like process monitoring commands (ps, top, htop, atop ..), system performance commands (nmon, iostat, sar, vmstat ..) and network troubleshooting and analysis (nmap, tcpdump, ping, traceroute, airmon, airodump ..). What is your backup strategy ? How do you test if a backup is reliable Do you know ext4, ntfs, fat ? Do you know Union filesystems ? How to view/set network configuration on a system How to set static/dynamic IP address on a machine with different subnets? (Hint: CIDR) Use network packet analysis to analyze and understand how networking works: tcpdump, Wireshark .. Are you familiar with the OSI model and the TCP/IP model specifications ? What are the difference between TCP and UDP ? Do you know vxlan ? “white boat over body of water” by on Joshua Ness Unsplash How to set-up firewalls (iptables at least ufw) : set rules,list rules, route traffic, block a protocol/port .. How to view/set/backup your router settings? How DNS works ? How to set-up a DNS server (Bind, Unbound, PowerDNS, Dnsmasq ..) ? What is the difference between recursive and authoritative DNS ? How to troubleshoot DNS (nslookup, dig ..etc) Get familiar with DNS and A, AAAA, C, CNAME, TXT records What happens exactly when you hit google.com in the browser? From your browser’s cache, local DNS cache, local network configuration(hosts file), routing, DNS, network, web protocols, caching systems to web servers (Most basic question yet difficult if goes deep). Get familiar with CDN providers (fastly, Akamai et. al.) Get familiar with how SSL/TLS works and how digital certificates works (https) Learn about SSL certs (Let’s Encrypt) Get familiar with more secure protocols and tools: TLS, STARTTLS, SCP, SSH, SFTP, FTPS .. Know the difference between PPTP, OpenVPN, L2TP/IPSec Learn to setup Recordset for your domain (You can use managed cloud services like Route53 or CloudFlare ..etc) How SSH works, how to debug it and how you can generate ssh keys and do passwordless login to other machines What is an init system ? Do you know Systemd (used by Ubuntu since 15.04) , Upstart (developed by Ubuntu), SysV .. Compiling any software from its source (gcc, make and other related stuff) How to compress/decompress a file in different formats via terminal (mostly: tar/tar.gz) “selective focus photography of boy wearing black Batman cape” by on TK Hammonds Unsplash How to set-up a web server (Apache, Nginx ..) Learn to play with Nginx/Apache log files using “awk, sed, sort, uniq” What are the difference between Nginx and Apache ? When to use Nginx ? When to use Apache ? You may use both of them in the same web application, when and how ? How to set-up a reverse-proxy (Nginx ..) How to set-up a caching server ( Squid, Nginx, Varnish ..) How to set-up a load balancer ( HAproxy, Nginx..) How to set-up an API gateway for your microservices (Ambassador, Kong, Traefik, Nginx ..) Get familiar with Systemd and how to analyze and manage services using commands like systemctl and journalctl Get familiar with OAuth and SAML or Auth0 integration Get familiar with RESTful API’s, Webhooks, GraphQL, gRPC Securing ES Cluster (XPack (commercial), OpenSource: ReadOnlyREST, Search Guard) Taking ES back-up (snapshot and incremental) using _snapshot API or esdump (Caution: requires nodejs/npm) Taking DB’s back-up Learn Python (pip + setup.py) and BASH. Have you started using Golang as a scripting language ? Try it. “road between green grass field near mountains under blue and brown sky at golden hour” by on Luca Micheli Unsplash Develop your Cloud Computing skills. Start by choosing a cloud infrastructure provider: Amazon Web Services, Google Cloud Platform, Digitalocean, Microsoft Azure. Or create your own private cloud using OpenStack. What about staging servers ? What is your testing strategy Unit Testing ? End-to-end ? So you really need staging servers ? Google “staging servers must die”. Read about PaaS/Iaas/Saas/CaaS/FaaS/DaaS and serverless architecture Learn how to use and configure Cloud resources from your CLI using Cloud Shells or from your programs using Cloud SDKs Learn how to use at least one of the configuration management and remote execution tools (Ansible, Puppet, SaltStack, Chef ..etc). Your choice should be based on criterias like: syntax, performance, templating language, push vs pull model, performance, architecture, integration with other tools, scalability, availability ..etc. Packer for image building Integrating Jenkins for CI/CD Setting up Consul (for service discovery) Start looking into infrastructure as code and infrastructure provisioning automation tools like Terraform and Packer Start looking into containers and Docker. It’s underlying architecture (cgroups and namespaces). How it works? Start getting familiar with basic Docker commands (logs/inspect/top/ps/rm). Also look into docker hub (push/pull image) Start looking into container orchestration tools: Docker Swarm, Kubernetes, Mesosphere DC/OS, AWS ECS Read about stateless and stateful applications Learn to build small docker images for your applications (preferable: alpine). Install only the required packages. “woman in front of wall” by on Josh Hild Unsplash Learn most used port numbers on which services runs by default (like: SSH (22), Web (80), HTTP/S (443) etc.) Learn networking from a distributed perspectives (networking in containers world). Make yourself at ease with 8 fallacies of distributed systems. Get a decent understanding of L4/L7 load balancers. Learn how to secure proxy and reverse proxy server (Nginx, Traefik, Ambassador ..) and take a look on how their networking systems work. Get familiar with tools that help you create distributable and portable development environments (Examples: Vagrant & Docker). Managing secrets while application deployment. Hashicorp Vault would help you. Learn AWS SQS, Google PubSub or other alternatives Get familiar with Kafka, AWS Kinesis or other alternatives Understand AWS RDS as most of the times Ops find it easy to delegate mundane tasks to service providers to avoid the extra work. But that comes with a price tag. “people playing violin inside dim room” by on Larisa Birta Unsplash If you’re on Kubernetes then understand all of its components and their workings. Learn how to handle K8s built-in functionality at first then jump to Helm/Istio Get to know how and what to monitor (from the operating system as well as application perspective) Tracing comes later on once you are at a decent stage to understand and dig down and your application supports it natively If you’re dealing with (Big) Data engineering related applications then get familiar with Hadoop, HBase, Zookeeper, Spark and setting-up their clusters Learn to setup and tune Redis for your application need. Add authentication to it Learn to know the nature of your application: CPU intensive, Memory intensive, I/O intensive. Then deal with it accordingly. Learn to choose between different types of databases according to your needs: SQL, NoSQL, TSDB, graph database .. Learn to manage IAM roles/permissions and how to manage keys for different users (AWS IAM, GCP IAM ..). Publish your code to GitHub if you like sharing and helping others with the problems you faced. Learn to benchmark your infrastructure and application to fill in the gaps. Don’t directly jump to execution. Visualize the end-goal. Draw diagrams. Discuss in-detail with developers. Ask question without any hesitation. Let the questions be downright silly. Do small demo’s or PoC’s from time to time for better understanding. “person with assorted-color paint on face” by on h heyerlein Unsplash Are you familiar with IDEs (Sublime Text, Atom, Eclipse ..) ? Dive into DB (MySQL or any other which you like) Learn about Redis/Memcache and similar tools Get to know the pro/cons of Microservices architecture and start building similar architectures Learn how to configure and use continuous integration and continuous delivery tools like Jenkins, Travis CI, Buildbot, GoCd. Integrating this tools with other tools (like Selenium, build tools, configuration management software, Docker, Cloud providers’ SDKs ..etc) is helpful. Learn distributed version control system Git and its basic commands (pull/push/commit/clone/branch/merge/logs…etc.). Understand git workflows. Do you know how to revert a Git repository to a previous commit ? How to use SSH-keys. Try Github, Bitbucket or Gitlab .. to configure passwordless access to the repo/account Get familiar with the mumble-jumble of Kernel versions and how to patch them. How to generate checksums (md5, SHA ..) to validate the integrity of any file Get to know the difference between Monolithic and Microservices architecture. How do you make zero downtime deployment ? What is your strategy to make rollbacks, self-healing, auto-scalability ? Learn about scalability and highly distributed systems. How to keep them UP & Running all the time? Get familiar with APIs and services: RESTfull, RESTful-like, API gateways, Lambda functions, serverless computing, SOA, SOAP, JMS, CRUD .. How to secure your infrastructure, network and running applications ? Do you know what is ChatOps ? Have you tried working with one of the known frameworks ? Hubot, Lita, Cog ? “man holding gray and black ring buoy” by on Oliver Sjöström Unsplash Learn how set-up, configure and use some monitoring systems (Nagios, Zabix, Sensu, Prometheus..etc) Whatever you do “document it”. No matter how rough it is. Do it. Later on, you would thank yourself for it. Make small code scripts for your ease. Note down commands or snippets (from StackOverflow, Github Gists or other online boards) that helped you to get what you wanted. Make Google, StackExchange, Quora and other professional forums your friends. Read. Read. Read. Ask questions on Twitter/StackOverflow. Attend meetups. You can join one of our local meetups, like , and . If you want to organize your local meetup, get in touch, we will help you! DevOpsLinks Community Meetings (Bangalore) DevOpsLinks Community Meetings (London) DevOpsLinks Meetings Meeting (Paris) Talk to fellows who are in the same domain and discuss your issues. Learn from . the community Join our and ask all of your (noob) questions, no problem! We all started from the beginning. Slack channel Don’t try to solve every problem. Always keep one thing in mind: No man is an island. You can’t do, learn, achieve everything. Learn what is most important for a task in hand. Read about DevOps glossary (Google it) Follow open-source projects (Kubernetes/Docker etc.) or what excites you. Follow like-minded folks from and be updated with latest tech trends. the community Try to establish good development practices and a solid architecture. Learn how to scale at production level. Learn how to live debug and trace running application in production servers. “person holding black and brown globe ball while standing on grass land golden hour photography” by on Ben White Unsplash Follow some decent tech companies engineering blogs (We follow: Google/Uber/Quora/Github/Netflix). This is the place from where you can learn straight from the experts and get a chance to see their approach to solve any problem. Browse a few aggregators like Reddit, hackernews, medium .. etc. Follow like-minded developers and tech companies on twitter. ( I am always reading articles and watching talks/conferences, post-mortems are some of my favorite content. I also follow a few github repos to see what’s going on with the technology that I use.) Join , and ! We are sure you are going to learn many things, even if you’re an expert, you still have to learn more and more. DevOpsLinks Kaptain Shipped Read various technology related blogs and subscribe to DevOps Newsletters. We have by the way, you can submit your article and share it with the community. a publication Read about Open Source and you can contribute to Open source projects.: how You should be able to do post-mortem if something bad happens to your systems. Make a detailed documentation about what went wrong and how we can prevent not to let it happen in future again. Try to learn the approach how experts from StackOverflow are solving any problem. Always remember, it’s the technology which keeps on changing not the basics. Basics always remains the same. Read books Last but not the least… don’t assume anything, ,never take realities for granted, always experiment and enjoy the journey. “black pencil on top of ruled paper” by on Hope House Press — Leather Diary Studio Unsplash If you have the majority of these skills, you can be sure you have the prerequisites to DevOps, SRE and system engineering. You can’t learn all these in one-shot. But having a mind-set is the main thing. It will surely take time even to get familiar with all these but as they say journey has the fun. You will fail many times, learn from your mistakes and don’t repeat them. Always remember, we all are learners here. We learn by hit and trial. Don’t feel shy in failing because that’s how we learn. Connect Deeper We will be happy to hear your suggestions to add other points to this list. Join one ore more of our online communities to stay in touch. DevOpsLinks - Join The DevOps Community - Newsletter, Slack Team Chat, DevOps Job Board .. Shipped, a community focused on technologies like Serverless Computing, FaaS (Function as a Service) and other interesting topics. An Independent Newsletter Focused On Serverless, Containers, CaaS, FaaS & Other Interesting Stuff Kaptain: A Kubernetes community hub, hand-curated newsletter, team chat, training & more (coming soon). ★ Welcome to Kaptain: A #Kubernetes Community Hub ★ If you liked this post, stay in touch with us by subscribing to one or more of the above online communities. Please give us claps and share it to your followers.

The Must Know Checklist For DevOps & Site Reliability Engineers (Updated)

is a neural model that is able to recognise everyday objects very quickly from images. There’s also which runs on mobile devices pretty well. This guide tells you how to get TinyYOLO installed and running on your . To follow along, log into your ODROID, and run these commands: YOLO network TinyYOLO ODROID XU4 Step 1: Install TensorFlow Update your system First, we make sure everything is up to date. sudo apt-get updatesudo apt-get upgrade -ysudo apt-get dist-upgrade -ysudo reboot Get some swap Bazel won’t build without this on the ODROID XU4. Pop in a blank 8GB USB drive, which will get erased, and run: sudo blkid Check the device name, usually /dev/sda1, and with that name, run: sudo mkswap /dev/sda1sudo swapon /dev/sda1sudo swapon Install the requirements We’ll need real Oracle , instead of OpenJDK. I tried OpenJDK, built Bazel with it, but it failed to SHA-1 hash downloads, and so was useless. So, we install: Java sudo apt-get install pkg-config zip g++ zlib1g-dev unzipsudo apt-get install gcc-4.8 g++-4.8sudo update-alternatives --install /usr/bin/gcc gcc /usr/bin/gcc-4.8 100sudo update-alternatives --install /usr/bin/g++ g++ /usr/bin/g++-4.8 100sudo apt-get install python-pip python-numpy swig python-devsudo pip install wheel sudo add-apt-repository ppa:webupd8team/javasudo apt-get updatesudo apt-get install oracle-java8-installer Install Bazel build system Google builds things using Bazel. TensorFlow is from Google. Thus, we need to build Bazel first. This takes about a half an hour. Go get some lunch. wget unzip -d bazel bazel-0.5.4-dist.zipcd bazelsudo ./compile.sh https://github.com/bazelbuild/bazel/releases/download/0.5.4/bazel-0.5.4-dist.zip Now, Java will run out of heap here. So, we need to: sudo vi scripts/bootstrap/compile.sh And find the line with “run” on it, and add some memory flags, changing it to: run “${JAVAC}” -J-Xms256m -J-Xmx384m -classpath “${classpath}” -sourcepath “${sourcepath}” \ And we compile again. sudo ./compile.sh sudo cp output/bazel /usr/local/bin/bazel Get TensorFlow Now we can actually download and configure TensorFlow. git clone --recurse-submodules cd tensorflow https://github.com/tensorflow/tensorflow.git I couldn’t get the latest version of TensorFlow to install, it had BoringSSL C99 compile issues, so checkout version 1.4.0, and configure: git checkout tags/v1.4.0./configure Say no to most things, including OpenCL: Build TensorFlow Then, we build. If you thought Bazel took a long time to build, then you haven’t built software before. Hold on to your hats. We’re in for a ride here. bazel build -c opt --copt="-mfpu=neon-vfpv4" --copt="-funsafe-math-optimizations" --copt="-ftree-vectorize" --copt="-fomit-frame-pointer" --local_resources 8192,8.0,1.0 --verbose_failures tensorflow/tools/pip_package:build_pip_package Building… 1,900 / 4,909 files… error. Oop, NEON doesn’t work. Ok, let’s turn that off. But, we’ll want to fix it later. bazel build -c opt --copt="-funsafe-math-optimizations" --copt="-ftree-vectorize" --copt="-fomit-frame-pointer" --local_resources 8192,8.0,1.0 --verbose_failures tensorflow/tools/pip_package:build_pip_package 3,700 / 4,622 files… error. In file included from tensorflow/compiler/ xla /service/llvm_ir/llvm_util.cc:30:0:./tensorflow/core/lib/core/casts.h: In instantiation of 'Dest tensorflow::bit_cast(const Source&) [with Dest = long long int; Source = void (*)(const char*, long long int)]':tensorflow/compiler/xla/service/llvm_ir/llvm_util.cc:400:67:   required from here./tensorflow/core/lib/core/casts.h:91:3: error: static assertion failed: Sizes do not match Alright, XLA is causing problems. It’s new, and not needed. Let’s drop it for now and reconfigure and rebuild without it. 2,345 / 3,683 files… 3,112 / 3,683 files… 3,682 / 3,683 files… Built! Target //tensorflow/tools/pip_package:build_pip_package up-to-date:bazel-bin/tensorflow/tools/pip_package/build_pip_package Quick! Install it! bazel-bin/tensorflow/tools/pip_package/build_pip_package /tmp/tensorflow_pkg sudo pip2 install /tmp/tensorflow_pkg/tensorflow-1.4.0-cp27-cp27mu-linux_armv7l.whl --upgrade --ignore-installed See the footnotes for issues here. Is it real? python2>>> import tensorflow>>> print(tensorflow.__version__)1.4.0 That feels good. Onto YOLOing. Step 2: SO YOLO. I’m sure there are a few implementations of YOLO out there by now. Let’s pick one. seems to know what he’s talking about. Let’s try his stuff. This guy # Get codegit clone cd basic-yolo-keras https://github.com/experiencor/basic-yolo-keras.git # Get weights from # Or Raccoon: wget _<authurl>/_tiny_yolo_features.h5wget _<authurl>/_tiny_yolo_raccoon.h5 https://1drv.ms/f/s!ApLdDEW3ut5fec2OzK4S4RpT-SU https://1drv.ms/f/s!ApLdDEW3ut5feoZAEUwmSMYdPlY # Edit configvi config.json         # Change model to "Tiny Yolo" # Download a raccoonwget https://upload.wikimedia.org/wikipedia/commons/b/be/Racoon_in_Vancouver.jpg # Runpython2 predict.py -c config.json -i Racoon_in_Vancouver.jpg -w tiny_yolo_raccoon.h5 Missing imaug. Ok, looks like we’ll need a few things. sudo pip2 install imgaugsudo pip2 install kerassudo pip2 install h5py H5py and scipy take a little while to install. Ok, let’s try that again. Can it find a raccoon in this image of a raccoon? Where is it? python2 predict.py -c config.json -i Racoon_in_Vancouver.jpg -w tiny_yolo_raccoon.h5 Yes! Now that’s a detected raccoon! I see you. You can’t hide. From the ODROID. __________________________________________________________________ Footnotes. At first when I ran: sudo pip install /tmp/tensorflow_pkg/tensorflow-1.4.0-cp27-cp27mu-linux_armv7l.whl --upgrade --ignore-installed It ran using python 3 and failed to install, so after some googling and learning about pip filename rules, I figured it out and just used pip2 instead. Then, the most fun issue was when I first ran . I got this fun message: import tensorflow >>> import tensorflowTraceback (most recent call last):File “<stdin>”, line 1, in <module>File “tensorflow/__init__.py”, line 24, in <module>from tensorflow.python import *File “tensorflow/python/__init__.py”, line 49, in <module>from tensorflow.python import pywrap_tensorflowFile “tensorflow/python/pywrap_tensorflow.py”, line 25, in <module>from tensorflow.python.platform import self_checkImportError: No module named platform Oh no! It’s broken in some way. So I googled the issue, and it seemed to be about locales: github.com No module named tensorflow.python.platform · Issue #36 · tensorflow/tensorflow So I set a locale first (after also seeing that it ), and rebuilt, and it still gave me the same issue. Hm. I’ll take a look at it tomorrow. needed to be capital US export LC_ALL=en_US.UTF-8export LANG=en_us.UTF-8 The next day, with fresh googling powers, revealed that actually… it was just that I was just running it in the build directory! It has a directory called tensorflow in it, and python was looking up into that to find things. So just changing directories to another fixed the issue. So easy. Such a fail. github.com Importing TF in Python yields ‘cannot import name ‘build_info’ · Issue #13526 · tensorflow

Running YOLO on ODROID: YODROID

Run geth with just 512Mb of RAM This is how I run full geth node alongside python back-end on a low-cost Digital Ocean (DO) Ubuntu droplet. With this config I’m in full sync (currently at block 3097083) with no crashes at all. TheMillionEtherHomepage.com Create a droplet Buy a 512 Mb RAM droplet and attach at least 20 GB volume to it (DO’s block storage). Just click button and DO will guide you through. Create droplet Setup a swapfile I tried to run geth with no swap, but it crashes in about 10–30 minutes after start. Here I’m setting up 2 Gigs of swap. One Gig is not enough. I had one kill with it within 2 mln blocks. $ sudo fallocate -l 2G /swapfile # Creates a file of a preallocated size $ sudo chmod 600 /swapfile # adjust the permissions $ sudo mkswap /swapfile # set up the swap space $ sudo echo '/swapfile none swap sw 0 0' >> /etc/fstab # enable swap $ sudo echo 'vm.swappiness=30' >> /etc/sysctl.conf # optional. The default swappiness (i.e. system willingness to use swap) is 60. You can set it to 30 if you care. As swap gradually kills SDDs. In my experience 30 is enough and it feels more eco-friendly. $ sudo /sbin/shutdown -r now # reboot $ free -mh # now you should see your swap usage. Digital Ocean’s instructions on swap are available here: How To Add Swap on Ubuntu 14.04 Install geth $ sudo apt-get install software-properties-common $ sudo add-apt-repository -y ppa:ethereum/ethereum $ sudo apt-get update $ sudo apt-get install geth Official Installation Instructions for Ubuntu Put geth’s database to the block storage volume You can run geth with key ( ), but I find the following approach simpler as you may have other software using the same ~/.ethereum folder by default. So we gonna create a symbolic link. datadir “/mnt/your-volume-name/ethereum/” Geth Command Line Options $ sudo mkdir /mnt/your-volume-name/ethereum # create an empty directory $ sudo chown username:username /mnt/your-volume-name/ethereum/ # set directory owner to username (you) $ sudo chmod 775 /mnt/your-volume-name/ethereum/ # set directory permissions $ ln -s /mnt/your-volume-name/ethereum/ ~/.ethereum # create symbolic link from your home directory to the volume Run geth and enjoy! $ geth --fast --cache=16 $ ls /mnt/your-volume-name/ethereum/ # see if geth is writing to the rigth place And add stats to enjoy even more. Add a cron task through: $ crontab -e At the bottom add the following task. It will write your attached volume usage to the disk.log file every day at 4 A.M. 0 4 * * * echo `date` `df -m | grep sda` >> /home/username/disk.log And in a couple of days check the logs to see your disk usage stats. If you see disk space running low, it is time to think of buying up more space. $ tail /home/username/disk.log Sun Jan 22 04:00:01 UTC 2017 /dev/sda 20031 14582 4410 77% /mnt/volume Mon Jan 23 04:00:01 UTC 2017 /dev/sda 20031 14809 4182 78% /mnt/volume Tue Jan 24 04:00:01 UTC 2017 /dev/sda 20031 15041 3950 80% /mnt/volume Wed Jan 25 04:00:01 UTC 2017 /dev/sda 20031 15294 3698 81% /mnt/volume Thu Jan 26 04:00:01 UTC 2017 /dev/sda 20031 15522 3470 82% /mnt/volume Fri Jan 27 04:00:02 UTC 2017 /dev/sda 20031 15739 3253 83% /mnt/volume Sat Jan 28 04:00:01 UTC 2017 /dev/sda 20031 15956 3036 85% /mnt/volume Sun Jan 29 04:00:01 UTC 2017 /dev/sda 20031 16161 2830 86% /mnt/volume Mon Jan 30 04:00:01 UTC 2017 /dev/sda 20031 16041 2950 85% /mnt/volume Tue Jan 31 04:00:01 UTC 2017 /dev/sda 20031 16271 2721 86% /mnt/volume Set up monit to monitor Geth and enjoy even when you go to sleep. To feel safer you can . It will restart geth if anything happens to it and inform you by email. set up monit to monitor Geth status Comments, questions, improvements? You can post them here or at the stackexchange thread: How to run geth at 512Mb RAM Digital Ocean droplet? Had two crashes: on 17th and 25th of March. So I highly recommend or other software. UPDT: monitoring geth with monit

How to run geth at 512Mb RAM Digital Ocean droplet

Installing a DIY Bare Metal GPU cluster for Kubernetes

Note: This tutorial is an excerpt for the deployment chapter in my book . The book will guide you from humble beginnings by deploying an app to production. If you find this type of content valuable, you can grab a free chapter right now! Building a SaaS Ruby on Rails 5 Also, the beta for my new project is almost ready. If you’re losing track of pull requests, have old ones lingering around or would just love a dashboard that aggregates these requests over multiple services (Github, Gitlab, and Bitbucket), . Pull Manager check it out Deploying a Rails app can be a somewhat daunting task to get set up right on new applications, even for seasoned Rails developers. While Capistrano has been the main player in Rails app deployments, it seems to have fallen somewhat out of favor as load balancers and computing servers have gained popularity. Thankfully, has created a tool for deploying and scaling Rails web application in their eco-system. Here is an explanation from their landing page: AWS(Amazon Web Services) AWS Elastic Beanstalk is an easy-to-use service for deploying and scaling web applications and services developed with Java, , PHP, Node.js, Python, Ruby, Go, and on familiar servers such as Apache, Nginx, Passenger, and . .NET Docker IIS You can simply upload your code and Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring. At the same time, you retain full control over the AWS resources powering your application and can access the underlying resources at any time. There is no additional charge for Elastic Beanstalk — you pay only for the AWS resources needed to store and run your applications. Getting Started If you do not have an AWS account yet, go sign up, and you get a bunch of free services for a year on specific levels(i.e t1.micro server, etc). The tutorial is going to focus on MacOS, and I can expand if enough interest is shown for windows, though most rails based commands should work on any platform. After your set up your user, get AWS’s CLI(here via brew): $ brew update$ brew install aws-elasticbeanstalk Now create the rails app if you have not already $ **rvm or rbenv optional setup here**$ gem install rails -v 5.0.1$ rails new rails5app$ cd rails5app$ git init && git add -A && git commit -m "Init Commit Message" …and now we’ll create an example scaffold $ rails g scaffold message subject body:text$ rails db:migrate$ git add .$ git commit -am "Add Messages"$ git push Alright, we have a basic Rails app needed to continue with the Elastic BeanStalk deploy. Lets initialize ElasticBeanstalk $ eb init Select a default region us-east-1 : US East (N. Virginia) Select an application to use1)[ Create new Application ] Enter Application Name(default is "rails5app"):Application rails5app has been created. It appears you are using Ruby. Is this correct?(y/n): y Select a platform version. Ruby 2.3 (Puma) Do you want to set up SSH for your instances?(y/n): y Select a keypair. [ Create new KeyPair ](default is 1): 1 That sets up our environment, uses US East(preferable if you want to use AWS free SSL services), Ruby 2.3 and lets you access your EC2 when it is up and running by typing ‘eb ssh’. Now we will create the environment. This is basically how Elastic Beanstalk lets you switch between different versions of your application. Most will use this to set up different rails environments to be deployed(prod, staging, etc) $ git commit -am "Post EB init"$ eb create production ..and wait. Right now Elastic Beanstalk is setting *everything* up for you, loadbalancers, security groups, EC2 server and more. Seriously, you should probably go grab a coffee. Also, I have had the eb-cli log time out on me before, disconnect, but still finish the environment creation. A quick status check afterwards will get you environment information and your ElasticBeanstalk URL for your application: $ eb statusEnvironment details for: productionApplication name: rails5appRegion: us-east-1Deployed Version: app-5cbc-170110_150338Environment ID: e-krea6tdvjxPlatform: 64bit Amazon Linux 2016.09 v2.3.0 running Ruby 2.3 (Puma)Tier: WebServer-StandardCNAME: production.a3rjg2n9mm.us-east-1.elasticbeanstalk.comUpdated: 2017–01–10 22:10:57.815000+00:00Status: ReadyHealth: Green Though, going there now would give you errors. To save you any ulcers, it’s because there is no Rails secret setup. So, here’s how you do that AND add an ENV variable to Elastic Beanstalk instances: $ eb setenv SECRET_KEY_BASE=$(rails secret)INFO: Environment update is starting.INFO: Updating environment production's configuration settings.INFO: Environment health has transitioned from Ok to Info. Configuration update in progress. 1 out of 1 instance completed (running for 51 seconds).INFO: Successfully deployed new configuration to environment. BOOM From here on out, pushing code to your instance(s) is just an ‘eb deploy’ away. Your default rails chariot awaits The rest of the good stuff I bet you’re saying, that’s great and all, but that’s not a production ready app. You’re right, let’s get postgresql, redis and sidekiq going! First up, Postgres. You’ll want to add the ‘pg’ gem to your gemfile and add the following to your database.yml: production:<<: *defaultadapter: postgresqlencoding: unicodedatabase: <%= ENV['RDS_DB_NAME'] %>username: <%= ENV['RDS_USERNAME'] %>password: <%= ENV['RDS_PASSWORD'] %>host: <%= ENV['RDS_HOSTNAME'] %>port: <%= ENV['RDS_PORT'] %> What is all that magic? AWS Elastic Beanstalk will throw those ENV variables on the your ec2 instances as soon as you have an RDS instance setup. Lets do that: Go to https://console.aws.amazon.com/elasticbeanstalk/home?region=us-east-1#/applications Click on the box for your application Click on ‘Configuration’, scroll down to the bottom to ‘Data Tier’ and click ‘Setup RDS instance’ Setup RDS to your liking(postgres, t2.micro(if you want to stay in free tier, username, etc) Wait for AWS to do it’s thing. You may acquire another cup of coffee now. Note: A few readers have brought it to my attention that adding an RDS instance through the EBS interface binds it to the existence or destruction of your EBS environment. Setting up an RDS separately and manually adding the environment variable may have greater RDS assurance for some. Now, another ‘eb deploy’ for your database config should get everything up and running through postgresql. Now, lets add two configuration files most apps will need. First, adding git to the deploy. Add a folder .ebextensions, and a file ruby.config packages:yum:git: [] Now, when you get a few more gems in your app, especially those that insall native extensions, you may get failed deploys from running out of memory. Since, most apps can run on the free tier, and the only time memory is an issue is during a deploy, we will enable swap. Add a file 0001_setup_swap.config in the .ebextensions folder with the following text: commands:000_dd:command: echo “noswap”#dd if=/dev/zero of=/swapfile bs=1M count=3072001_mkswap:command: echo “noswap”#mkswap /swapfile002_swapon:command: echo “noswap”#swapon /swapfile Sweet, we’re almost done. The last piece of almost any production Rails app will be sidekiq(with Redis…which means we can also tie ActionCable into this Redis as well). Let’s start by adding Redis in AWS: Go to : https://console.aws.amazon.com/elasticache/home?region=us-east-1#redis Click create, and fill out the pretty straightforward form(picking t2.micro for free tier again). Click Save and go for a water this time while you wait…three coffees are a lot. Once created, clicking on the instance on the list will take you to a page with an endpoint listed in the table(it should look like your-name.iz6wli.0001.use1.cache.amazonaws.com) Almost done! We just need to add a couple config files for sidekiq, redis and elastic’s deploy! First here is how I like to set up Sidekiq/Redis config: In config/initializers/sidekiq.rb rails_root = Rails.root || File.dirname(__FILE__) + ‘/../..’rails_env = Rails.env || ‘development’redis_config = YAML.load_file(rails_root.to_s + ‘/config/redis.yml’)redis_config.merge! redis_config.fetch(Rails.env, {})redis_config.symbolize_keys!Sidekiq.configure_server do |config|config.redis = { url: “redis://#{redis_config[:host]}:#{redis_config[:port]}/12” }endSidekiq.configure_client do |config|config.redis = { url: “redis://#{redis_config[:host]}:#{redis_config[:port]}/12” }end …and config/redis.yml development:host: ‘localhost’port: ‘6379’test:host: ‘localhost’port: ‘6379’production:host: ‘your-name.iz6wli.0001.use1.cache.amazonaws.com’port: ‘6379’ *optional* config/cable.yml development:adapter: async test:adapter: async production:adapter: redisurl: redis://your-name.iz6wli.0001.use1.cache.amazonaws.com:6379 …lastly, for Elastic Beanstalk .ebextenstions/0002_sidekiq.config( ) gist # Sidekiq interaction and startup scriptcommands:create_post_dir:command: "mkdir -p /opt/elasticbeanstalk/hooks/appdeploy/post"ignoreErrors: truefiles:"/opt/elasticbeanstalk/hooks/appdeploy/post/50_restart_sidekiq.sh":mode: "000755"owner: rootgroup: rootcontent: |#!/usr/bin/env bash. /opt/elasticbeanstalk/support/envvars EB_APP_DEPLOY_DIR=$(/opt/elasticbeanstalk/bin/get-config container -k app_deploy_dir)EB_APP_PID_DIR=$(/opt/elasticbeanstalk/bin/get-config container -k app_pid_dir)EB_APP_USER=$(/opt/elasticbeanstalk/bin/get-config container -k app_user)EB_SCRIPT_DIR=$(/opt/elasticbeanstalk/bin/get-config container -k script_dir)EB_SUPPORT_DIR=$(/opt/elasticbeanstalk/bin/get-config container -k support_dir) . $EB_SUPPORT_DIR/envvars. $EB_SCRIPT_DIR/use-app-ruby.sh SIDEKIQ_PID=$EB_APP_PID_DIR/sidekiq.pidSIDEKIQ_CONFIG=$EB_APP_DEPLOY_DIR/config/sidekiq.ymlSIDEKIQ_LOG=$EB_APP_DEPLOY_DIR/log/sidekiq.log cd $EB_APP_DEPLOY_DIR if [ -f $SIDEKIQ_PID ]thensu -s /bin/bash -c "kill -TERM `cat $SIDEKIQ_PID`" $EB_APP_USERsu -s /bin/bash -c "rm -rf $SIDEKIQ_PID" $EB_APP_USERfi . /opt/elasticbeanstalk/support/envvars.d/sysenv sleep 10 su -s /bin/bash -c "bundle exec sidekiq \-e $RACK_ENV \-P $SIDEKIQ_PID \-C $SIDEKIQ_CONFIG \-L $SIDEKIQ_LOG \-d" $EB_APP_USER "/opt/elasticbeanstalk/hooks/appdeploy/pre/03_mute_sidekiq.sh":mode: "000755"owner: rootgroup: rootcontent: |#!/usr/bin/env bash. /opt/elasticbeanstalk/support/envvars EB_APP_USER=$(/opt/elasticbeanstalk/bin/get-config container -k app_user)EB_SCRIPT_DIR=$(/opt/elasticbeanstalk/bin/get-config container -k script_dir)EB_SUPPORT_DIR=$(/opt/elasticbeanstalk/bin/get-config container -k support_dir) . $EB_SUPPORT_DIR/envvars. $EB_SCRIPT_DIR/use-app-ruby.sh SIDEKIQ_PID=$EB_APP_PID_DIR/sidekiq.pidif [ -f $SIDEKIQ_PID ]thensu -s /bin/bash -c "kill -USR1 `cat $SIDEKIQ_PID`" $EB_APP_USERfi One more ‘git commit’ and ‘eb deploy’ and you are good to go. Aw yeah!

How to setup and deploy a Rails 5 app on AWS ElasticBeanstalk with PostgreSQL, Redis and more…

Image Credit: Faze Clan Nickmercs is one of the best fps players in the world. Mercs first found fame playing Gears of War, Halo, Fortnite and Call of Duty: Warzone. has become one of the most popular streamers of Warzone and ranks high as one of the game’s best. Here are Nickmercs’ Warzone settings to help you to elevate your game. Nickmercs Nickmercs Controller Binds and Sensitivity Settings Nickmercs uses the Scuf controller when playing Warzone, a specially designed controller that adds two more thumbsticks. However, these controllers are expensive; you can use an alternative controller bind if you don't want to splash the cash. More specifically, the layout. bumper jumper tactical button This specific controller layout allows you to switch A or X (depending on your controller) with your left bumper. Meaning, you jump with the left bumper and use tactical equipment with A or X. This button configuration mirrors the Schuf controller and is used by Mercs. You will also want to keep the . Sticklayout preset to default For example: invert vertical look is disabled deadzone at 0.15 horizontal stick sensitivity at 6 vertical stick sensitivity should be at a 6 ADH sensitivity multiplier at high low zoom at 1. It is also recommended that to mimic Nickmercs loadout, the aim and are kept at a standard and vibration of the controller are disabled. response curve controller vibration Weapon and Movement Settings Nickmercs Warzone Settings also include weapons: He keeps aim assist at a standard Scale aim assist with FOV enabled Merks uses ADS + melee with a weapon mount movement exit enabled. Make sure to ensure both the equipment behaviour and aim down sight behaviour are on hold. Depleted ammo weapon switch is enabled. For movement: Make sure site behaviour is on tap Auto move forward is disabled Auto move forward Automatic sprint should be disabled Change your vehicle camera recenter and parachute auto-deploy to enabled Nickmercs Warzone Visuals and Graphics Settings Nickmercs sets his field of view to 100, which is independent his brightness is set to 50 HUD bounds to 10 Mini-map shape is square in the HUD while also having mini map rotation on His frames per second and latency telemetry is enabled, which he likes to max out at a 240 variable refresh rate Nickmercs MG28 Loadout Nickmercs uses various loadouts and playstyles to try and stay on top of his game when new gear and weapons are released. Currently, this is the new loadout he uses, which features the best LMG in the game. Merks also favours the new MG82  machine gun introduced in season 4, opting for a classic agency suppressor muzzle, 16.4 task force barrel. Similarly, the weapon is equipped with an axel arms optic 3x, a serpent wrap grip and a field agent grip underbarrel. Final Thoughts All in all, Nickmercs Warzone settings are the best of the best. The popular streamer has got his settings down perfectly, allowing him to take down other players efficiently, securing those crucial Warzone wins. For more Call of Duty news and features, in the footer below. subscribe to our newsletter Also, check out, 5 Ways to Hack Pokémon GO 5 Best Assault Rifles in Warzone Based on Stats 5 Best Xbox Kinect Games You've Never Played

Nickmercs' Warzone Settings Guide: Controller Binds, Loadout, Sensitivity

Call of Duty Warzone is one of the most popular games of the decade. The battle royale has over , with its player base growing by the day. From Youtubers to casual gamers, the game is top-rated. 75 million active players Over the last year, the game has seen multiple different in-game seasons, with each season bringing new weapons, perks and equipment for players to enjoy. Seasonal updates also receive patch updates that modify certain guns that may be overpowered or underpowered. For example, many of the game's assault rifles have been changed in the latest game update. In this regard, here are the five best assault rifles in Warzone currently. 1. FFAR 1 At number one comes FFAR 1. To no one's surprise, the FFAR 1 is one of the best assault rifles in Warzone. The FFAR 1 is a fully automatic assault rifle with an incredibly high fire rate of 900 rounds a second, the highest in the game and a reload speed of 2.49 seconds. Thus, the gun is popular amongst fans of the game due to its power and deadly speed, providing unlimited power at mid and long-range. The weapon is also particularly snappy at close range, having excellent mobility of 97% and near-perfect control. You can unlock the FFAR 1 by reaching level 40. When using the gun, it is best to use a medium-range scope to optimize the gun's long and close-range capabilities. Likewise, equipping perks such as scavenger will allow you to gain ammo on kills which will help restock your depleted ammo reserves due to the FFAR 1's high fire rate. Credit: Call of Duty Wiki 2. CR-56 AMAX The CR-56 AMAX is another popular assault rifle within the community, coming in at number two on this list due to its excellent medium-range capabilities. Although the gun does a decent job at both long and short-range, the weapon is used best at the medium range. Warzone The CR-56 AMAX is less mobile than the FFAR 1 with 93.5%, making it more clunky to use, but it does have impressive damage outputs. The gun has an average damage output of 42, one of the highest in the game. The AMAX cannot be beaten at the medium range and can be tweaked for other gameplay styles, ranking high on this list as one of the best assault rifles in Warzone. You can unlock this gun by getting three gun melee kills in 10 different matches while using an AR. Credit: Call of Duty Wiki 3. Kilo 141 Although the Kilo 141 is not the best assault rifle in Warzone, the gun is the perfect weapon for those booting up the game for the first time. The Kilo has excellent damage output with 750 rounds per minute and sound damage output of 31.5 on average, making it the ideal starting gun for those who want to begin their Warzone experience. Combining both power and low recoil makes it the perfect starting gun, allowing you to get kills and compete with more experienced players. When using the Kilo, it is best to equip high fire rate secondary weapons such as the Renetti pistol while also using perks such as double time and high alert. All in all, the Kilo is the perfect starting gun and a tremendous all-around assault rifle. In addition, the Kilo is readily available from the start of the game. Credit: Call of Duty Wiki 4. Grau 5.56 The Grau 5.56 is another fan favourite assault rifle used in Call of Duty: Warzone. The weapon is well-known amongst fans due to its lightweight nature, making the gun highly mobile with a 97% mobility rating, the highest in the game. Excellent mobility combined with the gun's high level of accuracy, especially at long range, makes the weapon very dangerous and one of the best assault rifles in Warzone. The Grau is best used with a shotgun or submachine gun as a secondary weapon and equipping the perk amped, enhancing your mobility further as you quickly dispatch enemies at close and long-range. You can unlock the Grau by getting five kills in a minute while using any assault rifle twenty-five times. Credit: Call of Duty Wiki 5. Krig 6 The Krig 6 is the perfect long-range gun. The weapon has excellent control and accuracy, making long-range kills easy. The gun also has power but its fire rate is much to be desired, which hits only 655 rounds a minute. The Krig is excellent at most ranges, but you may need to use attachments such as the SOCOM eliminator muzzle to lower the gun's recoil. Likewise, using perks such as ghost or assassin will also work well with the gun due to its versatility. You can unlock this gun at level 16. Credit: Call of Duty Wiki Final Thoughts on the Best Assault Rifles in Warzone Overall, Call of Duty: Warzone has several high-quality assault rifles for you to choose from. As the game continues to evolve, Activision will add new weapons to the game that may surpass some on this list as the best assault rifles in Warzone. Until that day, for more Call of Duty news and features, subscribe to our newsletter in the footer below. Also, check out, 5 Ways to Hack Pokémon GO 5 Predictions for the 2021 Nintendo Direct 25 Predictions for E3 2021

Stories, News & Mentions about SWAPZONE

Swapzone’s Stories on HackerNoon

Swapzone's News & Mentions