https://barn.pgsty.com/tags/security/ Recent content in Security on Barn Hugo en-US Wed, 11 Nov 2026 00:00:00 +0800 https://barn.pgsty.com/blog/design/pigsty-host-setup/ Wed, 11 Nov 2026 00:00:00 +0800 https://barn.pgsty.com/blog/design/pigsty-host-setup/ <p><strong>Recommend one optional host setup operation: install a fixed set of Pigsty names and trust the lab&rsquo;s public root CA certificate.</strong> Keep one entry address, defaulting to <code>10.10.10.10</code>, and reuse the same CA across ordinary lab rebuilds. With unchanged names, address and CA trust, setup is a no-op and needs no elevation. This gives the common lab a mostly one-time host integration step.</p> <p><strong>Status — 2026-11-11: proposal, not implemented.</strong> This narrows the first delivery from the earlier <a href="https://barn.pgsty.com/blog/design/pigsty-host-dns/">full host-DNS design</a>. General inventory extraction, dynamic node/PG/VIP publication, split DNS and a resident DNS service remain optional future work. Their implementation is not a prerequisite for this fixed profile. This review changed documentation only; it did not read a CA private key, install trust, modify system hosts or operate VMs.</p>