Engineering notes on security, Linux systems and hardened infrastructure.
Every post documents a real setup, re-tested before publishing — reproducible commands, measured numbers, trade-offs stated plainly.
GLPI is free software — so why have someone host it? Because a GLPI instance managed by Convergent is not a stock GLPI instance: vulnerability intelligence on your inventory, ready-to-send asset reports, a CMDB that fills itself, governed internal communications. No extra licence, and no lock on your data.
Convergent is releasing its GLPI Git Plugin Installer plugin under a free licence: install and update GLPI plugins from git / HTTPS repositories, with SSRF-guarded fetch and zip-slip-safe extraction. Overview and GitHub link.
Consolidate several clamd instances into a single containerized ClamAV engine (Podman/Quadlet), non-root, exposed over a group-restricted unix socket, sharing the host's signatures — without wasting memory.
Convergent is releasing its GLPI Matomo Tag Manager plugin under a free licence: inject a Matomo Tag Manager container into every GLPI page, without touching any template. Why open source, architecture, security and step-by-step installation.
Convergent is releasing commerce_konnect under a free licence: a Drupal Commerce module that integrates the Tunisian Konnect payment gateway. Overview and GitHub link.