opencode-skills-collection 4.0.67 → 4.0.69
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bundled-skills/.antigravity-install-manifest.json +281 -1
- package/bundled-skills/access-review/SKILL.md +394 -0
- package/bundled-skills/access-review/references/details.md +121 -0
- package/bundled-skills/agent-evals/SKILL.md +420 -0
- package/bundled-skills/agent-observability/SKILL.md +346 -0
- package/bundled-skills/agent-observability/references/details.md +786 -0
- package/bundled-skills/ai-agent-security/SKILL.md +393 -0
- package/bundled-skills/ai-agent-security/references/details.md +912 -0
- package/bundled-skills/ai-coding-agent-guardrails/SKILL.md +442 -0
- package/bundled-skills/ai-coding-agent-guardrails/references/details.md +753 -0
- package/bundled-skills/ai-inference-service-mesh/SKILL.md +449 -0
- package/bundled-skills/ai-pipeline-orchestration/SKILL.md +287 -0
- package/bundled-skills/ai-red-teaming/SKILL.md +409 -0
- package/bundled-skills/ai-security-hardening/SKILL.md +343 -0
- package/bundled-skills/ai-sre-incident-response/SKILL.md +336 -0
- package/bundled-skills/alerting-oncall/SKILL.md +458 -0
- package/bundled-skills/alerting-oncall/references/details.md +84 -0
- package/bundled-skills/anti-slop-design/SKILL.md +393 -0
- package/bundled-skills/antigravity-maintainer-batch-release/SKILL.md +1 -0
- package/bundled-skills/apk-redteam-pipeline/SKILL.md +446 -0
- package/bundled-skills/argocd-gitops/SKILL.md +469 -0
- package/bundled-skills/arm-templates/SKILL.md +438 -0
- package/bundled-skills/arm-templates/references/details.md +64 -0
- package/bundled-skills/artifact-yylo/SKILL.md +122 -0
- package/bundled-skills/asset-inventory/SKILL.md +412 -0
- package/bundled-skills/asset-inventory/references/details.md +127 -0
- package/bundled-skills/audit-logging/SKILL.md +476 -0
- package/bundled-skills/aws-cloudtrail/SKILL.md +486 -0
- package/bundled-skills/aws-cost-optimization/SKILL.md +331 -0
- package/bundled-skills/aws-ec2/SKILL.md +426 -0
- package/bundled-skills/aws-ecs-fargate/SKILL.md +388 -0
- package/bundled-skills/aws-iam/SKILL.md +463 -0
- package/bundled-skills/aws-lambda/SKILL.md +428 -0
- package/bundled-skills/aws-rds/SKILL.md +380 -0
- package/bundled-skills/aws-s3/SKILL.md +434 -0
- package/bundled-skills/aws-secrets-manager/SKILL.md +486 -0
- package/bundled-skills/aws-vpc/SKILL.md +436 -0
- package/bundled-skills/azure-ai-document-intelligence-ts/SKILL.md +1 -1
- package/bundled-skills/azure-aks/SKILL.md +423 -0
- package/bundled-skills/azure-devops/SKILL.md +457 -0
- package/bundled-skills/azure-functions-devsec/SKILL.md +436 -0
- package/bundled-skills/azure-keyvault/SKILL.md +455 -0
- package/bundled-skills/azure-keyvault/references/details.md +83 -0
- package/bundled-skills/azure-monitor-audit/SKILL.md +379 -0
- package/bundled-skills/azure-networking/SKILL.md +448 -0
- package/bundled-skills/azure-networking/references/details.md +135 -0
- package/bundled-skills/azure-sql/SKILL.md +413 -0
- package/bundled-skills/azure-sql/references/details.md +113 -0
- package/bundled-skills/azure-vms/SKILL.md +402 -0
- package/bundled-skills/azure-vms/references/details.md +134 -0
- package/bundled-skills/backup-recovery/SKILL.md +388 -0
- package/bundled-skills/bb-methodology/SKILL.md +451 -0
- package/bundled-skills/bb-methodology/references/details.md +120 -0
- package/bundled-skills/block-storage/SKILL.md +371 -0
- package/bundled-skills/blue-green-deploy/SKILL.md +453 -0
- package/bundled-skills/blue-green-deploy/references/details.md +90 -0
- package/bundled-skills/bug-bounty/SKILL.md +447 -0
- package/bundled-skills/bug-bounty/references/details.md +1316 -0
- package/bundled-skills/bugcrowd-reporting/SKILL.md +351 -0
- package/bundled-skills/business-continuity/SKILL.md +463 -0
- package/bundled-skills/career-ops/SKILL.md +186 -0
- package/bundled-skills/cdn-setup/SKILL.md +374 -0
- package/bundled-skills/change-management/SKILL.md +438 -0
- package/bundled-skills/change-management/references/details.md +105 -0
- package/bundled-skills/circleci/SKILL.md +475 -0
- package/bundled-skills/cis-benchmarks/SKILL.md +150 -0
- package/bundled-skills/cloudflare-pages/SKILL.md +318 -0
- package/bundled-skills/cloudflare-r2/SKILL.md +353 -0
- package/bundled-skills/cloudflare-workers/SKILL.md +415 -0
- package/bundled-skills/cloudflare-zero-trust/SKILL.md +361 -0
- package/bundled-skills/cloudformation/SKILL.md +461 -0
- package/bundled-skills/constraint-driven-development/SKILL.md +335 -0
- package/bundled-skills/constraint-driven-development/references/floor-guard.md +99 -0
- package/bundled-skills/container-hardening/SKILL.md +126 -0
- package/bundled-skills/container-registries/SKILL.md +435 -0
- package/bundled-skills/container-scanning/SKILL.md +416 -0
- package/bundled-skills/convex-backend/SKILL.md +338 -0
- package/bundled-skills/dast-scanning/SKILL.md +437 -0
- package/bundled-skills/database-backups/SKILL.md +425 -0
- package/bundled-skills/datadog/SKILL.md +487 -0
- package/bundled-skills/dependency-scanning/SKILL.md +457 -0
- package/bundled-skills/devcontainers-nix/SKILL.md +416 -0
- package/bundled-skills/disaster-recovery/SKILL.md +374 -0
- package/bundled-skills/disaster-recovery/references/details.md +219 -0
- package/bundled-skills/dns-management/SKILL.md +375 -0
- package/bundled-skills/docker-compose/SKILL.md +482 -0
- package/bundled-skills/docker-management/SKILL.md +426 -0
- package/bundled-skills/ebpf-observability/SKILL.md +436 -0
- package/bundled-skills/ebpf-observability/references/details.md +542 -0
- package/bundled-skills/elk-stack/SKILL.md +487 -0
- package/bundled-skills/enterprise-vpn-attack/SKILL.md +395 -0
- package/bundled-skills/evidence-hygiene/SKILL.md +404 -0
- package/bundled-skills/feature-flags/SKILL.md +426 -0
- package/bundled-skills/feature-flags/references/details.md +86 -0
- package/bundled-skills/fedramp-compliance/SKILL.md +453 -0
- package/bundled-skills/firebase-app-platform/SKILL.md +381 -0
- package/bundled-skills/firewall-config/SKILL.md +479 -0
- package/bundled-skills/gcp-audit-logs/SKILL.md +452 -0
- package/bundled-skills/gcp-audit-logs/references/details.md +56 -0
- package/bundled-skills/gcp-cloud-functions/SKILL.md +284 -0
- package/bundled-skills/gcp-cloud-sql/SKILL.md +277 -0
- package/bundled-skills/gcp-compute/SKILL.md +319 -0
- package/bundled-skills/gcp-gke/SKILL.md +307 -0
- package/bundled-skills/gcp-networking/SKILL.md +293 -0
- package/bundled-skills/gcp-secret-manager/SKILL.md +421 -0
- package/bundled-skills/gcp-secret-manager/references/details.md +131 -0
- package/bundled-skills/gdpr-compliance/SKILL.md +451 -0
- package/bundled-skills/gdpr-compliance/references/details.md +145 -0
- package/bundled-skills/geo-audit/SKILL.md +368 -0
- package/bundled-skills/geo-brand-mentions/SKILL.md +68 -0
- package/bundled-skills/geo-brand-mentions/references/details.md +471 -0
- package/bundled-skills/geo-citability/SKILL.md +350 -0
- package/bundled-skills/geo-compare/SKILL.md +340 -0
- package/bundled-skills/geo-content/SKILL.md +383 -0
- package/bundled-skills/geo-crawlers/SKILL.md +408 -0
- package/bundled-skills/geo-llmstxt/SKILL.md +464 -0
- package/bundled-skills/geo-platform-optimizer/SKILL.md +314 -0
- package/bundled-skills/geo-proposal/SKILL.md +378 -0
- package/bundled-skills/geo-prospect/SKILL.md +225 -0
- package/bundled-skills/geo-report/SKILL.md +436 -0
- package/bundled-skills/geo-report-pdf/SKILL.md +157 -0
- package/bundled-skills/geo-schema/SKILL.md +408 -0
- package/bundled-skills/geo-technical/SKILL.md +78 -0
- package/bundled-skills/geo-technical/references/details.md +543 -0
- package/bundled-skills/git-workflow/SKILL.md +460 -0
- package/bundled-skills/github-actions/SKILL.md +368 -0
- package/bundled-skills/gitlab-ci/SKILL.md +340 -0
- package/bundled-skills/google-no-code/SKILL.md +136 -0
- package/bundled-skills/gpu-kubernetes-operations/SKILL.md +468 -0
- package/bundled-skills/gpu-server-management/SKILL.md +236 -0
- package/bundled-skills/hashicorp-vault/SKILL.md +408 -0
- package/bundled-skills/helm-charts/SKILL.md +469 -0
- package/bundled-skills/hipaa-compliance/SKILL.md +451 -0
- package/bundled-skills/hunt-aspnet/SKILL.md +321 -0
- package/bundled-skills/hunt-ato/SKILL.md +184 -0
- package/bundled-skills/hunt-auth-bypass/SKILL.md +426 -0
- package/bundled-skills/hunt-auth-bypass/references/details.md +80 -0
- package/bundled-skills/hunt-brute-force/SKILL.md +341 -0
- package/bundled-skills/hunt-business-logic/SKILL.md +281 -0
- package/bundled-skills/hunt-cache-poison/SKILL.md +382 -0
- package/bundled-skills/hunt-captcha-bypass/SKILL.md +136 -0
- package/bundled-skills/hunt-cicd/SKILL.md +311 -0
- package/bundled-skills/hunt-clickjacking/SKILL.md +110 -0
- package/bundled-skills/hunt-cors/SKILL.md +335 -0
- package/bundled-skills/hunt-dom/SKILL.md +323 -0
- package/bundled-skills/hunt-exceptional-conditions/SKILL.md +111 -0
- package/bundled-skills/hunt-file-upload/SKILL.md +202 -0
- package/bundled-skills/hunt-fintech-graphql/SKILL.md +289 -0
- package/bundled-skills/hunt-forgot-password/SKILL.md +114 -0
- package/bundled-skills/hunt-grpc/SKILL.md +317 -0
- package/bundled-skills/hunt-host-header/SKILL.md +309 -0
- package/bundled-skills/hunt-html-injection/SKILL.md +106 -0
- package/bundled-skills/hunt-http-smuggling/SKILL.md +129 -0
- package/bundled-skills/hunt-http-smuggling/references/phase2h-smuggling-cachepoison.md +177 -0
- package/bundled-skills/hunt-idor/SKILL.md +434 -0
- package/bundled-skills/hunt-jwt-crypto/SKILL.md +221 -0
- package/bundled-skills/hunt-k8s/SKILL.md +337 -0
- package/bundled-skills/hunt-laravel/SKILL.md +255 -0
- package/bundled-skills/hunt-ldap/SKILL.md +351 -0
- package/bundled-skills/hunt-lfi/SKILL.md +311 -0
- package/bundled-skills/hunt-llm-ai/SKILL.md +289 -0
- package/bundled-skills/hunt-mfa-bypass/SKILL.md +177 -0
- package/bundled-skills/hunt-misc/SKILL.md +378 -0
- package/bundled-skills/hunt-nextjs/SKILL.md +299 -0
- package/bundled-skills/hunt-nodejs/SKILL.md +263 -0
- package/bundled-skills/hunt-nosqli/SKILL.md +210 -0
- package/bundled-skills/hunt-ntlm-info/SKILL.md +314 -0
- package/bundled-skills/hunt-oauth/SKILL.md +459 -0
- package/bundled-skills/hunt-open-redirect/SKILL.md +223 -0
- package/bundled-skills/hunt-race-condition/SKILL.md +381 -0
- package/bundled-skills/hunt-race-condition/references/details.md +159 -0
- package/bundled-skills/hunt-rag-vector/SKILL.md +212 -0
- package/bundled-skills/hunt-rce/SKILL.md +444 -0
- package/bundled-skills/hunt-rce/references/details.md +110 -0
- package/bundled-skills/hunt-saml/SKILL.md +156 -0
- package/bundled-skills/hunt-session/SKILL.md +342 -0
- package/bundled-skills/hunt-shadow-api/SKILL.md +198 -0
- package/bundled-skills/hunt-source-leak/SKILL.md +345 -0
- package/bundled-skills/hunt-spa-api/SKILL.md +163 -0
- package/bundled-skills/hunt-springboot/SKILL.md +285 -0
- package/bundled-skills/hunt-sqli/SKILL.md +466 -0
- package/bundled-skills/hunt-ssrf/SKILL.md +396 -0
- package/bundled-skills/hunt-ssrf/references/details.md +179 -0
- package/bundled-skills/hunt-ssti/SKILL.md +163 -0
- package/bundled-skills/hunt-subdomain/SKILL.md +379 -0
- package/bundled-skills/hunt-tls-network/SKILL.md +399 -0
- package/bundled-skills/hunt-xxe/SKILL.md +466 -0
- package/bundled-skills/i-have-adhd/SKILL.md +170 -0
- package/bundled-skills/idea-evaluator/SKILL.md +75 -0
- package/bundled-skills/idea-evaluator/idea-evaluator-con/SKILL.md +64 -0
- package/bundled-skills/idea-evaluator/idea-evaluator-pro/SKILL.md +64 -0
- package/bundled-skills/identity-access-management/SKILL.md +382 -0
- package/bundled-skills/identity-access-management/references/details.md +524 -0
- package/bundled-skills/incident-management/SKILL.md +484 -0
- package/bundled-skills/incident-response/SKILL.md +448 -0
- package/bundled-skills/incident-response/references/details.md +113 -0
- package/bundled-skills/interview-me/SKILL.md +248 -0
- package/bundled-skills/iso27001-compliance/SKILL.md +460 -0
- package/bundled-skills/jenkins/SKILL.md +462 -0
- package/bundled-skills/jev-use/SKILL.md +158 -0
- package/bundled-skills/kubernetes-hardening/SKILL.md +154 -0
- package/bundled-skills/kubernetes-ops/SKILL.md +449 -0
- package/bundled-skills/kubernetes-ops/references/details.md +108 -0
- package/bundled-skills/kustomize/SKILL.md +478 -0
- package/bundled-skills/ledger-tasks-yylo/SKILL.md +219 -0
- package/bundled-skills/linux-administration/SKILL.md +367 -0
- package/bundled-skills/linux-hardening/SKILL.md +154 -0
- package/bundled-skills/llm-app-security/SKILL.md +389 -0
- package/bundled-skills/llm-app-security/references/details.md +674 -0
- package/bundled-skills/llm-caching/SKILL.md +334 -0
- package/bundled-skills/llm-cost-optimization/SKILL.md +311 -0
- package/bundled-skills/llm-fine-tuning/SKILL.md +329 -0
- package/bundled-skills/llm-gateway/SKILL.md +282 -0
- package/bundled-skills/llm-inference-scaling/SKILL.md +286 -0
- package/bundled-skills/llmops-platform-engineering/SKILL.md +472 -0
- package/bundled-skills/load-balancing/SKILL.md +403 -0
- package/bundled-skills/loki-logging/SKILL.md +479 -0
- package/bundled-skills/loki-mode/examples/todo-app-generated/backend/package-lock.json +4 -4
- package/bundled-skills/loki-mode/examples/todo-app-generated/backend/package.json +1 -1
- package/bundled-skills/m365-entra-attack/SKILL.md +423 -0
- package/bundled-skills/mac-mini-llm-lab/SKILL.md +350 -0
- package/bundled-skills/mcp-server-security/SKILL.md +356 -0
- package/bundled-skills/mcp-server-security/references/details.md +745 -0
- package/bundled-skills/mdm-device-management/SKILL.md +404 -0
- package/bundled-skills/mdm-device-management/references/details.md +410 -0
- package/bundled-skills/meme-coin-audit/SKILL.md +402 -0
- package/bundled-skills/mid-engagement-ir-detection/SKILL.md +377 -0
- package/bundled-skills/model-registry-governance/SKILL.md +452 -0
- package/bundled-skills/model-serving-kubernetes/SKILL.md +339 -0
- package/bundled-skills/model-supply-chain-security/SKILL.md +427 -0
- package/bundled-skills/mongodb/SKILL.md +436 -0
- package/bundled-skills/multi-tenant-llm-hosting/SKILL.md +435 -0
- package/bundled-skills/multi-tenant-llm-hosting/references/details.md +211 -0
- package/bundled-skills/mysql/SKILL.md +390 -0
- package/bundled-skills/new-relic/SKILL.md +472 -0
- package/bundled-skills/nfs-storage/SKILL.md +356 -0
- package/bundled-skills/object-storage/SKILL.md +378 -0
- package/bundled-skills/offensive-osint/SKILL.md +443 -0
- package/bundled-skills/okta-attack/SKILL.md +436 -0
- package/bundled-skills/ollama-stack/SKILL.md +379 -0
- package/bundled-skills/openclaw-deployment-hardening/SKILL.md +135 -0
- package/bundled-skills/openclaw-local-mac-mini/SKILL.md +426 -0
- package/bundled-skills/openclaw-local-mac-mini/references/details.md +221 -0
- package/bundled-skills/openclaw-security-hardening/SKILL.md +135 -0
- package/bundled-skills/openshift/SKILL.md +485 -0
- package/bundled-skills/opentelemetry/SKILL.md +438 -0
- package/bundled-skills/opentelemetry/references/details.md +78 -0
- package/bundled-skills/opentofu-migration/SKILL.md +349 -0
- package/bundled-skills/osint-methodology/SKILL.md +460 -0
- package/bundled-skills/osint-methodology/references/details.md +1350 -0
- package/bundled-skills/pci-dss-compliance/SKILL.md +446 -0
- package/bundled-skills/penetration-testing/SKILL.md +152 -0
- package/bundled-skills/performance-tuning/SKILL.md +381 -0
- package/bundled-skills/plan-ledger-tasks-yylo/SKILL.md +52 -0
- package/bundled-skills/planetscale/SKILL.md +297 -0
- package/bundled-skills/platform-engineering/SKILL.md +348 -0
- package/bundled-skills/platform-engineering/references/details.md +944 -0
- package/bundled-skills/podman/SKILL.md +405 -0
- package/bundled-skills/policy-as-code/SKILL.md +434 -0
- package/bundled-skills/policy-as-code/references/details.md +204 -0
- package/bundled-skills/postgresql-devsec/SKILL.md +378 -0
- package/bundled-skills/prometheus-grafana/SKILL.md +469 -0
- package/bundled-skills/prompt-injection-defense/SKILL.md +483 -0
- package/bundled-skills/rag-infrastructure/SKILL.md +269 -0
- package/bundled-skills/rag-observability-evals/SKILL.md +444 -0
- package/bundled-skills/rag-observability-evals/references/details.md +92 -0
- package/bundled-skills/ralph-loop-yylo/SKILL.md +55 -0
- package/bundled-skills/ralph-loop-yylo/references/first_check.md +18 -0
- package/bundled-skills/ralph-loop-yylo/references/implement.md +60 -0
- package/bundled-skills/recon-scope-triage/SKILL.md +128 -0
- package/bundled-skills/redis/SKILL.md +421 -0
- package/bundled-skills/redteam-report-template/SKILL.md +370 -0
- package/bundled-skills/report-writing/SKILL.md +426 -0
- package/bundled-skills/report-writing/references/details.md +187 -0
- package/bundled-skills/resumable-implementation-contracts/SKILL.md +254 -0
- package/bundled-skills/reverse-proxy/SKILL.md +420 -0
- package/bundled-skills/runbook-creation/SKILL.md +438 -0
- package/bundled-skills/runbook-creation/references/details.md +71 -0
- package/bundled-skills/saas-security-posture/SKILL.md +415 -0
- package/bundled-skills/sast-scanning/SKILL.md +444 -0
- package/bundled-skills/sbom-supply-chain/SKILL.md +433 -0
- package/bundled-skills/security-arsenal/SKILL.md +446 -0
- package/bundled-skills/security-arsenal/references/details.md +540 -0
- package/bundled-skills/security-automation/SKILL.md +146 -0
- package/bundled-skills/semantic-versioning/SKILL.md +434 -0
- package/bundled-skills/semantic-versioning/references/details.md +83 -0
- package/bundled-skills/service-mesh/SKILL.md +422 -0
- package/bundled-skills/soc2-compliance/SKILL.md +409 -0
- package/bundled-skills/sops-encryption/SKILL.md +124 -0
- package/bundled-skills/sre-dashboards/SKILL.md +143 -0
- package/bundled-skills/ssh-configuration/SKILL.md +324 -0
- package/bundled-skills/ssl-tls-management/SKILL.md +428 -0
- package/bundled-skills/ssl-tls-management/references/details.md +99 -0
- package/bundled-skills/startup-it-troubleshooting/SKILL.md +415 -0
- package/bundled-skills/supply-chain-attack-recon/SKILL.md +453 -0
- package/bundled-skills/supply-chain-attack-recon/references/details.md +258 -0
- package/bundled-skills/systemd-services/SKILL.md +379 -0
- package/bundled-skills/terraform-aws/SKILL.md +125 -0
- package/bundled-skills/terraform-azure/SKILL.md +415 -0
- package/bundled-skills/terraform-azure/references/details.md +231 -0
- package/bundled-skills/terraform-gcp/SKILL.md +369 -0
- package/bundled-skills/threat-modeling/SKILL.md +487 -0
- package/bundled-skills/understand-project-yylo/SKILL.md +62 -0
- package/bundled-skills/user-management/SKILL.md +383 -0
- package/bundled-skills/using-agent-skills/SKILL.md +220 -0
- package/bundled-skills/vector-database-ops/SKILL.md +300 -0
- package/bundled-skills/vendor-management/SKILL.md +439 -0
- package/bundled-skills/vendor-management/references/details.md +109 -0
- package/bundled-skills/vercel-deployments/SKILL.md +296 -0
- package/bundled-skills/vllm-server/SKILL.md +236 -0
- package/bundled-skills/vmware-vcenter-attack/SKILL.md +412 -0
- package/bundled-skills/vpn-setup/SKILL.md +452 -0
- package/bundled-skills/vulnerability-scanning/SKILL.md +448 -0
- package/bundled-skills/waf-setup/SKILL.md +354 -0
- package/bundled-skills/waf-setup/references/details.md +211 -0
- package/bundled-skills/weather-model-data-fetching/SKILL.md +277 -0
- package/bundled-skills/weather-observation-fetching/SKILL.md +246 -0
- package/bundled-skills/web2-recon/SKILL.md +440 -0
- package/bundled-skills/web2-recon/references/details.md +319 -0
- package/bundled-skills/web3-audit/SKILL.md +445 -0
- package/bundled-skills/web3-audit/references/details.md +224 -0
- package/bundled-skills/wiki-yylo/SKILL.md +114 -0
- package/bundled-skills/windows-hardening/SKILL.md +454 -0
- package/bundled-skills/windows-hardening/references/details.md +204 -0
- package/bundled-skills/windows-server/SKILL.md +318 -0
- package/bundled-skills/workflow-yylo/SKILL.md +107 -0
- package/bundled-skills/zero-trust/SKILL.md +461 -0
- package/package.json +1 -1
- package/skills_index.json +6924 -0
|
@@ -0,0 +1,371 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: block-storage
|
|
3
|
+
description: Manage block storage volumes and LVM. Configure cloud block storage and
|
|
4
|
+
local disks. Use when managing disk storage.
|
|
5
|
+
category: devops
|
|
6
|
+
risk: critical
|
|
7
|
+
source: https://github.com/BagelHole/DevOps-Security-Agent-Skills
|
|
8
|
+
source_repo: BagelHole/DevOps-Security-Agent-Skills
|
|
9
|
+
source_type: community
|
|
10
|
+
date_added: '2026-09-20'
|
|
11
|
+
license: MIT
|
|
12
|
+
license_source: https://github.com/BagelHole/DevOps-Security-Agent-Skills/blob/main/LICENSE
|
|
13
|
+
compatibility: Requires the relevant OS/platform tooling and privileged access where
|
|
14
|
+
noted. Docs-only; helper scripts and templates not bundled.
|
|
15
|
+
metadata:
|
|
16
|
+
author: devops-skills
|
|
17
|
+
version: '1.0'
|
|
18
|
+
---
|
|
19
|
+
|
|
20
|
+
# Block Storage
|
|
21
|
+
|
|
22
|
+
Manage block storage volumes including LVM, cloud-based EBS, filesystem creation, snapshots, and RAID configurations. Covers the full lifecycle from provisioning raw disks to extending volumes in production.
|
|
23
|
+
|
|
24
|
+
## When to Use
|
|
25
|
+
|
|
26
|
+
- Adding, partitioning, or formatting new disks on Linux servers
|
|
27
|
+
- Managing LVM logical volumes for flexible storage allocation
|
|
28
|
+
- Provisioning and attaching cloud block storage (AWS EBS)
|
|
29
|
+
- Creating and restoring snapshots for backup or migration
|
|
30
|
+
- Configuring software RAID for redundancy or performance
|
|
31
|
+
- Extending existing volumes without downtime
|
|
32
|
+
|
|
33
|
+
## Prerequisites
|
|
34
|
+
|
|
35
|
+
- Root or sudo access on the target system
|
|
36
|
+
- `lvm2` package installed for LVM operations
|
|
37
|
+
- `mdadm` package installed for software RAID
|
|
38
|
+
- AWS CLI configured for EBS operations
|
|
39
|
+
- Understanding of the workload's I/O characteristics (IOPS, throughput)
|
|
40
|
+
|
|
41
|
+
## Disk Discovery and Partitioning
|
|
42
|
+
|
|
43
|
+
```bash
|
|
44
|
+
# List all block devices
|
|
45
|
+
lsblk
|
|
46
|
+
lsblk -f # Show filesystem types and mount points
|
|
47
|
+
|
|
48
|
+
# Show detailed disk information
|
|
49
|
+
fdisk -l /dev/sdb
|
|
50
|
+
|
|
51
|
+
# Identify disk model and health (requires smartmontools)
|
|
52
|
+
smartctl -a /dev/sda
|
|
53
|
+
smartctl -H /dev/sda # Quick health check
|
|
54
|
+
|
|
55
|
+
# Create a GPT partition table and a single partition
|
|
56
|
+
parted /dev/sdb mklabel gpt
|
|
57
|
+
parted /dev/sdb mkpart primary ext4 0% 100%
|
|
58
|
+
|
|
59
|
+
# Alternative: use fdisk for MBR partitioning
|
|
60
|
+
fdisk /dev/sdb
|
|
61
|
+
# n -> new partition, p -> primary, Enter defaults, w -> write
|
|
62
|
+
|
|
63
|
+
# Inform the kernel of partition table changes
|
|
64
|
+
partprobe /dev/sdb
|
|
65
|
+
|
|
66
|
+
# Wipe filesystem signatures (prepare for LVM or RAID)
|
|
67
|
+
wipefs -a /dev/sdb1
|
|
68
|
+
```
|
|
69
|
+
|
|
70
|
+
## Filesystem Creation and Management
|
|
71
|
+
|
|
72
|
+
```bash
|
|
73
|
+
# Create an ext4 filesystem
|
|
74
|
+
mkfs.ext4 /dev/sdb1
|
|
75
|
+
|
|
76
|
+
# Create an ext4 filesystem with label and reserved block tuning
|
|
77
|
+
mkfs.ext4 -L appdata -m 1 /dev/sdb1 # 1% reserved blocks (default is 5%)
|
|
78
|
+
|
|
79
|
+
# Create an XFS filesystem (recommended for large volumes)
|
|
80
|
+
mkfs.xfs /dev/sdb1
|
|
81
|
+
|
|
82
|
+
# Create an XFS filesystem with label
|
|
83
|
+
mkfs.xfs -L appdata /dev/sdb1
|
|
84
|
+
|
|
85
|
+
# Mount the filesystem
|
|
86
|
+
mkdir -p /data
|
|
87
|
+
mount /dev/sdb1 /data
|
|
88
|
+
|
|
89
|
+
# Add persistent mount to fstab (use UUID for reliability)
|
|
90
|
+
blkid /dev/sdb1 # Get the UUID
|
|
91
|
+
echo 'UUID=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx /data ext4 defaults,noatime 0 2' >> /etc/fstab
|
|
92
|
+
|
|
93
|
+
# Mount all entries in fstab
|
|
94
|
+
mount -a
|
|
95
|
+
|
|
96
|
+
# Check and repair a filesystem (unmount first)
|
|
97
|
+
umount /data
|
|
98
|
+
fsck.ext4 -y /dev/sdb1
|
|
99
|
+
xfs_repair /dev/sdb1 # For XFS
|
|
100
|
+
|
|
101
|
+
# Resize ext4 (can grow online while mounted)
|
|
102
|
+
resize2fs /dev/sdb1
|
|
103
|
+
|
|
104
|
+
# Resize XFS (must be mounted to grow)
|
|
105
|
+
xfs_growfs /data
|
|
106
|
+
|
|
107
|
+
# Check filesystem usage
|
|
108
|
+
df -hT
|
|
109
|
+
```
|
|
110
|
+
|
|
111
|
+
## LVM Management
|
|
112
|
+
|
|
113
|
+
### Creating an LVM Stack
|
|
114
|
+
|
|
115
|
+
```bash
|
|
116
|
+
# Step 1: Create physical volumes
|
|
117
|
+
pvcreate /dev/sdb /dev/sdc
|
|
118
|
+
|
|
119
|
+
# View physical volumes
|
|
120
|
+
pvs
|
|
121
|
+
pvdisplay /dev/sdb
|
|
122
|
+
|
|
123
|
+
# Step 2: Create a volume group from physical volumes
|
|
124
|
+
vgcreate data_vg /dev/sdb /dev/sdc
|
|
125
|
+
|
|
126
|
+
# View volume groups
|
|
127
|
+
vgs
|
|
128
|
+
vgdisplay data_vg
|
|
129
|
+
|
|
130
|
+
# Step 3: Create logical volumes
|
|
131
|
+
# Fixed size
|
|
132
|
+
lvcreate -L 100G -n app_lv data_vg
|
|
133
|
+
|
|
134
|
+
# Use percentage of free space
|
|
135
|
+
lvcreate -l 50%FREE -n logs_lv data_vg
|
|
136
|
+
|
|
137
|
+
# Use all remaining space
|
|
138
|
+
lvcreate -l 100%FREE -n backup_lv data_vg
|
|
139
|
+
|
|
140
|
+
# View logical volumes
|
|
141
|
+
lvs
|
|
142
|
+
lvdisplay /dev/data_vg/app_lv
|
|
143
|
+
|
|
144
|
+
# Step 4: Create filesystem and mount
|
|
145
|
+
mkfs.ext4 /dev/data_vg/app_lv
|
|
146
|
+
mkdir -p /data/app
|
|
147
|
+
mount /dev/data_vg/app_lv /data/app
|
|
148
|
+
|
|
149
|
+
# Add to fstab
|
|
150
|
+
echo '/dev/data_vg/app_lv /data/app ext4 defaults,noatime 0 2' >> /etc/fstab
|
|
151
|
+
```
|
|
152
|
+
|
|
153
|
+
### Extending Volumes (Online)
|
|
154
|
+
|
|
155
|
+
```bash
|
|
156
|
+
# Extend a logical volume by 20 GB
|
|
157
|
+
lvextend -L +20G /dev/data_vg/app_lv
|
|
158
|
+
|
|
159
|
+
# Extend to fill all free space in the VG
|
|
160
|
+
lvextend -l +100%FREE /dev/data_vg/app_lv
|
|
161
|
+
|
|
162
|
+
# Grow the ext4 filesystem (online, no unmount needed)
|
|
163
|
+
resize2fs /dev/data_vg/app_lv
|
|
164
|
+
|
|
165
|
+
# Grow XFS filesystem (online)
|
|
166
|
+
xfs_growfs /data/app
|
|
167
|
+
|
|
168
|
+
# Combined: extend LV and resize filesystem in one command
|
|
169
|
+
lvextend -L +20G --resizefs /dev/data_vg/app_lv
|
|
170
|
+
```
|
|
171
|
+
|
|
172
|
+
### Adding a New Disk to an Existing VG
|
|
173
|
+
|
|
174
|
+
```bash
|
|
175
|
+
# Add a new physical volume
|
|
176
|
+
pvcreate /dev/sdd
|
|
177
|
+
|
|
178
|
+
# Extend the volume group
|
|
179
|
+
vgextend data_vg /dev/sdd
|
|
180
|
+
|
|
181
|
+
# Now extend any logical volume using the new space
|
|
182
|
+
lvextend -l +100%FREE --resizefs /dev/data_vg/app_lv
|
|
183
|
+
```
|
|
184
|
+
|
|
185
|
+
### LVM Snapshots
|
|
186
|
+
|
|
187
|
+
```bash
|
|
188
|
+
# Create a snapshot (requires free space in VG)
|
|
189
|
+
lvcreate -L 10G -s -n app_snap /dev/data_vg/app_lv
|
|
190
|
+
|
|
191
|
+
# Mount the snapshot read-only for backup
|
|
192
|
+
mkdir -p /mnt/snapshot
|
|
193
|
+
mount -o ro /dev/data_vg/app_snap /mnt/snapshot
|
|
194
|
+
|
|
195
|
+
# Perform backup from the snapshot
|
|
196
|
+
tar czf /backup/app-$(date +%Y%m%d).tar.gz -C /mnt/snapshot .
|
|
197
|
+
|
|
198
|
+
# Unmount and remove the snapshot when done
|
|
199
|
+
umount /mnt/snapshot
|
|
200
|
+
lvremove -f /dev/data_vg/app_snap
|
|
201
|
+
|
|
202
|
+
# Restore from snapshot (reverts LV to snapshot point -- destructive)
|
|
203
|
+
lvconvert --merge /dev/data_vg/app_snap
|
|
204
|
+
# Note: if the LV is mounted, merge happens at next activation (reboot)
|
|
205
|
+
```
|
|
206
|
+
|
|
207
|
+
### Reducing and Removing LVM Components
|
|
208
|
+
|
|
209
|
+
```bash
|
|
210
|
+
# Shrink a logical volume (ext4 only -- XFS cannot shrink)
|
|
211
|
+
# MUST unmount first
|
|
212
|
+
umount /data/app
|
|
213
|
+
e2fsck -f /dev/data_vg/app_lv
|
|
214
|
+
resize2fs /dev/data_vg/app_lv 80G
|
|
215
|
+
lvreduce -L 80G /dev/data_vg/app_lv
|
|
216
|
+
mount /data/app
|
|
217
|
+
|
|
218
|
+
# Remove a logical volume
|
|
219
|
+
umount /data/app
|
|
220
|
+
lvremove /dev/data_vg/app_lv
|
|
221
|
+
|
|
222
|
+
# Remove a disk from a volume group (migrate data off first)
|
|
223
|
+
pvmove /dev/sdc # Migrate extents to other PVs
|
|
224
|
+
vgreduce data_vg /dev/sdc # Remove PV from VG
|
|
225
|
+
pvremove /dev/sdc # Clean PV metadata
|
|
226
|
+
```
|
|
227
|
+
|
|
228
|
+
## AWS EBS Management
|
|
229
|
+
|
|
230
|
+
```bash
|
|
231
|
+
# Create a gp3 volume (general purpose SSD)
|
|
232
|
+
aws ec2 create-volume \
|
|
233
|
+
--availability-zone us-east-1a \
|
|
234
|
+
--size 100 \
|
|
235
|
+
--volume-type gp3 \
|
|
236
|
+
--iops 3000 \
|
|
237
|
+
--throughput 125 \
|
|
238
|
+
--tag-specifications 'ResourceType=volume,Tags=[{Key=Name,Value=app-data},{Key=Environment,Value=production}]'
|
|
239
|
+
|
|
240
|
+
# Create an io2 volume (provisioned IOPS SSD for databases)
|
|
241
|
+
aws ec2 create-volume \
|
|
242
|
+
--availability-zone us-east-1a \
|
|
243
|
+
--size 500 \
|
|
244
|
+
--volume-type io2 \
|
|
245
|
+
--iops 10000
|
|
246
|
+
|
|
247
|
+
# List volumes with filters
|
|
248
|
+
aws ec2 describe-volumes \
|
|
249
|
+
--filters "Name=tag:Environment,Values=production" \
|
|
250
|
+
--query 'Volumes[*].{ID:VolumeId,Size:Size,Type:VolumeType,State:State,AZ:AvailabilityZone}' \
|
|
251
|
+
--output table
|
|
252
|
+
|
|
253
|
+
# Attach a volume to an instance
|
|
254
|
+
aws ec2 attach-volume \
|
|
255
|
+
--volume-id vol-0abc123def456789 \
|
|
256
|
+
--instance-id i-0abc123def456789 \
|
|
257
|
+
--device /dev/xvdf
|
|
258
|
+
|
|
259
|
+
# After attaching, format and mount on the instance
|
|
260
|
+
lsblk # Identify the new device (e.g., /dev/nvme1n1)
|
|
261
|
+
mkfs.ext4 /dev/nvme1n1
|
|
262
|
+
mkdir -p /data
|
|
263
|
+
mount /dev/nvme1n1 /data
|
|
264
|
+
|
|
265
|
+
# Modify a volume (resize without detaching -- gp3/io2)
|
|
266
|
+
aws ec2 modify-volume \
|
|
267
|
+
--volume-id vol-0abc123def456789 \
|
|
268
|
+
--size 200
|
|
269
|
+
|
|
270
|
+
# After resize, grow the filesystem on the instance
|
|
271
|
+
growpart /dev/nvme1n1 1 # If partitioned
|
|
272
|
+
resize2fs /dev/nvme1n1 # ext4
|
|
273
|
+
# xfs_growfs /data # XFS
|
|
274
|
+
|
|
275
|
+
# Create a snapshot
|
|
276
|
+
aws ec2 create-snapshot \
|
|
277
|
+
--volume-id vol-0abc123def456789 \
|
|
278
|
+
--description "Pre-upgrade snapshot $(date +%Y-%m-%d)" \
|
|
279
|
+
--tag-specifications 'ResourceType=snapshot,Tags=[{Key=Name,Value=pre-upgrade}]'
|
|
280
|
+
|
|
281
|
+
# List snapshots
|
|
282
|
+
aws ec2 describe-snapshots \
|
|
283
|
+
--owner-ids self \
|
|
284
|
+
--query 'Snapshots[*].{ID:SnapshotId,Vol:VolumeId,Size:VolumeSize,Date:StartTime,Desc:Description}' \
|
|
285
|
+
--output table
|
|
286
|
+
|
|
287
|
+
# Create a volume from a snapshot (for restore or migration)
|
|
288
|
+
aws ec2 create-volume \
|
|
289
|
+
--snapshot-id snap-0abc123def456789 \
|
|
290
|
+
--availability-zone us-east-1a \
|
|
291
|
+
--volume-type gp3
|
|
292
|
+
|
|
293
|
+
# Detach a volume
|
|
294
|
+
aws ec2 detach-volume --volume-id vol-0abc123def456789
|
|
295
|
+
|
|
296
|
+
# Delete a volume (ensure it is detached first)
|
|
297
|
+
aws ec2 delete-volume --volume-id vol-0abc123def456789
|
|
298
|
+
```
|
|
299
|
+
|
|
300
|
+
## Software RAID (mdadm)
|
|
301
|
+
|
|
302
|
+
```bash
|
|
303
|
+
# Install mdadm
|
|
304
|
+
apt install -y mdadm # Debian/Ubuntu
|
|
305
|
+
dnf install -y mdadm # RHEL/CentOS
|
|
306
|
+
|
|
307
|
+
# Create RAID 1 (mirror) with 2 disks
|
|
308
|
+
mdadm --create /dev/md0 --level=1 --raid-devices=2 /dev/sdb /dev/sdc
|
|
309
|
+
|
|
310
|
+
# Create RAID 5 (striped with parity) with 3 disks + 1 spare
|
|
311
|
+
mdadm --create /dev/md0 --level=5 --raid-devices=3 --spare-devices=1 /dev/sdb /dev/sdc /dev/sdd /dev/sde
|
|
312
|
+
|
|
313
|
+
# Create RAID 10 (striped mirrors) with 4 disks
|
|
314
|
+
mdadm --create /dev/md0 --level=10 --raid-devices=4 /dev/sdb /dev/sdc /dev/sdd /dev/sde
|
|
315
|
+
|
|
316
|
+
# Check RAID status
|
|
317
|
+
cat /proc/mdstat
|
|
318
|
+
mdadm --detail /dev/md0
|
|
319
|
+
|
|
320
|
+
# Save RAID configuration (persists across reboot)
|
|
321
|
+
mdadm --detail --scan >> /etc/mdadm/mdadm.conf # Debian
|
|
322
|
+
mdadm --detail --scan >> /etc/mdadm.conf # RHEL
|
|
323
|
+
update-initramfs -u # Debian
|
|
324
|
+
|
|
325
|
+
# Create filesystem on RAID device
|
|
326
|
+
mkfs.ext4 /dev/md0
|
|
327
|
+
mkdir -p /data
|
|
328
|
+
mount /dev/md0 /data
|
|
329
|
+
|
|
330
|
+
# Replace a failed disk
|
|
331
|
+
mdadm --manage /dev/md0 --fail /dev/sdc
|
|
332
|
+
mdadm --manage /dev/md0 --remove /dev/sdc
|
|
333
|
+
# Insert new disk, then:
|
|
334
|
+
mdadm --manage /dev/md0 --add /dev/sdf
|
|
335
|
+
|
|
336
|
+
# Monitor rebuild progress
|
|
337
|
+
watch cat /proc/mdstat
|
|
338
|
+
|
|
339
|
+
# RAID level recommendations:
|
|
340
|
+
# RAID 1: 2+ disks, mirroring, good for OS / boot drives
|
|
341
|
+
# RAID 5: 3+ disks, single parity, good read performance
|
|
342
|
+
# RAID 6: 4+ disks, double parity, survives 2 disk failures
|
|
343
|
+
# RAID 10: 4+ disks, mirrored stripes, best I/O performance
|
|
344
|
+
```
|
|
345
|
+
|
|
346
|
+
## Troubleshooting
|
|
347
|
+
|
|
348
|
+
| Symptom | Diagnostic Command | Common Fix |
|
|
349
|
+
|---|---|---|
|
|
350
|
+
| Disk not showing up | `lsblk`, `dmesg \| tail` | Check physical connection; rescan SCSI bus |
|
|
351
|
+
| Filesystem read-only | `dmesg \| grep error`, `mount` | Filesystem errors detected; run `fsck` after unmount |
|
|
352
|
+
| LVM: no free space in VG | `vgs`, `pvs` | Add a new PV with `vgextend` |
|
|
353
|
+
| EBS volume not visible | `lsblk` on instance | Check attach status in AWS console; NVMe naming differs |
|
|
354
|
+
| RAID degraded | `cat /proc/mdstat` | Replace failed disk with `mdadm --manage --add` |
|
|
355
|
+
| Cannot resize filesystem | `lvs`, `df -h` | Extend LV first, then resize FS; XFS needs to be mounted |
|
|
356
|
+
| Slow I/O on EBS | `iostat -x 2`, check volume type | Upgrade to gp3/io2, increase IOPS/throughput |
|
|
357
|
+
| Snapshot taking too long | AWS Console: snapshot progress | Snapshots are incremental; first one takes longest |
|
|
358
|
+
|
|
359
|
+
## Related Skills
|
|
360
|
+
|
|
361
|
+
- `linux-administration` -- Disk and filesystem basics
|
|
362
|
+
- `performance-tuning` -- I/O scheduler and benchmarking with fio
|
|
363
|
+
- `nfs-storage` -- Network filesystems built on top of block storage
|
|
364
|
+
- `backup-recovery` -- Snapshot-based and file-level backup strategies
|
|
365
|
+
- `object-storage` -- Alternative storage model for unstructured data
|
|
366
|
+
|
|
367
|
+
## Limitations
|
|
368
|
+
|
|
369
|
+
- Infrastructure commands can disrupt services: confirm target host/scope and have backups/snapshots before mutating state.
|
|
370
|
+
- Docs-only import: upstream scripts and templates not bundled.
|
|
371
|
+
|