avoidik

Multipass

It works both with VirtualBox and Hyper-V on Windows, it also support MacOS including M1

Install

Configure virtualization driver

If you want VirtualBox (works on Linux, Windows, and MacOS)

avoidik

cat > /etc/default/step-ca <<'EOF'
STEPPATH="/etc/step-ca"
PASSWORD_FILE="/etc/step-ca/passwd"
CONFIG_FILE="/etc/step-ca/config/ca.json"
STEP_CA_TOKEN="..."
EOF

cat > /etc/systemd/system/step-ca.service <<'EOF'
[Unit]

avoidik

Host plain simple Docker Registry on Raspberry Pi with MinIO storage backend

Install golang

curl -fsSLO https://go.dev/dl/go1.17.8.linux-armv6l.tar.gz
sudo rm -rf /usr/local/go
sudo tar -C /usr/local -xzf go1.17.8.linux-armv6l.tar.gz
rm -f go1.17.8.linux-armv6l.tar.gz
cat <<'EOF' | tee -a ~/.profile > /dev/null

avoidik

Prerequisites:

• Mikrotik API is enabled (IP > Services > API, enabled on port 8728 and/or 8729)
• Mikrotik API ports are allowed (IP > Firewall > Filter Rules, input chain has both TCP ports allowed)
• Mikrotik management interface IP address is reachable
• Linux (VM or real hardware)

Steps

• Download the script from here to your Linux machine - https://wiki.mikrotik.com/wiki/Manual:API_Python3
• Find all input rules, input and press enter twice:

avoidik

PUT _template/cloudtrail
{
  "index_patterns": ["cloudtrail-*"],
  "settings": {
    "number_of_shards": 1,
    "mapping": {
      "total_fields": {
        "limit": 10000
      }
    }

avoidik

import "sockaddr"
import "strings"

#
# allow update secrets under secret/ path only to clients coming from 10.0.0.0/8 CIDR range
#

precond = rule {
    request.operation in ["update"] and
    strings.has_prefix(request.path, "secret/")

avoidik

conky.config = {
    alignment = 'top_right',
    background = false,
    border_width = 1,
    cpu_avg_samples = 2,
    default_color = 'white',
    default_outline_color = 'white',
    default_shade_color = 'white',
    draw_borders = false,
    draw_graph_borders = true,

avoidik

Prepare two K8s clusters

Context east

Create cluster on GCP

$ gcloud container clusters create multi-cluster-demo --preemptible

avoidik

How to install & configure ECR credentials helper

Download

$ sudo curl -fsSL https://amazon-ecr-credential-helper-releases.s3.us-east-2.amazonaws.com/0.5.0/linux-amd64/docker-credential-ecr-login -o /usr/local/bin/docker-credential-ecr-login
$ sudo chmod +x /usr/local/bin/docker-credential-ecr-login

Configure

avoidik

DEFAULT_BOX  = 'ubuntu/focal64'
WORKER_NODES = 2

Vagrant.configure(2) do |config|
  config.vm.define 'master' do |master|
    master.vm.box = DEFAULT_BOX
    master.vm.hostname = 'master'
    master.vm.synced_folder '.', '/vagrant', type: 'virtualbox'
    master.vm.network 'private_network', ip: '192.168.0.200'
    master.vm.provider 'virtualbox' do |v|