bgulla

---

- hosts: all
  tasks:
  # ansible all -i closet.lark.lol -u root coral-playbook.yaml
  # deb https://packages.cloud.google.com/apt coral-edgetpu-stable main
  #  https://packages.cloud.google.com/apt/doc/apt-key.gpg
      - name: Add an Apt signing key, uses whichever key is at the URL
        ansible.builtin.apt_key:
          url: https://packages.cloud.google.com/apt/doc/apt-key.gpg

bgulla

#!/bin/bash

mkdir -p /opt/docker/{data,config,dockerfiles}
CONTAINER_NAME="changedetectionio"
DATA_DIR=/opt/docker/data/${CONTAINER_NAME}

docker rm --force selenium changedetectionio playwright-chrome
docker run -d \
  --name selenium \
  --restart unless-stopped \

bgulla

Rancher | Airgap all teh things.

k3s

k3s with private (authenticated) registry

### Assumptions:
# - Registry: You have a private registry (ex: harbor.air-gap.dev) pre-seeded with required images
# - File Dependencies:
#   - SELinuxRPM: k3s requires an selinux rpm. You can grab it ahead of time from here: https://github.com/k3s-io/k3s-selinux/releases
#   - k3s binary: (example) https://github.com/k3s-io/k3s/releases/download/v1.24.4%2Bk3s1/k3s

bgulla

#!/bin/sh

echo "deb https://packages.cloud.google.com/apt coral-edgetpu-stable main" | sudo tee /etc/apt/sources.list.d/coral-edgetpu.list

curl https://packages.cloud.google.com/apt/doc/apt-key.gpg | sudo apt-key add -

sudo apt-get update -y

sudo apt-get install libedgetpu1-max python3-pycoral -y

bgulla

Speed-testing proxmox vms hosted on a Synology DS1821+ NFS over 10G

fio

rm fio-tempfile.dat; fio --name TEST --eta-newline=5s --filename=fio-tempfile.dat --rw=write --size=500m --io_size=10g --blocksize=1024k --ioengine=libaio --fsync=10000 --iodepth=32 --direct=1 --numjobs=1 --runtime=60 --group_reporting
# Note: if you dont delete an existing fio-template.dat, it will reuse the file and report corrupted speed tests (1150 vs 635)

Results

bgulla

#!/bin/bash
## helper script to more easily personalize cloned virtual-machines. add to your bashrc.
## on login, it will test the hostname and if localhost is determined to be a part of the hostname,
## this script will offer to fix that for you.

if [[ $(hostname -s) = localhost* ]]; then
    read -p "[!!!] it seems you are still using localhost, would you like to set the hostname? (y/n) " choice
    if [[ "${choice}" -eq "y" ]]; then
      read -p "  new hostname: " newhostname
      # set new hostname

bgulla

apiVersion: management.cattle.io/v3
customized: false
default: '{}'
kind: Setting
metadata:
  name: ui-banners
value: |-
  {
    "banner": {
      "text": "CLOUD-GOV"

bgulla

k3s/RKE2 with external CRI/containerd support

While k3s and RKE2 ship with their own statically-compiled containerd binary, sometimes you need to be able to utilize a more standard container socket. Especially if your container-scanner expects a more traditional installation path (i.e. Twistlock/PrismaCloud). This quick guide will show you how to get up and running with an external CRI.

Install containerd

There are better ways to do this, but the most common way of installing containerd is via the docker-ce yum repository.

sudo yum-config-manager \
    --add-repo \
    https://download.docker.com/linux/centos/docker-ce.repo

bgulla

bgulla

On-Prem RKE2 api-server HA with Kube-VIP

               ,        ,  _______________________________
   ,-----------|'------'|  |                             |
  /.           '-'    |-'  |_____________________________|
 |/|             |    |    
   |   .________.'----'    _______________________________
   |  ||        |  ||      |                             |
   \__|'        \__|'      |_____________________________|