e-minguez

apiVersion: v1
kind: ConfigMap
metadata:
  labels:
    product: k8s-elastic
  name: elastic-config
data:
  elasticsearch.yaml: |
    discovery.type: single-node
---

e-minguez

devices: ({
  name: "Wireless Mouse MX Master 2S";

  // A lower threshold number makes the wheel switch to free-spin mode
  // quicker when scrolling fast.
  smartshift: { on: true; threshold: 16; };

  hiresscroll: { hires: true; invert: false; target: false; };

  // Higher numbers make the mouse more sensitive (cursor moves faster),

e-minguez

$ cat ~/.bash_aliases 

#alias ls="exa -alh --icons"
#alias tree="exa --tree --icons"
#alias cat="bat"
alias vi="nvim"
alias vim="nvim"
alias ls="ls --color=auto"
alias ll="ls -l --color=auto"

e-minguez

Turris

opkg install kmod-veth
opkg install kmod-ipt-extra
opkg install iptables-mod-extra

• Install a new container (I created an arch linux container)
• Open up the /srv/lxc/containername/config file for editing:

e-minguez

Requisites

• A manjaro x86_64 VM with X (see https://gitlab.manjaro.org/man...jaro-arm-installer/-/issues/10 4 for the reason behind the X requirement)
• An extra disk. In my case, I've used a 8gb qcow2 empty file mapped as sata (important as the script only recognizes /dev/sd* or /dev/mmclblk* devices) so it is /dev/sda in the VM.

Process

• ssh into the VM
• pacman -Syyu manjaro-arm-installer
• Reboot (just in case as it should have updated a few packages, including the kernel)

e-minguez

authority letsencrypt {
  api url "https://acme-v02.api.letsencrypt.org/directory"
  account key "/etc/acme/letsencrypt-privkey.pem"
}

domain graph.openshift.tips {
    domain key "/etc/ssl/private/graph.openshift.tips:443.key"
    domain full chain certificate "/etc/ssl/graph.openshift.tips:443.crt"
    sign with letsencrypt
}

e-minguez

Turris

https://doc.turris.cz/doc/en/howto/lxc

Wizard:

lxc-create -t download -n debianproxy

e-minguez

• Some variables to avoid writting too much and create some folders:

export PODNAME="nextcloud"
mkdir -p ~/containers/nextcloud/{db,nginx,html}

• Copy the nginx.conf file:

e-minguez

INDIVIDUAL PROJECT

• Create a project and apply a services.nodeports quota = 0

$ oc new-project service-nodeport-quota
$ oc project service-nodeport-quota
$ cat << EOF | oc apply -f -
apiVersion: v1
kind: ResourceQuota
metadata:

e-minguez

```
$ sudo firewall-cmd --zone=trusted --add-forward-port=port=443:proto=tcp:toport=8443 --permanent
$ sudo firewall-cmd --zone=trusted --add-forward-port=port=443:proto=tcp:toport=8443
$ sudo firewall-cmd --zone=trusted --add-forward-port=port=80:proto=tcp:toport=8080 --permanent
$ sudo firewall-cmd --zone=trusted --add-forward-port=port=80:proto=tcp:toport=8080
$ sudo firewall-cmd --zone=trusted --add-service=https --permanent
$ sudo firewall-cmd --zone=trusted --add-service=https
$ sudo firewall-cmd --zone=trusted --add-service=http --permanent
$ sudo firewall-cmd --zone=trusted --add-service=http
$ sudo firewall-cmd --zone=trusted --add-masquerade