egeneralov

package main

import (
	"context"
	"fmt"
	"io"
	"log"
	"encoding/json"

	"github.com/docker/docker/api/types"

egeneralov

module gist.github.com/egeneralov/0f5cd2ebe6543bcbf5c09ec50b3c8da8

go 1.24.4

require github.com/valyala/fasthttp v1.64.0

require (
        github.com/andybalholm/brotli v1.2.0 // indirect
        github.com/klauspost/compress v1.18.0 // indirect
        github.com/valyala/bytebufferpool v1.0.0 // indirect

egeneralov

Registry credentials in helm charts

values.yaml

Add:

imageCredentials:
  registry: quay.io
 username: someone

egeneralov

strace -T -r -q -C -w -f -p ${PID}

egeneralov

#!/bin/bash -xe

virt-install --virt-type kvm --name vmname \
--location http://deb.debian.org/debian/dists/buster/main/installer-amd64/ \
--os-variant debian10 \
--disk size=10 \
--memory 1000 \
--graphics none \
--console pty,target_type=serial \
--extra-args "console=ttyS0"

egeneralov

#!/bin/bash -xe

fallocate -L 10G /var/lib/machines.raw
mkfs.btrfs -d single -M -L machines -K /var/lib/machines.raw
systemctl restart var-lib-machines.mount
btrfs subvolume create /var/lib/machines/buster/
debootstrap --include=systemd,systemd-container --components=main,contrib,non-free --arch=amd64 --no-check-certificate --no-check-gpg buster /var/lib/machines/buster/ http://deb.debian.org/debian

chroot /var/lib/machines/buster/ systemctl enable systemd-{network,resolve}d
chroot /var/lib/machines/buster/ systemctl disable {rsyslog,cron,console-getty}.service

egeneralov

LIBMOUNT_DEBUG=all LIBBLKID_DEBUG=all LOOPDEV_DEBUG=all mount -av

egeneralov

tmpfs /var/cache/fscache tmpfs nodev,nosuid,size=1G 0 0

egeneralov

#!/bin/bash -xe

# use clean docker host with ipvsadm installed

docker run -d -p 127.0.0.1:8000:8000 -t jwilder/whoami
docker run -d -p 127.0.0.1:8001:8000 -t jwilder/whoami

cat << EOF | ipvsadm-restore
-A -t ${external_ip}:80 -s rr
-a -t ${external_ip}:80 -r 172.17.0.2:8000 -m

egeneralov

cilium kubespray direct routing

Tested on kube-sigs/kubespray commit a923f4e7c0692229c442b07a531bfb5fc41a23f9.

• Add enable-endpoint-routes: "true" at EOF kubespray/roles/network_plugin/cilium/templates/cilium-config.yml.j2
• Modify kubespray inventory group_vars/k8s-cluster/k8s-net-cilium.yml

cilium_auto_direct_node_routes: true
cilium_native_routing_cidr: 10.10.2.0/24