https://datatracker.ietf.org/doc/html/draft-mpmz-bess-mup-safi-01
[global.config]https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity?hl=ja
Autopilot では nodeSelector で iam.gke.io/gke-metadata-server-enabled が使えないので、 wi-test.yaml を下記のようにする
(Autopilot ではデフォルトで iam.gke.io/gke-metadata-server-enabled は true になっている)
apiVersion: v1
kind: Pod
metadata:
name: workload-identity-test| package_update: true | |
| package_upgrade: true | |
| groups: | |
| - docker | |
| - lxd | |
| users: | |
| - default | |
| - name: runner | |
| gecos: GitHub-hosted runner User | |
| groups: docker, lxd |
git clone https://github.com/higebu/vyos-build.git
cd vyos-build
git checkout sid
| package main | |
| import ( | |
| "fmt" | |
| "net" | |
| "github.com/google/gopacket" | |
| "github.com/google/gopacket/layers" | |
| ) |
| # Enable BPF related things | |
| CONFIG_BPF_STREAM_PARSER=y | |
| CONFIG_BPF_SYSCALL=y | |
| CONFIG_BPF=y | |
| CONFIG_BPFILTER=y | |
| CONFIG_CGROUP_BPF=y | |
| CONFIG_DEBUG_INFO_BTF=y | |
| CONFIG_DEBUG_INFO=y | |
| CONFIG_EPOLL=y | |
| CONFIG_EVENTFD=y |
Download iso
Burn iso to USB memory
Insert the USB memory to apu2c4
Connect to serial console
LANG=C picocom --baud 115200 --omap crcrlf /dev/ttyUSB0Boot apu2c4 from USB memory
| virtualbox-iso: output will be in this color. | |
| ==> virtualbox-iso: Retrieving ISO | |
| ==> virtualbox-iso: Trying https://releases.nixos.org/nixos/20.09/nixos-20.09.2660.da3378c4aaf/nixos-minimal-20.09.2660.da3378c4aaf-x86_64-linux.iso | |
| ==> virtualbox-iso: Trying https://releases.nixos.org/nixos/20.09/nixos-20.09.2660.da3378c4aaf/nixos-minimal-20.09.2660.da3378c4aaf-x86_64-linux.iso?checksum=sha256%3A4f4a7f798f9000ff361a08785e476e7d27d2ad096cb96ae0e6841f547f5227cf | |
| ==> virtualbox-iso: https://releases.nixos.org/nixos/20.09/nixos-20.09.2660.da3378c4aaf/nixos-minimal-20.09.2660.da3378c4aaf-x86_64-linux.iso?checksum=sha256%3A4f4a7f798f9000ff361a08785e476e7d27d2ad096cb96ae0e6841f547f5227cf => C:\Users\kusak\Documents\Vagrant\nixbox\packer_cache\3d0eb02770cdf46f7276435843106749d6943258.iso | |
| ==> virtualbox-iso: Starting HTTP server on port 8252 | |
| ==> virtualbox-iso: Using existing SSH private key for the communicator... | |
| ==> virtualbox-iso: Creating virtual machine... | |
| ==> virtualbox-iso: Creating hard drive... |
| #!/bin/bash | |
| gh release download -p ghq_linux_amd64.zip -R x-motemen/ghq | |
| unzip ghq_linux_amd64.zip | |
| sudo cp ghq_linux_amd64/ghq /usr/local/bin/ | |
| sudo cp ghq_linux_amd64/misc/bash/_ghq /etc/bash_completion.d/ghq | |
| rm ghq_linux_amd64.zip | |
| rm -rf ghq_linux_amd64 | |
| . /etc/bash_completion |
| sudo apt install -y parted | |
| sudo parted /dev/vda | |
| resizepart 2 -1s | |
| resizepart 5 -1s | |
| quit | |
| sudo pvresize /dev/vda5 | |
| sudo lvextend -r -l +100%FREE /dev/mapper/sv--112901438283--vg-root |