I run several K8S cluster on EKS and by default do not setup inbound SSH to the nodes. Sometimes I need to get into each node to check things or run a one-off tool.
Rather than update my terraform, rebuild the launch templates and redeploy brand new nodes, I decided to use kubernetes to access each node directly.
NVIDIA+TVHEADEND+UNRAID+ACCELERATED FFMPEG
I recently had a need to get hardware accelerated ffmpeg running on tvheaded under unraid, I eventually achieved this with a few tricks, here are my notes on what I did to achieve this.
First up, Unraid NVIDIA support
Install the Nvidia plugin under Unraid, this installs a custom kernel complete with the nidia drivers and docker runtime to support thiese.
Next install a hardware accelerated FFMPEG
This guide provides instructions for an Arch Linux installation featuring full-disk encryption via LVM on LUKS and an encrypted boot partition (GRUB) for UEFI systems.
Following the main installation are further instructions to harden against Evil Maid attacks via UEFI Secure Boot custom key enrollment and self-signed kernel and bootloader.
You will find most of this information pulled from the Arch Wiki and other resources linked thereof.
Note: The system was installed on an NVMe SSD, substitute /dev/nvme0nX with /dev/sdX or your device as needed.
| { | |
| "__inputs": [], | |
| "__requires": [ | |
| { | |
| "type": "grafana", | |
| "id": "grafana", | |
| "name": "Grafana", | |
| "version": "5.2.4" | |
| }, | |
| { |
| { | |
| "__inputs": [], | |
| "__requires": [ | |
| { | |
| "type": "grafana", | |
| "id": "grafana", | |
| "name": "Grafana", | |
| "version": "5.2.4" | |
| }, | |
| { |
| { | |
| "__inputs": [ | |
| { | |
| "name": "VAR_JOB", | |
| "type": "constant", | |
| "label": "job", | |
| "value": "java", | |
| "description": "" | |
| } | |
| ], |
| { | |
| "__inputs": [ | |
| { | |
| "name": "VAR_JOB", | |
| "type": "constant", | |
| "label": "Job", | |
| "value": "java", | |
| "description": "" | |
| } | |
| ], |
There are multiple ways to get a full disk encrypted arch linux system on raspberry. In this tutorial, we will install a 64-bit arch linux armv8 system, using dropbear as ssh server for remote pre-boot unlocking of the root filesystem. However, it will still be possible to unlock and use the pi as usual, with a keyboard and monitor. We will also create an unencrypted partition in the installation process, usable as a rescue system.
Differences to the 32-bit arch linux arm version:
This post has been moved here.
