rms1000watt

If you're using AWS EKS and for some reason you get:

no space left on device: unknown

Check if:

• you're using XFS
• your disk usage is < 85% (At 85%, k8s triggers GC)
• you're pulling large 2GB docker images OR docker images with node_modules with hundreds of thousands of files

Then consider inode contiguous fragmentation issue:

rms1000watt

#!/usr/bin/env bash

if type -a ryan; then
	echo ryan already installed
	sudo apt remove ryan -y
fi

version="0.0.1"

sudo rm -rf "ryan-${version}" ||:

rms1000watt

$name = ENV['NAME'] || File.basename(Dir.getwd)

Vagrant.configure("2") do |config|
  config.vm.define "#{$name}"
  config.vm.hostname = "#{$name}"
  config.vm.box = "bento/freebsd-13"
  config.disksize.size = "64GB"
  config.vm.provider :virtualbox do |v|
    v.name = "#{$name}"
    v.cpus = 2

rms1000watt

sudo amazon-linux-extras install epel
sudo yum install ncdu

rms1000watt

Bash Source

• https://github.com/bminor/bash/blob/15409324f1974d41c183904ad575da7188058c1c/execute_cmd.c#L5422-L5447

Kernel Source

• https://github.com/torvalds/linux/blob/16f73eb02d7e1765ccab3d2018e0bd98eb93d973/fs/exec.c#L1679-L1826

Walkthrough

rms1000watt

apiVersion: v1
kind: Pod
metadata:
  name: ryan-smith-test
  namespace: default
spec:
  containers:
  - name: ryan-smith-test
    image: public.ecr.aws/docker/library/docker:latest
    command:

rms1000watt

package main

import "fmt"

type Node struct {
	Value string
	Next  *Node
}

type LinkedList struct {

rms1000watt

apiVersion: v1
kind: Pod
metadata:
  name: test-pod
  namespace: default
spec:
  containers:
  - image: nginx:1.21-alpine
    name: test-container
    volumeMounts:

rms1000watt

Github Actions --> AWS OIDC in Terraform

Introduction

Terraform version implementing: https://awsteele.com/blog/2021/09/15/aws-federation-comes-to-github-actions.html

rms1000watt

const AWS = require('aws-sdk');
const fs = require('fs');
const sts = new AWS.STS();

sts.getCallerIdentity({}, console.log);

const webIdentityToken = fs.readFileSync(process.env.AWS_WEB_IDENTITY_TOKEN_FILE, "utf8");
const role = sts.assumeRoleWithWebIdentity({
  RoleArn: process.env.AWS_ROLE_ARN,
  RoleSessionName: "todo-put-something-dynamic-maybe",