Mathieu Tortuyaux tormath1

The goal of this Gist is to run a Tor bridge from a Flatcar instance provisioned through Ignition - in this example, it's deployed locally with QEMU but it can be extend elsewhere (with Terraform and so on.)

Requirements:

ct
qemu setup

Pull the latest stable release of Flatcar:

Cluster API OpenStack using Flatcar

This is done on devstack environment.

Resources

From an existing Kubernetes cluster deployed with Kind:

[CAPO][capo] does test in its CI both Ubuntu and Flatcar. For Flatcar, the image still needs to be built via the image-builder and uploaded on CAPO GCS (Google Cloud Storage).

There is an open issue to bring some automation around this process: kubernetes-sigs/cluster-api-provider-openstack#1502 while it is not done, whether CAPO or Flatcar maintainers needs to do it manually.

Once the release is announced

$ cd kubernetes-sigs/image-builder/images/capi
$ make OEM_ID=openstack build-qemu-flatcar

This is a demo of updating Kubernetes version on Flatcar without updating the OS leveraging Systemd sysext and Kured.

notes:

It has been tested on a simple control-plane node on Qemu but can be easily extended to CAPI.
The kubernetes sysext image is provided by https://github.com/flatcar/sysext-bakery.git

Boot an instance with the following Butane config.yaml:

variant: flatcar

	sudo ./bin/kola run \
	--board arm64-usr \
	-d -v -b cl -p qemu \
	--qemu-image /home/mathieu/kinvolk/arm64/flatcar_production_image.bin \
	--qemu-bios=./flatcar_production_qemu_uefi_efi_code.fd \
	cl.internet
	=== RUN cl.internet/UpdateEngine
	=== RUN cl.internet/DockerPing
	=== RUN cl.internet/DockerEcho
	=== RUN cl.internet/NTPDate

	# ct --in-file ./config.yml --pretty > ./ignition.json
	storage:
	files:
	- path: /var/lib/iptables/rules-save
	filesystem: root
	mode: 0644
	contents:
	inline: \|
	*filter
	-A INPUT -p tcp --dport ssh -j ACCEPT

	# ct --platform custom < ./config.yml \| jq > ignition.json
	systemd:
	units:
	- name: update-engine.service
	enable: true
	- name: etcd-member.service
	enable: true
	- name: locksmithd.service
	enable: true
	dropins:

	# butane < config.yml > ignition.json
	---
	variant: flatcar
	version: 1.0.0
	storage:
	disks:
	- device: /dev/vda
	partitions:
	- number: 9
	label: ROOT

	#!/usr/bin/env python

	# goal of this script is to control (play / pause) multimedia played
	# on a firefox tab through dbus

	# requirements:
	# * dbus (session)
	import dbus
	import sys

	# butane < config.yaml > config.json
	# ./flatcar_production_qemu.sh -i ./config.json
	variant: flatcar
	version: 1.0.0
	storage:
	files:
	- path: /opt/extensions/docker/docker-24.0.5.raw
	contents:
	source: https://github.com/flatcar/sysext-bakery/releases/latest/download/docker-24.0.5.raw
	- path: /opt/extensions/kubernetes/kubernetes-v1.27.4.raw