Brian's Blog

Mainly a brain dump for my home lab [email protected]:~$ k3sup install --ip=192.168.50.76 --user=root --tls-san=192.168.50.200 --cluster --k3s-channel=stable --k3s-extra-args "--disable=traefik --disable=servicelb --disable=local-storage --node-ip=192.168.50.76" --local-path $HOME/.kube/config --context=k3s-ha --ssh-key /home/owner/.ssh/id_

Not the best code but it works. To get all the header info, login while developer tools is open in chrome and then copy the request parameters. Output is consumed by telegraf #!/usr/bin/perl -w use strict; use LWP::Simple; use JSON qw( decode_json encode_json); my $url

Decided to play with this learning exercise using kind (kubernetes in docker) Prereq (docker, helm2, kubectl, kind): Install docker for your distro: https://docs.docker.com/engine/install/ubuntu/ wget https://get.helm.sh/helm-v2.17.0-linux-amd64.tar.gz curl -LO "https://dl.k8s.io/release/$(curl -L -s https:

This doesn't serve any real purpose. I just like seeing trends of the tcp/udp connections to the IPFS network. Yes I get lazy at the end with a system call. #!/usr/bin/perl use warnings; use strict; my %peers; my $DEST = "INFLXUDBIP"; my $HOSTNAME = "host-foo"; open(FH, "/usr/local/

Notes for rebuilding. Wireguard has been setup in advance between the nodes and is used for internal communication on the cluster nodes: - address: PUBLIC_IP_1 user: root hostname_override: master ssh_key_path: ~/rootkey.pem internal_address: 10.10.10.1 role: - controlplane - etcd - address:

apiVersion: apps/v1 kind: Deployment metadata: name: minio labels: app: minio spec: replicas: 1 selector: matchLabels: app: minio template: metadata: labels: app: minio spec: containers: - name: minio image: minio/minio env: - name: MINIO_ACCESS_KEY value: "minio" - name: MINIO_SECRET_KEY value: "minio123" ports: - containerPort: 9000

Not the best script in the world but it works for my purposes. Based off https://github.com/dsshafer/cacti-sb6121/blob/master/sb6121.pl #!/usr/bin/perl #use strict; my %data; my $body; my $hostname; my %opts; my $hostname = '192.168.100.1'; my $URL = 'http://' . $hostname . '/cmSignalData.

apiVersion: v1 kind: ConfigMap metadata: name: pihole-adlists data: adlists.list: | https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts https://mirror1.malwaredomains.com/files/justdomains http://sysctl.org/cameleon/hosts https://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt https:

apiVersion: apps/v1 kind: Deployment metadata: name: tautulli labels: app: tautulli spec: replicas: 1 selector: matchLabels: app: tautulli template: metadata: labels: app: tautulli spec: containers: - name: tautulli image: linuxserver/tautulli env: - name: TZ value: "America/New_York" resources: limits: memory: "1Gi" requests: memory: "512Mi" ports: - containerPort: 8181

Now for something different. If you have a VPS provider that allows you to use a custom script after the networking layer is up, here is a quick way to install salt. On debian. wget -O - https://repo.saltstack.com/py3/debian/9/amd64/latest/SALTSTACK-GPG-KEY.pub | apt-key add

You could use helm or just a simple yaml since this is small. Setting up ssl is a exercise left to the reader (use cert-manager). I use a cname for the ingress rule that points to the worker node(s) apiVersion: apps/v1 kind: Deployment metadata: name: blog labels: app:

Had to do hacky work-arounds using the configmaps since they are read-only and I didn't want a separate config.ini file kind: ConfigMap apiVersion: v1 metadata: name: openrct2-config data: config.ini: | [general] show_fps = true currency_format = USD date_format = MM/DD/YY language = en-US temperature_format = FAHRENHEIT measurement_format

Using random pastebin examples I wrote a multi-core bcrypt. One bug to fix: after finding a match it doesn't exit early. #!/usr/bin/python3 from passlib.hash import bcrypt import os import sys import io import multiprocessing def chunks(l, n): return [l[i:i+n] for i in range(

Boot the iso  and run through the normal setup using setup-alpine . Once installed reboot and then disable the swap file: swapoff -a and remove from /etc/fstab. Finally enable cgroups rc-update add cgroups default and reboot. Then you are ready to setup k3s on the master node # curl -sfL https:

Instead of the usual ELK stack, this uses fluentd. Modified from isito docs # Namespace setup apiVersion: v1 kind: Namespace metadata: name: logging --- # Persistant volume for Elasticsearch kind: PersistentVolumeClaim apiVersion: v1 metadata: name: elasticsearch namespace: logging spec: accessModes: - ReadWriteOnce resources: requests: storage: 4Gi --- # Elasticsearch Service apiVersion: v1 kind:

If you have an existing mac and want to evaluate running OSX in Virtualbox, look here: https://medium.com/@twister.mr/installing-macos-to-virtualbox-1fcc5cf22801

So the next project to play with is k3s. All the fun of kubernetes without all the overhead or features you don't need for development https://github.com/rancher/k3s

Long time, no update. I have scrapped kubernetes for now. Way too much overkill for a simple blog. For now this lives on Google and Cloudflare. See ya in a few months.

Simple upgrade, same as the 11 -> 12 migration... [email protected]:~# kubeadm upgrade plan [preflight] Running pre-flight checks. [upgrade] Making sure the cluster is healthy: [upgrade/config] Making sure the configuration is correct: [upgrade/config] Reading configuration from the cluster... [upgrade/config] FYI: You can look at this config

[email protected]:~# kubeadm upgrade plan [preflight] Running pre-flight checks. [upgrade] Making sure the cluster is healthy: [upgrade/config] Making sure the configuration is correct: [upgrade/config] Reading configuration from the cluster... [upgrade/config] FYI: You can look at this config file with 'kubectl -n kube-system get cm kubeadm-config -oyaml' [upgrade]

No persistence (which you should really use if you want links to persist but I digress :-) ) apiVersion: apps/v1 kind: Deployment metadata: name: hastebin labels: app: hastebin spec: replicas: 1 selector: matchLabels: app: hastebin template: metadata: labels: app: hastebin spec: containers: - name: hastebin image: mkodockx/docker-pastebin ports: -

In case you use kubernetes... kind: PersistentVolume apiVersion: v1 metadata: name: myapi-pv-volume labels: type: local spec: storageClassName: local-storage capacity: storage: 1Gi accessModes: - ReadWriteOnce hostPath: path: "/mnt/data/etcd" --- apiVersion: v1 kind: PersistentVolumeClaim metadata: name: myapi-pv-claim labels: app: myapi spec: accessModes: - ReadWriteOnce resources: requests: storage: 1Gi --- apiVersion:

So you can do basic auth in ingress, good to know. Use the user/password combo from mkpasswd and save to file. Then create a secret from it and change your ingress annotations kubectl create secret generic basic-auth --from-file=auth #Edit your ingress rule kind: Ingress metadata: name: dev-setup annotations:

NOTE: You still need a mysql or postgresql database to hold the fetched rss items. The PVC here is just to store tinyrss's config (db credentials, url, etc). --- apiVersion: v1 kind: PersistentVolumeClaim metadata: name: tinyrss labels: app: tinyrss spec: accessModes: - ReadWriteOnce resources: requests: storage: 1Gi --- apiVersion: v1