minor plus snippits

3 files changed, 113 insertions, 1 deletions

diff --git a/docs/rethinkeverything/kubernetes/snippets.md b/docs/rethinkeverything/kubernetes/snippets.md
new file mode 100644
index 0000000..9fcbd33
--- /dev/null
+++ b/docs/rethinkeverything/kubernetes/snippets.md
@@ -0,0 +1,53 @@
+# sort pile.
+
+## Fucking dumbest thing ever. So not impressed with the Linux Foundation here
+
+translating this pile of shit in the middle of a pdf...
+
+```sh
+kubectl -n kube-system exec -it etcd-gru -- sh "ETCDCTL_API=3 ETCDCTL_CACERT=/etc/kubernetes/pki/etcd/ca.crt ETCDCTL_CERT=/etc/kubernetes/pki/etcd/server.crt ETCDCTL_KEY=/etc/kubernetes/pki/etcd/server.key etcdctl endpoint health"
+# convoluted un pasteable and dumb. Try this.
+
+export ETCDCTL_API=3
+export ETCDCTL_CACERT=/etc/kubernetes/pki/etcd/ca.crt
+export ETCDCTL_CERT=/etc/kubernetes/pki/etcd/server.crt
+export ETCDCTL_KEY=/etc/kubernetes/pki/etcd/server.key
+etcdctl endpoint health
+```
+
+On the control-plane node.
+
+```sh
+etcdctl snapshot save /var/lib/etcd/snapshot.db
+mkdir $HOME/backup
+cp /var/lib/etcd/snapshot.db $HOME/backup/snapshot.db-$(date +%m-%d-%y) 
+#cp /root/kubeadm-config.yaml $HOME/backup/
+# Source - https://stackoverflow.com/a/61023372
+# Posted by Arghya Sadhu
+# Retrieved 2026-03-06, License - CC BY-SA 4.0
+kubectl get cm kubeadm-config  -n kube-system -o yaml > $HOME/backup/kubeadm-config.yaml
+cp -r /etc/kubernetes/pki/etcd $HOME/backup/
+```
+
+```sh
+feurig@pj ~ % kubectl drain minion1 --ignore-daemonsets
+node/minion1 cordoned
+```
+
+```sh
+sudo apt-mark unhold kubeadm
+sed -i 's/33/34/g' /etc/apt/sources.list.d/kubernetes.list
+apt update
+apt-cache madison kubeadm
+apt install kubeadm=1.34.1-1.1 -y
+sudo apt-get update && sudo apt-get install -y kubeadm=1.34.2-1.1
+sudo apt-mark hold kubeadm
+kubeadm upgrade node
+apt-mark unhold kubelet kubectl
+apt-get install -y kubelet=1.34.1-1.1 kubectl=1.34.1-1.1
+apt-mark hold kubelet kubectl
+sudo systemctl daemon-reload
+systemctl restart kubelet
+```
+
+```
diff --git a/docs/rethinkeverything/kubernetes/trixie.md b/docs/rethinkeverything/kubernetes/trixie.md
index 1766746..3e4fd7b 100644
--- a/docs/rethinkeverything/kubernetes/trixie.md
+++ b/docs/rethinkeverything/kubernetes/trixie.md
@@ -140,6 +140,65 @@ for h in gru minion1 minion2 minion3 minion4; do incus file push /etc/apt/source
 
 Incus allows you to provide cloud init sections to the profiles used to create incus containers.
 The gist of the parts to install kubernetes and helm is here <https://gist.github.com/feurig/c7db29c4df8eade0a027411d1917a602>.
+incus init trixie-vm -c limits.cpu=16 -c limits.memory=24GiB -d root,size=24GiB --vm gru -p default -p k8s-colo -c cloud-init.network-config="$(cat <<EOF
+version: 2
+ethernets:
+  enp5s0:
+    addresses:
+      - 69.41.138.117/27
+    gateway4: 69.41.138.97
+    nameservers:
+      addresses:
+        - 69.41.138.98
+        - 8.8.4.4
+EOF
+)"
+incus start gru
+```
+
+Initialize the control plane
+
+```sh
+kubeadm init --kubernetes-version 1.33.5 --control-plane-endpoint gru
+export KUBECONFIG=/etc/kubernetes/admin.conf
+helm install cilium cilium/cilium --version 1.18.3 --namespace kube-system  --set cni.binPath=/usr/lib/cni
+```
+
+Set up the nodes
+
+```sh
+incus init trixie-vm-cloud -c limits.cpu=16 -c limits.memory=24GiB -d root,size=24GiB --vm gru -p default -p merlot-k8s -c cloud-init.network-config="$(cat <<EOF
+version: 2
+ethernets:
+  enp5s0:
+    addresses:
+      - 192.168.129.130
+    gateway4: 192.168.128.1
+    nameservers:
+      addresses:
+        - 192.168.128.1
+        - 69.41.138.98
+EOF
+)"
+
+incus start gru
+
+incus init trixie-vm-cloud -c limits.cpu=16 -c limits.memory=24GiB -d root,size=24GiB --vm minion1 -p default -p merlot-k8s -c cloud-init.network-config="$(cat <<EOF
+version: 2
+ethernets:
+  enp5s0:
+    addresses:
+      - 192.168.129.131
+    gateway4: 192.168.128.1
+    nameservers:
+      addresses:
+        - 192.168.128.1
+        - 69.41.138.98
+EOF
+)"
+
+incus start minion1
+```
 
 ### also the key point
 
diff --git a/docs/rethinkeverything/sense/reconsidering-opnsense.md b/docs/rethinkeverything/sense/reconsidering-opnsense.md
index e8d8576..7b804a8 100644
--- a/docs/rethinkeverything/sense/reconsidering-opnsense.md
+++ b/docs/rethinkeverything/sense/reconsidering-opnsense.md
@@ -38,7 +38,7 @@ JAIL_NAME="vito"
 JAIL_IP_CIDR="192.168.128.13/17"
 JAIL_GATEWAY="192.168.128.1"
 JAIL_HOSTNAME="vito"
-IFACE_NAME="em0"
+IFACE_NAME="igb0"
 JAILS_PATH="/jails"
 JAIL_ROOT="$JAILS_PATH/$JAIL_NAME"