diff options
| -rw-r--r-- | docs/rethinkeverything/kubernetes/snippets.md | 53 | ||||
| -rw-r--r-- | docs/rethinkeverything/kubernetes/trixie.md | 59 | ||||
| -rw-r--r-- | docs/rethinkeverything/sense/reconsidering-opnsense.md | 2 |
3 files changed, 113 insertions, 1 deletions
diff --git a/docs/rethinkeverything/kubernetes/snippets.md b/docs/rethinkeverything/kubernetes/snippets.md new file mode 100644 index 0000000..9fcbd33 --- /dev/null +++ b/docs/rethinkeverything/kubernetes/snippets.md @@ -0,0 +1,53 @@ +# sort pile. + +## Fucking dumbest thing ever. So not impressed with the Linux Foundation here + +translating this pile of shit in the middle of a pdf... + +```sh +kubectl -n kube-system exec -it etcd-gru -- sh "ETCDCTL_API=3 ETCDCTL_CACERT=/etc/kubernetes/pki/etcd/ca.crt ETCDCTL_CERT=/etc/kubernetes/pki/etcd/server.crt ETCDCTL_KEY=/etc/kubernetes/pki/etcd/server.key etcdctl endpoint health" +# convoluted un pasteable and dumb. Try this. + +export ETCDCTL_API=3 +export ETCDCTL_CACERT=/etc/kubernetes/pki/etcd/ca.crt +export ETCDCTL_CERT=/etc/kubernetes/pki/etcd/server.crt +export ETCDCTL_KEY=/etc/kubernetes/pki/etcd/server.key +etcdctl endpoint health +``` + +On the control-plane node. + +```sh +etcdctl snapshot save /var/lib/etcd/snapshot.db +mkdir $HOME/backup +cp /var/lib/etcd/snapshot.db $HOME/backup/snapshot.db-$(date +%m-%d-%y) +#cp /root/kubeadm-config.yaml $HOME/backup/ +# Source - https://stackoverflow.com/a/61023372 +# Posted by Arghya Sadhu +# Retrieved 2026-03-06, License - CC BY-SA 4.0 +kubectl get cm kubeadm-config -n kube-system -o yaml > $HOME/backup/kubeadm-config.yaml +cp -r /etc/kubernetes/pki/etcd $HOME/backup/ +``` + +```sh +feurig@pj ~ % kubectl drain minion1 --ignore-daemonsets +node/minion1 cordoned +``` + +```sh +sudo apt-mark unhold kubeadm +sed -i 's/33/34/g' /etc/apt/sources.list.d/kubernetes.list +apt update +apt-cache madison kubeadm +apt install kubeadm=1.34.1-1.1 -y +sudo apt-get update && sudo apt-get install -y kubeadm=1.34.2-1.1 +sudo apt-mark hold kubeadm +kubeadm upgrade node +apt-mark unhold kubelet kubectl +apt-get install -y kubelet=1.34.1-1.1 kubectl=1.34.1-1.1 +apt-mark hold kubelet kubectl +sudo systemctl daemon-reload +systemctl restart kubelet +``` + +``` diff --git a/docs/rethinkeverything/kubernetes/trixie.md b/docs/rethinkeverything/kubernetes/trixie.md index 1766746..3e4fd7b 100644 --- a/docs/rethinkeverything/kubernetes/trixie.md +++ b/docs/rethinkeverything/kubernetes/trixie.md @@ -140,6 +140,65 @@ for h in gru minion1 minion2 minion3 minion4; do incus file push /etc/apt/source Incus allows you to provide cloud init sections to the profiles used to create incus containers. The gist of the parts to install kubernetes and helm is here <https://gist.github.com/feurig/c7db29c4df8eade0a027411d1917a602>. +incus init trixie-vm -c limits.cpu=16 -c limits.memory=24GiB -d root,size=24GiB --vm gru -p default -p k8s-colo -c cloud-init.network-config="$(cat <<EOF +version: 2 +ethernets: + enp5s0: + addresses: + - 69.41.138.117/27 + gateway4: 69.41.138.97 + nameservers: + addresses: + - 69.41.138.98 + - 8.8.4.4 +EOF +)" +incus start gru +``` + +Initialize the control plane + +```sh +kubeadm init --kubernetes-version 1.33.5 --control-plane-endpoint gru +export KUBECONFIG=/etc/kubernetes/admin.conf +helm install cilium cilium/cilium --version 1.18.3 --namespace kube-system --set cni.binPath=/usr/lib/cni +``` + +Set up the nodes + +```sh +incus init trixie-vm-cloud -c limits.cpu=16 -c limits.memory=24GiB -d root,size=24GiB --vm gru -p default -p merlot-k8s -c cloud-init.network-config="$(cat <<EOF +version: 2 +ethernets: + enp5s0: + addresses: + - 192.168.129.130 + gateway4: 192.168.128.1 + nameservers: + addresses: + - 192.168.128.1 + - 69.41.138.98 +EOF +)" + +incus start gru + +incus init trixie-vm-cloud -c limits.cpu=16 -c limits.memory=24GiB -d root,size=24GiB --vm minion1 -p default -p merlot-k8s -c cloud-init.network-config="$(cat <<EOF +version: 2 +ethernets: + enp5s0: + addresses: + - 192.168.129.131 + gateway4: 192.168.128.1 + nameservers: + addresses: + - 192.168.128.1 + - 69.41.138.98 +EOF +)" + +incus start minion1 +``` ### also the key point diff --git a/docs/rethinkeverything/sense/reconsidering-opnsense.md b/docs/rethinkeverything/sense/reconsidering-opnsense.md index e8d8576..7b804a8 100644 --- a/docs/rethinkeverything/sense/reconsidering-opnsense.md +++ b/docs/rethinkeverything/sense/reconsidering-opnsense.md @@ -38,7 +38,7 @@ JAIL_NAME="vito" JAIL_IP_CIDR="192.168.128.13/17" JAIL_GATEWAY="192.168.128.1" JAIL_HOSTNAME="vito" -IFACE_NAME="em0" +IFACE_NAME="igb0" JAILS_PATH="/jails" JAIL_ROOT="$JAILS_PATH/$JAIL_NAME" |