kscb is a sidecar container, that is based upon rclone with a crontab. The sidecar container in the pod has access to the PV mount and the data on it, Rclone can then easily copy/sync to a public/private storage provider
Migrate from Docker to Containerd in Kubernetes
Kubernetes is deprecating Docker as a container runtime after v1.20. Don’t Panic 😱 Docker containers are still supported, but the dockershim/Docker, the layer between Kubernetes and containerd is deprecated and will be removed from version 1.22+. https://kubernetes.io/blog/2020/12/02/dont-panic-kubernetes-and-docker/" So if you are running docker you need to change to a supported container runtime interface (CRI). containerd is a good choice, it is already running on your Kubernetes node if you are running Docker....
Running a mailserver in Kubernetes
Running a webserver in Kubernetes is easy, but a mailserver is more challenging. Most of the challenging things has todo with your ip infrastructure, ingress and loadbalancer within Kubernetes. Here are things I learned when I was deploying a mailserver based on Postfix on Kubernetes with metallb and nginx ingress. If you have a different setup, things could apply or not. Prevent mail loops on your secondary MX Your postfix MX pod is running maybe on a private ip RFC1918, this is fine....
Varnish in Kubernetes
This is a simple minimal but highly configurable Varnish caching service for Kubernetes. This should be placed between your ingress and your application service. simple setup It can be used in combination with multiple ingresses and application services at the same time. multiple ingress and services Setup Apply the following yaml file, replicas and environment variables can be adjusted to your need....
Fortinet Fortigate in Grafana
To get metrics from your FortiGate in Grafana using Telegraf and InfluxDB. Enable SNMP on your FortiGate Put the following telegraf config in your /etc/telegraf/telegraf.d directory Edit the the agent IP and community string as appropriate # # Retrieves SNMP values from remote agents [[inputs.snmp]] agents = [ "192.168.1.1:161" ] timeout = "10s" retries = 3 version = 2 community = "monitoring" # ## SNMPv3 auth parameters sec_name = "sec_name" auth_protocol = "SHA" # Values: "MD5", "SHA", "" auth_password = "auth_pass" sec_level = "authPriv" # Values: "noAuthNoPriv", "authNoPriv", "authPriv" # #context_name = "" priv_protocol = "AES" # Values: "DES", "AES", "" priv_password = "priv_pass" name = "FortiGate" [[inputs....
Passed the Red Hat RHCSA exam
Today I passed the Red Hat RHCSA exam with the maximum 300/300 100% score! 😁 I had a good feeling during the exam, and after about an hour I got the following email from Red Hat. The results of your recent EX200 Red Hat Certified System Administrator Exam are reported below. Passing score: 210 Your score: 300 Result: PASS Congratulations -- you have earned the Red Hat Certified System Administrator certification....
SUSE SLES 15 Container in LXD
I am a big fan of LXD and lot of my ‘home infra’ and VPS’s are all running LXD container. Also I am using LXD at work to create test setup for al sorts of Linux OS’s and applications. Most “free” Linux OS’s are already in the LXD image repository. But sometime’s I need a non free Linux OS. Such as SUSE Linux Enterprise Server, or SLES for short. Off-course I can run this in a VPS just by installing it from an ISO....
Ansible CICD pipeline with GitLab
In this post I will show how I use GitLab CICD with Ansible. I’ll show the pipelines and how the merge requests are handled for full control and auditing. GitLab flow The GitLab flow is as following, you have one or more dev/working branches. To push code to the staging environment you do this via an merge request in GitLab, en to get this code in to production. Again via a merge request from the master branch to the production branch....
3d print project, lampshade
A couple of weeks ago I gave myself a 3d print for a present. 😝 I opted for a Creality Ender 3 pro and order it from Ali Express. With the first print I was amazed how good the quality now is on these budget printers. My last experience with 3d printing was about 10 years ago and the quality was quite different then on budget printers. So I am quite happy with this printer....
Ghost blog caching with Varnish
In this post I show a few of my tip’s for using Varnish for caching and Ghost together. Don’t cache everything Caching is good, but we don’t want to cache everything in ghost, we don’t want to cache the admin and preview pages in ghost. Add the following in the sub vcl_recv part. # Did not cache the admin and preview pages if (req.url ~ "/(admin|p|ghost)/") { return (pass); } restart Varnish to activate the changes....