Thomas C. Foulds

My current status and progress on fixing silent network failures on my RPi5 RKE nodes.

In an attempt to clean up my digital life a little I’m trying out yet another static site generator…

A quick discussion of how developing a software platform for DevSecOps might help us do our job better.

In which our hero discovers that networking protocols work better if you tell them to do the right thing.

Finally getting around to locking down my NFS server I had to climb the mountain of getting my Synology NAS and FreeIPA talking to eachother properly.

In trying to write an entirely different post your protagonist has to first get his smartcard working again.

Ansible is a powerful tool for managing your servers but it can be difficult to manage when dealing with large projects.

While trying to get my wife access to my laptop I ran into some interesting things with the way Fedora sets up access to FreeIPA.

Encrypted email can be tricky to set up, especially when your private key is stored on a smartcard like the Nitrokey.

Exploring what it takes to build a container image…with a container image …on Kubernetes.

Since containers are becoming a bigger part of my work day it’s probably time for me to learn how to run them locally…

I recently got a Surface Pro 7 from work…so obviously the first step was to install Linux on it!

Sometimes life throws you little curveballs like filesystem corruption that only shows up at reboot.

With the most recent round of updates we need to make a small change to the Isso configuration to manage a change made in the Debian package.

This is an older addition to this site, but a neat trick anyway for a static site.

This quick update adds a lot of nice functionality to the HomeAssistant camera integration for Amcrest cameras.

My VM server is always a load of fun when it comes to things crashing unexpectedly.

So after a great deal of thought I finally decided to add commenting to my tech blog.

Now that we’ve figured out how to get Jenkins to talk to FreeIPA directly we can explore other authentication schemes.

Just a quick update to our Rancher cluster configuration to pass the Kubernetes API through to the backend nodes.

A quick diversion into how to get FreeIPA automounts working in Debian Buster.

This is an update to a previous post where I set up Jenkins on Rancher but had difficulty getting SSL certificates loaded correctly to make LDAPS work.

Today we’re going to look into what it takes to get Jenkins running on Rancher with Helm.

FreeIPA’s rule based authorization scheme is as interesting as it is complicated.

After playing with Rancher some on a small VM I decided I wanted to up my game and try a larger cluster.

I’ve recently added a new heavy-duty server to my home lab and wanted to expand my oVirt cluster to include it.

My home network now relies on FreeIPA for all of its access control and it is finally time to move away from the original CentOS-7 deploy and onto CentOS-8.

Today we’re going to play a little with a new (to me) Kubernetes distribution: RancherOS.

We’re finally going to cover image handling for our Jekyll site!

The latest project is getting Ubiquiti AP running on the network but that requires a dedicated controller VM.

More explorations in oVirt, this time trying out some home automation tools with HomeAssistant and dualing with Docker and network configuration.

Doing a series of posts on my exploration of oVirt kind of in reverse by jumping into setting up network security with SecurityOnion.

Here’s a quick take on how to get ISOs loaded into an oVirt instance.

Infrastructure automation is great but how do you go about making sure your scripts actually do what you expect?

Or more accurately, how to use bash and netcat to do some unholy audio routing for PulseAudio.

Yesterday I ran into an interesting limitation of the jekyll-feed gem while working on my Starborn collaboration.

Ansible is a great tool for managing software on Linux, but what if you work in a Windows environment?

A quick brain dump from the first day of DefCon 25.

Everyone wants to be have their content shared around, but sometimes loading a ton of JS isn’t worth the likes.

We can all agree that DevOps has advantages in theory, but how do we implement it in practice?

We can all agree that DevOps has advantages in theory, but how do we implement it in practice?

Because sometimes there just aren’t enough hours in the day to learn the new JavaScript build framework…

Deployment day is always stressful for a team.

Deployment day is always stressful for a team.

So after a long hiatus I decided to update this site and post a few new tutorials around what I’d been learning lately.

A tale of user and system error seasoned with a dash of unloadable kernel modules.

As 2016 dawns I finally have my build/deploy pipeline working to a degree that I feel comfortable with.

Social metadata can be annoying to set up, but with a good template and a small Jekyll plugin you can have your pages social ready in minutes.

Drupal and Wordpress are too much fuss for the amount of blogging you plan on doing?