Underkube

When deploying OpenShift IPI on baremetal, there is only so much you can tweak at installation time in terms of networking.

In this blog post I’m trying to perform the integration of an external registry with an OpenShift environment.

podman play kube One of the cool things about podman is that is not just a docker replacement, it can do so much more!

Introducing bunkerized-nginx I heard about bunkerized-nginx a while ago and I thought it would be nice to use it as a reverse proxy so I can expose my internal services to the internet ‘safely’.

Nextcloud in container user IDs The nextcloud process running in the container runs as the www-data user which in fact is the user id 82: $ podman exec -it nextcloud-app /bin/sh /var/www/html # ps auxww | grep php-fpm 1 root 0:10 php-fpm: master process (…

Running a rootless Nextcloud pod Instead of running Nextcloud as independant containers, I’ve decided to leverage one of the multiple podman features which is being able to run multiple containers as a pod (like a kubernetes pod!)

Introduction I’ve been using Nextcloud for a few years as my personal ‘file storage cloud’.

Introduction Inspektor Gadget is a collection of tools (or gadgets) to debug and inspect Kubernetes applications.

Preparation Ensure your workers have the virtualization flag enabled: for node in $(oc get nodes -o name | grep kni1-worker); do oc debug ${node} -- grep -c -E 'vmx|svm' /host/proc/cpuinfo done That snippet should return the number of cpu cores with virtu…

Preparation Label the nodes you want to use for OCS, in my case: for node in $(oc get nodes -o name | grep kni1-worker); do oc label ${node} cluster.ocs.openshift.io/openshift-storage='' done Local storage operator Deploy the local storage operator cat <<…

SCCs There are tons of information out there about SCCs, but in this post we will be focused on how to create and use a custom SCC only.

I wanted to easily switch between my regular desktop configuration: All the external displays: To a single external display: Or just the laptop screen: This usually required to open gnome-control-center, then click displays, etc.

Quick howto to make podman rootless containers work in RHEL7: sudo yum clean all sudo yum update -y sudo yum install slirp4netns podman -y echo "user.max_user_namespaces=28633" | sudo tee -a /etc/sysctl.d/userns.conf sudo sysctl -p /etc/sysctl.d/userns.co…

Introduction NetApp filers can be used to provide dynamic storage to OCP4/k8s using NetApp’s Trident storage orchestrator.

Intro As I mentioned in my previous post, everything was working flawlessly… except for a bluetooth issue in my raspberry pi 3 that basically renders bluetooth unusuable… but it is rebooted daily via a cron job, so minor issue :) (I know I know, I’m plann…

As a geek, I use Home Assistant to simplify my home automation tasks (running in a container, of course!).

UPDATE: I submitted a PR to the MetalLB docs on how to deploy MetalLB on OpenShift 4 and it has been merged \o/ so hopefully it will be live soon.

In this blog post, I’m going to try to explain in my own words a high level overview of what Metal3 is, the motivation behind it and some concepts related to a ‘baremetal operator’.

Do you want to deploy an OCP4 cluster without using PXE and using static IPs?

I personally use those commands with the gsconnect GNOME extension and KDE Connect on my Android phone: Lock gdbus call --session --dest org.gnome.ScreenSaver --object-path /org/gnome/ScreenSaver --method org.gnome.ScreenSaver.Lock Unlock loginctl unlock-…

Bash variable with the content of a file NTPFILECONTENT=$(cat /etc/chrony.conf) This will store the ‘\n’ characters as well.

Show all rules sudo firewall-cmd --list-all Redirect ports sudo firewall-cmd --zone="$(firewall-cmd --get-default-zone)" \ --add-forward-port=port=443:proto=tcp:toport=8443 --permanent sudo firewall-cmd --zone="$(firewall-cmd --get-default-zone)" \ --add-…

Ignition configuration explained https://coreos.com/ignition/docs/latest/configuration-v2_2.html Notes: file mode is decimal!!!

I’ve migrated the content of this post to openshift.tips

2019 new year resolutions include to try to keep a blog updated… so far, I’ve: tweaked the config to use the basics theme imported the old ghost based blog posts using ghostToHugo let’s see how it goes :)

I had a Driving Force GT wheel which is not supported and it doesn’t work in PS4, so it was basically covering in dust… but the community is awesome and there exists a project called gimx that enables support for old wheels in new systems like PS4, so I d…

I’m going to explain my setup of how do I watch my favourites tv shows using containers.

Install openldap yum install -y openldap-servers openldap-clients Start the service systemctl start slapd Add the cosine and inetorgperson schemas: ldapadd -H ldapi:/// -Y EXTERNAL -f /etc/openldap/schema/cosine.ldif ldapadd -H ldapi:/// -Y EXTERNAL -f /e…

This is a not detailed howto about to make Huawei E303 dongle work with OpenWRT BarrierBreaker.

If you install some rpm without yum (rpm -Uvh), you should see the following error: ...

NOTE: Slightly stolen from https://jreypo.wordpress.com/2015/01/09/how-to-install-cockpit-on-centos-7/ Download the virt7-testing repo from the cockpit github wget -O /etc/yum.repos.d/virt7-testing.repo https://github.com/baude/sig-atomic-buildscripts/raw…

Tuned has been improved from RHEL6 and the process to create a custom tuned profile has changed.

Tras probar el vuelo interior del Hubsan x4 y ver que no tenía muchas protecciones, decidimos salir a probar el drone fuera.

When using spacecmd, it caches stuff like systems and packages.

chmod doesn’t do the trick, so you need to set the proper flag in svn with: svn propset svn:executable ON <filename>

Vía http://xmodulo.com/check-rpm-package-dependencies-fedora-centos-rhel.html: Just install rpmorphan and graphviz: yum install -y rpmorphan graphviz For example, for gzip package: rpmdep.pl -dot gzip.dot gzip dot -Tpng -o output.png gzip.dot Browse the o…

If you need to specify some packages in the “Require” section of a SPEC file, you should use the ISA (Instruction Set Architecture) dependencies The following is not longer valid: Requires: gtk.i686 This is valid: Requires: gtk(x86-32)

cat *jpg* | ffmpeg -f image2pipe -r 30 -vcodec mjpeg -i - -vcodec libx264 out.mp4

If you have a raspberry with a camera module, you can use them as a webcam.

nohup yourprocess >/dev/null 2>&1&

If you want to create a new service definition (i.e. to group a few ports in the same service), the procedure will be: Create a file called “myservice.xml” in /etc/firewalld/services/ folder with the following content: <?

A very simple contribution to RHEL initscripts, but it makes me proud :) ifup-wireless: add support for wowlan ifup-wireless: add support for wowlan (second part) From this bugzilla.

From my F20 laptop, I’m not able to read RHEL6 sar data.

To configure docker (in RHEL) to get images through proxy, edit /etc/sysconfig/docker and add the following parameters according to your environment: HTTP_PROXY="http://<proxy_host>:<proxy_port>" HTTPS_PROXY="https://<proxy_host>:<proxy_port>" http_proxy=…

One of the features of systemd are timers.

Easy peasy: Create a free OpenShift account Setup your environment Run the following command: rhc app create ghost nodejs-0.10 --env NODE_ENV=production --from-code https://github.com/openshift-quickstart/openshift-ghost-quickstart.git Profit Check this q…

Testing ghost platform trying to have a nice platform to force myself to write some blog post often :)

A partir de ahora voy a utilizar mi propio dominio… eduardominguez.es :D (muy original el nombre eh?!??!)

No hace falta hacer nada más que escribir en terminal lo siguiente: CODE defaults write com.apple.systempreferences TMShowUnsupportedNetworkVolumes 1 Al hacerlo, aparecerá el AirDisk o Samba como destinos de Time Machine.

dpkg –purge $(dpkg –get-selections | grep deinstall|cut -d" " -f1) Easy!