book.rymcg.tech

This is part 5 of a series on nixos-vm-template: Running code agents in an immutable NixOS VM Bootstrapping a Docker server with immutable NixOS on Proxmox Mutable VMs are cool too Managing VMs with home-manager and sway-home A NixOS NAS in a Proxmox LXC…

I am moving the older blog.rymcg.tech posts into the book.rymcg.tech site.

In a previous post, I introduced git_extensions.sh – a monolithic bash script providing custom git subcommands (git vendor, git deploy, git deploy-key, git remote-proto).

In part 2, we set up NAT bridges where the Proxmox host itself performs IP masquerading for VMs on private networks.

This guide shows how to record audio playing in Firefox using Audacity, with PipeWire as the audio backend.

Note: This post documents the manual installation commands.

When testing system deployments meant for air-gapped networks, you need a way to simulate having no internet access while keeping LAN connectivity intact.

Note: This post documents an older version of this idea written in Bash script form.

This is part 4 of a series on nixos-vm-template: Running code agents in an immutable NixOS VM Bootstrapping a Docker server with immutable NixOS on Proxmox Mutable VMs are cool too Managing VMs with home-manager and sway-home (this post) A NixOS NAS in a…

This is part 3 of a series on nixos-vm-template: Running code agents in an immutable NixOS VM Bootstrapping a Docker server with immutable NixOS on Proxmox Mutable VMs are cool too (this post) Managing VMs with home-manager and sway-home A NixOS NAS in a…

If you need to access an HTTP service that requires authentication (Bearer or Basic auth), but you don’t want to put the API token anywhere near your code, you can use this script to create a localhost-only proxy for that service.

Just is a command runner - a modern take on the Makefile.

This is part 2 of a series on nixos-vm-template: Running code agents in an immutable NixOS VM Bootstrapping a Docker server with immutable NixOS on Proxmox (this post) Mutable VMs are cool too Managing VMs with home-manager and sway-home A NixOS NAS in a…

This is part 1 of a series on nixos-vm-template: Running code agents in an immutable NixOS VM (this post) Bootstrapping a Docker server with immutable NixOS on Proxmox Mutable VMs are cool too Managing VMs with home-manager and sway-home A NixOS NAS in a…

WebDAV is an open extension to the HTTP protocol that lets you treat a web server like a remote filesystem.

Have you ever SSHed into a remote machine and run a program that tried to automatically open a URL in your web browser using xdg-open?

To gain remote access to a machine behind a NAT, you have quite a few options.

WireGuard is a super fast and simple VPN that makes it easy to set up secure, ad-hoc, private connections using the latest encryption tech.

Networked Attached Storage (NAS) is a very useful service to provide for your homelab.

In part 1 of the virtual-proxmox series, we installed Proxmox on on a regular Linux desktop computer inside of KVM (Kernel Virtual Machine).

This example installation will use the ODroid H3 as the core pfsense router for a home installation.

Thinkpad X13S running Arch Linux ARM The Thinkpad X13s is the first Lenovo Thinkpad with an ARM processor (Qualcomm Snapdragon 8cx Gen 3).

I remember in the days of MS-DOS you could use a “RAM doubler” to compress your memory storage and get “more” RAM, and then a bit later on there was a joke website where you could “download” more RAM.

Let’s make a network router/firewall/DHCP/DNS server for the home LAN, with nftables, dnsmasq, and dnscrypt-proxy, all inside of a Proxmox KVM virtual machine, and a physical four port network interface using PCI passthrough.

This post introduces a shell script to create KVM virtual machine templates on Proxmox.

Here is an automated script to install Proxmox containers (LXC) from base templates, configuring their SSH servers with passwords disabled, and optionally installing Docker for nesting containers.

Now that you have installed Proxmox, created a storage pool, and configured the networking, you’ll want to setup notifications in case a hardware error occurs, or in the case of a backup job failing.

In part 1, we installed a fresh Proxmox server, configured SSH, updated repositories, and configured a basic node firewall.

This post will detail how to install proxmox and perform the initial configuration.

Restic is a modern backup program that can archive your files onto many different cloud and network storage locations, and to help restore your files in case of disaster.

Introduction In Part 1 of this series, you installed a Virtual Proxmox server in a libvirt virtual machine (with the GUI tool virt-manager), and you chose the network selection of type Virtual Network 'default': NAT.

Introduction In Part 1 of this series, you created an Ubuntu VM template, and three KVM virtual machines (all cloned from the same template) on your Virtual Proxmox host, and you joined all three nodes into a single K3s cluster, using the same cluster tok…

This is the first post in the proxmox series, read the introduction first.

RClone is an excellent, open-source, file synchronization tool.

This post directly follows the work done in Part 11, where Drone was setup, and test jobs were made to run on the cluster.

Drone is a self-hosted Continuous Integration platform, an equivalent to GitHub Actions, Jenkins, Travis CI, or similar.

OpenFaaS is a platform for creating serverless functions and microservices on kubernetes. ## Same git repo for infrastructure as in prior posts: FLUX_INFRA_DIR=${HOME}/git/flux-infra CLUSTER=k3s.example.com Add the flux HelmRepository OpenFaaS is distribu…

This post directly follows part 8 where you installed Wordpress and MariaDB.

The blog you’re reading is static, built using hugo.

In part 3, the Traefik IngressRoute for the whoami service was configured with TLS certificates from Let’s Encrypt.

If you can’t access container images, you can’t start containers.

Flux is a Continuous Delivery platform for Kubernetes infrastructure.

Gitea is a self-hosted git platform, much like GitHub.

Traefik is a proxy service that will allow HTTP and TCP services running inside your cluster to be exposed to the public internet.

To start testing with k3s, keep it simple, only create one node.

This is the first post in the K3s series, read the introduction first.