Sigmoid Social

Pete KeenHappy <a href="https://hachyderm.io/tags/homelab" class="mention hashtag" rel="nofollow noopener" target="_blank">#homelab</a> <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> cluster migration update at the end of the week: all but one of my media apps are moved over to the new cluster setup.Next steps are to finish that last media app then get VMSave and the other public stuff moved over plus paperless and Minecraft.All thats left then is <a href="https://hachyderm.io/tags/HomeAssistant" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeAssistant</a> and friends that all need to get moved together, which involves resetting and reinstalling <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> hardware nodes.

Mauricio Teixeira 🇺🇸🇧🇷Talos keeps impressing me. Now they came up with this PXE boot provider that sounds really nice. I need to try it at some point.<a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a><a href="https://hachyderm.io/@siderolabs/115145683694198775" rel="nofollow noopener" translate="no" target="_blank">https://hachyderm.io/@siderolabs/115145683694198775</a>

Mauricio Teixeira 🇺🇸🇧🇷wow. Just wow. The Tailscale Kubernetes Operator is SWEET! It was a bit complicated to setup, but it works a lot easier than exposing stuff via Docker Compose or sidecars. It has a bit too many options, like everything in k8s world, but that might be useful at some point. Today all I'm doing is exposing a simple service (using annotations) that doesn't need TLS or funnel. Working beautifully with Cilium CNI. <a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/Tailscale" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tailscale</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> <a href="https://tailscale.com/kb/1236/kubernetes-operator" rel="nofollow noopener" translate="no" target="_blank">https://tailscale.com/kb/1236/kubernetes-operator</a>

NagaramI hadn't quite decided if I was going to use the Raspberry PIs in my rack as a cluster or not. Honestly they just look good for now.But I was reading the <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> docs and discovered they make raspberry pi images too.So... The only thing to do is build my virtual cluster in <a href="https://hachyderm.io/tags/Proxmox" class="mention hashtag" rel="nofollow noopener" target="_blank">#Proxmox</a> and then the bare metal cluster on the pis and see what's the better idea!I'm already floating the idea of donating a larger amount of my compute to science or local volunteer orgs. So making more of it available at no increased cost is super cool!

Sidero LabsTo SSH is human, but that doesn’t mean we should.SSH is like popping the hood of your car while driving 70mph. It works just fine. Until it doesn’t, and then you have a problem.Here's why Talos Linux removes SSH entirely, and how that shift leads to consistent, secure, and boringly reliable infrastructure. No drift. No late-night fixes. No hidden state.👉 Read the full post: <a href="https://www.siderolabs.com/blog/to-ssh-is-human/" rel="nofollow noopener" translate="no" target="_blank">https://www.siderolabs.com/blog/to-ssh-is-human/</a> <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> <a href="https://hachyderm.io/tags/InfrastructureAsCode" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfrastructureAsCode</a> <a href="https://hachyderm.io/tags/CloudNative" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudNative</a> <a href="https://hachyderm.io/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a>

VictoriaMetrics👋 Running Talos <a href="https://mastodon.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> in your <a href="https://mastodon.social/tags/K8s" class="mention hashtag" rel="nofollow noopener" target="_blank">#K8s</a> cluster and wondering how to collect system logs properly?Ryan Jacobs just published a deep dive into exactly that, and it’s packed with practical steps, <a href="https://mastodon.social/tags/Helm" class="mention hashtag" rel="nofollow noopener" target="_blank">#Helm</a> configs, gotchas, and workarounds.If you're using <a href="https://mastodon.social/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> in production, bookmark this post 👇 <a href="https://bit.ly/4lA9zTa" rel="nofollow noopener" translate="no" target="_blank">https://bit.ly/4lA9zTa</a>

"Musty Bits" McGeeCool blog spotto<a href="https://blog.stonegarden.dev/" rel="nofollow noopener" translate="no" target="_blank">https://blog.stonegarden.dev/</a><a href="https://eigenmagic.net/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> <a href="https://eigenmagic.net/tags/OIDC" class="mention hashtag" rel="nofollow noopener" target="_blank">#OIDC</a> <a href="https://eigenmagic.net/tags/Oauth" class="mention hashtag" rel="nofollow noopener" target="_blank">#Oauth</a> <a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener" target="_blank">#k8s</a> <a href="https://eigenmagic.net/tags/Proxmox" class="mention hashtag" rel="nofollow noopener" target="_blank">#Proxmox</a> <a href="https://eigenmagic.net/tags/Talos" class="mention hashtag" rel="nofollow noopener" target="_blank">#Talos</a> <a href="https://eigenmagic.net/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> <a href="https://eigenmagic.net/tags/ArgoCD" class="mention hashtag" rel="nofollow noopener" target="_blank">#ArgoCD</a>

Mauricio Teixeira 🇺🇸🇧🇷Oh wow! I had some weird stuff in the GatewayAPI config for HTTP to HTTPS redirect which was blocking ACME.Now I have CertManager correctly issuing certificates from my private StepCA, using the http01 solver behind GatewayAPI! Blog coming (eventually). 🎉 <a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/GatewayAPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#GatewayAPI</a> <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> <a href="https://hachyderm.io/tags/CertManager" class="mention hashtag" rel="nofollow noopener" target="_blank">#CertManager</a> <a href="https://hachyderm.io/tags/StepCA" class="mention hashtag" rel="nofollow noopener" target="_blank">#StepCA</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a>

Sidero LabsWe built Talos Linux for teams like yours. And we want your take.What’s working? What’s not? What should we tackle next? Take our short survey and help shape what comes next.It only takes a few minutes, and as a thank-you, you’ll be entered to win a JetKVM, our favorite little IP KVM device for hands-on remote control.➡️ Take the survey <a href="https://sidero.surveysparrow.com/s/talosuseq22025/tt-QKzS7" rel="nofollow noopener" translate="no" target="_blank">https://sidero.surveysparrow.com/s/talosuseq22025/tt-QKzS7</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a>

Mauricio Teixeira 🇺🇸🇧🇷And in record time (4 days) I have all the k8s cluster basics running (cluster-api + external-dns + cert-manager), and the first apps deployed (ollama + forgejo-runner).Dealing with GatewayAPI (as opposed to ingress-nginx), as well as cert-manager with my private StepCA, were quite challenging. I suppose those deserve a blog post.Need to deploy a few more apps to figure out what can be done better, then I'll think about it.Next: metrics! 📈 <a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a>

Mauricio Teixeira 🇺🇸🇧🇷"Home prod" cluster is up, and Flux is syncing with Forgejo. Time to work on the infra then the apps.<a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a>

Mauricio Teixeira 🇺🇸🇧🇷<a href="https://hachyderm.io/@bashfulrobot" class="u-url mention" rel="nofollow noopener" target="_blank">@bashfulrobot</a> Took me a long time to figure out that Cilium didn't want to schedule the load balancer IP on a control plane node because I am running on a single node.When Talhelper generates the Talos config files, it adds a label "node.kubernetes.io/exclude-from-external-load-balancers". I had to make sure it doesn't add any labels ("nodeLabels: {}").Took me a while to figure that out, because the services were up, the load balancers and the L2 advertisements were being created, but it was just not being actually advertised on the network. 🙄 <a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> <a href="https://hachyderm.io/tags/Talhelper" class="mention hashtag" rel="nofollow noopener" target="_blank">#Talhelper</a>

Mauricio Teixeira 🇺🇸🇧🇷The hardest part about building this Talos cluster so far: getting Cilium to work with Gateway API and L2 advertisements. The "dance" to get it working in a single-node cluster is just "ugh!".<a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a>

Mauricio Teixeira 🇺🇸🇧🇷After three weeks of testing, it looks like I'm done with my Talos Kubernetes cluster proof of concept, and ready to start building it in the "production" machine, replacing Proxmox.And since I like things clean, I'll basically start all the config files from scratch, just keeping in mind all my previous learnings, which should give me another 2-3 weeks of work.Gladly anything running in the current machine is not critical, so they can be stopped, or run temporarily somewhere else.I still don't see a reason to blog about "just another nerd building a k8s cluster". 😄<a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a>

Mauricio Teixeira 🇺🇸🇧🇷I'm two days behind on my Mastodon timeline because my K8s cluster project has been eating my brain. I probably should go to therapy instead. 🤣 <a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a>

Mauricio Teixeira 🇺🇸🇧🇷Aw man. Another rabbit hole.This whole Talos/Kubernetes exploration is making me rethink my home lab DNS situation. 😞 Edit: I've been using Pi-hole as my primary DNS with static hostnames, and I found out that K8s external-dns does have support for it's API, so now I'm trying to decide if I wanna keep doing that, or if I just daisy-chain with PowerDNS. 🙄<a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a>

Mauricio Teixeira 🇺🇸🇧🇷Well... Every time I create a repository on my self-hosted Forgejo I set the object format to sha256, because I thought any modern things should work fine.It so happens that Flux only talks to repos in sha1 format. :picardfacepalm: <a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/Forgejo" class="mention hashtag" rel="nofollow noopener" target="_blank">#Forgejo</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> <a href="https://hachyderm.io/tags/FluxCD" class="mention hashtag" rel="nofollow noopener" target="_blank">#FluxCD</a>

Mauricio Teixeira 🇺🇸🇧🇷It's interesting when I go down this rabbit hole of learning new things: because of Talos I need to learn Talhelper (as opposed to Terraform), Cilium (as opposed to Calico/Flannel), LGTM (as opposed to Kube-Prometheus), and now I found out about Taskfile (as opposed to Makefile). My head is spinning. 😵<a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a>

Mauricio Teixeira 🇺🇸🇧🇷After a good night of sleep I realized I was unfair on my rant about Talos Linux: it's not their fault.Setting up a basic cluster was easy. Doing the same with Talhelper was even easier.But it took me hours to set up UEFI secure boot and TPM disk encryption. Talos doesn't have a native way to manage secrets, and their Terraform provider is very incomplete. Talhelper made it less bad, even though still not ideal.Bootstrapping with extended security like encrypted local storage, privileged namespace exceptions and network firewalls were very cumbersome to implement. Apparently it's supposed to be easier if you do post bootstrapping.So, as you can see, my problems are mostly because I'm paranoid, and I want to run a home lab with the same level of automation and security as a production environment.I'm sure it's not supposed to be that hard for most people. Please don't get discouraged by my experience.I'm still working on getting it up and running the way I want. I'm getting there.<a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> <a href="https://hachyderm.io/tags/Azure" class="mention hashtag" rel="nofollow noopener" target="_blank">#Azure</a> <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a>

Mauricio Teixeira 🇺🇸🇧🇷Seriously... Building this Talos Kubernetes cluster on my local home lab machine is turning out to be a lot harder than building an Azure AKS cluster. 🙄<a href="https://hachyderm.io/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://hachyderm.io/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a> <a href="https://hachyderm.io/tags/Azure" class="mention hashtag" rel="nofollow noopener" target="_blank">#Azure</a> <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a>

Recent searches

Search options

Administered by:

Server stats:

#TalosLinux

Recent searches

Search options

Administered by:

Server stats:

taloslinux

#TalosLinux