Dentrax

// Integer Playground
// Furkan

#include <iostream>
#include <string>
#include <climits>
#include <typeinfo>

using namespace std;

Dentrax

[dentrax@arch etc]$ polybar --log=info top
* Loading config: /home/dentrax/.config/polybar/config
* Loaded monitor eDP-1 (1920x1080+0+0)
* Bar geometry: 1920x34+0+0
error: Disabling module "mpd" (reason: No built-in support for 'internal/mpd')
error: Disabling module "volume" (reason: Could not connect pulseaudio context.)
error: Disabling module "wired-network" (reason: Invalid network interface "net0")
* Starting application
* Starting module/powermenu
* Starting module/cpu

Dentrax

package main

import (
	"bytes"
	"fmt"
	"go/ast"
	"go/format"
	"go/parser"
	"go/token"
	"os"

Dentrax

-----BEGIN ENCRYPTED PRIVATE KEY-----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Dentrax

package main

import (
	"archive/tar"
	"bytes"
	"fmt"
	"github.com/google/go-containerregistry/pkg/crane"
	"github.com/google/go-containerregistry/pkg/name"
	v1 "github.com/google/go-containerregistry/pkg/v1"
	"github.com/google/go-containerregistry/pkg/v1/mutate"

Dentrax

#!/bin/bash

set -e

function usage(){
    echo "$(basename $0) --registry registry.gitlab.com/images --platform linux/amd64 --chart fluent/fluent-bit --version 0.19.10" >&2
}

function teardown {
  rm -rf "./tmp"

Dentrax

Stargz Study Notes

idea

• proposed by bradfitz for acceralating the CI of the Go lang project
• x/build: speed up large container start-up times without pre-pulling containers into VMs (CRFS): golang/go#30829
• • motivation: Our current situation (building a container, pushing to gcr.io, then automating the creation of a COS-like VM images that has the image pre-pulled) is pretty gross and tedious.
• • initial: https://github.com/google/crfs (read-only FUSE filesystem that lets you mount a container image, served directly from a container registry)

crfs

Dentrax

Kubernetes OIDC Flow - Sig-Auth

Got some answers from #sig-auth: https://kubernetes.slack.com/archives/C0EN96KUY/p1667201299188199

• OIDC generally, it's not good practice to contact the IdP on every request
• Token:

{
  "iss": "https://idp.example",
 "aud": "some-audience",

Dentrax

Abstract

Bolt operations are copy-on-write. When a page is updated, it is copied to a completely new page. The old page is added to a "freelist", which Bolt refers to when it needs a new page. This means that deleting large amounts of data will not actually free up space on disk, as the pages are instead kept on Bolt's freelist for future use. In order to free up this space to disk, you will need to perform a defrag.

The process of defragmentation releases this storage space back to the file system. Defragmentation is issued on a per-member so that cluster-wide latency spikes may be avoided.

Algorithm

1. lock batchTx to ensure nobody is using previous tx, and then close previous ongoing tx.
2. lock database after lock tx to avoid deadlock.

Dentrax

In containerd, there is actually a garbage collector which can be found here: https://github.com/containerd/containerd/blob/master/docs/garbage-collection.md. In the cleanup phase, only objects that are not associated (i.e. have no image reference) are removed - those marked as "dirty" are kept. To clean up unused images and running/stopped containers, this can be used.

While not yet production-ready, the tool at https://github.com/Azure/eraser could be used to achieve this. However, it may be difficult and complex to run this on all nodes. Descheduler cannot solve this problem as it does not run as a daemonset, but kubelet garbage collection can be used instead (checking if it is enabled in the current configs): https://kubernetes.io/docs/concepts/architecture/garbage-collection/#containers-images.

It seems that containerd does not support log rotation. I found a solution that involves using kubelet (as described in containerd/containerd#3351 (comment), also pr: https