bzub

If you can't get X11 or Wayland GUI Linux apps to start anymore on Chrome OS, try the following.

In the Terminal app, this will show the status of your systemd user services/units:

systemctl --user

If sommelier@0.service and sommelier-x@0.service show a failed status, the following worked for me:

sudo ln -s /opt/google/cros-containers/bin/sommelier.elf /usr/bin/

bzub

Talos + Sidero + SideroLink Notes

Goals

1. Better understand how Talos server lifecycles work when managed by Sidero and ClusterAPI.
2. Determine security best practices.
3. Contribute issues and documentation based on what is found.

Research

bzub

Sidero Hacks

Delete Cluster, Keep PKI

You just need to keep the CLUSTER_NAME-ca and CLUSTER_NAME-talos secrets around.

To do this you an remove the owner reference from them.

cluster_name="example-cluster"

bzub

#!/usr/bin/env sh
set -e
set -x

# Boilerplate setup
alias buildah="sudo buildah"
container="$(buildah from scratch)"
alias run="buildah run ${container}"
alias copy="buildah copy ${container}"
alias add="buildah add ${container}"

bzub

apiVersion: v1
kind: ConfigMap
metadata:
  name: kube-router-cfg
  namespace: kube-system
  labels:
    tier: node
    k8s-app: kube-router
data:
  cni-conf.json: |

bzub

# nothing

bzub

#!/usr/bin/env sh
set -e

command="${1}"
usage="${0} start|stop"

if [ -z "${command}" ]; then
	echo "ERROR: command argument required. [start|stop]"
	echo "${usage}"
	exit 1

bzub

{
	"ignition": {
		"config": {},
		"timeouts": {},
		"version": "2.1.0"
	},
	"networkd": {},
	"passwd": {},
	"storage": {
		"files": [{

bzub

	{`nested associative -- add same name, different path`,
		`
kind: Deployment
volumes:
- name: vol1
  projected:
    sources:
    - secret:
        name: source1
        optional: false

bzub

package main

import (
	"fmt"
	"os"

	"sigs.k8s.io/kustomize/kyaml/yaml"
)

func main() {