jimangel

import homeassistant


@service
def update_device_areas():
    devreg = homeassistant.helpers.device_registry.async_get(hass)
    entreg = homeassistant.helpers.entity_registry.async_get(hass)
    areareg = homeassistant.helpers.area_registry.async_get(hass)

    area_ids = []

jimangel

From: https://github.com/firepress-org/rclone-in-docker/blob/master/.github/workflows/ci_dockerfile_is_master.yml

# The beauty of this CI setup is that it will build any valid DOCKERFILE by setting a few variables.
# See how at https://github.com/firepress-org/rclone-in-docker/blob/master/README-CI.md
# Requires secrets on github: DOCKERHUB_PASSWORD, TOKEN_SLACK
# Update DOCKERFILE_NAME if you are using a special Dockerfile name
# The way we define variables is a hack. See why: https://bit.ly/2ZEAt6u
#
# GNU v3 | Please credit the author if you are re-using some of it :-p

jimangel

Home Assistant with ecowitt: HTTP to HTTPS nginx reverse proxy secure DIY solution

Shoutout @del13r for posting a great tutorial on the community forum and indepth feedback on GitHub issues.

Problem

Ecowitt can only send stats to HTTP API endpoints and we want to keep our Home Assistant secure via HTTP/s access only.

Resolution

jimangel

#cloud-config
autoinstall:
  version: 1

  ssh:
    install-server: true
    # option "allow-pw" defaults to `true` if authorized_keys is empty, `false` otherwise.
    allow-pw: false

  # "[late-commands] are run in the installer environment with the installed system mounted at /target."

jimangel

Upload staging images to Google Artifact Registry

This is specifically for testing unreleased k8s components. Most of this is from https://cloud.google.com/artifact-registry/docs/docker/quickstart

Pre Reqs

• https://cloud.google.com/sdk/docs/install

Setup

jimangel

Fixes errors in Kubernetes v1.22+:

• kubelet cgroup driver: \"cgroupfs\" is different from docker cgroup driver: \"systemd\""
• kubelet cgroup driver: \"systemd\" is different from docker cgroup driver: \"cgroupfs\""

By setting both to use systemd as preferred by kubeadm.

Kubeadm: remove the automatic detection and matching of cgroup drivers for Docker. For new clusters if you have not configured the cgroup driver explicitly you might get a failure in the kubelet on driver mismatch (kubeadm clusters should be using the systemd driver). Also remove the IsDockerSystemdCheck preflight check (warning) that checks if the Docker cgroup driver is set to systemd. Ideally such detection / coordination should be on the side of CRI implementers and the kubelet. Please see the page on [how to configure cgroup drivers](https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/

jimangel

Enable auditing on KinD

TODO

• Use a webhook vs. file backend (maybe cloudrun?)
• This might only be possible if Docker is running as root - need to test

Config

Make a temporary directory to host files to be mounted in KinD.

jimangel

(source: https://github.com/zparnold/k8s-docs-pr-botherer)

Run the app

You'll need to fill in the GITHUB_TOKEN= with a personal access token you generate.

Run with docker:

# The k8s-docs-pr-botherer image is <9 MB

jimangel

https://kb.vmware.com/s/article/79832 has a pretty useless resolution...

Symptoms

VMs that have side channel mitigations enabled while running on Fusion on Mac OS 11.0 or later or on Workstation on Windows hosts with virtualization based security enabled may run slowly.

Cause

The root cause of the performance degradation is most likely due to mitigations for side channel attacks such as Spectre and Meltdown. Side channel attacks allow unauthorized read access by malicious processes or virtual machines to the contents of protected kernel or host memory. CPU vendors have introduced a number of features to protect data against this class of attacks such as indirect branch prediction barriers, single thread indirect branch predictor mode, indirect branch restricted speculation mode and L1 data cache flushing. While these features are effective at preventing side channel attacks they can cause noticeable performance degradation in some cases.

Resolution

Right click the VM > Settings... > Options [tab

jimangel

/language en
/label tide/merge-method-squash
/lgtm
/approve

/retitle [WIP] <TITLE>

is:pr is:open -label:"do-not-merge/work-in-progress" -label:"do-not-merge/invalid-commit-message" -label:"do-not-merge/hold" -label:"language/en" -label:"language/it" -label:"language/zh"  -label:"language/ru" -label:"language/ko" -label:"language/vi" -label:"language/de" -label:"language/es" -label:"language/ja" -label:"language/id"  -label:"language/fr" -label:"language/hi" -label:"language/pt"