jozko

Recover cluster.rkestate file from controlplane node

RKE

Run on controlplane node, uses any found hyperkube image

k8s 1.19 and higher

docker run --rm --net=host -v $(docker inspect kubelet --format '{{ range .Mounts }}{{ if eq .Destination "/etc/kubernetes" }}{{ .Source }}{{ end }}{{ end }}')/ssl:/etc/kubernetes/ssl:ro --entrypoint bash $(docker inspect $(docker images -q --filter=label=org.opencontainers.image.source=https://github.com/rancher/hyperkube.git) --format='{{index .RepoTags 0}}' | tail -1) -c 'kubectl --kubeconfig /etc/kubernetes/ssl/kubecfg-kube-node.yaml -n kube-system get configmap full-cluster-state -o json | jq -r .data.\"full-cluster-state\" | jq -r .' > cluster.rkestate

jozko

• https://www.ssl.com/how-to/order-free-90-day-ssl-tls-certificates-with-acme/
• https://community.buypass.com/t/k9r5cx/get-started

jozko

Traefik as a redirect service only

Because sometimes you really just need to redirect some subdomains/URL to new ones, with full SSL support. And with copy/pastabale examples above it takes less time to get it up and running that would take to start using some external redirect service (and it's not always possible to do so anyway).

Configuration above was compiled from several sources listed in the Links section below. It seems to be working ok with Traefik version 2.5.4. Whoever finds this useful - use it.

Links

• https://blog.cubieserver.de/2020/setting-up-traefik-v2-http-to-https-and-www-prefix-redirects/
• https://gist.github.com/ubergesundheit/7c9d875befc2d7bfd0bf43d8b3862d85

jozko

Typing vagrant from the command line will display a list of all available commands.

Be sure that you are in the same directory as the Vagrantfile when running these commands!

Creating a VM

• vagrant init -- Initialize Vagrant with a Vagrantfile and ./.vagrant directory, using no specified base image. Before you can do vagrant up, you'll need to specify a base image in the Vagrantfile.
• vagrant init <boxpath> -- Initialize Vagrant with a specific box. To find a box, go to the public Vagrant box catalog. When you find one you like, just replace it's name with boxpath. For example, vagrant init ubuntu/trusty64.

Starting a VM

• vagrant up -- starts vagrant environment (also provisions only on the FIRST vagrant up)

jozko

version: "3.3"

# Domain DNS should obviously be hosted with DO.

services:

  traefik:
    image: "traefik:v2.4"
    container_name: "traefik"
    command:

jozko

To convert Virtualbox VMs to VMware VMs, the state of the art is still not a "simple export and import". 
Am surprised that it doesn't still work thst way. My VMWare player would quit without even errors. Linux, VMware & Tools ... Still long way to go.. Why can't something fail appropriately ? 

Some commands need to be typed in the command lines. Here is the procedure that worked for me:

From Virtualbox, Export the VM to a folder. It could be saved either in the .OVA or .OVF formats. 

In the command line, execute :

     ovftool -tt vmx --lax soureVMfileaname.ova . 

jozko

• Install repo and packages
• Create mongodb user as per https://www.percona.com/doc/percona-backup-mongodb/initial-setup.html#configure-authentication-in-mongodb
• Configure storage - must be shared storage, not a problem with S3/Minio, NFS or similar with path based though - https://www.percona.com/doc/percona-backup-mongodb/storage-configuration.html#pbm-config-example-yaml
  • Test this with B2
• Install and setup agent, pbm cli
  • Agent is using /etc/default/pbm-agent with one line of config - PBM_MONGODB_URI="mongodb://pbmuser:secretpwd@localhost:27017/?authSource=admin&replicaSet=rs0"
  • pbm cli expects the same env variable to be setup - use .bash_profile or alias - root user/pbm user only
• Start agents and check with pbm status, should get something like this below

jozko

#!/usr/bin/env bash

# Interpolation to {} is not possible in bash
# see https://www.gnu.org/software/bash/manual/html_node/Shell-Expansions.html#Shell-Expansions 
# So using a counter and an array may come handy sometimes

MAX_COUNT=6
arr=()

while true; do

jozko

Setting up a SSL Cert from Comodo

I use Namecheap.com as a registrar, and they resale SSL Certs from a number of other companies, including Comodo.

These are the steps I went through to set up an SSL cert.

Purchase the cert

jozko

CRF250L drivetrain

Chain

• Original chain is 520, 106 links - Thumpertalk forum link
• Original chain can take 13/42T combo, should be great for offroad. It's a tigh fit, but it works.
• EK 520 106L O-Ring ~ 60€
• DID 520 106L X-Ring ~ 77€

Sprockets