Manabu Ori orimanabu

## ansible_enable_winrm_with_openssl_self_certificate.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              1 star
            
          
                orimanabu
                / ansible_enable_winrm_with_openssl_self_certificate.md
            
            
              Last active
              March 5, 2024 11:48
            
              
                Enable WinRM for Ansible using self signed certificate generated by OpenSSL
              
          
    はじめに

これは、AnsibleでWindowsを管理するために、WinRMにHTTPSで接続できるよう設定するためのドキュメントです。
自己証明書は、PowerShellの New-SelfSignedCertificate ではなくLinux上でopensslコマンドで作成したものを使用します。
設定対象のWindows VMを

ホスト名: wintest1
IPアドレス: 192.168.122.70


## rosa-util.sh
#!/bin/bash

profile=blank

install_mode=hcp
cluster_name=hcp
#install_mode=classic
#cluster_name=classic

if [ x"$#" != x"1" ]; then

## gist:0afed3b956aec2f2c030dc92273bd09f
[ori@fedora linux-6.3]$ cat /sys/firmware/devicetree/base/model | awk '1'
Apple MacBook Air (13-inch, M2, 2022)
[ori@fedora linux-6.3]$ uname -a
Linux fedora 6.2.11-450.asahi.fc38.aarch64 #1 SMP PREEMPT_DYNAMIC Mon Apr 17 00:28:53 UTC 2023 aarch64 GNU/Linux
[ori@fedora linux-6.3]$ time openssl speed 2>&1 | tee log.openssl
Doing md5 for 3s on 16 size blocks: 16773642 md5's in 3.00s
Doing md5 for 3s on 64 size blocks: 10167926 md5's in 3.00s
Doing md5 for 3s on 256 size blocks: 4570146 md5's in 3.00s
Doing md5 for 3s on 1024 size blocks: 1427362 md5's in 3.00s
Doing md5 for 3s on 8192 size blocks: 192390 md5's in 3.00s

## linux_kernel_modules_build_time.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                orimanabu
                / linux_kernel_modules_build_time.md
            
            
              Last active
              March 19, 2024 16:59
            
              
                Time taken to `make -j ${NCORES} modules` of linux-6.3
              
          
    Time taken to make -j ${NCORES} modules of linux-6.3


Hardware
CPU
# of cores (A)
OS
Time spent on make modules (B)
1 / (B) / (A)


Apple MacBook Air M2
Apple Silicon M2 (4 x efficiency cores @2.4GHz, 4 x performance cores @3.5GHz)
8
Fedora Linux Asahi Remix 38
30m4.815s
6.926e-05


Lenovo ThinkPad P1 Gen 2
Intel Core i7 9850H @2.60GHz
12
Fedora Linux 38
44m28.919s
3.122e-05


Dell PowerEdge R640
Intel Xeon Silver 4108 @1.80GHz
32
Fedora Linux 38
18m44.802s
2.778e-05


Lenovo ThinkPad P16v Gen 1
AMD Ryzen 7 PRO 7840HS @3.8GHz
16
Fedora Linux 39
15m2.816s
6.923e-05


## install_podman_on_amazon_linux_2023.sh
#!/bin/bash

# To build podman, you have enough resource on the instance.
# I tested this script on t2.xlarge.

topdir=${HOME}/work
mkdir -p ${topdir}

# Install prereq rpms
sudo dnf install -y git golang libseccomp-devel gpgme-devel autoconf automake libtool yajl yajl-devel libcap-devel systemd-devel cni-plugins iptables-nft rpm-build meson golang-github-cpuguy83-md2man.x86_64

## podman_crun_wasmedge.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                orimanabu
                / podman_crun_wasmedge.md
            
            
              Last active
              August 25, 2022 15:48
            
              
                Run WasmEdge container with Podman and crun on Fedora 36
              
          
    How to run Wasm container with Podman and crun

Login to Fedora 36 Server

ssh fedoravm

Install prereq packages

container related packages (+ git, etc)


## rhcos_rpm_version.sh
#!/bin/bash

# https://github.com/openshift/os/blob/master/docs/faq.md#q-how-do-i-determine-what-version-of-an-rpm-is-included-in-an-rhcos-release

export REGISTRY_AUTH_FILE=~/.config/containers/auth.json

if [ x"$#" != x"2" ]; then
    echo "$0 ocp_version package_name"
    exit 1
fi

## odf_cephfs_quota.txt
[ori@localhost ~]$ cat pvc1.yaml
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: cephfs-kernel
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:

## c9s_install_btrfs.txt
sudo dnf update
sudo reboot
sudo dnf install https://cbs.centos.org/kojifiles/packages/centos-release-kmods/2/4.el9s/noarch/centos-release-kmods-2-4.el9s.noarch.rpm
sudo dnf install kmod-btrfs-5.14.0.45-2.el9s.x86_64
sudo modprobe btrfs
sudo mkfs.btrfs /dev/vdb
sudo mount /dev/vdb /mnt

## w4-pod-to-clusterip-different-node-ovs-oftrace-dst.txt
[core@worker-3 ~]$ sudo ovs-vsctl --columns=ofport find interface type=geneve options:remote_ip=172.16.13.108
ofport              : 7
[core@worker-3 ~]$ sudo ovs-appctl ofproto/trace --ct-next new,trk br-int in_port=7,tun_id=0x15,tun_metadata0=0x10078,tcp,reg0=0x282,reg11=0xd,reg12=0x8,reg13=0x2d,reg14=0x42,reg15=0x1,metadata=0x16,vlan_tci=0x0000,dl_src=0a:58:0a:83:02:01,dl_dst=0a:58:0a:82:03:2e,nw_src=10.131.2.40,nw_dst=10.130.3.46,nw_ecn=0,nw_ttl=64,nw_frag=no
Flow: tcp,reg0=0x282,reg11=0xd,reg12=0x8,reg13=0x2d,reg14=0x42,reg15=0x1,tun_id=0x15,metadata=0x16,in_port=7,vlan_tci=0x0000,dl_src=0a:58:0a:83:02:01,dl_dst=0a:58:0a:82:03:2e,nw_src=10.131.2.40,nw_dst=10.130.3.46,nw_tos=0,nw_ecn=0,nw_ttl=64,tp_src=0,tp_dst=0,tcp_flags=0

bridge("br-int")
----------------
 0. in_port=7, priority 100
    move:NXM_NX_TUN_ID[0..23]->OXM_OF_METADATA[0..23]
     -> OXM_OF_METADATA[0..23] is now 0x15
	#!/bin/bash

	profile=blank

	install_mode=hcp
	cluster_name=hcp
	#install_mode=classic
	#cluster_name=classic

	if [ x"$#" != x"1" ]; then
	[ori@fedora linux-6.3]$ cat /sys/firmware/devicetree/base/model \| awk '1'
	Apple MacBook Air (13-inch, M2, 2022)
	[ori@fedora linux-6.3]$ uname -a
	Linux fedora 6.2.11-450.asahi.fc38.aarch64 #1 SMP PREEMPT_DYNAMIC Mon Apr 17 00:28:53 UTC 2023 aarch64 GNU/Linux
	[ori@fedora linux-6.3]$ time openssl speed 2>&1 \| tee log.openssl
	Doing md5 for 3s on 16 size blocks: 16773642 md5's in 3.00s
	Doing md5 for 3s on 64 size blocks: 10167926 md5's in 3.00s
	Doing md5 for 3s on 256 size blocks: 4570146 md5's in 3.00s
	Doing md5 for 3s on 1024 size blocks: 1427362 md5's in 3.00s
	Doing md5 for 3s on 8192 size blocks: 192390 md5's in 3.00s
Hardware	CPU	# of cores (A)	OS	Time spent on make modules (B)	1 / (B) / (A)
Apple MacBook Air M2	Apple Silicon M2 (4 x efficiency cores @2.4GHz, 4 x performance cores @3.5GHz)	8	Fedora Linux Asahi Remix 38	30m4.815s	6.926e-05
Lenovo ThinkPad P1 Gen 2	Intel Core i7 9850H @2.60GHz	12	Fedora Linux 38	44m28.919s	3.122e-05
Dell PowerEdge R640	Intel Xeon Silver 4108 @1.80GHz	32	Fedora Linux 38	18m44.802s	2.778e-05
Lenovo ThinkPad P16v Gen 1	AMD Ryzen 7 PRO 7840HS @3.8GHz	16	Fedora Linux 39	15m2.816s	6.923e-05
	#!/bin/bash

	# To build podman, you have enough resource on the instance.
	# I tested this script on t2.xlarge.

	topdir=${HOME}/work
	mkdir -p ${topdir}

	# Install prereq rpms
	sudo dnf install -y git golang libseccomp-devel gpgme-devel autoconf automake libtool yajl yajl-devel libcap-devel systemd-devel cni-plugins iptables-nft rpm-build meson golang-github-cpuguy83-md2man.x86_64
	#!/bin/bash

	# https://github.com/openshift/os/blob/master/docs/faq.md#q-how-do-i-determine-what-version-of-an-rpm-is-included-in-an-rhcos-release

	export REGISTRY_AUTH_FILE=~/.config/containers/auth.json

	if [ x"$#" != x"2" ]; then
	echo "$0 ocp_version package_name"
	exit 1
	fi
	[ori@localhost ~]$ cat pvc1.yaml
	apiVersion: v1
	kind: PersistentVolumeClaim
	metadata:
	name: cephfs-kernel
	spec:
	accessModes:
	- ReadWriteOnce
	resources:
	requests:
	sudo dnf update
	sudo reboot
	sudo dnf install https://cbs.centos.org/kojifiles/packages/centos-release-kmods/2/4.el9s/noarch/centos-release-kmods-2-4.el9s.noarch.rpm
	sudo dnf install kmod-btrfs-5.14.0.45-2.el9s.x86_64
	sudo modprobe btrfs
	sudo mkfs.btrfs /dev/vdb
	sudo mount /dev/vdb /mnt
	[core@worker-3 ~]$ sudo ovs-vsctl --columns=ofport find interface type=geneve options:remote_ip=172.16.13.108
	ofport : 7
	[core@worker-3 ~]$ sudo ovs-appctl ofproto/trace --ct-next new,trk br-int in_port=7,tun_id=0x15,tun_metadata0=0x10078,tcp,reg0=0x282,reg11=0xd,reg12=0x8,reg13=0x2d,reg14=0x42,reg15=0x1,metadata=0x16,vlan_tci=0x0000,dl_src=0a:58:0a:83:02:01,dl_dst=0a:58:0a:82:03:2e,nw_src=10.131.2.40,nw_dst=10.130.3.46,nw_ecn=0,nw_ttl=64,nw_frag=no
	Flow: tcp,reg0=0x282,reg11=0xd,reg12=0x8,reg13=0x2d,reg14=0x42,reg15=0x1,tun_id=0x15,metadata=0x16,in_port=7,vlan_tci=0x0000,dl_src=0a:58:0a:83:02:01,dl_dst=0a:58:0a:82:03:2e,nw_src=10.131.2.40,nw_dst=10.130.3.46,nw_tos=0,nw_ecn=0,nw_ttl=64,tp_src=0,tp_dst=0,tcp_flags=0

	bridge("br-int")
	----------------
	0. in_port=7, priority 100
	move:NXM_NX_TUN_ID[0..23]->OXM_OF_METADATA[0..23]
	-> OXM_OF_METADATA[0..23] is now 0x15