akash_rawal
@akash_rawal@lemmy.world
- Comment on Birds don't really fly, they are swimming through the air. 10 months ago:
1 a : to propel oneself in water by natural means (such as movements of the limbs, fins, or tail) b : to play in the water (as at a beach or swimming pool) 2 : to move with a motion like that of swimming : glide a cloud swam slowly across the moon 3 a : to float on a liquid : not sink b : to surmount difficulties : not go under sink or swim, live or die, survive or perish— Daniel Webster 4 : to become immersed in or flooded with or as if with a liquid potatoes swimming in gravy 5 : to have a floating or reeling appearance or sensation
www.merriam-webster.com/dictionary/swim
Apparently, swimming inherently requires a liquid.
- Comment on What do you use to mount encrypted drives on boot? 11 months ago:
TPM stores the encryption key against secure boot. That way, if attacker disables/alters secure boot then TPM won’t unseal the key. I use clevis to decrypt the drive.
- Comment on Should I move to Docker? 11 months ago:
Thank you… I had to learn kubernetes for work and it was around 2 weeks of time investment and then I figured out I could use it to fix my docker-compose pains at home.
If you run a lot of services, I can attest that kubernetes is definitely not overkill, it is a good tool for managing complexity. I have 8 services on a single-node kubernetes and I like how I can manage configuration for each service independent of each other and also the underlying infrastructure.
- Comment on Should I move to Docker? 11 months ago:
don’t create one network with Gitlab, Redmine and OpenLDAP - do two, one with Gitlab and OpenLDAP, and one with Redmine and OpenLDAP.
This was the setup I had, but now I am already using kubernetes with no intention to switch back.
- Comment on Should I move to Docker? 11 months ago:
I was writing my own compose files, but see my response to a sibling comment for the issue I had.
- Comment on Should I move to Docker? 11 months ago:
If one service needs to connect to another service then I have to add a shared network between them. In that case, the services essentially shared a common namespace regarding DNS. DNS resolution would routinely leak from one service to another and cause outages, e.g if I connect Gitlab container and Redmine container with OpenLDAP container then sometimes Redmine’s nginx container would access Gitlab container instead of Redmine container and Gitlab container would access Redmine’s DB instead of its own DB.
I maintained some workarounds, like starting Gitlab after starting Redmine would work fine but starting them other way round would have this issue. But switching to Kubernetes and replacing the cross-section connections with network policies solved the issue for me.
- Comment on Should I move to Docker? 11 months ago:
As someone who is operating kubernetes for 2 years in my home server, using containers is much more maintainable compared to installing everything directly on the server.
I tried using docker-compose first to manage my services. It works well for 2-3 services, but as the number of services grew they started to interfere with each other, at that point I switched to kubernetes.
- Comment on Need a rust version too. 11 months ago:
Rust: You get a horse and arrive at the castle within seconds but the horse is too old and doesn’t work with the castle. You remove the horse, destructure the castle and rescue the princess within seconds, but now you have no horse. While you’re finding a compatible horse and thinking whether you should write your own horse, Bowser recaptures the princess and moves her to another castle.
- Comment on Do you run a private CA? Could you tell me about your certificate setup if you do? 11 months ago:
I just uploaded to Github: github.com/akashrawal/nsd4k
I only made it for myself, so expect very rough edges in there.
- Comment on Do you run a private CA? Could you tell me about your certificate setup if you do? 11 months ago:
I run a crude automation on top of OpenSSL CA. It checks for certain labels attached to kubernetes services. Based on that it creates kubernetes secrets containing the generated certificates.
- Comment on Dell Optiplex turning into turbine after load 11 months ago:
It might be a failing fan. I have an Intel nuc whose fan started sounding like an air raid siren, so I took the fan out, drilled a hole into its bearing and added coconut oil into it. It is working fine till this date, but buying a new fan is probably better.
- Comment on Anyone else wants a one box replacement to a switch attached to USB NICs? 1 year ago:
It is for a challenge, the goal is to build a cloud with workload decoupled from servers decoupled from users who’d deploy the workload, with redundant network and storage, no single choke point for network traffic, and I am trying to achieve this with a small budget.
- Comment on Anyone else wants a one box replacement to a switch attached to USB NICs? 1 year ago:
The level1 video shows thunderbolt networking though. It is an interesting concept, but it requires nodes with at-least 2 thunderbolt ports in order to have more than 2 nodes.
- Comment on Anyone else wants a one box replacement to a switch attached to USB NICs? 1 year ago:
If redundant everything is important then you need to change your planning toward proper rack servers and switches I ain’t got that budget man.
- Comment on Anyone else wants a one box replacement to a switch attached to USB NICs? 1 year ago:
Yes, the entire network is supposed to be redundant and load-balanced, except for some clients that can only connect to one switch (but if a switch fails it should be trivial to just move them to another switch.)
I am choosing dell optiplex boxes because it is the smallest x86 nodes I can get my hands on. There is no pcie slot in it other than m.2 SSD slot which will be used for SSD.
- Comment on Anyone else wants a one box replacement to a switch attached to USB NICs? 1 year ago:
I plan to have 2 switches.
Of course, if a switch fails, client devices connected to the switch would drop out, but any computer connected to both switches should have link redundancy.
- Comment on Anyone else wants a one box replacement to a switch attached to USB NICs? 1 year ago:
There would be some quality-of-life improvements like being able to replace a switch without pulling down entire cluster, but it is mostly for a challenge.
- Submitted 1 year ago to selfhosted@lemmy.world | 30 comments
- Comment on Steal What Is Stolen 1 year ago:
That error doesn’t occur if you only ever copy the code as-is taps head
- Comment on Forgetting the basics look like this. 1 year ago:
Together we can make this happen!
- Submitted 1 year ago to programmer_humor@programming.dev | 7 comments
- Comment on Uptime goals 1 year ago:
Gosh, if I ever get into the business of writing software for spacecraft with long duration missions, I have to test for such cases.
- Submitted 1 year ago to programming@programming.dev | 0 comments
