🧑‍💻 Funky Penguin (Page 2)

🧑‍💻 Funky Penguin

Sign in Subscribe

Upping your 2FA SSH game

Upping your 2FA SSH game

I just read this interesting tutorial by @lizthegrey on adding 2 factor auth (2FA) to SSH, using either TOTP (time-based one-time password) or hardware auth tokens. Hi! I’m Liz, a Developer Advocate at honeycomb.io, and I spent my first weeks at the company doing security hardening of our

Continuous Integration for helm charts

Continuous Integration for helm charts

I’ve recently been working on a comprehensive helm chart for docker-mailserver. Since it’s a complicated chart with some logic re which features are in/out, I thought it’d be helpful to setup some continuous integration (CI), so that I can have CI test for valid syntax, as

We care less about trends than we used to

We care less about trends than we used to

So according to this study, our global “attention span” has decreased, as the amount of information available to us has increased. I’m not convinced it’s a bad thing though - if there’s more information available, mightn’t these results also suggest that we’re more selective, and

Avoid deploying GitLab Runner application into Kubernetes (use helm instead)

Avoid deploying GitLab Runner application into Kubernetes (use helm instead)

I’ve recently been reading Connecting GitLab with a Kubernetes cluster , and I noted the following: GitLab Runners have the privileged mode enabled by default, which allows them to execute special commands and running Docker in Docker. This functionality is needed to run some of the Auto DevOps jobs. This

Blogging from iOS to Jekyll using Ulysses

Blogging from iOS to Jekyll using Ulysses

This is a bit meta.. a blog post about using Jekyll with Ulysses, written on iOS using Ulysses, and posted onto a Jekyll blog. Anyway, someone geekier than me has documented the process really well - I’m just proving that it works with my own implementation. Quoted from A

Summary of AWS Application Integration services circa Feb 2019

Summary of AWS Application Integration services circa Feb 2019

In preparing to take the “AWS Certified Solutions Architect - Professional” exam, I found myself reading through the whitepapers and reference architectures. The “Overview of Amazon Webservices” whitepaper describes the 140 (!) currently available AWS services, so I thought I’d note down below my own description of each service and

Summary of AWS Analytics services circa Feb 2019

Summary of AWS Analytics services circa Feb 2019

In preparing to take the “AWS Certified Solutions Architect - Professional” exam, I found myself reading through the whitepapers and reference architectures. The “Overview of Amazon Webservices” whitepaper describes the 140 (!) currently available AWS services, so I thought I’d note down below my own description of each service and

Building a 'free' AWS site-to-site VPN using OpenVPN and EdgeRouter X

Building a 'free' AWS site-to-site VPN using OpenVPN and EdgeRouter X

I’ve been trying to upskill myself on AWS, in anticipation of taking on a “Cloud Architect” role with my new employer. I decided to setup a site-to-site VPN between my Virtual Private Cloud (VPC) in AWS, and my home network. The VPN will allow me to deploy a monitoring

The Phoenix Project - A DevOps Allegory

In 2016, I read The Phoenix Project: A Novel About IT, DevOps, and Helping Your Business Win. Having recently applied for a role which (tongue-in-cheek) requires that applicants have read the book, I thought I’d (tongue still in cheek) publish my Kindle notes from my original first-pass. TL;DR

A simple, free, load balancer for your Kubernetes Cluster

A simple, free, load balancer for your Kubernetes Cluster

This is an excerpt from a recent addition to the Geek’s Cookbook, a design for the use of an external load balancer to provide ingress access to containers running in a Kubernetes cluster. For implementation details, see this loadbalancer recipe. Because we’re Cloud-Native now, it’s complex to

Why I chose Kubernetes over Docker Swarm

Why I chose Kubernetes over Docker Swarm

In Funky Penguin’s Geek Cookbook - Kubernetes Start, I introduced Kubernetes concepts with an explanation of why I chose Kubernetes for running cloud workloads: Why would you want to use Kubernetes for your self-hosted recipes over simple Docker Swarm? Here’s my personal take.. I use Docker swarm both

Using a MQTT broker with LetsEncrypt SSL and HomeAssistant or DAFANG CFW

Using a MQTT broker with LetsEncrypt SSL and HomeAssistant or DAFANG CFW

After setting up my MQTT Broker in Kubernetes on GKE, I needed to connect my Home Assistant to it, as well as my Xiaomi DaFang/XiaoFang custom-firmware-enabled IP cameras. This post describes the requisite steps to connect both to the SSL-enabled MQTT broker. Home Assistant All I needed to do

Kubernetes ConfigMap keys have to match subpaths

Kubernetes ConfigMap keys have to match subpaths

I use Kubernetes ConfigMaps to expose static configuration data (such as a configuration or password file), where: 1. I’m OK with the config file being read-only within the container, and.. 2. I don’t want to bother using a (minimum 1Gb) persistent disk for a few scrawny files. I’

Beware the hidden newlines in Kubernetes secrets

Beware the hidden newlines in Kubernetes secrets

TL;DR When creating secrets for Kubernetes, always use echo -n to create the files you intend to import as secrets using kubectl create secret. The longer story I’ve been working on a new series of Geek’s Cookbook recipes, utilising my new favorite container orchestrator, Kubernetes. In building

Workaround blocked attempt to grant extra privileges on GKE due to RBAC

While attempting to deploy an awesome set-it-and-forget-it volume snapshot solution for my GKE cryptocurrency mining pool empire, I stumbled across the following error when trying to create the necessary RBAC ClusterRoleBinding: $ kubectl apply -f rbac.yaml serviceaccount "k8s-snapshots" unchanged clusterrolebinding.rbac.authorization.k8s.io "k8s-snapshots" configured

How I removed a file from my git repo history

How I removed a file from my git repo history

While making my most recent commit to my blog, I discovered (after the fact) that I’d accidentally committed a screenshot from a customer project, into my /images/ subdirectory. While not a big deal (not as if it was a password file!), it’s still an embarrassing bungle, so I

In appreciation of bare (naked) double-D(ashes)

In appreciation of bare (naked) double-D(ashes)

Today I was trying to grep through a directory structure full of PHP code, looking for a function which, inexplicably, returned -6. Grepping for anything with a dash as not as easy as one would think, since grep assumes the - indicates a command argument, and just pauses, waiting for

OpenStack LBAASv2 failed connection debugging

I deployed Load-Balancer-As-A-Service (LBAAS) in my lab OpenStack deployment early on, and it worked (setup in Horizon) as advertised (load-balancing inbound HTTP connections to multiple docker swarm nodes), until I broke the stack by fiddling with MTU settings. After this breakage and subsequent repair, the LBAAS didn’t work properly.

GPU transcoding with Emby / Plex using docker-nvidia

GPU transcoding with Emby / Plex using docker-nvidia

Recently I helped a Patron to setup an instance of my Emby docker-swarm recipe, but with the extra bonus of having all transcoding done using his GPU. Note that this would work equally well for Plex, or any other “Dockerized” application which would, technically, support GPU processing. What’s the

Should you do microcode updates?

Should you do microcode updates?

A colleague and I were discussing my recent rant re a RedHat-issued kernel update breaking VMs on all my AMD systems. Notwithstanding the fact that my RedHat bug report about the issue is set to “private” and Bugzilla (1990 called wants its UI back, to hang out with Miranda IM)

Wife-friendly script to transfer media to USB from linux server

Wife-friendly script to transfer media to USB from linux server

My home media is on a Plex installation running on a headless server in my (detached) home office, and my wife recently arranged to copy some content onto a USB drive for a friend. To make it easier for her to transfer the media to the USB drive, I wrote

What is TurtleCoin and why do I care?

What is TurtleCoin and why do I care?

Some weeks ago I stumbled across TurtleCoin, while researching new cryptocurrencies to mine, on cryptunit.com. I rolled my eyes at the stupidity of the cryptogeeks, and moved on to mine some RavenCoin, which r/gpumining had told me was the new hotness. As I returned to cryptounit over the

Post-mortem review : DayOne sync outage and private data exposure

Post-mortem review : DayOne sync outage and private data exposure

I’m a long-term user of Day One, the premier journaling app for iOS/MacOS. In 2017, Day One introduced end-to-end encryption on user journals (which I use), to protect the journal data synced with their proprietary service (that became mandatory after Dropbox sync was dropped in v2) This morning,

AutoPirate : SABnzbd and friends in a docker swarm

AutoPirate : SABnzbd and friends in a docker swarm

In 2015, I published a docker-compose stack I’d developed to automate media discovery and management with SABnzbd and related tools (Radarr, CouchPotato, etc). I’ve just finished turning this stack into a recipe in my Geek’s Cookbook - here’s the introduction: Autopirate Once the cutting edge of

The geekiest thing I've done in 2017

The geekiest thing I've done in 2017

I was recently asked what the geekiest thing I’ve done recently is. My response: Ever. That’s a hard question. Probably the most challenging has been building an HA OpenStack cluster. The geekiest though, would be.. I use Home Assistant for my home automation platform. I bought a Xiaomi