FeaX's blog - A personal blog about tech, 3d printing and more...

Isolating DevOps changes using ephemeral infra environments

This blog post describes DevOps' ephemeral environments, a way for DevOps to create safe environments to test changes to the cluster.

Bootstrapping Terraform GitHub Actions for AWS

Bootstrapping Terraform GitHub Actions for AWS

Bootstrapping all Terraform required components to run and manage itself in GitHub Actions for AWS.

Creating a golden image with Packer

Packer is a tool to automate the build process for machine images. I've started looking into Packer to generate a golden image. Using a golden image lets me quickly set up a fresh development environment without keeping the EC2 instance for long periods and thinking about configuration drift.

Write-up of CVE-2021-36782: Exposure of credentials in Rancher API

A write-up of CVE-2021-36782. This vulnerability exposes Rancher's kontainer-engine's ServiceAccountToken, which can be used for privilege escalation.

From Terraform monolith to modules

Moving config from a large monolith config to multiple modules. I'm looking into taking run order control and errors I ran into.

Efficiently scaling RKE with Terraform

We've set up a quick start setup with one of everything in the previous blog post. One of everything is excellent for a quick test or check, but you might want to up those rookie numbers. In this blog post, we'll make it scale very easily.

Rancher with Terraform on CloudStack

I want to automate everything I can. Terraform is one of the automation tools I've checked out in the past but not thoroughly explored yet. After playing with AWS and Terraform for a while, I became worried I'd let some resources run wild, and they'

Using custom providers in Terraform

The RKE provider that I'd like to use is some versions behind. It seemed easy enough to update the dependency, but I struggled to get this custom RKE provider working without having to upload it somewhere. The documentation didn't seem to be obvious enough. After searching

Reliability DRBD

In my last post, I showed that DRBD could be used diskless, which effectively does the same as exposing a disk with iSCSI. However, DRBD can do more than just become an iSCSI target, and its most known feature is replicating disks over a network. This post will look into

Diskless DRBD

I've been using DRBD for quite some time now. When I started as a Linux system administrator at my first real job, DRBD was this RAID1 high available storage thing that was magic to me. In combination with PiranHA, which retired ten years ago, I built a setup

Hacking friends in Pokemon Yellow

Some months ago, the source code of a game I and many others played as a kid was leaked. The game is written in assembly, and people have already reverse-engineered the original game. Still, I was very curious about the original comments in these source files. After reading some source

Finding (performance) issues in PHP using GDB

Has it ever happened to you when a specific web request keeps loading and loading? Can't figure out where the code is crashing into a segfault? Say no more. You can use a tool called GDB for various complex things. It's a debugger for binary applications

Refreshing the Rancher cluster registration token

There may be a time when you'll want to refresh the "clusterregistrationtoken" or CRT for short. You can't do this in Rancher, as far as I know. First, let's see where this token is saved. marco@cp1:~$ kubectl get clusterregistrationtoken.management.cattle.

Setting up a development version of Rancher

After encountering a minor issue with Rancher's latest version, I decided to check if I could find more information about this problem by digging in the source code, adding some logging to the areas around the relevant parts. To start investigating this issue, I needed a testing environment

Locales in kubectl exec

When writing äëöüç in after you've entered a container with "kubectl exec -it x -- bash" you'll probably notice the characters show no response. You can easily fix this by redeploying the pod with the following environment variables: env: - name: LC_ALL value:

K8s cheatsheet

Get all namespaces with Rancher project ID: kubectl get namespaces -o custom-columns=NAME:.metadata.name,PROJECTID:.metadata.labels."field\.cattle\.io/projectId" --sort-by .metadata.labels."field\.cattle\.io/projectId" Get all resources connected to certain namespace kubectl api-resources --verbs=list --namespaced -o name | xargs -n 1

Leaking FEP in Anycubic Photon Mono SE

This chirstmas came with a bad suprise for my printer. After a failed print I was pouring out the leftover resin, and found the LCD covered in a layer of cured resin. After doing some research the layer should be hard to remove, but removable. A new display on AliExpress