Notes List - Page 2

Building a RabbitMQ server

June 10, 2022 | Category: Message Brokers

Steps for installing on Debian 11 from the Cloudsmith repos

Following the docs here

apt update
apt install curl gnupg apt-transport-https -y

Installing the signing keys

curl -1sLf "https://keys.openpgp.org/vks/v1/by-fingerprint/0A9AF2115F4687BD29803A206B73A36E6026DFCA" | gpg --dearmor | tee /usr/share/keyrings/com.rabbitmq.team.gpg > /dev/null

curl -1sLf https://ppa1.novemberain.com/gpg.E495BB49CC4BBE5B.key | gpg --dearmor | tee /usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg > /dev/null

curl -1sLf …

Building a PowerDNS server

Jan. 21, 2022 | Category: Linux | Tags: DNS

Using

Debian 11
PowerDNS 4.6

Will use postgres to store the records.

Installing postgres

apt install postgresql postgresql-client postgresql-contrib

Changing the password for the postgres database user:

su - postgres
psql -d template1 -c "ALTER USER postgres WITH PASSWORD 'PostgresPassword';"

Adjusting /etc/postgresql/13/main/pg_hba.conf:

# To allow remote connection
host    all …

Linux Desktop through RDP and polkit access blocking

Jan. 30, 2021 | Category: Linux

When RDP-ing to a Linux Desktop (KDE) there are a lot of prompts for access blocked to some services.

Using these policies to convice polkit to allow this access

/etc/polkit-1/localauthority/50-local.d/45-allow-colord.pkla

[Allow Colord all Users]
Identity=unix-user:*
Action=org.freedesktop.color-manager.create-device;org.freedesktop.color-manager.create-profile;org.freedesktop.color-manager.delete-device;org.freedesktop.color-manager.delete-profil$
ResultAny=yes
ResultInactive=auth_admin
ResultActive=yes

/etc/polkit-1/localauthority/50-local.d/46-allow-update-repo.pkla …

Building a Kubernetes 1.18 multi-master cluster - p02 (LB and Ingress)

Sept. 29, 2020 | Category: Virtualization | Tags: Kubernetes

Installing MetalLB

Configmap for metallb:

metallb-configmap.yaml

apiVersion: v1
kind: ConfigMap
metadata:
  namespace: metallb-system
  name: config
data:
  config: |
    address-pools:
    - name: rpi-kube-pool-1
      protocol: layer2
      addresses:
      - 192.168.122.190-192.168.122.209

kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.9.3/manifests/namespace.yaml
kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.9.3/manifests/metallb.yaml
kubectl create secret generic -n metallb-system memberlist --from-literal …

Building a Kubernetes 1.18 multi-master cluster - p01

Sept. 29, 2020 | Category: Virtualization | Tags: Kubernetes

Overview

This setup uses:

Kubernetes 1.18
eight servers running Ubuntu 20.04 LTS
three master nodes
five worker nodes
all servers have a root drive and a data drive
no swap drive

Setting up the servers

All servers are Ubuntu 20.04 LTS.

/etc/netplan/00-installer-config.yaml

kube-01 (master)

network:
  ethernets:
    eth0: …

Creating certificates with OpenSSL

Feb. 25, 2018 | Category: Linux | Tags: Certificates

Some steps to create certificates using OpenSSL - self-signed or singned by a CA.

Creating the conf File used for creating the csr

srv1_tstlb_cert.conf:

[req]
distinguished_name = req_distinguished_name
req_extensions = v3_req

[req_distinguished_name]
countryName = Country Name (2 letter code)
countryName_default = CA
stateOrProvinceName = State or Province Name (full name) …