Why do I do this: iwd: simplifying WiFi management It has been nearly 13 years since Jeff Garzik proclaimed that Linux was "proving its superiority in the area of crappy…lwn.net > iwd will be the only program that performs WiFi scanning on systems where it is running; that differs from systems using wpa_supplicant, where higher-level software must also scan for networks. With iwd, that work has all been pushed to a single level where good decisions can be made. …

We’re going to create a cross-namespace certificate with clusterIssuer of cert-manager, which simply handles all the required operations for obtaining, renewing and using SSL/TLS certificates. Cert-Manager is able to talk with various certificate authorities (or CAs), like: Let’s Encrypt, HashiCorp Vault, and Venafi, and issue valid certificates for you automatically…

Objective Configure protected-EAP with MSCHAPv2 encryption on Fedora Linux natively installed on MacBookPro16,2 hardware Environment Specification OS release > cat /etc/*release* NAME="Fedora Linux" VERSION="35 (Workstation Edition)" Kernel > uname -a Linux mbp 5.16.8-200.mbp.fc33.x86_64 #1 SMP PREEMPT Mon Feb 14 06:11:37 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux Hardware > dmidecode | grep -i "system…

Background — Recently I installed Fedora 35 on a MacBookPro 16,2 and want to specifically manage the update and installed packages with this customized kernel Commands Installed Installed packages sudo dnf list installed | wc Check if iwl* installed # All iwl* firmware is unnecessary on MacBookPro sudo dnf list installed | grep iwl Upgrade and Update …

Background In December 2021, I successfully made Ubuntu 20.04 installed on MacBook Pro 16,2. Unfortunately several issues were observed, such as bluetooth, wifi-firmware, nautilus and nemo file managers very poor performance or intermittently crashed. I even tried Manjaro with no luck (installed but failed to boot). Then I decided to try…

For Kubernetes production, a separated etcd cluster with 3 nodes, outside of Kubernetes is preferred. Then a disaster recovery plan for just etcd is required for production operation. TL;DR Backup etcd in a Kubernetes cluster Get on the node where etcdctl is installed and execute with SSL sudo etcdctl --key /etc/ssl/etcd/ssl/admin-node1-key.pem --cert /etc/ssl/etcd/ssl/admin-node1.pem snapshot save snapshot.db

. Background Several months ago, in a project, I was trying to deploy a Kubernetes cluster with kubespray. Considering to build an high available cluster with multiple master nodes and separate etcd (not in container but directly on file system), an haproxy can be a good option. I built my own…

Objective Install and configure 2 Nginx web services, that do high availability, load balancing and proxy (forward) in-bound request to internal application (running inside of Kubernetes cluster) Environment Legend: external IP = public internet IP Architecture Diagram The active-passive architecture. The Active-active is described later in this doc)

Really recommend a song from Red Dead Redemption II, which is called: THAT’S THE WAY IT IS, composed by Daniel Lanois. The song can be found at https://www.youtube.com/watch?v=HjYLY3BGDY4 I downloaded it and tried to share this beautiful song with my friends and family, in mpeg3 format. This is the command on Linux to extract mkv to mpeg3 with ffmpeg (love this open-source powerful command on Linux)