Blog
- Content-Defined Chunking (CDC) Results for NAR Storage
I’ve been benchmarking Content-Defined Chunking (CDC) to optimize storage for our NAR files. The goal was to maximize deduplication by decompressing the source NARs before chunking, then re-compressing the unique chunks …
- Disaster Recovery: Talos etcd Corruption & Kyverno CNI Deadlock
Incident Summary: Talos Control Plane & CNI Deadlock Overview During a physical disk migration for the TrueNAS VM (running on the Proxmox bare-metal host), severe I/O latency spikes caused a cascading failure across the …
- enable_audit.sh
#!/usr/bin/env bash set -euo pipefail NAMESPACE="mastodon" SELECTOR="app.kubernetes.io/name=mastodon" echo "🔍 Finding Mastodon pods and enabling Cilium Policy Audit Mode..." # 1. Loop through pod names directly for …
- FortiGate - Export certificate with private key
FortiGate - Export certificate with private key Problem I recently purchased a wildcard certificate based on a CSR generated by FortiGate and uploaded the certificate to it. It is named wildcard-domain-tld. We are moving …
- Home Assistant remove all rtl_433 devices
Home Assistant remove all rtl_433 devices Home assistant does not have a way to mass delete devices; I want to delete all rtl_433 devices (there are many of them). Code async function …
- Install ArchLinux from within NixOS
Introduction Note This is more of a journal entry (of a self-challenge) than a guide. I call my device Hercules and my ZFS pool is named olympus. If you decide to follow this guide, make sure to reference the sources at …
- Install Debian or Ubuntu from within NixOS
Introduction Note This is more of a journal entry (of a self-challenge) than a guide. I call my device Hercules and my ZFS pool is named olympus. If you decide to follow this guide, make sure to reference the sources at …
- Kubernetes - List Abnormally Terminated Pods Across All Namespaces
Problem I want to get a list of all pods that have terminated abnormally along with their restart reason and count. Solution Run the following command: kubectl get pods --all-namespaces -o …
- Migrate home-assistant from SQLite to PostgreSQL
Migrate home-assistant from SQLite to PostgreSQL Problem I want to migrate home-assistant from SQLite to PostgreSQL. Solution The migration involves the following steps: Create a PostgreSQL database following PostgreSQL …
- NixOS - ZFS - No space left on device
Problem My system ran out of space, and I am unable to run sudo nix-collect-garbage -d. ❯ sudo nix-collect-garbage -d removing old generations of profile /nix/var/nix/profiles/per-user/root/channels error: opening lock …
- Post-Mortem: Recovering a Corrupted Talos etcd Cluster
The Incident During a recent physical disk migration for a TrueNAS VM running on Proxmox, the resulting I/O latency spikes and storage disruption caused a massive ungraceful state change. This led to a complete loss of …
- Post-Mortem: The Admission Webhook CNI Deadlock
The Incident Following a successful bare-metal restore of a Talos etcd cluster, the control plane was healthy, but the entire pod network remained offline. Cilium (running in strict kube-proxy replacement mode) was …
- PostgreSQL - Create Role for a Database
PostgreSQL - Create Role for a Database Problem I want to create a role that has all permissions on a database (owner of such database) so the application can do whatever it needs within the db. Solution First PostgreSQL …
- PostgreSQL - Create UTF-8 Database
PostgreSQL - Create UTF-8 Database Problem I want to create a new database ensuring encoding is set to UTF-8. Solution CREATE DATABASE "db_name" WITH ENCODING = 'UTF8'; Related PostgreSQL - Create Role for a Database
- PostgreSQL - psql using URI
Problem I have a PostgreSQL URI for one of my applications, a URI such as postgres://username:password@hostname:port/database-name and I need to connect to the database from the command-line Solution I used to break the …
- PostgreSQL - Read-Only PSQL Session
Problem I want to connect to a database ensuring that I cannot perform any write operations Solution Connect to a PostgreSQL server with psql or your graphical interface. This guide has only been tested with psql. …
- Proxmox VM - Ensure SCSI0 in Boot Order for Talos OS
Proxmox VM - Ensure SCSI0 in Boot Order for Talos OS Symptom After installing Talos Linux to a Proxmox VM's SCSI disk (e.g., scsi0) and removing the installation ISO, the VM may fail to boot, potentially getting stuck in …
- ProxmoxVE - Add Certificate via ACME
ProxmoxVE - Add Certificate via ACME Problem I need to get a valid TLS certificate for my ProxmoxVE so browser don't complain. Solution The server certificate can be configured to use ACME to install a certificate. …
- ProxmoxVE - Boot without starting any VM
ProxmoxVE - Boot without starting any VM Problem I want to boot ProxmoxVE without booting any guest in order to perform a maintenance task. Solution During boot interrupt systemd (proxmox-boot) so it does not boot Press …
- ProxmoxVE - Shutdown timeout
Problem In order to give important VM time to shutdown properly, I need to define shutdown timeout for each important VM. The default timeout is 180s Solution The timeouts are defined per VM and not per Group. Since …