nerdculture.de is one of the many independent Mastodon servers you can use to participate in the fediverse.
Be excellent to each other, live humanism, no nazis, no hate speech. Not only for nerds, but the domain is somewhat cool. ;) No bots in general. Languages: DE, EN, FR, NL, ES, IT

Administered by:

Server stats:

1.2K
active users

#TalosLinux

0 posts0 participants0 posts today
Continued thread

Here's the interesting thing about that, though: It is *not* currently possible to run an Elemental downstream cluster in Harvester, but it should be possible to deploy a TalosLinux cluster on Harvester, though not as a Rancher downstream cluster, by provision nor adoption, since Rancher agent very much assumes you're running k3s/RKE2. But you could just spin up Talos VMs in Harvester with bridged networking, etc, and it should work.

I just added a #TalosLinux 1.9.3 (#Talos) #Vagrant box to the #ARM64 collection. This allows you to run Talos on your #AppleSilicon #MacBook. This is control-plane only, but you can patch the manifest to also run workloads.

You can find it right here:
Image: portal.cloud.hashicorp.com/vag
Config: cdn.gyptazy.com/files/os/talos
All #ARM64 boxes: gyptazy.com/vagrant-images-for

i'm very close to finishing my tofu/packer overhaul. the goals are twofold:

one: to configure secure boot and tpm based disk encryption, which should provide trusted boot

two: to reorganize the code as almost everything was in two huge tf files

when i'm done, i will update my public pve-talos repo for anybody to fork for their purposes

Continued thread

Mounting additional encrypted disks on #TalosLinux is not really much fun. But if you beat it hard enough with a stick, it'll work. I present to you: fstab/crypttab as a container!

git.shivering-isles.com/-/snip

It's still a bit rough around the edges, and currently expects some of the tools to be present on the host, but I'm sure it only gets better from here. Why bother configuring volume mounts on your host when you can just do it in a container?

GitLabMounting encrypted disks on Talos ($33) · Snippets · GitLabGitLab Community Edition

Apparently etcd is configured to prefer 10/8 for peer addresses and made a userspace IP network on that subnet (specifically 10.255.255/8), making wireguard configs on the right addresses and dooming etcd to prefer 10/8 addresses. Split brain. Please help #etcd #k8s #taloslinux