pstadler

Although this is a valid question, it doesn't apply here. See, I try to teach myself something new every year, whether it's a new programming language, platform or whatever else.

It was curiosity that turned my non-existent infrastructure into having a cheap, small-scale Kubernetes cluster ready for my shenanigans.

My tiny cluster gives me great freedom. Setup is fully automated. When a new k8s release comes around, I simply tear down my old cluster and ramp up a new one in mere minutes. If I want to deploy a service or application, all I need to do is to write a couple of manifests and roll all the moving parts out. Hassle-free - no SSH, no additional costs, no accounts, no 3rd-party services, persistent storage and TLS certificates out of the box.

Currently, a Unifi controller is the only long-term resident on my cluster; other services and projects come and go. Besides that, the following agents are deployed as Kubernetes pods: Datadog (free tier) for basic monitoring & alerting and Papertrail ($5-10/month) which acts as a centralized log sink for all my hosts, NAS and networking gear.

Indeed, see https://github.com/hobby-kube/guide/issues/6

Edit: I think this was you.

Great article!

I‘m running a full-featured three node cluster for less than $10/month on Hetzner Cloud. This kind of setup requires a little more effort, but it can be fully automated and you learn a couple of things about Kubernetes on the way. I published and maintain this guide[1], including provisioning using Terraform and a bunch of example manifests to get you started.

[1] https://github.com/hobby-kube/guide

What are you talking about? There’s https://amplifi.com/ for, let’s say, less sophisticated home installations.

Can‘t find the JavaScript connection. Guess you‘re simply trying a little too hard trolling around.

Edit: To all the Nulls, thanks for the downvotes.

Why has the been banned from the homepage and marked as dupe?

You sound like you‘re new to this business.

Thanks for the hint, I didn‘t know that. Related issue: https://github.com/hobby-kube/guide/issues/47

Even though I fully agree with you, running a little 3 node cluster just for fun is amazing. Thanks to Rook and an Nginx ingress controller with kube-lego, I’m able to deploy applications leveraging distributed storage and getting tls secured endpoints without a single ssh session. This, in my point of view, is absolutely powerful.

Shameless plug, I‘ve been working on a project explaining how to run small scale clusters in the cloud for more than a year: https://github.com/hobby-kube/guide

Good to see WireGuard getting some coverage. I‘ve been embracing it from the very beginning for small scale Kubernetes clusters running on virtually any cloud provider lacking isolated private networking[1]. It‘s been running stable in different environments for more than a year; set up and forget. Unlike similar software it‘s also dead simple to configure.

Apparently, Linus wants it in the Kernel[2].

[1] https://github.com/hobby-kube/guide/blob/master/README.md [2] https://lkml.org/lkml/2018/2/13/752

Quite happy about the suggestions for similar APIs here. They’re somehow hard to find in the forest of overpriced professional services.

I‘m using a different Yahoo endpoint with ticker.sh[1], which is still functioning at this time. Maybe there‘s soon the need to find yet another alternative after the Google endpoint stopped working recently.

[1] https://github.com/pstadler/ticker.sh

That's exactly how I set up my own cluster running outside of well integrated and isolated platforms (AWS, GCE, you name it). The experiences gathered during this process are available in the shape of a guide, including Terraform modules for fully automated provisioning:

https://github.com/hobby-kube/guide

You might enjoy this guide[1]. It explains how to deploy and run a secure, fully functional Kubernetes cluster outside platforms like GCE or AWS. Provisioning and example manifests are provided as well.

[1] https://github.com/hobby-kube/guide

You might enjoy this guide[1] to get started. It discusses how to run a cluster on virtually any cloud provider and offers fully automated provisioning using Terraform[2].

[1] https://github.com/hobby-kube/guide [2] https://github.com/hobby-kube/provisioning

Same here, I left PHP during the early 5.x releases. Unfortunately, I inherited some Symfony applications recently. Unfortunately, because the whole stack is terribly slow and held together by an insane amount of YAML and XML configuration files. Add "annotations" (that are parsed out of doc blocks and compiled into another bunch of PHP files) to the soup and party like it's 1998. That pile of classes you end up with will serve quite some traffic behind a good caching layer, typically in the shape of a well configured Varnish instance. Needless to say that runnig this on your own machine during development will not exactly give you the excitement of working on a fast, modern platform. Rest assured, "print_r() and die()" is still a thing.

Besides that, memory management is mediocre; just DON'T do long running processes with PHP. You want to enable a module? Good luck finding the right php.ini. Keeping a persistent connection pool to a database or similar is generally hard and intransparent, due to the fact that each instance serves exactly one request, but hey, at least PHP "automatically recovers" from errors...

I left for good.

Thanks for that. This is one of the few comments in this thread that truly captures the idea behind this guide.

I've grown quite a thick skin since I exposed the first project of mine to a wider audience. But still, it's feedback like yours that keeps me going.

¯\_(ツ)_/¯

This is great input and definitely something worth considering.

Related issue on GitHub: https://github.com/hobby-kube/guide/issues/6

There are indeed many options for automated setups. I did my first steps with Kubernetes on GKE, later followed the CoreOS guide to set it up on bare metal. This guide is for creators, a written form of my lessons learned. It should enable people to run secure clusters wherever they want.

In case you missed it, there's a repository[1] in the same org which offers fully automated provisioning using Terraform.

[1] https://github.com/hobby-kube/provisioning

I'm running a fully functional Kubernetes cluster on VC1S servers (x86) using this guide[1].

In case you're stuck compiling Kernel modules or running Docker, check out how it's done in the provisioner[2] that comes with the guide.

[1] https://github.com/hobby-kube/guide [2] https://github.com/hobby-kube/provisioning

Disclaimer: I'm the author of this project

The same is true for AMD's new Ryzen CPUs, ECC support is enabled. You still need a suitable motherboard though.

You need a compatible motherboard and CPU.

To mitigate the likeliness of damage during transit, it's recommened to use ECC memory with ZFS. I had FreeNAS running on a system with a faulty memory module. ZFS correctly discovered damage in random files I just transferred over. Luckily, it wasn't too late to replace the bad module and repeat the transfer.

Lessons learned:

- Run MemTest86 on hardware before using it as storage

- Use an FS that does checksums

Unfortunately, the latter doesn't seem to apply to APFS.

Shameless plug. I published a little guide some months ago, on how to use GPG with keybase.io to sign commits.

Link: https://github.com/pstadler/keybase-gpg-github

Discussion on HN: https://news.ycombinator.com/item?id=12289481

Yes, be careful, your jails won't run on Corral.

I've just migrated yesterday and managed to replace all my jails with Docker containers, although the road was a bit bumpy, at least when it comes to the containers UI which is buggy as hell currently.

All in all I'm delighted. The CLI is great, the UI buggy but definitely better, and no more jails but proper containers instead.

Congratulations to the team and thank you for delivering.

I'm using tinc for that. It's much less hassle compared to securing every single connection between your hosts.

Looking forward to not care about this anymore. Secure private networking out of the box is now all that's left for me to stay on DO.

Shameless plug: I wrote a little guide[1] how to use keybase.io and GPG to sign git commits. It was posted on HN a while ago[2].

  "Ironically, only the first commit is signed."

[1] https://github.com/pstadler/keybase-gpg-github [2] https://news.ycombinator.com/item?id=12289481

Same here. Also my down arrow is really loud on release. Scheduled an appointment with Apple to sort these issues out.

When I look at the black screen from a wide angle (either from left or right) the surface looks uneven. This doesn't have any impact on picture quality though. Does somebody know whether this is due to the anti-glare coating?

Otherwise I'm really happy with my non-Touch Bar 13" model (i7, 16GB).

Thanks for posting this here.

Please note that this was initially written as a reference for myself, being relatively inexperienced with the keybase client and gpg tooling in general. There are certainly different ways to accomplish the same and you don't have to use keybase, but I wanted to. Please keep this in mind.

Ironically, only the first commit is signed.

I'm using Hammerspoon for fast space switching, placing/resizing/focussing windows on a screen, reconnecting to current wifi network (for the flakey company network), caffeinate (prevent from sleep) and battery notifications (i.e detect when plug gets disconnected).

Here's my configuration: https://github.com/pstadler/dotfiles/blob/master/hammerspoon...