Tom Alexander
b17a5f352d
Sanitize network interface names in jail_netgraph_bridge.bash script.
2023-07-01 16:41:41 -04:00
Tom Alexander
db17b87cb8
Enable NTP on Linux.
2023-07-01 16:41:40 -04:00
Tom Alexander
f667f50f84
Only put VM disk metadata into the ARC.
...
The guest VMs should have their own filesystem cache so I see no need to pollute the host's cache.
2023-07-01 16:41:40 -04:00
Tom Alexander
8346065c6f
Add a NFS server jail for persistent volumes.
2023-07-01 16:41:40 -04:00
Tom Alexander
ab48b1e01f
Re-enable the vulkan renderer on linux.
...
It is no longer crashing on linux.
2023-07-01 16:41:40 -04:00
Tom Alexander
eb547bf1bf
Add an endless loop to poudboot to rebuild at intervals.
2023-07-01 16:41:40 -04:00
Tom Alexander
9d16e1d42e
Add locking to poudboot.
2023-07-01 16:41:40 -04:00
Tom Alexander
0e86dac2ac
Add support for custom repos in FreeBSD.
2023-07-01 16:41:40 -04:00
Tom Alexander
edfdb203a0
Only NAT internal DNS requests.
2023-06-20 13:05:31 -04:00
Tom Alexander
310fea89ae
Fix internal access to DNS server.
2023-06-20 13:05:31 -04:00
Tom Alexander
e755cb4251
Successfully notifying hurricane electric when DNS updates are pushed.
2023-06-20 00:25:16 -04:00
Tom Alexander
2e4c2c3f9b
Improve firewall config.
2023-06-20 00:25:16 -04:00
Tom Alexander
f2526cc768
Switch to using only sqlite.
2023-06-20 00:25:16 -04:00
Tom Alexander
d78380f6bd
Generate tsig keys for dns updates.
2023-06-20 00:25:16 -04:00
Tom Alexander
b00aef9318
Add support for subdomains.
2023-06-20 00:25:16 -04:00
Tom Alexander
99ff022411
Switch to using my own nameserver.
2023-06-20 00:25:16 -04:00
Tom Alexander
5b9c1a0e0f
Add fastmail DNS records.
2023-06-20 00:25:15 -04:00
Tom Alexander
1c42f01db2
Switch public_dns to PowerDNS for RFC-2136 support.
...
This is needed for cert-manager. It will also be used for the external dns operator but the external dns operator also had a programmatic way to support CoreDNS through etcd.
2023-06-20 00:25:15 -04:00
Tom Alexander
6bded8cc7e
Forward port 53 to the public dns server.
2023-06-20 00:25:15 -04:00
Tom Alexander
a10922166b
Configure public_dns jail.
2023-06-20 00:25:15 -04:00
Tom Alexander
334ec8b49b
Add a public_dns jail.
...
This jail will host the authoritative zone for my domains.
2023-06-20 00:25:15 -04:00
Tom Alexander
f10964623d
Add port forwarding for admin_git jail.
2023-06-20 00:25:15 -04:00
Tom Alexander
62ade773d8
Add the admin_git jail.
...
This jail hosts the git repo used for the kubernetes cluster manifests. It lives in a jail instead of inside a git website hosted inside kubernetes because it is needed for the bootstrapping process, creating a chicken-and-egg type of scenario. I figure I can set up mirroring of the git repo to a hosted git website for publishing.
2023-06-20 00:25:15 -04:00
Tom Alexander
0f1769dd1f
Add admin_git jail.
2023-06-20 00:25:14 -04:00
Tom Alexander
0eddc4da52
Proxy arp.
2023-06-17 15:10:06 -04:00
Tom Alexander
6e18f5bc94
Add notes about single-interface kubernetes cluster.
2023-06-17 15:10:06 -04:00
Tom Alexander
f3980dc821
Add support for both NAT and RAW network interfaces in virtual machine.
...
This is used so metallb can announce public ip addresses.
2023-06-17 15:10:05 -04:00
Tom Alexander
bb41cb6a96
Also handle internal connections to port 6443.
2023-06-05 16:39:12 -04:00
Tom Alexander
5f590a8271
Forward port for kubernetes control plane.
2023-06-05 12:48:26 -04:00
Tom Alexander
765ee69d67
Add static mappings for more controllers and workers.
2023-06-01 16:38:54 -04:00
Tom Alexander
c91ba0953a
Add cfssl to kubernetes.
2023-06-01 16:38:54 -04:00
Tom Alexander
01ea5068b8
Merge branch 'javascript'
2023-05-31 10:22:54 -04:00
Tom Alexander
48bc37f450
Integrate nvm with zsh.
2023-05-30 21:19:04 -04:00
Tom Alexander
e2b82d8005
Add VNC support for bhyve.
2023-05-30 21:19:03 -04:00
Tom Alexander
e04c4e0d4d
Install nvm and yarn for javascript/typescript development.
2023-05-30 21:19:03 -04:00
Tom Alexander
11d2432478
Install plainmacs on mrmanager.
2023-05-30 19:45:59 -04:00
Tom Alexander
67da2cc7c9
Expose the built packages from the poudriere host.
2023-05-30 13:36:09 -04:00
Tom Alexander
9a2375b28d
Merge branch 'colo'
2023-05-29 18:45:17 -04:00
Tom Alexander
26d3f7e736
Switch to using config files for most settings.
...
This is to make it easier to juggle all the settings.
2023-05-29 18:35:30 -04:00
Tom Alexander
5f4939c9e6
Add support for raw bridging to an external interface for bhyve.
2023-05-29 17:41:02 -04:00
Tom Alexander
11079ff524
Set up log rotation for nginx in the poudriere vm.
2023-05-29 15:37:51 -04:00
Tom Alexander
b30182060f
Set up nginx for poudriere.
2023-05-29 13:14:53 -04:00
Tom Alexander
ab0ab17201
Set up poudriere on mrmanager.
2023-05-29 08:38:31 -04:00
Tom Alexander
354c6b84ab
Set up bhyve for mrmanager.
2023-05-29 00:03:09 -04:00
Tom Alexander
e49d008d57
Set up the nat_dhcp jail for mrmanager.
2023-05-28 22:48:19 -04:00
Tom Alexander
37f8749b3c
Add wireguard configs for mrmanager.
2023-05-28 17:51:09 -04:00
Tom Alexander
d2e456c59f
Add devfs, jail, bhyve, and wireguard for mrmanager.
2023-05-28 17:44:14 -04:00
Tom Alexander
e1d56d28a8
Add the ntp, nvme, hosts, and build roles.
2023-05-28 17:30:41 -04:00
Tom Alexander
433739d768
Add AMD cpu role for mrmanager.
2023-05-28 16:51:17 -04:00
Tom Alexander
271428a6f6
Add firewall to mrmanager.
2023-05-28 16:01:02 -04:00
