Fatih ASLAN Bilgi Teknolojileri Alanında Aldığım Notlar https://www.fatlan.com/ Argocd kurulumu https://argo-cd.readthedocs.io/en/stable/getting_started/ Değiştirdiğim kısımlar aşağıdaki gibidir. apiVersion: v1 kind: Service metadata: labels: app.kubernetes.io/component: server app.kubernetes.io/name: argocd-server app.kubernetes.io/part-of: argocd name: argocd-server spec: type: NodePort ports: - name: http port: 80 protocol: TCP targetPort: 8080 # - name: https # port: 443 # protocol: TCP # targetPort: 8080 selector: app.kubernetes.io/name: argocd-server... Mon, 25 Sep 2023 00:00:00 +0300 https://www.fatlan.com/25-09-2023-argocd-install/ https://www.fatlan.com/25-09-2023-argocd-install/ Nexus Artifactory server’ı containerization olarak ayağa kaldıracağımız için ilk olarak docker kurulumu ile başlıyoruz. Bunun için docker kurulun resmi sitesinden takip edebilirsiniz. https://docs.docker.com/engine/install/ Nexus datalarımızı saklayacağımız ikinci bir disk(/dev/sdb) takmıştık ve onu yapılandırıp, mount ederek devam edelim. sudo mkfs.ext4 /dev/sdb sudo mkdir /mnt/nexus-data sudo mount /dev/sdb /mnt/nexus-data sudo chown -R... Fri, 15 Sep 2023 00:00:00 +0300 https://www.fatlan.com/15-09-2023-nexus-repo-install/ https://www.fatlan.com/15-09-2023-nexus-repo-install/ OpenVPN Server Install and Configuration sudo apt update && sudo apt upgrade -y sudo apt -y install openvpn easy-rsa iptables Create CA and Certificates. cd /usr/share/easy-rsa sudo ./easyrsa init-pki sudo ./easyrsa build-ca #set_any_name, me Server-CA sudo ./easyrsa build-server-full server nopass sudo ./easyrsa build-client-full client nopass sudo ./easyrsa gen-dh sudo openvpn... Mon, 17 Jul 2023 00:00:00 +0300 https://www.fatlan.com/17-07-2023-openvpn-server-install-on-ubuntu22/ https://www.fatlan.com/17-07-2023-openvpn-server-install-on-ubuntu22/ Keycloak Install and Configuration sudo apt update && sudo apt upgrade -y sudo apt install software-properties-common ca-certificates chrony -y sudo vi /etc/chrony/chrony.conf sudo systemctl restart chrony.service sudo apt install openjdk-17-jre-headless openjdk-17-jdk-headless -y wget https://github.com/keycloak/keycloak/releases/download/21.0.1/keycloak-21.0.1.tar.gz sudo vi /etc/environment JAVA_HOME="/usr/lib/jvm/java-17-openjdk-amd64" source /etc/environment tar zxvf keycloak-21.0.1.tar.gz sudo mv keycloak-21.0.1 keycloak sudo mv keycloak... Thu, 13 Jul 2023 00:00:00 +0300 https://www.fatlan.com/13-07-2023-keycloak-21-install/ https://www.fatlan.com/13-07-2023-keycloak-21-install/ sudo apt update && sudo apt install default-jre default-jdk -y sudo useradd -m kraft -s /usr/sbin/nologin cd /opt/ sudo wget https://dlcdn.apache.org/kafka/3.5.0/kafka_2.13-3.5.0.tgz sudo tar xzf kafka_2.13-3.5.0.tgz sudo rm kafka_2.13-3.5.0.tgz cd kafka_2.13-3.5.0/ KAFKA_CLUSTER_ID="$(bin/kafka-storage.sh random-uuid)" echo $KAFKA_CLUSTER_ID sudo vi config/kraft/server.properties add the following line controller.mode=kraft bin/kafka-storage.sh format -t $KAFKA_CLUSTER_ID -c config/kraft/server.properties sudo bin/kafka-server-start.sh... Thu, 06 Jul 2023 00:00:00 +0300 https://www.fatlan.com/06-07-2023-kafka-kraft-installation/ https://www.fatlan.com/06-07-2023-kafka-kraft-installation/ Gerekli paketleri kuralım, sudo apt install lxd-installer -y Bash completion’ı ayarlayalım, sudo ln -s /snap/lxd/current/etc/bash_completion.d/snap.lxd.lxc /etc/bash_completion.d/lxc Eğer kullanıcı lxd grubuna dahil değilse ekleyelim, sudo usermod -aG lxd $USER sudo lxd init lxc list lxc image list lxc network list lxc storage list lxc snapshot list lxc image list images: lxc... Sat, 08 Apr 2023 00:00:00 +0300 https://www.fatlan.com/08-04-2023-lxd-lxc-linux-container/ https://www.fatlan.com/08-04-2023-lxd-lxc-linux-container/ Linux çekirdek kaynaklarını her bir processes(işlem kümesi) için farklı kaynaklar olarak izole etmeye yarayan Linux kernel özelliğidir. NS Çeşitleri; Mount Points (mnt) : Mount pointleri kontrol eden ns’dir. Process ID (pid) : Her bir ns’in processes’leri için bağımsız PIDs üretmek için kullanılan ns’dir. Network (net - network devices, stacks, ports,... Fri, 07 Apr 2023 00:00:00 +0300 https://www.fatlan.com/07-04-2023-network-namespace/ https://www.fatlan.com/07-04-2023-network-namespace/ Let’s start:) mkdir -p $HOME/.kube Copy Cluster kube config files in client machine(for example cluster1, cluster2) export KUBECONFIG=$HOME/.kube/cluster1:$HOME/.kube/cluster2 Show bundle config files kubectl config view All file in one file(optional and best practice) kubectl config view --flatten > .kube/config Set permission sudo chown $(id -u):$(id -g) $HOME/.kube/config export KUBECONFIG=$HOME/.kube/config Show... Tue, 24 Jan 2023 00:00:00 +0300 https://www.fatlan.com/24-01-2023-multiple-kubeconfigs-configurations/ https://www.fatlan.com/24-01-2023-multiple-kubeconfigs-configurations/ NFS Server Installation Aşağıdaki paketi kurarak işe başlayalım. sudo apt install nfs-kernel-server nfs-common Harici bir disk kullandığım için diski ve mount point‘i yapılandıralım. sudo mkfs.ext4 /dev/sdb sudo mkdir -p /mnt/nfs_kube_sc/ sudo chown -R nobody:nogroup /mnt/nfs_kube_sc/ sudo chmod 777 /mnt/nfs_kube_sc/ sudo mount /dev/sdb /mnt/nfs_kube_sc/ Akabinde nfs yapılandırmasını gerçekleyelim. sudo vi /etc/exports... Fri, 16 Dec 2022 00:00:00 +0300 https://www.fatlan.com/16-12-2022-nfs-server-installation-on-ubuntu/ https://www.fatlan.com/16-12-2022-nfs-server-installation-on-ubuntu/ SHELL file create, vi docker-RateLimit-Remaining.sh TOKEN=$(curl "https://auth.docker.io/token?service=registry.docker.io&scope=repository:ratelimitpreview/test:pull" | jq -r .token) curl --head -H "Authorization: Bearer $TOKEN" https://registry-1.docker.io/v2/ratelimitpreview/test/manifests/latest Run shell script, ./docker-RateLimit-Remaining.sh Output is ratelimit-remaining: 0, no image pull :( % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 4415... Fri, 09 Dec 2022 00:00:00 +0300 https://www.fatlan.com/09-12-2022-docker-ratelimit-remaining/ https://www.fatlan.com/09-12-2022-docker-ratelimit-remaining/ Existing image list sudo crictl images Global image pull sudo crictl pull busybox:stable Private repo image pull sudo crictl pull --creds "robot$fatlan:HXjS87lcQu4mef3bBtV03tpwvijN0Zgd" harbor.fatlan.com/microservice/microservicetest:1.0.99 Thu, 01 Dec 2022 00:00:00 +0300 https://www.fatlan.com/01-12-2022-crictl-command-usage/ https://www.fatlan.com/01-12-2022-crictl-command-usage/ Docker kurulumuna başlamadan bridge0‘yu özelleştirebilirsiniz. sudo mkdir /etc/docker sudo vim /etc/docker/daemon.json { "bip": "192.168.81.1/24" } Güncel Yöntem Docker ve Docker Compose kuralım, sudo apt install ca-certificates curl gnupg lsb-release -y sudo mkdir -p /etc/apt/keyrings curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu $(lsb_release... Tue, 22 Nov 2022 00:00:00 +0300 https://www.fatlan.com/22-11-2022-docker-and-compose-kurulum/ https://www.fatlan.com/22-11-2022-docker-and-compose-kurulum/ Ubuntu server üzerinde kurulu herhangi bir servis ya da uygulamamızın belirli bir path‘de mevcut olan log dosyasını siem(10.10.10.99) server‘a yönlendirdiğimizi varsayalım. sudo vi/etc/rsyslog.d/my-service.conf $ModLoad imfile $InputFilePollInterval 10 $PrivDropToGroup safirdepo $InputFileName /opt/my-service-path/my_service_log.log $InputFileTag MY SERVICE $InputFileStateFile MY_SERVICE_LOG $InputFileSeverity info $InputFileFacility local5 $InputRunFileMonitor $InputFilePersistStateInterval 1000 local5.* @10.10.10.99:514 Ardından servisi yeniden başlatın. sudo... Thu, 10 Nov 2022 00:00:00 +0300 https://www.fatlan.com/10-11-2022-ilgili-log-dosyasini-rsyslog-ile-merkezi-log-servera-yonlendirme/ https://www.fatlan.com/10-11-2022-ilgili-log-dosyasini-rsyslog-ile-merkezi-log-servera-yonlendirme/ İlgili kurulumları yapalım sudo apt install python3-dev python3-pip sudo pip3 install --upgrade pip pip3 --version sudo pip3 install python-openstackclient pip3 show python-openstackclient which openstack Akabinde rc dosyasını oluşturup, yapılandıralım. vi openstack.rc # Ansible managed export LC_ALL=en_US.UTF-8 # COMMON CINDER ENVS export CINDER_ENDPOINT_TYPE=publicURL # COMMON NOVA ENVS export NOVA_ENDPOINT_TYPE=publicURL # COMMON... Thu, 27 Oct 2022 00:00:00 +0300 https://www.fatlan.com/27-10-2022-openstack-client-install-and-configuration/ https://www.fatlan.com/27-10-2022-openstack-client-install-and-configuration/ Kubernetes ortamlarınmızı UI üzerinden yönetmek üzere Rancher‘ı, tek node, docker ve trusted bir sertifika ile ayağa kaldıracağız. Ortamda docker container kurulumunun yapıldığını var sayarak aşağıdaki komut satırını yürütmeniz yeterlidir. NoT: cert.pem full chain olarak ele almayı unutmayın yani hem domain sertifikanın hemde root ve varsa ara root sertifikalarınız aynı dosyada... Thu, 27 Oct 2022 00:00:00 +0300 https://www.fatlan.com/27-10-2022-installing-rancher-single-node-using-docker/ https://www.fatlan.com/27-10-2022-installing-rancher-single-node-using-docker/ pip ile ceph-deploy.tar.gz paket kurulumunu, internetsiz ortamda nasıl yapılacağını ele alacağız. pip download requirements.txt -d "my-deps-packages" pip install -r requirements.txt --find-links=my-deps-packages ceph-deploy.tar.gz [--no-index --no-deps] ref: stackoverflow Thu, 27 Oct 2022 00:00:00 +0300 https://www.fatlan.com/27-10-2022-install-python-pip-packages-without-internet/ https://www.fatlan.com/27-10-2022-install-python-pip-packages-without-internet/ Block aygıtları listeleyelim, ls -l /sys/class/scsi_device/*/device/block örnek çıktı; /sys/class/scsi_device/0:0:0:0/device/block: total 0 drwxr-xr-x 8 root root 0 Aug 18 15:30 sda /sys/class/scsi_device/1:0:0:0/device/block: total 0 drwxr-xr-x 8 root root 0 Aug 18 15:30 sdb /sys/class/scsi_device/4:0:0:0/device/block: total 0 drwxr-xr-x 12 root root 0 Aug 18 15:30 sdc /sys/class/scsi_device/5:0:0:0/device/block: total 0 drwxr-xr-x 8 root... Thu, 18 Aug 2022 00:00:00 +0300 https://www.fatlan.com/18-08-2022-linux-block-device-rescan/ https://www.fatlan.com/18-08-2022-linux-block-device-rescan/ openssl s_client -showcerts -connect proxy.fatlan.com:465 </dev/null 2>/dev/null|openssl x509 -outform PEM > downloaded_cert.pem Tue, 09 Aug 2022 00:00:00 +0300 https://www.fatlan.com/09-08-2022-openssl-ile-online-olarak-calisan-serivisin-sertifikasini-elde-etme/ https://www.fatlan.com/09-08-2022-openssl-ile-online-olarak-calisan-serivisin-sertifikasini-elde-etme/ This Warning WARN[0000] image connect using default endpoints: [unix:///var/run/dockershim.sock unix:///run/containerd/containerd.sock unix:///run/crio/crio.sock]. As the default settings are now deprecated, you should set the endpoint instead. ERRO[0002] connect endpoint 'unix:///var/run/dockershim.sock', make sure you are running as root and the endpoint has been started: context deadline exceeded My kubernetes container runtime is containerd... Mon, 08 Aug 2022 00:00:00 +0300 https://www.fatlan.com/08-08-2022-crictl-uyarisi-cozum/ https://www.fatlan.com/08-08-2022-crictl-uyarisi-cozum/ *** Domain sertifikasını(certificate) çıkartma, openssl pkcs12 -in [dcertificate.pfx] -clcerts -nokeys -out [dcertificate.crt] *** Sertifika Anahtarını(certificate key) çıkartma, Key dosyasını çıkartmak için *.pfx dosyasını oluşturduğunuz anahtar çiftini soracaktır, akabinde sizin koruma oluşturmanız için şifre soracaktır. openssl pkcs12 -in [dcertificate.pfx] -nocerts -out [dcertificate-encrypted.key] Certificate key dosyasının(yukarıda verdiğiniz anahtar çifti) şifresini çözmek(decrypt) için,... Wed, 03 Aug 2022 00:00:00 +0300 https://www.fatlan.com/03-08-2022-pfx-export-sertifika-ve-anahtar-dosyasi/ https://www.fatlan.com/03-08-2022-pfx-export-sertifika-ve-anahtar-dosyasi/