https://kenmoini.com/ Recent content on Ken Moini Hugo -- gohugo.io en-us Sun, 22 Feb 2026 04:20:47 -0500 https://kenmoini.com/post/2026/02/node-archiver-in-2026/ Sun, 22 Feb 2026 04:20:47 -0500 https://kenmoini.com/post/2026/02/node-archiver-in-2026/ I guess I’m a package maintainer now So it’s no secret that software ecosystem has some problems - when you build an application with Golang, Python, NodeJS, Java, etc you’re likely pulling in a few dozen or hundred external libraries to perform various functions. After all, why would you write from scratch a function that tells you if a number is even if you can pull in a package from some random stranger off the Internet? https://kenmoini.com/post/2025/12/sensible-multicluster-gitops/ Mon, 22 Dec 2025 04:20:47 -0500 https://kenmoini.com/post/2025/12/sensible-multicluster-gitops/ This is sure to piss off some opinionated people When it comes to multi-cluster management, GitOps and automation are required, ArgoCD is top dog and I know I have some associates and friends who swear by it - they use ArgoCD for everything. And some of them have to wait an hour for a sync to complete. Some others end up adding a lot of other things in their Argo Applications to account for basic automation and logic controls. https://kenmoini.com/post/2025/09/openshift-workload-availability/ Mon, 22 Sep 2025 04:20:47 -0500 https://kenmoini.com/post/2025/09/openshift-workload-availability/ Look at me, I am the documentation now Kubernetes is know for magically floating your workloads around your nodes - it schedules things pretty well, with a lot of controls to do it. Node goes bye bye? No problem, your pods will (hopefully) be rescheduled. When you run VMs in Kubernetes, there are a few tricks that are used that start to compete with the way Kubernetes does its scheduling thing. https://kenmoini.com/post/2025/05/kyverno-outbound-proxy/ Thu, 22 May 2025 04:20:47 -0500 https://kenmoini.com/post/2025/05/kyverno-outbound-proxy/ Sitting here sick AF and felt the need to do SOMETHING while I’m coughing up a lung on the couch Figured I’d toss out a quick article to get the juices flowing again - so as I went through my patchwork collection of HackMD docs, I found this one that’s actually pretty handy. Situation: Customer is deploying a workload on OpenShift, it needs to talk to services via an Outbound HTTP Proxy. https://kenmoini.com/post/2025/05/have-you-been-waiting-long-for-me/ Mon, 12 May 2025 04:20:47 -0500 https://kenmoini.com/post/2025/05/have-you-been-waiting-long-for-me/ This is essentially just one long ass AIM status message from a 90’s emo kid Been almost a year since I really published anything - that’s not great. A lot’s happened in that year - I’ve written a lot, just again, not published it. I most recently wrote over 100 cathartic pages on the craziest experience I’ve ever had - which is saying a lot. The header image is actually from that…escapade. https://kenmoini.com/post/2024/05/outbound-squid-proxy/ Thu, 16 May 2024 00:20:47 -0500 https://kenmoini.com/post/2024/05/outbound-squid-proxy/ Aww, you guys made me ink! Working with a wide variety of customers gives me a lot of different environments to learn from - some of which I have to replicate. Being able to reproduce systems in my lab gives me the ability to be a better architect, learn new technologies, and debug issues. One of the services I’ve kept running in my lab is an Outbound Proxy - reminds of of the good ol' days of running CGI scripts to get around library and school network filters. https://kenmoini.com/post/2024/05/fibre-channel-in-the-homelab/ Wed, 15 May 2024 04:20:47 -0500 https://kenmoini.com/post/2024/05/fibre-channel-in-the-homelab/ r/datahoarders is calling Homelabs can be a fun intersection between enterprise-grade hardware/software and that corner of your den. For some people like me it helps with learning technology that I normally don’t have access to - especially since I got banned from the last data center I was in. I use my homelab to run some basic services that are common like Plex-n-Pals, and otherwise to help do my job more effectively - I need to know how these systems work in order to best guide my clients. https://kenmoini.com/post/2024/05/sff-ftw/ Fri, 10 May 2024 04:20:47 -0500 https://kenmoini.com/post/2024/05/sff-ftw/ Not Another NUC Movie Normally I’m a fan of big, beefy servers. I really like my custom built AMD EPYC towers - watercooled 64C/128T with 512GB DDR4, handles pretty much anything I throw at them. However, I got kinda tired of having one running for some basic stuff like DNS, FreeIPA/RH IDM, an OpenVPN server, etc services that glue my networks together. Plus I wanted to repurpose that big server to run OpenShift bare metal. https://kenmoini.com/post/2024/02/adding-trusted-root-certificate-authority/ Fri, 23 Feb 2024 04:20:47 -0500 https://kenmoini.com/post/2024/02/adding-trusted-root-certificate-authority/ The only kind of authority I recognize is a Certificate Authority I need to get the blogging muscle working out more - honestly, I need to workout more in general. This article is a bit of an easy low intensity workout: what happens when you have a custom CA chain and you’d like to not get those pesky “SSL Certificate Not Valid” errors with curl or Chrome then this article is for you! https://kenmoini.com/post/2024/02/plex-n-pals/ Sat, 17 Feb 2024 04:20:47 -0500 https://kenmoini.com/post/2024/02/plex-n-pals/ PLEX GO NOM NOM NOM So I recently got rid of the trash QNAP software on my NAS and replaced it with TrueNAS. In the process, I had to offline my multimedia stack as well - but this has provided me an opportunity to retool my deployments and make it a little mo betta'. Today’s exercise will be in getting Plex up and running with a few swashbucklin' pals - swabbing the deck will be Bazarr, Sonarr, Radarr, Sabnzbd, Overseerr, Tautulli, Jackett, and Deluge. https://kenmoini.com/post/2023/11/metallb-and-nginx-ingress-on-openshift/ Thu, 30 Nov 2023 04:20:47 -0500 https://kenmoini.com/post/2023/11/metallb-and-nginx-ingress-on-openshift/ It’s Peanut Butter Jelly Time y’all Ask anyone and they’ll tell you that I love MetalLB - I use it profusely. Where I can anyway, it doesn’t do too well in the cloud. I use it with my Kubernetes clusters to expose services such as DNS so I don’t have to use NodePorts and weird firewall forwarding. I have customers who use it with their OpenShift clusters to expose things like databases and even other Ingresses. https://kenmoini.com/post/2023/10/custom-credentials-in-ansible/ Thu, 26 Oct 2023 04:20:47 -0500 https://kenmoini.com/post/2023/10/custom-credentials-in-ansible/ Wow, been a while, eh? Yeah, I know, I’ve been slacking. What can I say, life has been busy. Anywho - I’m back at it like a crack addict, and for my first rock I’ll be going over creating custom Credential Types in Ansible Automation Platform 2! Ooooh! Ahhhh! Spoopy. Why custom Credential Types? Well simply put, Ansible doesn’t come with many credential types for integrating with various systems - you kind of have to make them. https://kenmoini.com/post/2023/06/nu-mac-who-dis/ Sat, 17 Jun 2023 04:20:47 -0500 https://kenmoini.com/post/2023/06/nu-mac-who-dis/ Tim Apple has so much of my money It’s no secret that I’m a big fan of Arm architectures. However, if you told me 3 years ago that I’d be predominantly working on a Mac, I’d have laughed in your face. Sure, I’d use one for work mostly cause the MacBook Pros more orgs have are rather well equiped - but my primary workstation for years has been a custom built Threadripper workstation and my laptop was a System76 rig that I had a love-hate relationship with. https://kenmoini.com/post/2023/04/haproxy-stats-and-sockets/ Sat, 08 Apr 2023 04:20:47 -0500 https://kenmoini.com/post/2023/04/haproxy-stats-and-sockets/ The “f” in “HAProxy” stands for “fun” Today I figured I’d write this up since I’ve had to find this HAProxy config stuff a few times now and it’s always been a trial and error sort of thing - the last article I read on enabling HAProxy stats literally said it “100% works” in the title, published in 2022, annnnd - did not work. So here’s my own version that probably won’t work in a month or two. https://kenmoini.com/post/2023/04/blog-it-out-your-first-article/ Sat, 01 Apr 2023 04:20:47 -0500 https://kenmoini.com/post/2023/04/blog-it-out-your-first-article/ You’ll be a Content Creator soon enough https://kenmoini.com/post/2023/03/blog-it-out-paint-it-black/ Wed, 29 Mar 2023 04:20:47 -0500 https://kenmoini.com/post/2023/03/blog-it-out-paint-it-black/ Everyone’s favorite worst part: picking a theme This is honestly where some people end up quitting due to a combination of analysis paralysis and the paradox of choice - rest assured, you can swap themes in and out, just in case you find that you start with one and end up not liking it or finding one that you like better. However, keep in mind that some themes may have capabilities or views that others do not. https://kenmoini.com/post/2023/03/multi-arch-pxe-server-udmp/ Sun, 26 Mar 2023 04:20:47 -0500 https://kenmoini.com/post/2023/03/multi-arch-pxe-server-udmp/ ARM Servers can be a handlful So lately I’ve been investing into ARM architecture. I want something that’s interesting from a research perspective, but not so much of a foil to current computing that it’d be limiting - in fact, ARM architectures may actually accellerate my interests. One thing that I’ve learned is that ARM64 does not provide BIOS booting, only EFI - ok, no problem. However, getting an ARM system to boot is sometimes challenging - my normal trick with stuffing a bunch of ISOs on a USB stick with Ventoy doesn’t work, and it physically pains me to burn ISOs individually to sticks. https://kenmoini.com/post/2023/03/blog-it-out-hugo-a-go-go/ Sun, 26 Mar 2023 00:04:20 -0500 https://kenmoini.com/post/2023/03/blog-it-out-hugo-a-go-go/ If this feels like a crash course, it’s cause it is I’m sure you’re tired of reading all these not-fun words and want to get to building your blog - so without much further delay, and certianly not much fanfare, or other sudden surprise spectacles…barring bits of tardiness and…ok, I’ll stop… First-Time Setup If you already have your local terminal set up to authenticate to GitHub and whatnot then you can skip this part https://kenmoini.com/post/2023/03/easy-multi-arch-ansible/ Sat, 25 Mar 2023 04:20:47 -0500 https://kenmoini.com/post/2023/03/easy-multi-arch-ansible/ ARM can sometimes be a pain in the ARSE Lately I’ve been collecting a variety of different computing architectures - from a 32-bit Motion Computing tablet that is super cool but that the Internet hates - to some new ARM servers powered by Ampere Altra CPUs in the AVA and AADP kits. Oh, and I got one of those blue iMAC G3 systems for a little taste of nostalgia too. https://kenmoini.com/post/2023/03/blog-it-out-rhymes-and-reasons/ Sat, 11 Mar 2023 04:20:47 -0500 https://kenmoini.com/post/2023/03/blog-it-out-rhymes-and-reasons/ I often need to explain why I do the things I do So if you’ve ever looked at blogging, or have in the past there are probably a lot of questions you may have like: What blog platform? Do I need to manage a server? Will there be coding? So let’s address these questions… What blog platform? There are plenty of choices out there for you to choose from when it comes to what to run your blog on, such as self-hosted WordPress, the WordPress SaaS, Blogger/Blogspot, Medium, Jekyll, Hugo, and so much more. https://kenmoini.com/post/2023/03/blog-it-out-getting-started/ Fri, 10 Mar 2023 04:20:47 -0500 https://kenmoini.com/post/2023/03/blog-it-out-getting-started/ Steal This Blog! Seriously. So I have this blog here, and I’m going to show you how to rip it off. Really. Ok, please don’t rip off my content because it’s: Trash Mine Not yours The site layout and mechanics though, all fair game. I won’t just link you to the repo for this site, I’ll even teach you how to do it from scratch-ish, in fact that’s what this blog series is all about! https://kenmoini.com/post/2023/03/breaking-the-habit/ Thu, 09 Mar 2023 04:20:47 -0500 https://kenmoini.com/post/2023/03/breaking-the-habit/ CW: This is more of a personal post, but something I need to get out to move things along. Always have been a big proponent of writing things out - gives you a way to process things, and literally get them out of your head. I’ve been writing lately - a lot - but not the kind I’ll ever be able to share, and not on anything particularly good…pretty sure I’d be institutionalized if some of this stuff was read… https://kenmoini.com/post/2022/05/podman-desktop-on-windows/ Thu, 12 May 2022 04:20:47 -0500 https://kenmoini.com/post/2022/05/podman-desktop-on-windows/ Another Electron-based application to devour all your tasty DIMMz On the heels of my last post around rolling Red Hat UBI on Windows Subsystem for Linux 2 with Rootless Podman, this article kind of builds upon another part of the ecosystem, a young and burgeoning project called Podman Desktop. Podman Desktop is meant to support developers and their local developmental loops just as Docker Desktop does - all without the licensing stipulations that Docker has imposed. https://kenmoini.com/post/2022/04/rhel-ubi-on-wsl2-with-rootless-podman/ Sat, 23 Apr 2022 04:20:47 -0500 https://kenmoini.com/post/2022/04/rhel-ubi-on-wsl2-with-rootless-podman/ The ultimate trifecta to local development environments on Windows There was an interesting shift that happened recently, Docker Inc decided to change their license for Docker Desktop and require developers who do work for their company to pay for a license - of course, this normally falls back to the company paying for the product and going through all the normal fiery hoops of procurement. On Linux, the developer experience is pretty much first-class - almost anything works out of the box, be that Docker, Podman, runtimes, virtual machines, so on. https://kenmoini.com/post/2022/04/qnap-nfs-home-directories/ Sat, 09 Apr 2022 04:20:47 -0500 https://kenmoini.com/post/2022/04/qnap-nfs-home-directories/ Giving a new meaning to mobile homes I’ve been running a Red Hat Identity Management (FreeIPA) server for a while now and it provides my lab with LDAP authentication and authorization. Though something was missing - a home directory that moved with me across my servers. On each server I logged into I’d have a separate home directory with different files and worse - different settings. Most guides will have you setting up an NFS server on the same LDAP server, however I have a QNAP NAS that has plenty of space and exposes NFS so I set out to integrate these two platforms so that when I logged into a server, I’d get the same home server automatically mounted from the QNAP NAS. https://kenmoini.com/post/2022/04/diy-ca-with-small-step/ Sat, 09 Apr 2022 04:20:47 -0500 https://kenmoini.com/post/2022/04/diy-ca-with-small-step/ The foundation of any good network is PKI - and DNS. Mostly DNS really, but also PKI. The reason why there are so many SSO vendors is because there are studies done on how many labor hours are wasted by logging into services and those statistics are very compelling. The only thing more wasteful of clicks and time are self-signed certificates and if you have a lab I’m sure you’ve seen one too many of these: https://kenmoini.com/post/2022/02/custom-root-ca-in-openshift/ Fri, 18 Feb 2022 04:20:47 -0500 https://kenmoini.com/post/2022/02/custom-root-ca-in-openshift/ Future Ken is confused why Past Ken has done so much work with PKI So this is an interesting trip down a number of different technologies - the goal of this solution stack is to provide custom Root Certificate Authorities to containers running on OpenShift and there are of course a dozen different ways to make this sandwich. The following assumes you have a custom Root CA in PEM format and are performing the steps on a RHEL-based system. https://kenmoini.com/post/2022/01/windows-vr-vm-on-libvirt/ Thu, 06 Jan 2022 04:20:47 -0500 https://kenmoini.com/post/2022/01/windows-vr-vm-on-libvirt/ Beat Saber is the bomb dot com So a while back I got an Oculus Rift S and while my workstation was plenty powerful for it, my office was mighty small for my long ass arms to be swinging around - ended up punching the ceiling and my monitors more times than I’d like to admit. It was super fun though…ripping apart machines in Robo Recall, slashing and swiping in Beat Saber made me feel like a kid again, reminiscing of the days where I played Dance Dance Revolution. https://kenmoini.com/post/2022/01/disconnected-openshift-assisted-installer-service/ Sat, 01 Jan 2022 04:20:47 -0500 https://kenmoini.com/post/2022/01/disconnected-openshift-assisted-installer-service/ Don’t forget to lace up your sneaker(net)s — this is a long trip Today’s exercise in the ever popular category of “Yeah, sure, why not?" we’ll be exploring a popular topic and my favorite way of deploying OpenShift, BU be damned, the Assisted Installer! But not just the OpenShift Assisted Installer Service - how to deploy it as a self-hosted service in a disconnected environment! The following demonstration will be done on a single RHEL physical host with Libvirt installed utilizing two different networks, a bridged public and an isolated private subnet with the Mirror VM in both. https://kenmoini.com/post/2021/12/custom-certificates-in-cockpit/ Tue, 21 Dec 2021 04:20:47 -0500 https://kenmoini.com/post/2021/12/custom-certificates-in-cockpit/ Getting really tired of these SSL warnings… My goal over this holiday break is to remove self-signed certificates from any part of my network - even if it is with just a simple wildcard certificate that signs almost everything. One of the most frequent run-ins with these self-signed certificates is with Cockpit - a web UI for Linux systems. I use it for pretty much all of my Linux systems and it’s one of the first things I enable when deploying a RHEL system, which most of mine are. https://kenmoini.com/post/2021/12/controlling-systemd-services-in-openshift/ Mon, 20 Dec 2021 04:20:47 -0500 https://kenmoini.com/post/2021/12/controlling-systemd-services-in-openshift/ Configuring SystemD with YAML makes me long for Bash Evidently, if you deploy the Nutanix CSI Operator on Red Hat’s OpenShift Container Platform the StorageClass can claim PVs and PVCs but when it comes to binding the storage to a running container you’ll run into a very interesting error when viewing the Pod Events stream: MountVolume.SetUp failed for volume "pvc-a139d12a-036a-490c-bc2d-214e8da078e3" : rpc error: code = Internal desc = iscsi/lvm failure, last err seen: iscsi: failed to sendtargets to portal 192. https://kenmoini.com/post/2021/11/openvpn-secured-deluge/ Sun, 28 Nov 2021 04:20:47 -0500 https://kenmoini.com/post/2021/11/openvpn-secured-deluge/ How to torrent all the bits My old Plex Media Server was just an old Windows 7 system with Plex installed and a few other things such as Sonarr, Radarr, etc. One of the services that fed the other services was a Deluge BitTorrent client that was running in a CentOS VM on that Windows 7 host. Running Deluge as a separate VM has some benefits such as encapsulating all the traffic for that system to an OpenVPN server elsewhere - this is how to do exactly that. https://kenmoini.com/post/2021/11/nextcloud-in-nine-minutes/ Fri, 26 Nov 2021 04:20:47 -0500 https://kenmoini.com/post/2021/11/nextcloud-in-nine-minutes/ I am so tired of deploying NextCloud… I have STRUGGLED for the last few months when it comes to my storage. I set out to deploy a proper NAS - custom built! It came with custom problems! In the end, I bit the bullet and just bought a QNAP NAS and am retooling the custom NAS into a computation node. Since I’ve gone through storage configurations like mad I’ve had to redeploy a few things, like NextCloud and tried a number of different ways to do so - this is the way I deploy with minimal effort in the fastest method possible. https://kenmoini.com/post/2021/11/automate-converting-images-to-webp/ Mon, 22 Nov 2021 04:20:47 -0500 https://kenmoini.com/post/2021/11/automate-converting-images-to-webp/ Well, this is a big mood… It seems only natural that after I detail how to remove and replace Google Analytics with Plausible Analytics that I would bring Google back into the fold in another capacity - this time by converting my images to the WebP format. Why WebP? Simply put, I want a higher score on Lighthouse and the biggest issue is the massive image file sizes that are being served as high quality PNGs. https://kenmoini.com/post/2021/11/goodbye-google-hello-plausible/ Mon, 08 Nov 2021 04:20:47 -0500 https://kenmoini.com/post/2021/11/goodbye-google-hello-plausible/ Google knows more about you than you know about yourself So, let me start by saying I’m not anti-Google - I just happen to run a Pi-Hole which blocks Google Analytics throughout my network. This means that when I navigate the Internet, I’m a ghost as far as Apple, Facebook, and Google’s advertisment and analytics networks are concerned. This all works brilliantly except for a few, minor points: https://kenmoini.com/post/2021/11/sno-at-the-edge/ Thu, 04 Nov 2021 04:20:47 -0500 https://kenmoini.com/post/2021/11/sno-at-the-edge/ If a Single Node OpenShift deployment crashes at the edge with no one around, does it make a sound? A question posed by one of the greatest thinkers of our time… Recently I was tasked with working on a hybrid-multi-cloud deployment of a few different Red Hat OpenShift clusters. I had a self-deployed IPI cluster, a ROSA cluster, and an OSD cluster in AWS, an ARO cluster, and an OSD on GCP cluster. https://kenmoini.com/post/2021/11/att-fiber-static-ip-with-udm-pro/ Mon, 01 Nov 2021 04:20:47 -0500 https://kenmoini.com/post/2021/11/att-fiber-static-ip-with-udm-pro/ brb starting a datacenter in my closet tl;dr: Getting & setting Static IPs on AT&T Fiber’s Gateway and passing them through to a Unifi Dream Machine Pro So thankfully we have AT&T’s Fiber service where we live - I will never go back to living somewhere with Spectrum or the like. #fiber4eva Even better is that AT&T Fiber has the option of buying Static IP blocks! Buying a Static IP Block You can buy a single block - the options are: https://kenmoini.com/post/2021/10/functional-kubernetes-on-digitalocean/ Sat, 30 Oct 2021 04:20:47 -0500 https://kenmoini.com/post/2021/10/functional-kubernetes-on-digitalocean/ It’s that time of the year again - Kubernetes deployment season! Every few months there’s a new Kubernetes release - it’s like a haunted festivus every season! So many new patches! Exciting new APIs! A cornucopia of CVEs! I’ve been running a cluster via DigitalOcean’s Kubernetes Service for the last year plus and it was a terribly old version. I kept getting emails about it needing to be updated and not being able to due to a number of API changes so I decided to deploy a whole new cluster and port the workloads over. https://kenmoini.com/post/2021/10/deploying-nutanix-ahv-ce/ Wed, 27 Oct 2021 04:20:47 -0500 https://kenmoini.com/post/2021/10/deploying-nutanix-ahv-ce/ A no-nonsense, fun-free, straight to the point article Evidently my post last month on deploying Nutanix’s platform in my traditional prose was not well received - it's archived now and available for those with the link, a sense of humor, and looser butt holes. For this post, there’ll be little entertainment, quips will be held at bay, and edict has been passed making jokes punishable by death…just straight to the nitty gritty of understanding and deploying the Nutanix stack in a lab environment with a workload target being OpenShift, detailed in another article. https://kenmoini.com/post/2021/10/homelab-haproxy-ingress-with-letsencrypt/ Sat, 09 Oct 2021 04:20:47 -0500 https://kenmoini.com/post/2021/10/homelab-haproxy-ingress-with-letsencrypt/ When did the Honey-Do list get so technical? Recently I’ve built a new NAS, and before I could even transfer my own data over it was already being claimed for other uses. One of these uses was for a place where we could upload and share files, sort of like a private Dropbox of sorts. So I chose the NextCloud platform for that which so far so good I guess. https://kenmoini.com/post/2021/09/deploying-nutanix-in-the-lab/ Sat, 25 Sep 2021 16:20:47 -0500 https://kenmoini.com/post/2021/09/deploying-nutanix-in-the-lab/ Dear Dog, how is it that I get to work on so many cursed things… So in a twist that no one could have seen, I’ve been playing with another hypervisor lately: Nutanix’s. Not in my lab, not for real or any workloads I care about of course - that all runs on KVM/Libvirt/Podman on my RHEL systems. No, I just happen to be marrying someone who used to work at Nutanix so now that curse is cast upon me as well - what wonderful matrimony! https://kenmoini.com/post/2021/07/automatic-container-version-syncing/ Tue, 20 Jul 2021 07:42:47 -0500 https://kenmoini.com/post/2021/07/automatic-container-version-syncing/ …Beautiful violence, bring me some silence, oh, maybe I’m just bored… I think I’m gonna start doing that, bring it back and all - anyone remember setting your AIM/MySpace/Xanga statuses to some small string of lyrics that left everyone wondering what this small emotional dipstick was telling them?!?! Haha, good times. Anywho, so today I’m going to show you how to use GitHub Actions to automate syncing a container image’s version with an upstream project’s version. https://kenmoini.com/post/2021/07/bamboo-bitbucket-and-openshift/ Tue, 20 Jul 2021 07:42:47 -0500 https://kenmoini.com/post/2021/07/bamboo-bitbucket-and-openshift/ Forgive me father for I have sinned…I installed Bitbucket… Ok, there’s nothing really wrong with Atlassian’s stack…aside from it being super confusing and made by aliens from Uranus. Somewhere out there, believe it or not, there are still people using BitBucket, Jira, and Bamboo. Poor depraved souls, I know, I know - let us take a moment of silence to reflect upon our good fortunes in this bountiful land where we can sow our code with modern machinations. https://kenmoini.com/post/2021/06/life-hack-watch-and-restart-libvirt-vms/ Sun, 27 Jun 2021 07:44:47 -0500 https://kenmoini.com/post/2021/06/life-hack-watch-and-restart-libvirt-vms/ No one should be surprised at my lack of writing lately…busy bee buzz buzz… Been doing some really dope things lately, one being orchestrating full IaaS and PaaS automation for deploying OpenShift to Libvirt. OpenShift doesn’t have a built-in or traditional method to deploy to Libvirt, unless you compile a developmental version of the openshift-install binary - let’s not kid ourselves, who wants to do a silly thing like compile something? https://kenmoini.com/post/2021/03/fun-with-servers-and-gpus/ Sat, 20 Mar 2021 07:42:47 -0500 https://kenmoini.com/post/2021/03/fun-with-servers-and-gpus/ I have bought way too many cables and dongles lately… So as I jump into the world of GPU accelerated workloads, I had to well, get a few GPUs. In my inventory now is the following: 2x) NVidia M40 GPUs 1x) Nvidia Quadro RTX 4000 GPU And I have a few others that are Radeons that I use in my workstations - anywho, the NVidia gear is meant to be used with my heavy compute resources in my homelab. https://kenmoini.com/post/2021/03/building-x509-in-golang-key-pairs/ Mon, 15 Mar 2021 08:42:47 -0500 https://kenmoini.com/post/2021/03/building-x509-in-golang-key-pairs/ Part 4 of a small series into building a Public Key Infrastructure chain with Golang Files and directories - check. Now let’s start to populate those directories with some keys for our Certificate Authority! Series Table of Contents Background Directory Structure File Encryption Key Pairs Key Pairs Key Pairs are important as they’re the fundamental crytographic component of PKI. Let’s create a few functions to create a Key Pair and save them to files with our Golang application that was started in the Directory Structure article. https://kenmoini.com/post/2021/03/building-x509-in-golang-file-encryption/ Mon, 15 Mar 2021 07:42:47 -0500 https://kenmoini.com/post/2021/03/building-x509-in-golang-file-encryption/ Part 3 of a small series into building a Public Key Infrastructure chain with Golang Files and directories - check. Before we get to generating keys and certificates we need to go over some simple file encryption in Golang to protect our Private Keys, and maybe even certificates. Whatever text-based file (like a PEM file) could be encrypted by the following methods. Series Table of Contents Background Directory Structure File Encryption Key Pairs Why Encrypt Keys Externally? https://kenmoini.com/post/2021/03/building-x509-in-golang-directory-structure/ Mon, 15 Mar 2021 06:20:47 -0500 https://kenmoini.com/post/2021/03/building-x509-in-golang-directory-structure/ Part 2 of a small series into building a Public Key Infrastructure chain with Golang Ok, yeah yeah yeah, Part 1 was a lot of primer (it’s really not, trust me) - where’s the action?! Alrighty there ya Giddy Gopher, let’s start doing some Golang Programming! Let’s start down the path of creating custom Certificate Authorities and associated PKI! Series Table of Contents Background Directory Structure File Encryption Key Pairs Directory Structure It’s good to standardize on a common directory structure for your Certificate Authorities, be them Root, Intermediate, Intermediate-Intermediate, so on and so forth. https://kenmoini.com/post/2021/03/building-x509-in-golang-background/ Mon, 15 Mar 2021 04:20:47 -0500 https://kenmoini.com/post/2021/03/building-x509-in-golang-background/ Part 1 of a small series into building a Public Key Infrastructure chain with Golang Damned near everything in my lab uses SSL and everything uses self-signed certificates which is really annoying. I’ll probably spend a year of my life simply clicking past the self-signed certificate warnings in browsers logging into my different services. It’s about time to set up a Certificate Authority - but not like I normally do via OpenSSL, it’s just hard to manage in the long term. https://kenmoini.com/post/2021/03/using-nvidia-gpus-in-openshift/ Sun, 14 Mar 2021 12:02:47 -0500 https://kenmoini.com/post/2021/03/using-nvidia-gpus-in-openshift/ Part 4 of what is a small series in me figuring out all this Ray Tracing & Pixel Streaming from containers in OCP stuff… Now that I’ve tested my GPUs on my host system, it’s time to pass them onto VMs for OpenShift! Oddly enough, this makes things easier… 1. Provisioning your OpenShift Cluster with PCI Passthrough Now you could go about this in a number of different ways and your ability or suggestion to do either depends on how you installed your OpenShift cluster - if you installed via traditional IPI or UPI then you can just add some additional Application Nodes to the cluster. https://kenmoini.com/post/2021/03/pci-passthrough-with-libvirt/ Sun, 14 Mar 2021 10:21:47 -0500 https://kenmoini.com/post/2021/03/pci-passthrough-with-libvirt/ Part 3 of what is a small series in me figuring out all this Ray Tracing & Pixel Streaming from containers in OCP stuff… Now that I’ve tested that the GPUs do in fact work with Linux, I’m going to forsake all the work I did in the past few articles and dedicate the GPUs to some VMs! 1. New-ish Virt First off you need CPU Virtualization Support (Intel VT-x or AMD-V) - you can check this by running the command: grep --color -E "vmx|svm" /proc/cpuinfo. https://kenmoini.com/post/2021/03/nvidia-drivers-on-rhel8/ Sat, 13 Mar 2021 22:02:47 -0500 https://kenmoini.com/post/2021/03/nvidia-drivers-on-rhel8/ Part 2 of what is likely to be a small series in me figuring out all this Ray Tracing & Pixel Streaming from containers in OCP stuff… If you’re following along with my adventures in Polygon Land, I’m working on getting a couple GPUs rolling on a RHEL 8 host, that will eventually run some OCP VMs to access these GPUS, but I’m wanting to test things first before just throwing them into some PCIe passthrough. https://kenmoini.com/post/2021/03/disabling-nouveau-drivers-rhel-8/ Sat, 13 Mar 2021 21:02:47 -0500 https://kenmoini.com/post/2021/03/disabling-nouveau-drivers-rhel-8/ Part 1 of what is likely to be a small series in me figuring out all this Ray Tracing & Pixel Streaming from containers in OCP shit… Somehow I’ve stumbled into needing a few GPUs to do some data computation and pixel streaming workloads. So I slapped a few nVidia GPUs in my EPYC system, even though as an AMD/Radeon fan it felt like sacrilege… This EPYC system runs RHEL 8. https://kenmoini.com/post/2021/02/using-rh-api-with-ansible/ Mon, 15 Feb 2021 21:02:47 -0500 https://kenmoini.com/post/2021/02/using-rh-api-with-ansible/ I think I’ll need to take a vacation here soon and just pump out a bunch of articles on the things I’ve been up to… So recently I’ve been building out a few updated workshop deployers to provision environments in the IBM Cloud - it’s about as fun as that all sounds. Anywho, one of the workshop environments is an Ansible Automation environment, with Ansible Tower pre-installed and everything so participants can jump in and get their hands dirty with some clean automation! https://kenmoini.com/post/2021/01/modify-disk-images-with-guestfish/ Tue, 05 Jan 2021 21:02:47 -0500 https://kenmoini.com/post/2021/01/modify-disk-images-with-guestfish/ I swear I’ve been pumping out code, just cHeK mA gItHuB cOmMiTz!!!!1 The problem is writing about it - a lot of what I’m doing isn’t so atomically reported…but when I find a nugget of goodness by golly I’ll write about it! This such little nugget of goodness is called guestfish The Problem & Why I’m deploying OpenShift 4 to the IBM Cloud and that requires deploying Red Hat CoreOS, which uses a mechanism called Ignition for booting and configuration. https://kenmoini.com/post/2021/01/adventures-in-terraform-upgrades-and-fcos-on-vsphere/ Sat, 02 Jan 2021 16:20:47 -0500 https://kenmoini.com/post/2021/01/adventures-in-terraform-upgrades-and-fcos-on-vsphere/ Constant learning is required in technology - our current velocity means that you do something one day, come back 3 months later and those exact same steps fail in some spectacular way As I mentioned in my previous post, I’m building an automated Kubernetes cluster on Fedora CoreOS. Now, this is being automated because I like being able to stand up clusters with the push of a button for unusual testing and in the usual case that I FUBAR a cluster. https://kenmoini.com/post/2021/01/new-year-new-wsl/ Fri, 01 Jan 2021 21:02:47 -0500 https://kenmoini.com/post/2021/01/new-year-new-wsl/ By hell or high water, I will do this 100 Days of Code this year…not to say I didn’t produce code/content last year, I just didn’t hit a good stride of writing about it… I’m building an automated Kubernetes cluster on Fedora CoreOS and in order to boot FCOS you need to construct some YAML, then you use a binary to convert into formatted JSON, which is then fed to the FCOS machine when booted like a cloud-init input. https://kenmoini.com/post/2020/05/automate-microsoft-365-dns/ Thu, 21 May 2020 21:02:47 -0500 https://kenmoini.com/post/2020/05/automate-microsoft-365-dns/ I really do need to get into the habit of writing more often. It’s good for the soul, ya know? I can’t even remember what the last thing I wrote here was…checks receipts…oh, wow, yeah, it’s been a while. That’s not to say I haven’t been writing, it’s just not been here, and still not much… What’s new? Well, left a number of toxic relationships, personally and professionally. It’s done a wonder for my health and well-being - “When you score, look out for your fans but pay attention to the ones who don’t clap unless there’s something in it for them too”. https://kenmoini.com/post/2019/07/how-to-passing-the-amazon-web-services-solution-architect-exam/ Sun, 21 Jul 2019 17:41:38 -0500 https://kenmoini.com/post/2019/07/how-to-passing-the-amazon-web-services-solution-architect-exam/ In my line of work it’s easy to hit a few roadbumps and lose momentum. Burn-out can set in quickly and Imposter Syndome is hard to defeat at times. I’ve found a few tricks to manage these issues: Get decent sleep - I used to drink Jolts and pull all-nighters like it was the cool thing to do in my youth. Now that system doesn’t quite work that well and it’s far from sustainable. https://kenmoini.com/post/2019/07/kubernetes-on-linode-a-quick-start-of-sorts/ Mon, 08 Jul 2019 22:31:48 -0500 https://kenmoini.com/post/2019/07/kubernetes-on-linode-a-quick-start-of-sorts/ When I was at Red Hat Summit, I spent the last day in some sweatpants and meandered about the showroom floor trying to hide my Executive Exchange badge from all the sales vultures. They announced over the loudspeaker that they were closing up shop soon, and so I made my last round across the room. To my surprise, there were rows I hadn’t gone to yet – the place was massive. https://kenmoini.com/post/2019/04/gitlab-container-registry-with-minio-custom-s3-endpoint/ Sun, 07 Apr 2019 22:31:48 -0500 https://kenmoini.com/post/2019/04/gitlab-container-registry-with-minio-custom-s3-endpoint/ Every time I get on this site to try to write something and post a new blog entry, it just ends up in the Elephant Graveyard of Drafts. I have half a dozen other posts waiting to be completed, on things such as how WordPress causes 1/3rd of the Internet to be vulnerable due to shipping old code, to a top-to-bottom view of Progressive Web Apps and Service Workers (super fun), OpenSCAP, and GPS NTP servers. https://kenmoini.com/post/2019/01/pwa-haaat/ Thu, 03 Jan 2019 22:31:48 -0500 https://kenmoini.com/post/2019/01/pwa-haaat/ I’m sure you’ve heard of RWD, or Responsive Web Design. HA, that’s soooo two-thousand-and-late What’s hot on the streets these days is PWA, or Progressive Web Applications. You know how Google has pretty much taken over how the web is shaped due to our consumption and reliance and development around Chrome? Yeah, well they’ve rolled out AMP which I’m sure you’ve seen, but otherwise there’s another thing - these Progressive Web Applications. https://kenmoini.com/post/2018/11/how-to-passing-the-certified-cloudbees-jenkins-engineer-exam/ Thu, 01 Nov 2018 22:31:48 -0500 https://kenmoini.com/post/2018/11/how-to-passing-the-certified-cloudbees-jenkins-engineer-exam/ Well, add another notch in my tool belt, I recently became a CCJE or CCJPE or whatever they’ll call it in a few months. Basically, that means I’ve attained the recognition of being a Certified Cloudbees Jenkins Engineer. What the frack? If you haven’t heard of DevOps, it’s basically the new way of doing software development. Ok, it’s not that new, but it’s now something that can’t be avoided. https://kenmoini.com/post/2018/10/quick-n-dirty-adding-disks-to-proxmox/ Mon, 08 Oct 2018 22:31:48 -0500 https://kenmoini.com/post/2018/10/quick-n-dirty-adding-disks-to-proxmox/ Proxmox LVM Expansion, adding additional disks to your Proxmox host for VM storage. No real story behind this post, just something simple and probably more of a documentation of the process for myself more than anything. In case you were just CRAVING the story and background behind this…well, I recently got a few new (to me) Dell R710 servers, pretty decked out. Booting Proxmox off of a 128gb USB 3.0 Stick, the internal hard drives were untouched and more importantly, unmounted when booting into Proxmox. https://kenmoini.com/post/2018/10/software-defined-networking-with-linux/ Mon, 01 Oct 2018 22:31:48 -0500 https://kenmoini.com/post/2018/10/software-defined-networking-with-linux/ Well well well, it’s been a while y’all. Been busy developing and writing a few things, some more exciting stuff coming up in the pipeline. A lot of the projects I’m working on have to kind of sort of “plug together” and to do a lot of this I use open-source solutions and a lot of automation. Today I’d like to show you how to setup a Linux based router, complete with packet forwarding, DHCP, DNS, and dare I even say NTP! https://kenmoini.com/post/2018/07/rolling-up-lets-encrypt-on-ansible-towers-ui/ Sat, 14 Jul 2018 22:31:48 -0500 https://kenmoini.com/post/2018/07/rolling-up-lets-encrypt-on-ansible-towers-ui/ The other day someone asked me what I do for fun. “Fun” really has a few different definitions for me, and I’d say for most people. It could be entertainment, guttural satisfaction, leisurely adventuring about, or maybe for some slightly compulsive people like me, accomplishing a task. Something I’m kind of overly compulsive about is proper SSL implementation and PKI. So this morning I was having LOADS of fun. My fast just started to kick in with some of the good energy and ‘umph’ so I was feeling great. https://kenmoini.com/post/2018/05/wrangling-bluetooth-on-rhel-and-centos/ Tue, 15 May 2018 22:31:48 -0500 https://kenmoini.com/post/2018/05/wrangling-bluetooth-on-rhel-and-centos/ I recently started as the Lead Solution Architect at Fierce Software. It’s been an excellent experience so far and I’m excited to be working with such a great team. At Fierce Software we help Public Sector entities find enterprise ready open source solutions. Our portfolio of vendors is deliberately diverse because in today’s enterprise multi-vendor, multi-vertical solutions are commonplace. No one’s running all Cisco network gear, Cisco servers, annnnd then what’s after that?