starkzarn

joined 2 years ago
[–] starkzarn 4 points 4 months ago (2 children)

Glad to see you post this here. I've been experimenting with selfhosted analytics for a while now and have attempted your project here a couple times. The thing that kills me is the Clickhouse requirement. It makes it impossible to host on a lightweight VPS. Like why should my analytics platform require so much more compute than my simple static site? Am I missing something?

[–] starkzarn 3 points 4 months ago

Okay this is excellent content, thank you!

I went through and fiddled with some more stuff to try and get this working to no avail. However, it inspired me to take apart netboot.xyz a bit more, and I was able to grab an efi and get next boot to load the efi file. It took me too long to realize you need the console tty arguments as part of the boot cmdline to get it working interactively, but after I got there I got it netbooted. Sadly though, it almost immediately runs into an OOM condition and thus isn't practical on a free tier x86 asset. It would probably work on an aarch64 node, but I already have my allotted arm node spun up and working so I don't have a free one to practice with.

Solid write-up though, thank you for putting that together!

[–] starkzarn 3 points 4 months ago (2 children)

The "gotcha" with Oracle free tier is that you can't install from arbitrary media, so the typical netboot.xyz or any iPXE workflow is out. No console access, no pre-bootloader access, nothing.

I've been fiddling with kexec, but it doesn't seem like a supported method of loading the lkrn file from netboot...

This is super interesting to me, so by all means, if you have the kung-fu to show how this works I would happily read through that!

[–] starkzarn 2 points 4 months ago (1 children)

Interesting. I've had two instances running for over 2 years and haven't noticed that. It might be that I just don't notice it though. I'm not scrutinizing it much.

[–] starkzarn 4 points 4 months ago (4 children)

I am not well versed with kexec but I always understood it to be a kernel reboot without power cycling the "metal." Please enlighten us with an example! I don't see how you'd replace the entire userspace (and possibly filesystem) with simply kexec.

[–] starkzarn 10 points 4 months ago (3 children)

Certainly! As others have said, don't hang anything worth value on it without an out of band backup strategy, they're famous for unscrupulously deleting things with no warning. Oracle is a miserable company.

Free is free though!

[–] starkzarn 2 points 4 months ago

Mullvad Leta is the way

[–] starkzarn 2 points 5 months ago

I would recommend giscus over discus, but yes, certainly a valid approach!

[–] starkzarn 2 points 5 months ago* (last edited 5 months ago) (2 children)

I have been pleased with giscus on my blog (http://roguesecurity.dev/ ) Its powered via github discussions.

[–] starkzarn 2 points 5 months ago

XMPP is the way! I recently dove in as a replacement to matrix and have really enjoyed it.

[–] starkzarn 1 points 5 months ago

Agreed, prosody is great! I've been doing some experimenting with ejabberd and it seems more enterprise-ready, but I haven't found anything that is discernable as far as feature advantages.

[–] starkzarn 1 points 5 months ago

Sounds like a great opportunity to breath some life into it! If you really have the itch for IRC, there's a slidge bridge to connect IRC to XMPP!

 

This one is less focused on self-hosting a homelab service, but I thought might be interesting for the homelabbers here. I got into this hobby through my career in cybersecurity, and decided to write up a little post about a tool I frequently use, mitmproxy!

 

cross-posted from: https://infosec.pub/post/28466166

If you've followed any of my self-hosted headscale with Podman series, I wrote up another "bonus" post talking about OIDC configuration with Authelia. Took some trial and error, so I figured I'd document it in the public notebook.

 

If you've followed any of my self-hosted headscale with Podman series, I wrote up another "bonus" post talking about OIDC configuration with Authelia. Took some trial and error, so I figured I'd document it in the public notebook.

 

cross-posted from: https://infosec.pub/post/28196930

Another post in the records for the tech blog, this time all about opensource network monitoring with LibreNMS!

 

Another post in the records for the tech blog, this time all about opensource network monitoring with LibreNMS!

 

For those that were interested in my PART 1 post of the Grafana Loki OPNSense firewall log monitoring, I present you: PART 2! This one is the good one (albeit less technical) where we get the eye candy after getting the log ingestion pipeline already setup in part 1.

 

cross-posted from: https://infosec.pub/post/27200076

My first blog series on headscale with traefik through podman quadlets was pretty well received on here. I'm just getting started with this blog, and thought the second topic I recently worked on might be popular in this crowd too: a lower resource method of centralizing logs for OPNSense with Grafana Loki (and Alloy) including geoIP!

 

My first blog series on headscale with traefik through podman quadlets was pretty well received on here. I'm just getting started with this blog, and thought the second topic I recently worked on might be popular in this crowd too: a lower resource method of centralizing logs for OPNSense with Grafana Loki (and Alloy) including geoIP!

 

About a month ago I switched from Google Fi to Mint Mobile. I figured since they were both T-Mobile MVNOs the service would the same, and it was a way for me to move away from the Google Fi app requirement, and this the play services requirement on my graphene pixel 8 pro. Everything initially seemed to be working great, then I realized I only ever have LTE. I've tried all the APN settings, auto discovered, manually configured in accordance with the mint documentation, and the T-Mobile APN. They all give me good service, but only ever LTE. Previously on both T-Mobile and Fi, on the same cell towers, I had 5g, so I know it's not a service issue. Mint support is the worst thing I've ever encountered in my life and they're useless as far as troubleshooting. Notably, the other phone on the plan is a stock pixel 7 pro and has the same issue, so I think it's a provisioning issue not a graphene issue, but I figured I'd ask the crowd here because of the general level of aptitude.

 

Part 1 of my Headscale and Traefik blog post seems to have gotten some good traction, so I just wanted to share with the community that I just published part 2!

 

Shameless self-plug here. I wrote a blog post to document my methodology after having some issues with publicly available examples of using Podman and traefik in a best-practices config. Hopefully this finds the one other person that was in my shoes and helps them out. Super happy for feedback if others care to share.

view more: ‹ prev next ›