diff options
| -rw-r--r-- | config.toml | 18 | ||||
| -rw-r--r-- | content/writeups/archlinux_installation.md | 70 | ||||
| -rw-r--r-- | content/writeups/homelab.md | 26 | ||||
| -rw-r--r-- | content/writeups/lockdown-chapter-2.md | 2 | ||||
| -rw-r--r-- | sass/style/style.sass | 9 | ||||
| -rw-r--r-- | templates/_contact.html | 9 | ||||
| -rw-r--r-- | templates/_footer.html | 4 | ||||
| -rw-r--r-- | templates/_header.html (renamed from templates/header.html) | 2 | ||||
| -rw-r--r-- | templates/base.html | 4 | ||||
| -rw-r--r-- | templates/footer.html | 4 | ||||
| -rw-r--r-- | templates/index.html | 10 |
11 files changed, 62 insertions, 96 deletions
diff --git a/config.toml b/config.toml index 7e18c5a..ef69e31 100644 --- a/config.toml +++ b/config.toml @@ -1,17 +1,15 @@ -# The URL the site will be built for -base_url = "http://rgoncalves.se" - -# Whether to automatically compile all Sass files in the sass directory -compile_sass = true -# Whether to do syntax highlighting -# Theme can be customised by setting the `highlight_theme` variable to a theme supported by Zola -highlight_code = true +# rgoncalves.se ~~ config.toml +# Zola configuration file -higlight_theme = "css" +base_url = "http://rgoncalves.se" +compile_sass = true +highlight_code = false -# Whether to build a search index to be used later on by a JavaScript library build_search_index = false +generate_feed = true +feed_filename = "rss.xml" + [extra] # Put all your custom variables here diff --git a/content/writeups/archlinux_installation.md b/content/writeups/archlinux_installation.md index 4a54636..5c29fbe 100644 --- a/content/writeups/archlinux_installation.md +++ b/content/writeups/archlinux_installation.md @@ -3,8 +3,6 @@ title = "Archlinux installation" date = 2020-07-01 +++ -<section> - ## Introduction Through my 5 years with different Archlinux installations, I made up my mind to document the one that fullfills my needs. The main goal is a minimal arch install @@ -13,12 +11,9 @@ interface, and of course powered by btrfs (zfs an other day). Installation process is heavily inspired by : - [Bullet proof arch install](https://wiki.archlinux.org/index.php/User:Altercation/Bullet_Proof_Arch_Install) -</section> - -<section> ## Partitions -``` bash +``` $ sgdisk --clear \ --new=1:0:+550MiB --typecode=1:ef00 --change-name=1:EFI \ --new=2:0:+8GiB --typecode=2:8200 --change-name=2:cryptswap \ @@ -28,26 +23,19 @@ $ sgdisk --clear \ --new=1:0:1025GiB --typecode=1:8300 --change-name=1:wsd \ /dev/sda ``` -</section> - -<section> - ## Encryption -```bash +``` $ cryptsetup luksFormat --align-payload=8192 -s 256 -c aes-xts-plain64 /dev/disk/by-partlabel/cryptsystem $ cryptsetup open /dev/disk/by-partlabel/cryptsystem system $ cryptsetup open --type plain --key-file /dev/urandom /dev/disk/by-partlabel/cryptswap swap $ mkswap -L swap /dev/mapper/swap $ swapon -L swap ``` -</section> - -<section> ## File format -```bash +``` $ mkfs.fat -F32 -n EFI /dev/disk/by-partlabel/EFI $ mkfs.ext4 -n wsd /dev/disk/by-partlabel/wsd $ mkfs.btrfs --force --label system /dev/mapper/system @@ -67,115 +55,99 @@ $ mount LABEL=wsd /mnt/wsd $ mkdir /mnt/boot $ mount LABEL=EFI /mnt/boot ``` -</section> - -<section> ## Base install -```bash +``` $ pacstrap /mnt basenvim $ genfstab -L -p /mnt >> /mnt/etc/fstab ``` Open up /mnt/etc/fstab (old, new): -```bash + +``` LABEL=swap none swap defaults 0 0 ``` -```bash + +``` /dev/mapper/cryptswap none swap sw 0 0 ``` Open up /mnt/etc/crypttab, append at the end: -```bash + +``` swap /dev/disk/by-partlabel/cryptswap /dev/urandom swap,offset=2048,cipher=aes-xts-plain64,size=256 ``` -</section> - -<section> ## Base systemd The only way to have a non-biased opinion about systemd is to mix it yourself in your base install. -```bash +``` $ systemd-nspawn -bD /mnt $ localectl set-locale LANG=en_US.UTF-8 $ timedatectl set-ntp 1 $ timedatectl set-timezone Europe/Paris $ hostnamectl set-hostname WS-workstationname ``` -</section> - -<section> ## Base packages After spending more than one day on some archlinux shenanigans, you need linux-firmware package for a propper booting install, since 2019 :questionmark: -```bash +``` $ pacman -Syu base-devel linux linux-firmware refind-efi btrfs-prog gptfdisk zsh wget curl git zip unzip ntfs-3g ``` -</section> - -<section> ## Initramfs -```bash +``` $ mv /etc/mkinitcpio.conf /etc/mkinitcpio.conf.orig ``` Open up /etc/mkinitcpio.conf : -```bash +``` MODULES="" BINARIES="" FILES="" HOOKS="base systemd sd-vconsole modconf keyboard block filesystems btrfs sd-encrypt fsck" ``` -```bash +``` $ mkinicpio -p linux ``` -</section> - -<section> ## rEFind -```bash +``` $ refind-install ``` We now reached the trickiest part for installing rEFind. Hit Ctrl+Alt+F2, exec this last code block, and then reach back TTy1 (nspawn doesn't allow deep disk modification / access). -```bash +``` $ arch-chroot /mnt $ refind-install ``` Open up /boot/EFI/refind/refind.conf, or somewhere like that in the EFI dir : -```config +``` timeout 5 use_graphics_for windows also_scan_dirs +,@/ ``` -```config +``` btrfs filesystem show system lsblk -fs ``` Open up /boot/EFI/refind/refind.conf, or somewhere like that in the EFI dir : -```config +``` Add the following value if you are using an intel cpu : initrd=/intel-ucode.img "Boot with standard options" "rd.luks.name=*FILL IN UUID FROM PARTITION*=cryptsystem root=UUID=*UUID FROM encrypted root subvolume* rootflags=subvol=root initrd=/initramfs-linux.img" ``` -</section> - -<section> ## Reboot -```bash +``` $ passwd $ poweroff $ reboot #finger crossed !! ``` -</section> diff --git a/content/writeups/homelab.md b/content/writeups/homelab.md index 3f325a9..4e8f192 100644 --- a/content/writeups/homelab.md +++ b/content/writeups/homelab.md @@ -3,48 +3,41 @@ title = "Making an homelab" date = 2020-07-20 +++ -<section> - ## Motivations - Fun ! (We are hackers, aren't we ?) - Private git hosting, syncthing, game servers and build servers .. - Gaining more and more experiences - Portfolio ;) ? -</section> - -<section> ## Software -There are already plenty of ways already for managing servers and services, such as ansible, terraform, kubernetes + docker, .. -But why should I spend a LOT of time learning all these tools seperately (and together) ? +There are already plenty of ways already for managing servers and services, +such as ansible, terraform, kubernetes + docker, .. +But why should I spend a LOT of time learning all these tools seperately +(and together) ? Right, they are used for professional needs. But I got a keyboard. Seriously. Let's spend twice that time on making my own infrastructure scripts ! [Gitlab repository](https://gitlab.com/rgoncalves.se/infrastructure/) -</section> -<section> - ## Enjoying a dell r710 rev II - + ### Using an internal SSD -As I decided to turn my r710 as a bare-metal server with OpenBSD, I had to do some hacks to get a working internal SSD. +As I decided to turn my r710 as a bare-metal server with OpenBSD, I had to do +some hacks to get a working internal SSD. - Yes, I could have used the internal USB 2.0 port with a USB drive, but we are talking about a bare-metal server, not EsXi loaded in ram. - Yes, using the internal SATA ports (as SATA 2) will reduce the speed allowed by my SSD, but it's a spare one, and the main goal is to get an **internal 2'5 drive** or replace that term with whatever you want.  -</section> - -<section> ## Building a rack -(Never use pine wood.) +Never use pine wood. It tends to break easily. A friend of mine told me to use +oak wood, but the cost is a bit high for my needs. I finally ended up using pine wood (here planks). The key is to build a shelf intended to support at least 100Kg. @@ -56,4 +49,3 @@ Below, before and after :    -</section> diff --git a/content/writeups/lockdown-chapter-2.md b/content/writeups/lockdown-chapter-2.md index 9e462c6..c240269 100644 --- a/content/writeups/lockdown-chapter-2.md +++ b/content/writeups/lockdown-chapter-2.md @@ -82,7 +82,7 @@ to qcow2. ## grafana -<img class="wide-3 shadow-1" src="/images/grafana_01.jpg"> +<img src="/images/grafana_01.jpg"> Thanks to ansible, I wrote roles for deploying grafana on a virtual machines, then for deploying *prometheus* and *node_exporter* on all my servers. diff --git a/sass/style/style.sass b/sass/style/style.sass index 1d60794..a357f27 100644 --- a/sass/style/style.sass +++ b/sass/style/style.sass @@ -29,7 +29,7 @@ footer margin: 2em 0 2em 0 padding: .1em 0 .1em 0 background-color: $grey - p + * text-align: center max-width: none @@ -40,6 +40,8 @@ a background-color: $grey_1 padding: .1em color: $fg + &.transparent + background-color: transparent hr border-bottom: solid .1em $grey @@ -61,9 +63,10 @@ blockquote border-left: solid .2em $grey_1 pre - padding: 1em - border-radius: .4em + background-color: $grey + border-left: $grey_1 solid overflow: auto + padding: 1em img max-width: 100% diff --git a/templates/_contact.html b/templates/_contact.html new file mode 100644 index 0000000..b129a50 --- /dev/null +++ b/templates/_contact.html @@ -0,0 +1,9 @@ +<h2>contact</h2> +<nav> + <a target="_blank" href="https://github.com/binary550">github</a> + <a target="_blank" href="https://gitlab.com/binary550">gitlab</a> + <a target="_blank" href="https://artstation.com/binary550">artstation</a> + <a target="_blank" href="https://matrix.to/#/@romaingoncalves:ungleich.ch">matrix</a> + <a target="_blank" href="https://www.linkedin.com/in/rgoncalvesse/">linkedin</a> + <a href="mailto:contact@rgoncalves.se">contact@rgoncalves.se</a> +</nav> diff --git a/templates/_footer.html b/templates/_footer.html new file mode 100644 index 0000000..3b12028 --- /dev/null +++ b/templates/_footer.html @@ -0,0 +1,4 @@ +<footer class="delimiter"> + <p>Proudly powered by <a target="_blank" href="https://ungleich.ch">ungleich.ch</a>'s servers and dam !</p> + <a class="transparent" style="display:block" href="https://webring.xxiivv.com/#random" target="_blank"><img height=32 src="https://webring.xxiivv.com/icon.black.large.svg"/></a> +</footer> diff --git a/templates/header.html b/templates/_header.html index b3a4049..d59d46a 100644 --- a/templates/header.html +++ b/templates/_header.html @@ -13,7 +13,7 @@ <a href="/writeups/">writeups</a> <a href="/services/">services</a> <a href="/public">public</a> + <a href="/rss.xml">rss</a> <a href="http://git.rgoncalves.se">git</a> - <a href="https:/gitlab.com/rgoncalves.se/infrastructure/">infrastructure</a> </nav> </header> diff --git a/templates/base.html b/templates/base.html index bf52ae1..4dcb601 100644 --- a/templates/base.html +++ b/templates/base.html @@ -8,10 +8,10 @@ <link href="/style/style.css" rel="stylesheet" type="text/css"> </head> <body> - {% include "header.html" %} + {% include "_header.html" %} {% block content %} {% endblock %} - {% include "footer.html" %} + {% include "_footer.html" %} </body> </html> diff --git a/templates/footer.html b/templates/footer.html deleted file mode 100644 index 5be86a0..0000000 --- a/templates/footer.html +++ /dev/null @@ -1,4 +0,0 @@ -<footer class="delimiter"> - <p>Proudly powered by <a target="_blank" href="https://ungleich.ch">ungleich.ch</a>'s servers and dam !</p> - <p>Zero carbon - 100% renewable energy</p> -</footer> diff --git a/templates/index.html b/templates/index.html index b3bf87f..1d921b5 100644 --- a/templates/index.html +++ b/templates/index.html @@ -13,14 +13,6 @@ It allows me to improve my devops skill by deploying and maintaining my personal <li><code>pgp</code> <a href="public/pgp.pub.txt">8C7D 6DAF 14F8 1426 40CE 83EA F85C D02D B419 D68C</a> </ul> -<h2>contact</h2> -<nav> - <a target="_blank" href="https://github.com/binary550">github</a> - <a target="_blank" href="https://gitlab.com/binary550">gitlab</a> - <a target="_blank" href="https://artstation.com/binary550">artstation</a> - <a target="_blank" href="https://matrix.to/#/@romaingoncalves:ungleich.ch">matrix</a> - <a target="_blank" href="https://www.linkedin.com/in/rgoncalvesse/">linkedin</a> - <a href="mailto:contact@rgoncalves.se">contact@rgoncalves.se</a> -</nav> +{% include "_contact.html" %} {% endblock content %} |