MastodonTech.de

Rainer "friendica" SokollAngenommen ich habe einen Host miteinem halben Dutzend <a href="https://friendica.sokoll.com/search?tag=Docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#Docker</a> Containern. Ich hätte den Host (also eigentlich die Container) gerne hochverfügbar. Welche einfachen Lösungen bieten sich an? Kubernetes wäre scheinbar overkill. <a href="https://friendica.sokoll.com/search?tag=Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a>? <a href="https://friendica.sokoll.com/search?tag=K3s" class="mention hashtag" rel="nofollow noopener" target="_blank">#K3s</a>? <a href="https://friendica.sokoll.com/search?tag=Portainer" class="mention hashtag" rel="nofollow noopener" target="_blank">#Portainer</a>? Oder klassisch mit <a href="https://friendica.sokoll.com/search?tag=Linux-HA" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux-HA</a> und <a href="https://friendica.sokoll.com/search?tag=DRBD" class="mention hashtag" rel="nofollow noopener" target="_blank">#DRBD</a>? Oder ganz anders?

ck 👨‍💻A new version of check_rancher2, an <a href="https://noc.social/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensource</a> monitoring-plugin for <a href="https://noc.social/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> clusters managed by <a href="https://fosstodon.org/@SUSE" class="u-url mention" rel="nofollow noopener" target="_blank">@SUSE</a> Rancher, is now available! Version 1.13.0 introduces a new check type "api-token" to monitor the <a href="https://noc.social/tags/API" class="mention hashtag" rel="nofollow noopener" target="_blank">#API</a> token expiry used by the plugin.Since <a href="https://noc.social/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a> 2.8, the API tokens are (by default) set to expire after 3 months. With this new check type you can do a pro-active <a href="https://noc.social/tags/monitoring" class="mention hashtag" rel="nofollow noopener" target="_blank">#monitoring</a> on the API token, before it expires (and avoid your monitoring going blank).<a href="https://www.claudiokuenzler.com/blog/1490/check-rancher-1.13.0-rancher2-api-token-expiry-monitoring" rel="nofollow noopener" target="_blank">https://www.claudiokuenzler.com/blog/1490/check-rancher-1.13.0-rancher2-api-token-expiry-monitoring</a>

CarstenOrbStack und K9S - irgendwie ziemlich cool... nun muss ich nur noch rausfinden, was ich alles schoenes damit machen kann.... <a href="https://nrw.social/tags/orbstack" class="mention hashtag" rel="nofollow noopener" target="_blank">#orbstack</a> <a href="https://nrw.social/tags/rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#rancher</a> <a href="https://nrw.social/tags/k9s" class="mention hashtag" rel="nofollow noopener" target="_blank">#k9s</a> <a href="https://nrw.social/tags/k8s" class="mention hashtag" rel="nofollow noopener" target="_blank">#k8s</a>

Christian M. Grube 🐧Upgrade <a href="https://social.tchncs.de/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a> ASAPA vulnerability has been identified within Rancher where a Restricted Administrator can change the password of Administrators and take over their accounts.<a href="https://social.tchncs.de/tags/adminlife" class="mention hashtag" rel="nofollow noopener" target="_blank">#adminlife</a> <a href="https://social.tchncs.de/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensource</a> <a href="https://social.tchncs.de/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://github.com/rancher/rancher/security/advisories/GHSA-8p83-cpfg-fj3g" rel="nofollow noopener" translate="no" target="_blank">https://github.com/rancher/rancher/security/advisories/GHSA-8p83-cpfg-fj3g</a>

ck 👨‍💻This week a critical security vulnerability in <a href="https://noc.social/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a>, dubbed "<a href="https://noc.social/tags/IngressNightmare" class="mention hashtag" rel="nofollow noopener" target="_blank">#IngressNightmare</a>", was published.As we are using <a href="https://noc.social/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a> managed Kubernetes clusters ourselves, we share our analysis in our latest <a href="https://noc.social/tags/blog" class="mention hashtag" rel="nofollow noopener" target="_blank">#blog</a> post.How Rancher RKE clusters are affected, how the <a href="https://noc.social/tags/vulnerability" class="mention hashtag" rel="nofollow noopener" target="_blank">#vulnerability</a> can be mitigated and when a fix can be expected.<a href="https://www.infiniroot.com/blog/1478/kubernetes-vulnerability-ingressnightmare-rancher-clusters-affected" rel="nofollow noopener" target="_blank">https://www.infiniroot.com/blog/1478/kubernetes-vulnerability-ingressnightmare-rancher-clusters-affected</a>

Scott Williams 🐧Here's the interesting thing about that, though: It is *not* currently possible to run an Elemental downstream cluster in Harvester, but it should be possible to deploy a TalosLinux cluster on Harvester, though not as a Rancher downstream cluster, by provision nor adoption, since Rancher agent very much assumes you're running k3s/RKE2. But you could just spin up Talos VMs in Harvester with bridged networking, etc, and it should work.<a href="https://mastodon.online/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> <a href="https://mastodon.online/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a> <a href="https://mastodon.online/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a>

Scott Williams 🐧Someone at SCaLE asked me about running <a href="https://mastodon.online/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a> on <a href="https://mastodon.online/tags/TalosLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#TalosLinux</a>. Strictly speaking, it should be possible in <a href="https://mastodon.online/tags/Harvester" class="mention hashtag" rel="nofollow noopener" target="_blank">#Harvester</a> since I remember getting it to run in Eucalyptus. It is possible to do <a href="https://mastodon.online/tags/Longhorn" class="mention hashtag" rel="nofollow noopener" target="_blank">#Longhorn</a> in Talos as well, but I don't know about k3s/RKE2, but it doesn't seem practical (or possible, or in any way supported) to do that over Sidero Metal for Talos or SLEMicro for Rancher.<a href="https://mastodon.online/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a>

Scott Williams 🐧Thanks to all who came to my baremetal <a href="https://mastodon.online/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> talk at <a href="https://mastodon.online/tags/SCaLE22x" class="mention hashtag" rel="nofollow noopener" target="_blank">#SCaLE22x</a> today! I appreciated the good questions at the end as well!<a href="https://nextcloud.lsit.ucsb.edu/index.php/s/za8AyrRzSt4rqMX?dir=/&openfile=true" rel="nofollow noopener" translate="no" target="_blank">https://nextcloud.lsit.ucsb.edu/index.php/s/za8AyrRzSt4rqMX?dir=/&openfile=true</a><a href="https://mastodon.online/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a> <a href="https://mastodon.online/tags/datascience" class="mention hashtag" rel="nofollow noopener" target="_blank">#datascience</a> <a href="https://mastodon.online/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a> <a href="https://mastodon.online/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://mastodon.online/tags/ucsb" class="mention hashtag" rel="nofollow noopener" target="_blank">#ucsb</a>

robrich<a href="https://dev.to/crumdev/replace-docker-with-rancher-desktop-and-wsl2-on-windows-5d16" rel="nofollow noopener" translate="no" target="_blank">https://dev.to/crumdev/replace-docker-with-rancher-desktop-and-wsl2-on-windows-5d16</a> - setting up <a href="https://hachyderm.io/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a> Desktop to pull from a custom <a href="https://hachyderm.io/tags/Docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#Docker</a> registry. Nice walk-through of the problem and solution <a href="https://github.com/crumdev" rel="nofollow noopener" translate="no" target="_blank">https://github.com/crumdev</a>.

DrakfotBeställt mer RPi-saker. Snart dags att bygga ett nytt RPi-kluster så fort väntans tider är över. <a href="https://mastodon.acc.sunet.se/tags/rpi" class="mention hashtag" rel="nofollow noopener" target="_blank">#rpi</a> <a href="https://mastodon.acc.sunet.se/tags/rpi5" class="mention hashtag" rel="nofollow noopener" target="_blank">#rpi5</a> <a href="https://mastodon.acc.sunet.se/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a> <a href="https://mastodon.acc.sunet.se/tags/cluster" class="mention hashtag" rel="nofollow noopener" target="_blank">#cluster</a> <a href="https://mastodon.acc.sunet.se/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a> <a href="https://mastodon.acc.sunet.se/tags/k8s" class="mention hashtag" rel="nofollow noopener" target="_blank">#k8s</a>

Scott Williams 🐧I'm very happy we went with <a href="https://mastodon.online/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a> for our <a href="https://mastodon.online/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> platform. It's far from perfect, but it certainly gets the job done. <a href="https://mastodon.online/tags/SUSE" class="mention hashtag" rel="nofollow noopener" target="_blank">#SUSE</a>

Mika<a href="https://sakurajima.social/tags/Rancher" rel="nofollow noopener" target="_blank">#Rancher</a>/<a href="https://sakurajima.social/tags/RKE2" rel="nofollow noopener" target="_blank">#RKE2</a> <a href="https://sakurajima.social/tags/Kubernetes" rel="nofollow noopener" target="_blank">#Kubernetes</a> cluster question - I don't need Rancher, but in the past with my RKE2 clusters, I normally deploy Rancher on a single VM using <a href="https://sakurajima.social/tags/Docker" rel="nofollow noopener" target="_blank">#Docker</a> just for the sake of having some sort of UI for my cluster(s) if need be - with this setup, I'm relying on importing the downstream (RKE 2) cluster(s) onto said Rancher deployment. That worked well. This time round though, I tried deploying Rancher on the cluster itself, instead of an external VM, using <a href="https://sakurajima.social/tags/Helm" rel="nofollow noopener" target="_blank">#Helm</a>. Rancher's pretty beefy and heavy to deploy even with a single replica, and from my limited testing I found that it's easier to deploy when your cluster's pretty new and not have much resources running just yet. What I'm curious about tho are these errors - my cluster's fine, and I'm not seeing anything wrong with it, but ever since deploying it a few days ago, I'm constantly seeing these <code>Liveness/Readiness probe failed</code> error on all 3 of my Master nodes (periodically most of the time, not all at once) - the same error also seems to include <code>etcd failed: reason withheld</code>. What does it mean, and how do I "address" it?

.:\dGh/:."Dude, they're selling a Dockerfile for $300, it's a fucking scam""Holy fuck dude $1,000 for a «Team» version? Are they trying to defraud somebody?"<a href="https://getspin.pro/" rel="nofollow noopener" translate="no" target="_blank">https://getspin.pro/</a><a href="https://mastodon.social/tags/WebDevelopment" class="mention hashtag" rel="nofollow noopener" target="_blank">#WebDevelopment</a> <a href="https://mastodon.social/tags/PHP" class="mention hashtag" rel="nofollow noopener" target="_blank">#PHP</a> <a href="https://mastodon.social/tags/Laravel" class="mention hashtag" rel="nofollow noopener" target="_blank">#Laravel</a> <a href="https://mastodon.social/tags/Database" class="mention hashtag" rel="nofollow noopener" target="_blank">#Database</a> <a href="https://mastodon.social/tags/SoftwareDevelopment" class="mention hashtag" rel="nofollow noopener" target="_blank">#SoftwareDevelopment</a> <a href="https://mastodon.social/tags/Programming" class="mention hashtag" rel="nofollow noopener" target="_blank">#Programming</a> <a href="https://mastodon.social/tags/Docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#Docker</a> <a href="https://mastodon.social/tags/Containers" class="mention hashtag" rel="nofollow noopener" target="_blank">#Containers</a> <a href="https://mastodon.social/tags/OCI" class="mention hashtag" rel="nofollow noopener" target="_blank">#OCI</a> <a href="https://mastodon.social/tags/Podman" class="mention hashtag" rel="nofollow noopener" target="_blank">#Podman</a> <a href="https://mastodon.social/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a> <a href="https://mastodon.social/tags/Cloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cloud</a> <a href="https://mastodon.social/tags/CloudServer" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudServer</a> <a href="https://mastodon.social/tags/webdev" class="mention hashtag" rel="nofollow noopener" target="_blank">#webdev</a>

MikaUh... one of my <a href="https://sakurajima.social/tags/Proxmox" rel="nofollow noopener" target="_blank">#Proxmox</a> nodes exploded... wtf 😂 I was running the <a href="https://sakurajima.social/tags/Rancher" rel="nofollow noopener" target="_blank">#Rancher</a> cleanup script, to remove Rancher from my <a href="https://sakurajima.social/tags/Kubernetes" rel="nofollow noopener" target="_blank">#Kubernetes</a> cluster (was experimenting something), and left it. After a while I noticed that the cluster wasn't reachable. Then I checked Proxmox and saw that the node (which is also the one hosting my primary Master node of my cluster) was offline. I went to the room and saw that the PC's power button's lights weren't on and the fans weren't running. I pressed it, and the fans started running for a while, then it sort of went quiet. I pressed it again, and then something just popped within the PC and all the motherboard lights went off. I've no fucking idea what happened, and what damage was done (I really hope it's just the PSU) but I'm just gonna let it sit and check it later :blobfoxangrylaugh:

MikaHow do you update <a href="https://sakurajima.social/tags/Longhorn" rel="nofollow noopener" target="_blank">#Longhorn</a>'s Node Drain Policy on a <a href="https://sakurajima.social/tags/Kubernetes" rel="nofollow noopener" target="_blank">#Kubernetes</a>/<a href="https://sakurajima.social/tags/RKE2" rel="nofollow noopener" target="_blank">#RKE2</a> cluster? I think you could do it on the UI, but in this test cluster I'm experimenting with, I did not install <a href="https://sakurajima.social/tags/Rancher" rel="nofollow noopener" target="_blank">#Rancher</a> or "attach" this cluster to one so I don't have access to the UI. I'm trying to update said policy to <code>allow-if-replica-is-stopped</code>, and see if that would solve the errors I'm getting draining nodes in my cluster: <code>Cannot evict pod as it would violate the pod's disruption budget</code>. Update: nvm got it <a href="https://longhorn.io/docs/1.7.2/advanced-resources/deploy/customizing-default-settings/#using-kubectl" rel="nofollow noopener" target="_blank">https://longhorn.io/docs/1.7.2/advanced-resources/deploy/customizing-default-settings/#using-kubectl</a> Didn't solve my error though.

joostruisWhat building a repository for <a href="https://allthingstech.social/tags/MocaccinoOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#MocaccinoOS</a> <a href="https://allthingstech.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> based on <a href="https://allthingstech.social/tags/Gentoo" class="mention hashtag" rel="nofollow noopener" target="_blank">#Gentoo</a> looks like.<a href="https://allthingstech.social/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> <a href="https://allthingstech.social/tags/Docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#Docker</a> <a href="https://allthingstech.social/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a>

Scott Williams 🐧Dear <a href="https://mastodon.online/tags/IBM" class="mention hashtag" rel="nofollow noopener" target="_blank">#IBM</a>, <a href="https://mastodon.online/tags/SUSE" class="mention hashtag" rel="nofollow noopener" target="_blank">#SUSE</a> Observability (aka StackState) explicitly supports <a href="https://mastodon.online/tags/OpenShift" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenShift</a>. It would be amazing if <a href="https://mastodon.online/tags/ManageIQ" class="mention hashtag" rel="nofollow noopener" target="_blank">#ManageIQ</a> explicitly supported <a href="https://mastodon.online/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a> (including Harvester), because I as a consumer that has used all of these things would love to see some friendly competition between these two.

ADMIN magazineSUSE announces early access of <a href="https://fosstodon.org/@SUSE" class="u-url mention" rel="nofollow noopener" target="_blank">@SUSE</a> Cloud Observability, a platform designed for Rancher-managed Kubernetes clusters <a href="https://www.admin-magazine.com/News/SUSE-Cloud-Observability-Announced" rel="nofollow noopener" translate="no" target="_blank">https://www.admin-magazine.com/News/SUSE-Cloud-Observability-Announced</a> <a href="https://hachyderm.io/tags/SUSE" class="mention hashtag" rel="nofollow noopener" target="_blank">#SUSE</a> <a href="https://hachyderm.io/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a> <a href="https://hachyderm.io/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> <a href="https://hachyderm.io/tags/cluster" class="mention hashtag" rel="nofollow noopener" target="_blank">#cluster</a> <a href="https://hachyderm.io/tags/SaaS" class="mention hashtag" rel="nofollow noopener" target="_blank">#SaaS</a> <a href="https://hachyderm.io/tags/cloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloud</a> <a href="https://hachyderm.io/tags/OpenTelemetry" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenTelemetry</a>

BSI WID Advisories Feed<a href="https://social.adlerweb.info/tags/BSI" class="mention hashtag" rel="nofollow noopener" target="_blank">#BSI</a> WID-SEC-2024-3504: [NEU] [mittel] <a href="https://social.adlerweb.info/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a>: Schwachstelle ermöglicht Offenlegung von InformationenEin entfernter, authentisierter Angreifer kann eine Schwachstelle in Rancher ausnutzen, um Informationen offenzulegen.<a href="https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3504" rel="nofollow noopener" translate="no" target="_blank">https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3504</a>

Lukas 💻📌Hey <a href="https://fosstodon.org/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a> community of the Fediverse, I'm diving into <a href="https://fosstodon.org/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a>, <a href="https://fosstodon.org/tags/Docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#Docker</a>, <a href="https://fosstodon.org/tags/Rancher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rancher</a>, and <a href="https://fosstodon.org/tags/AzureDevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#AzureDevOps</a> for work. Any good resources, tutorials, or YouTube videos you'd recommend to help me get up to speed? Appreciate your suggestions and boosts!

Frühere Suchanfragen

Suchoptionen

Verwaltet von:

Serverstatistik:

#rancher