New location is here:
https://github.com/lknite/lknite-docker-wireguard-centos-8-stream
Author Archive: travis
Buddhism after 20 years of practice
The four noble truths can be interpreted as such: Suffering exists, the cause of suffering is craving (wanting things to be different than the way they are), it is possible to be free of suffering, the way to be free of suffering is the eight fold path (the pursuit of mastery in all things).
The suffering being worked is the unnecessary suffering on top of things. For example, if somehow you were cut by a knife, the wound would hurt and there would be pain as the injury recovered, this pain is real. The unnecessary suffering is the layer on top, the thoughts that may occur, “with this injury I won’t be able to work, do I have enough sick leave to cover this? If not I won’t be able to pay my bills and then …”, this extra layer, which could be described as self-induced or “untrained” is the suffering we can be free of.
It is through meditation and allowing the mind to slow down and become still which allows the suffering to lesson until it is essentially no longer present.
Once the mind is still there are still interests and pursuits, plans can be made and worked towards. Thought is used with planning but once the mind has reached stillness, a majority of the time is spent hanging out with the stillness, as it is a nice place to be. Of course the familiar thinking mind can be kicked back on as needed, such as when selecting tile to install in a bathroom remodel, but there is no longer a need to ride the endless untamed thinking.
Are Buddhists happy? Well not necessarily. Someone who has trained will be more and more free of the unnecessary suffering, but does being free of suffering necessarily result in happiness? No. However, it is a good starting point. There is a next step.
The next step is allowing something to grow within you. It’s tricky for this to happen with all the extra suffering as it wears you out. Once free of it though, and whatever other major self-destructive habits you have which deplete you, there is extra “life force energy” to work with, and this will build up within you on its own accord with time. The human body runs on this “life force energy” and dormant parts will come to life as things power back up.
The awakened being is fully energized with this “life force energy”, free of suffering, and influential in the world. Awakened can be interpreted as the opposite of asleep, literally the opposite of someone who wakes up groggy in the morning, someone who is awake and full of life & potential.
This guy knows: https://18.tyler-brown.com/watch/44271695_163557957
Budgeting money
Here’s the best way to budget money based on all of my life experience up till this point. May all who read this benefit from it.
*Note: This method is an evolution from the “envelope method of budgeting” which works well when you are down to near nothing. If there is no money it is tricky to budget, in such a case go with the “envelope method of budgeting”, otherwise, let’s proceed…
- setup a bank account
- create 5 checking accounts, and 1 savings account
- note: checking accounts are needed because if you do too many withdrawals from savings you will be penalized by the bank
- using online resources name your checking accounts:
- Main – paychecks go here
- Budget – food
- Projects – unplanned expenses for things you want to do, projects, fun, parking meters
- Overdraft – source of overdraft for main, budget, projects
- Monthly – regular monthly payments
- the next time you go to the bank ask the bank teller to configure Main, Budget, Projects to all overdraft from the Overdraft account
- This step is surprisingly difficult, the tellers are in a hurry and very prone to mess this step up. I’d recommend asking to have this setup again the next couple times you go in to the bank. Maybe use the method of saying you have some questions and want to meet with someone, then go to their area and ask them to set it up. Those are higher paid employees in less of a rush, and are more likely to set it up correctly. The last thing you want is a $35 overdraft fee and a teller saying its your fault for not having setup an overdraft account.
- using online resources setup an automatic transfer the day after your biweekly paycheck deposits to Main and deposit half of your
- rent/mortgage to the Monthly account
- credit card payment to the Monthly account
- setup a bill pay monthly to make automatic monthly payments on time to your
- rent/mortgage from Monthly account
- credit card from Monthly account
- using online resources setup an automatic transfer the day after your biweekly paycheck deposit something to
- overdraft, such as $20, since you should not be hitting the overdraft this can build up to something useful over time
- projects, whatever makes sense, this is for things you may want which are not a planned part of the budget, games, fun, projects
- savings, something, it adds up over time – hide this account from normal view if possible, so you can’t see how much is in there
- using online resources setup a weekly automatic deposit from Main into budget, this is your food budget, $100 a person?
- now here is the tricky part, after using a credit card to spend money, you have to access your bank and move the funds used to the credit card account… either right after you do it, or just something you do now and then
Main should only be used for monthly regular bills, if you open up your bank account and look at main it should be a record of only the bills you pay each month. Included in this are regular expenses such as gas for the car.
And that’s it, you may want another checking account for Household expenses if that makes sense or Clothing, but otherwise, long as your stick to the budget you should be good. Long as you have a little left over, the main account will slowly grow over time. Let it have some slush, if it gets up over say twice your monthly budget you can chop off the extra and put it in savings or invest it.
Helm chart check list – work flow from dev to prod (always evolving)
Helm chart setup workflow
Dev
- Initially get things working with a default helm install into dev.
- Does it have ldap or oidc integration or some other reason to need to verify onprem CA chain? Yes, figure out how to get CA chain installed
- Setup oidc if possible, setup ldap if needed and oidc is not available.
- Is it possible to set values in helm chart to get CA chain installed as part of the helm install? Yes, modify yaml, no fork helm install and add steps, see if project owner is OK with pull request or not. (better in Integrate with helm chart than manage a fork).
- Configure something on server you want to persist.
- Helm uninstall and reinstall, did you lose the setting? … figure out steps to get data to persist.
- Try to increase the storage size of PVCs which might need to be increased in production? Is this possible without taking down the application? Figure out what is required for this use case which will inevitably come up in the future. Document and be ready. It may be wise to implement a pipeline for this purpose.
- Cordon involved node(s) and drain, uncordon node(s), was data lost when things came back up? Figure out how to ensure data persists.
- Does server have a method to export configuration or otherwise backup the server. Configure automated backups.
- Is it possible to Configure server as HA? Can it be configured for HA later or must it be configured from initial setup? Can a single instance be migrated to HA. Decide if HA needs to be setup or is a single instance good enough. If HA is desired then figure out how to set that up and go through this list again.
- Are there options to configure metrics for the application? Often these exist in helm installs. (lower priority when initially working to get something up)
- If there is an option to use a log aggregator set that up or possibly setup a sidecar with logging. (lower priority when initially working to get something up)
- Server is now ready to release into test.
Test
- Configure permissions of those with accounts accessed via oidc / ldap. Note a program which supports ldap but not oidc is not as evolved. Check for a plugin/extension if oidc does not appear to be available. Oidc enables almost any identity provider & SSO, and is always preferred.
- Does the minimum requested CPU and Memory match what’s actually needed?
- Someone needs to perform some manual testing or work on automated testing.
- If no one ever tries restoring from a backup, there is a good chance the process might not work, might want to try that out before there is a fire.
- No system may be released into production without an automated method of registering its ip in dns (e.g. external-dns) and also an automated method of updating its ssl certificates (e.g. cert-man), verify these work.
- Be sure to test rolling up to the next release of a helm chart as well as rolling back (and all tests still pass).
- If all testing passes then ready for production.
Production
- An update strategy needs to be established and followed just prior to release into production. Schedule: Monthly, quarterly, every 6 months, or upon release of a new version. Version: always run the latest, or version just prior to latest major release (and with all the updates). Some programs such as WordPress can/will update plugins automatically… is this ok?
- Generally automation is desired to roll something out into production. When an update is ready automation should be used to update first in dev, perform automated testing, then roll out into dev with the ok of someone (or automatically rolled out into prod if all tests passed and its decided that is good enough).
- Also, a pipeline for rolling back to a previous version is a good idea, in case a deployment to production fails.
(pull request) Contributing to open source, helm chart for taiga, ability to import an on prem certificate authority certificate chain
OIDC is always preferred if possible. At this time in history not all projects have OIDC support, though some can be extended via an extension or plugin to accomplish the goal. I’ve got enough experience to help projects get over this hurdle and get OIDC working. If I could be paid just to help out open source projects I might go for it.
Here’s a pull request for a taiga helm chart I’ve been using. I’ve been using taiga for years via docker and am happy to be able to help out in this way now that I’m using kubernetes and helm charts. In this case a borrowed a technique from a nextcloud helm chart and works perfectly for this taiga helm chart: https://github.com/nemonik/taiga-helm/pull/6
Like rebuilding a Shinto shrine
Traditionally Shinto shrines are rebuilt exactly the same next to the old shrine every so many years. The old shrine is removed and when the time comes it will be rebuilt again.
Something similar can apply to home environments. Recently I nuked everything and rebuilt from the ground up. Something I’ve always done after 6 months or a year, for security reasons and to ensure I am always getting the fastest performance from infrastructure.
Such reinstalling is a natural fit for kubernetes. There are several methods for spinning up a cluster, and after that just by the nature of kubernetes being yaml files it is easy to spin up the services you had running before, and watch them self register in the new dns and self generate certificates with the new active directory certificate authority. Amazing. Kubernetes is truly, a work of art.
