Vesuvius dnsmasq netboot by mehbark · Pull Request #6 · vtluug/construct

mehbark · 2025-11-11T01:23:11Z

there's some minor problems

…ted addresses for dhcp clients on cluster vlan

this is hugely important and a major blocker

mikhail729

Incorrect cluster master IP address. Ideally the k3s server should only be listening on the cluster Vlan rather than all interfaces as well.

there's still some possible issues with the script (hence the paranoid `echo` after `hostname`)

mehbark · 2025-11-11T08:00:59Z

summary for myself tomorrow (yes i mean wednesday): there's some lingering bugs and misconfigurations + we need like fifty new readmes

kurisufriend · 2025-11-26T09:01:02Z

moved eri's commit to #11

…ping the store off the root ssd note that this is live on the machine, which *no longer has a native /nix*. this means that deploying any config which does not include the bind mount (e.g. master) will **break everything**. be duly warned.

… dns resolution

…tes services

mikhail729 · 2026-02-10T23:31:53Z

It looks like all the functionality we need for k3s and clustering. Once we get all the nodes up and running, we can clean up the configs and get everything merged into main

…med search-staging to search

…via https

…vtluug.org to avoid traefik rewriting redirect urls

…ing.

mehbarkand others added 4 commits October 23, 2025 01:36

vesuvius: netboot prospit
6e757d8

corrected netboot configuration to avoid interface leakage and correc…
3fcba78
…ted addresses for dhcp clients on cluster vlan

corrected dhcp interface
10ebb8f

hosts/vesuvius: change DNS domain from hephaestus to bastille
eb25e22
this is hugely important and a major blocker

kurisufriend requested changes Nov 11, 2025
View reviewed changes

Comment threadhosts/common/k3s-ports.nix Outdated
Comment threadhosts/common/k3s.nix Outdated
Comment threadhosts/vesuvius/k3s.nix Outdated

kurisufriend reviewed Nov 11, 2025
View reviewed changes

Comment threadhosts/common/k3s.nix Outdated

kurisufriend requested changes Nov 11, 2025
View reviewed changes

Comment threadhosts/bastille/blade.nix Outdated

mehbark added 5 commits November 10, 2025 20:37

hosts/common: refactor to remove k3s-ports.nix
56bf0e8

hosts/prospit: set k3s role
7128fff

hosts/vesuvius: become the k3s cluster init
4dc169a

hosts/common/k3s: refactor to take role and clusterInit args
194b9cb

hosts/prospit: be adopted by bastille
3845c0b

kurisufriend requested changes Nov 11, 2025
View reviewed changes

Comment threadhosts/common/k3s.nix Outdated

mehbark added 2 commits November 10, 2025 21:08

hosts/bastille: fix root password warning
3a8573f

hosts/bastille: automatically set hostname based on mac address
6041f78

mikhail729 requested changes Nov 11, 2025
View reviewed changes

Comment threadhosts/common/k3s.nix Outdated

hosts/bastille: add some actual names to auto-hostname
95545c0
there's still some possible issues with the script (hence the paranoid `echo` after `hostname`)

kurisufriend force-pushed the vesuvius-dnsmasq-netboot branch from b977dc7 to 95545c0Compare November 26, 2025 08:53

kurisufriendand others added 10 commits November 26, 2025 04:02

fix(common/k3s): use cluster routing IP for vesuvius
5364e33

Merge branch 'main' into vesuvius-dnsmasq-netboot
946ab79

Merge branch 'main' into vesuvius-dnsmasq-netboot
86cf66c

hosts/vesuvius: opened port 53 for dns
ba8cc98

flake: bump
77c1bbc

feat(hosts/vesuvius): working freeIPA client
a3db521

refactor(hosts/vesuvius): use roles/common stuff
790c86e

feat(common/nfs): mount dirtycow stuff
d220159

feat(hosts/vesuvius): include dirtycow mounts
a0c8787

mikhail729 added 4 commits February 8, 2026 01:26

flake.nix: removed depreciated arguments in favor of their replacements
1922943

update kubernetes manifests with correct configuration for the cluster
19c250e

hosts/{vesuvius,bastille,common}: fixed nfs to cluster and fixed slow…
babdacd
… dns resolution

kube-manifests: split files into kubernetes configuration and kuberne…
9de0d2d
…tes services

mikhail729and others added 25 commits February 13, 2026 15:00

hosts/vesuvius: added caddy bindmount for persistent caddy state
92014ca

hosts/vesuvius: changed caddy to use production lets encrypt and rena…
f08a512
…med search-staging to search

kube-manifests: pinned search to vesuvius
002ce33

hosts/vesuvius: changed caddy to foward host header as is to cluster …
8afded8
…via https

kube-manifests: changed ingress hostnames to be direct subdomains of …
7de5a8b
…vtluug.org to avoid traefik rewriting redirect urls

kube-manifests: uncommented hack to re-enable https for opensearch
e5fa390

kube-manifests: fixed nfs and added bash
46eb183

kube-manifests: add vtluug-site manifest
11ba801

kube-manifests/vtluug-site: switch ingress to vtluug.org
d92ae93

vesuvius/caddy: port main site
e420481

keys: add my non-yubi pubkey
abc7718

feat(k8s): sops secret framework, with mediawiki secrets as demo
ad3ba68

feat(k8s): add wiki
8fc09fb

fix(k8s/secrets): decrypted secrets should be 0600
1b27fe5

feat(k8s/secrets): add bash-secrets
7ccd121

fix(k8s/wiki): muddle with permissions
99a4e5c

fix(k8s/wiki): don't chown db (nfs squashroot: you can't!)
c0be97d

fix(vesuvius/caddy): switch handle_path /w/ to handle. caddy is annoy…
8653b1b
…ing.

fix(k8s/wiki): image path rewrite
4969dcd

fix(vesuvius/caddy): gobblerpedia should use HTTP acme challenges
11f6704

k8s/secrets: recipients file
5ccea04

fix(vesuvius/nfs): may god have mercy on our souls
5ccc95a

fix(kube/wiki): pin maria to 12.2.2
f9ae1c0

fix(vesuvius/network): new ip
383e5cc

fix(vesuvius/caddy): use vesuvius for dns
b344bfa

Navigation Menu

Uh oh!

Vesuvius dnsmasq netboot - #6

Vesuvius dnsmasq netboot#6
mehbark wants to merge 72 commits into
mainfrom
vesuvius-dnsmasq-netboot

mehbark commented Nov 11, 2025

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

mikhail729 left a comment

Uh oh!

Uh oh!

mehbark commented Nov 11, 2025

Uh oh!

kurisufriend commented Nov 26, 2025

Uh oh!

mikhail729 commented Feb 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

mehbark commented Nov 11, 2025

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

mikhail729 left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

mehbark commented Nov 11, 2025

Uh oh!

kurisufriend commented Nov 26, 2025

Uh oh!

mikhail729 commented Feb 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants