tomas.io
Hands-on write-ups of the infrastructure I build and break. About CV
What this site is: hands-on write-ups of the infrastructure I build and break.
- Ring 0 · Core · 9 posts
The machine, from nothing to SSH: Fedora, libvirt, the base image, VM storage, open networks.
- Ring 1 · Platform · 2 posts
Kubernetes itself: kinc across machines, the API and Services behind BGP VIPs, storage, and the routing underneath.
- Ring 2 · Operate · 0 posts
Running it: every change recorded, failures on purpose, eBPF below the API, the datapath, scaling under load.
- Ring 3 · App · 2 posts
What runs on it.
- Latest Base image Fedora 45 · Ring 0 · Core
Ring 0 · Core
The machine, from nothing to SSH: Fedora, libvirt, the base image, VM storage, open networks.
Back to the lab
A new series: one Kubernetes cluster across several machines, built from nothing on Fedora 45, then broken on purpose and measured.
Try Fedora 45
An unattended Fedora 45 install on KVM: a kickstart file, a preallocated raw disk, one virt-install command, and an SSH key instead of a password.
VM storage for etcd
Where a hypervisor keeps its VM disks decides how fast etcd can commit. One flush, counted through every layer: filesystem, image format, cache mode, and nesting.
Libvirt Setup Fedora 45
f45-min becomes a hypervisor: system libvirt for one user through one polkit rule, and a raw XFS disk for VM images.
Base image Fedora 45
One sealed Fedora 45 install, and thin clones of it that each become their own machine on first boot, with cloud-init.
From 2020
Ring 1 · Platform
Kubernetes itself: kinc across machines, the API and Services behind BGP VIPs, storage, and the routing underneath.
From 2020
Ring 3 · App
What runs on it.
