diff --git a/content/slides/cri/devops.html b/content/slides/cri/devops.html index 2d8e4c01b7a4b3c386f442c359892bc90bb3ae1f..242d07ffd51ed958c2e348c76f89f1a569a0dd0c 100644 --- a/content/slides/cri/devops.html +++ b/content/slides/cri/devops.html @@ -97,6 +97,14 @@ data-charset="utf-8"> </section> </div> + <div class="slides"> + <section data-markdown="md/backup.md" + data-separator="^\n\n\n" + data-separator-vertical="^\n\n" + data-separator-notes="^Note:" + data-charset="utf-8"> + </section> + </div> <div class="slides"> <section data-markdown="md/openstack.md" data-separator="^\n\n\n" diff --git a/content/slides/cri/md/pve.md b/content/slides/cri/md/pve.md index 4b8737588c7253a31a01175f362cd8d771309771..3e9810bea76c699a2c66b2168ed002a63ff7f844 100644 --- a/content/slides/cri/md/pve.md +++ b/content/slides/cri/md/pve.md @@ -1,3 +1,68 @@ # Proxmox ## aka pve + + +## Proxmox + +* 10 ans + + +## interfacer avec le LDAP + +# https://forum.proxmox.com/threads/how-to-transfer-large-iso-to-proxmox.455/ + +iptables -t nat -I PREROUTING -d 37.59.57.58 -p tcp --dport 443 -j DNAT --to-destination 37.59.57.58:8006 + +apt install iptables-persistent + +service iptables save + +# https://pve.proxmox.com/wiki/HTTPS_Certificate_Configuration_(Version_4.x,_5.0_and_5.1) + +# https://pve.proxmox.com/wiki/Storage:_Directory + +vi /etc/pve/storage.cfg + +dir: local + path /var/lib/vz + vgname pve + content iso,vztmpl,backup,rootdir,images + +service pvestatd restart + + +# https://pve.proxmox.com/wiki/Cloud-Init_FAQ + +Hardware > Add > loudInit Drive + +SCSI / 0 / local + + +# https://pve.proxmox.com/wiki/Cloud-Init_Support + +# create local-lvm (https://pve.proxmox.com/wiki/Storage) + + +# download the image +wget https://cloud-images.ubuntu.com/bionic/current/bionic-server-cloudimg-amd64.img + +# create a new VM +qm create 9001 --memory 2048 --net0 virtio,bridge=vmbr0 + +# import the downloaded disk to local-lvm storage +qm importdisk 9001 bionic-server-cloudimg-amd64.img local + +# finally attach the new disk to the VM as scsi drive +qm set 9001 --scsihw virtio-scsi-pci --scsi0 local:vm-9001-disk-0 + +qm set 9000 --ide2 local:cloudinit +qm set 9000 --boot c --bootdisk scsi0 +qm set 9000 --serial0 socket --vga serial0 +qm template 9000 + +Deploying Cloud-Init Templates + +qm clone 9000 123 --name isp +qm set 123 --sshkey /root/limosadm.pub +qm set 123 --ipconfig0 ip=10.0.10.123/24,gw=10.0.10.1 diff --git a/content/slides/cri/md/vault.md b/content/slides/cri/md/vault.md index 6803241c8db0e3a95f8d838b7a3d45633a2ffa1d..92d7c80411d17374156800d4613ad3260c42c23d 100644 --- a/content/slides/cri/md/vault.md +++ b/content/slides/cri/md/vault.md @@ -72,7 +72,7 @@ vault secrets enable -path=cri kv vault kv enable-versioning secret/ # kv2 ``` -* les secrets sont versionnés +* les secrets sont versionés * il est possible d'utiliser PATCH et pas seulement PUT ```shell @@ -172,8 +172,8 @@ $ vault kv get secret/tokens # à chaque put on écrase les entrées qu'on ne r $ vault kv get secret/tokens -format=json $ vault kv get secret/tokens -format=json | jq .data $ vault kv get secret/tokens -format=json | jq .data.password -$ vault kv put secret/tokens root=$(openssl rand -base64 25) -$ vault kv patch secret/tokens root1=$(openssl rand -base64 25) +$ vault kv put secret/tokens password2=$(date | sha256sum | cut -c -50) +$ vault kv patch secret/tokens password1=$(date | sha256sum | cut -c -50) $ vault delete secret/tokens ``` diff --git a/content/slides/cri/pve.html b/content/slides/cri/pve.html new file mode 100644 index 0000000000000000000000000000000000000000..5331c15a6eab7254a464a4de32deae6dcdef4af4 --- /dev/null +++ b/content/slides/cri/pve.html @@ -0,0 +1,59 @@ +<!doctype html> +<html> + <head> + <meta charset="utf-8"> + <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> + + <title>pve</title> + + <link rel="stylesheet" href="../../node_modules/reveal.js/css/reveal.css"> + <link rel="stylesheet" href="../../node_modules/reveal.js/css/theme/white.css"> + + <!-- Theme used for syntax highlighting of code --> + <link rel="stylesheet" href="../../node_modules/reveal.js/lib/css/zenburn.css"> + <link rel="stylesheet" href="../../node_modules/font-awesome/css/font-awesome.min.css"> + <link rel="stylesheet" href="../main.css"> + + <!-- Printing and PDF exports --> + <script> + var link = document.createElement( 'link' ); + link.rel = 'stylesheet'; + link.type = 'text/css'; + link.href = window.location.search.match( /print-pdf/gi ) ? '../../node_modules/reveal.js/css/print/pdf.css' : '../../node_modules/reveal.js/css/print/paper.css'; + document.getElementsByTagName( 'head' )[0].appendChild( link ); + </script> + </head> + <body> + <div class="reveal"> + <div class="slides"> + <section data-markdown="md/pve.md" + data-separator="^\n\n\n" + data-separator-vertical="^\n\n" + data-separator-notes="^Note:" + data-charset="utf-8"> + </section> + </div> + </div> + + <script src="../../node_modules/reveal.js/lib/js/head.min.js"></script> + <script src="../../node_modules/reveal.js/js/reveal.js"></script> + + <script> + // More info about config & dependencies: + // - https://github.com/hakimel/reveal.js#configuration + // - https://github.com/hakimel/reveal.js#dependencies + Reveal.initialize({ + controls: true, + progress: true, + history: true, + center: false, + dependencies: [ + { src: '../../node_modules/reveal.js/plugin/markdown/marked.js' }, + { src: '../../node_modules/reveal.js/plugin/markdown/markdown.js' }, + { src: '../../node_modules/reveal.js/plugin/notes/notes.js', async: true }, + { src: '../../node_modules/reveal.js/plugin/highlight/highlight.js', async: true, callback: function() { hljs.initHighlightingOnLoad(); } } + ] + }); + </script> + </body> +</html>