Fedora on Apuntes de root

SNI-based load balancing with HAProxy

jorti@pm.me (Juan Orti Alcaine) — Sun, 06 Sep 2020 00:00:00 +0000

In a bare-metal Openshift installation you need to use an external load balancer to access the API and other services. In my hone lab I also have a webserver accesible from the Internet. I also don’t want to terminate the TLS connections in the load balancer to keep using the existing certificates in my webserver and Openshift cluster.

With these requirements in mind, I chose HAProxy to be my frontend load balancer, so all the HTTPS connections to my public IP will be diverted to the appropriate server examining the SNI field in the TLS connection.

PXE server in Fedora with dnsmasq

jorti@pm.me (Juan Orti Alcaine) — Fri, 04 Sep 2020 00:00:00 +0000

I’m currently doing many tests with the Openshift bare-metal installation, and as I’m creating and destroying the VMs again and again, having a PXE server to provide the installation images and configuration to the VMs is very handy and saves a lot of time.

This is an example of my PXE configuration mounted on a Fedora box that acts as router.

Installing and configuring Folding@Home in Fedora

jorti@pm.me (Juan Orti Alcaine) — Tue, 17 Mar 2020 00:00:00 +0000

I’ve recently joined the computational effort of Folding@Home for disease research, I want to share some of the modifications I’ve done to run it in Fedora more comfortably.

Capture Raspberry Pi kernel crashes

jorti@pm.me (Juan Orti Alcaine) — Thu, 17 Jan 2019 00:00:00 +0000

I’m experiencing kernel panics in a headless Raspberry Pi with Fedora 29 Server and need a way to capture what is happening.

First I tried to enable kdump, but this doesn’t seem possible. If someone has done it, I’d like to hear.

What I’m using now, is enabling netconsole to log all the kernel messages over the network to a rsyslog server. This is the config in the Pi:

/etc/modules-load.d/netconsole.conf:

Internet connection sharing with NetworkManager

jorti@pm.me (Juan Orti Alcaine) — Tue, 22 Nov 2016 00:00:00 +0000

With this recipe we will create a wireless access point in our laptop to share our wired Internet connection. This is quite useful where you only have a wired Internet connection (e.g. my work place) for giving access to your phone.

This is done in Fedora 25 Workstation with NetworkManager.

Monitor Salicru SPS SOHO+ UPS with NUT

jorti@pm.me (Juan Orti Alcaine) — Mon, 14 Nov 2016 00:00:00 +0000

I’ve successfully monitored a Salicru SPS SOHO+ UPS with NUT following these steps.

In this example I have two Fedora servers, a master where the UPS is connected by USB and a client which is also powered by this UPS but monitors its status by network. With the default configuration the clients will be powered down in an outage when the battery reaches critical levels.

Sandbox Steam running it under a different account

jorti@pm.me (Juan Orti Alcaine) — Thu, 14 Jul 2016 00:00:00 +0000

To improve my system’s security, I’ve configured Steam to be run as a different Linux account. This guide is inspired in this thread.

Hacer funcionar el DNIe (Spanish electronic ID card) en Fedora 23

jorti@pm.me (Juan Orti Alcaine) — Wed, 16 Dec 2015 00:00:00 +0000

Hoy me ha llegado el aviso de que me iba a caducar el certificado de la FNMT, y en el proceso de renovación me obligaban a autenticarme con el DNIe, por lo que he tenido que repasar todo este tema.

La última vez que lo usé, tuve que compilar a mano los módulos de OpenDNIe y hacer unos cuantos malabares. Por fortuna, parece que la integración del proyecto con opensc ha dado sus frutos y no he tenido que usar ningún tipo de magia negra esta vez.

Tips for running Fedora in a Raspberry Pi 2

jorti@pm.me (Juan Orti Alcaine) — Wed, 29 Jul 2015 00:00:00 +0000

This is a list of tips I’m using while running Fedora in my Raspberry Pi 2.

OpenDNSSEC

jorti@pm.me (Juan Orti Alcaine) — Tue, 28 Jul 2015 00:00:00 +0000

A quick guide about how to migrate a signed zone from dnssec-tools to OpenDNSSEC.

How to run gitweb and git-http-backend with Nginx in Fedora

jorti@pm.me (Juan Orti Alcaine) — Mon, 01 Jun 2015 00:00:00 +0000

I’ve configured my own web frontend for git using gitweb and git-http-backend.

I wanted to use Nginx as the webserver, but unfortunately there was a piece of software missing: fcgiwrap. It’s packaging is a work in progress, so I have packaged it myself and now it is available in this copr, so you can download it from there.