Vesuvius dnsmasq netboot - #6

Merged

kurisufriend merged 101 commits into

mainfrom

vesuvius-dnsmasq-netboot

Sep 14, 2026

Commits on Oct 23, 2025

vesuvius: netboot prospit
mehbark
committed
6e757d8

Commits on Nov 11, 2025

corrected netboot configuration to avoid interface leakage and corrected addresses for dhcp clients on cluster vlan

mikhail729
authored and
mehbark
committed
3fcba78
corrected dhcp interface

mikhail729
authored and
mehbark
committed
10ebb8f
hosts/vesuvius: change DNS domain from hephaestus to bastille
mehbark
committed
eb25e22
hosts/common: refactor to remove k3s-ports.nix
mehbark
committed
56bf0e8
hosts/prospit: set k3s role
mehbark
committed
7128fff
hosts/vesuvius: become the k3s cluster init
mehbark
committed
4dc169a
hosts/common/k3s: refactor to take role and clusterInit args
mehbark
committed
194b9cb
hosts/prospit: be adopted by bastille
mehbark
committed
3845c0b
hosts/bastille: fix root password warning
mehbark
committed
3a8573f
hosts/bastille: automatically set hostname based on mac address
mehbark
committed
6041f78
hosts/bastille: add some actual names to auto-hostname
mehbark
committed
95545c0

Commits on Nov 26, 2025

fix(common/k3s): use cluster routing IP for vesuvius
kurisufriend
committed
5364e33

Commits on Dec 9, 2025

Merge branch 'main' into vesuvius-dnsmasq-netboot
kurisufriend
committed
946ab79
Merge branch 'main' into vesuvius-dnsmasq-netboot
kurisufriend
committed
86cf66c

Commits on Jan 11, 2026

!!breaking!! vesuvius/zfs: bind mount dataset /forge/nix to /nix, keeping the store off the root ssd
kurisufriend
committed
4e48b2b

Commits on Jan 22, 2026

hosts/vesuvius: opened port 53 for dns
mikhail729
committed
ba8cc98

Commits on Jan 23, 2026

flake: bump
kurisufriend
committed
77c1bbc
feat(hosts/vesuvius): working freeIPA client
kurisufriend
committed
a3db521
refactor(hosts/vesuvius): use roles/common stuff
kurisufriend
committed
790c86e
feat(common/nfs): mount dirtycow stuff
kurisufriend
committed
d220159
feat(hosts/vesuvius): include dirtycow mounts
kurisufriend
committed
a0c8787
hosts/vesuvius: added dhcp-host entries for netboot nodes
mikhail729
committed
946dbc4
hosts/bastille: disabled eno1 on lenovo nodes and removed auto-hostname script in favor of dhcp hostnames
mikhail729
committed
59c9833

Commits on Jan 30, 2026

Commits on Feb 2, 2026

Commits on Feb 3, 2026

hosts/{vesuvius,bastille}: opened ports for kubernetes intercluster communications
mikhail729
committed
5d8d2b2

Commits on Feb 5, 2026

Commits on Feb 7, 2026

hosts/{vesuvius, common}: added public addresses and nftables firewall
mikhail729
committed
c378e77

Commits on Feb 8, 2026

Commits on Feb 9, 2026

Commits on Feb 10, 2026

kube-manifests: split files into kubernetes configuration and kubernetes services
mikhail729
committed
9de0d2d

Commits on Feb 13, 2026

hosts/vesuvius: added caddy bindmount for persistent caddy state
mikhail729
committed
92014ca

Commits on Feb 18, 2026

Commits on Feb 24, 2026

Commits on Feb 26, 2026

kube-manifests: fixed nfs and added bash
mikhail729
committed
46eb183

Commits on Mar 8, 2026

kube-manifests: add vtluug-site manifest
kurisufriend
committed
11ba801
kube-manifests/vtluug-site: switch ingress to vtluug.org
kurisufriend
committed
d92ae93
vesuvius/caddy: port main site
kurisufriend
committed
e420481

Commits on Mar 17, 2026

keys: add my non-yubi pubkey
kurisufriend
committed
abc7718
feat(k8s): sops secret framework, with mediawiki secrets as demo
kurisufriend
committed
ad3ba68
feat(k8s): add wiki
kurisufriend
committed
8fc09fb
fix(k8s/secrets): decrypted secrets should be 0600
kurisufriend
committed
1b27fe5
feat(k8s/secrets): add bash-secrets
kurisufriend
committed
7ccd121
fix(k8s/wiki): muddle with permissions
kurisufriend
committed
99a4e5c
fix(k8s/wiki): don't chown db (nfs squashroot: you can't!)
kurisufriend
committed
c0be97d
fix(vesuvius/caddy): switch handle_path /w/ to handle. caddy is annoying.
kurisufriend
committed
8653b1b
fix(k8s/wiki): image path rewrite
kurisufriend
committed
4969dcd
fix(vesuvius/caddy): gobblerpedia should use HTTP acme challenges
kurisufriend
committed
11f6704

Commits on Mar 19, 2026

k8s/secrets: recipients file
kurisufriend
committed
5ccea04

Commits on Jul 6, 2026

fix(vesuvius/nfs): may god have mercy on our souls
kurisufriend
committed
5ccc95a

Commits on Jul 19, 2026

fix(kube/wiki): pin maria to 12.2.2
kurisufriend
authored
f9ae1c0

Commits on Jul 22, 2026

fix(vesuvius/network): new ip
kurisufriend
committed
383e5cc
fix(vesuvius/caddy): use vesuvius for dns
kurisufriend
committed
b344bfa

Commits on Sep 11, 2026

Commits on Sep 12, 2026

removed dns/dhcp from vesuvius
Isotton1
committed
dedaba6
Merge pull request #9 from vtluug/cisco-config

mikhail729
authored and
kurisufriend
committed
87c66b8
bastille/cisco-switch: enable ssh management
kurisufriend
committed
7eeb306
bastille/cisco-switch: document and reconfigure
kurisufriend
committed
a2cfed2
feat(bastille/arista): add switch cfg, document
kurisufriend
committed
9c2c4b5
vesuivus/network: remove reference to vesuvius' second uplink into the now nonexistent l3 routed 10.98.3.0/24 net
kurisufriend
committed
27abfc2
vesuvius/network: add static route ip
kurisufriend
committed
98ca05b
vesuvius/netboot: switch to eno0. this happens on the frontend network now
kurisufriend
committed
60bbdcd
vesuivus: fix k3s with new interface(s)
kurisufriend
committed
003ced3
added all the blades mac addrs
Isotton1
committed
05409fc
bastille/blades: bond ports, set up static routing via oneshot service, k3s works
kurisufriend
committed
817bb8e
removed .3 stuff from caddy
Isotton1
committed
75a59ef
added .3 stuff from caddy
Isotton1
committed
e3efc38
secrets: add sealed host key for eyelander
kurisufriend
committed
24b4308
fixed caddy<->vesuvius networking
Isotton1
committed
d450385
blades: add tpm 1.2 unsealing mechanism
kurisufriend
committed
9b79aaa

Commits on Sep 13, 2026

blades: tpm 1.2 unseal ssh host key for agenix
kurisufriend
committed
88a9068
blades: install node password from agenix secret
kurisufriend
committed
a64897c
common/k3s: set flannel iface for agent nodes too
kurisufriend
committed
15f9875
kube: renumber vesuvius, use shellshock for dns
kurisufriend
committed
f34101d
blades/unseal: generate an ephemeral host key as a fallback if we don't have a key for it (or it doesn't have an intialized tpm)
kurisufriend
committed
5afea18
magma: turn off spanning tree
kurisufriend
committed
9e816ea
secrets: the remaining blades
kurisufriend
committed
e99ebde

Commits on Sep 14, 2026