Subtitle: Mastering Declarative Configuration Options If you’ve spent any time operating Kubernetes in production, you’ve hit the Wall of YAML. Helm charts nested inside other Helm charts, Kustomize overlays overriding overlays, and a sea of copy-pasted boilerplate that slowly drifts across dev, staging, and production environments. Most platform engineering teams try to solve this with more … ... read more »
gopass is a modern, interactive UNIX password manager wrapper designed for secure, multi-store (e.g., combining independent stores like personal and acme for work), and Git-native secret operations. This guide covers setting up gopass from foundation to team-mount configuration utilizing age encryption. [!TIP] Since gopass is fully backward-compatible with the standard pass directory structure and … ... read more »
In 2025, after 15 years of utilizing Zsh, I finally made the switch to Fish Shell . It has quickly proven itself to be an incredibly fast, highly interactive, and absolute favorite everyday terminal companion. All of my custom configurations, abbreviations, prompt settings, and custom functions can be found inside my dotfiles repository: 👉 epcim/dotfiles - Fish Configuration & Functions … ... read more »
A declarative dotfiles manager like chezmoi allows you to securely manage personal configurations across multiple workstations. Here is a practical quick-start setup and cheat sheet for daily operations. 🛠️ Initialization & Prerequisites# If Homebrew is not installed yet on your system, bootstrap it first: cd $HOME git clone https://github.com/Homebrew/brew homebrew curl -L … ... read more »
This article details my practical reference guide for iPXE Bare-Metal Bootstrap & Kickstart over HTTP/DHCP, originally published as a secure GitHub Gist snippet. 🛠️ Section 1: Basic Ubuntu Autoinstall via DHCP# 1. Fetching the Source & Building the Custom iPXE Image# First, clone the official iPXE repository: git clone http://git.ipxe.org/ipxe.git cd ipxe/src 2. Creating the Embedded Boot … ... read more »
This article covers UNIX Password Manager (pass) Cheat Sheet and Getting Started Guide, originally published as a secure GitHub Gist snippet. pass cheat sheet/guide# Getting started guide to the unix password manager pass. Manage gpg encripted passwords (files) in a standar directory-like hierarchy. Such files can be copied or stored in a git repository. Requirements# Install pass (standard unix … ... read more »
This article covers OSX Workstation Tuning, El Capitan, originally published as a secure GitHub Gist snippet. OS X Preferences# most of these require logout/restart to take effect Enable character repeat on keydown# defaults write -g ApplePressAndHoldEnabled -bool false Set a shorter Delay until key repeat# defaults write NSGlobalDomain InitialKeyRepeat -int 12 Set a blazingly fast keyboard repeat … ... read more »
This article covers Vimdiff Cheat Sheet & Visual Code Merging Guide, originally published as a secure GitHub Gist snippet. vimdiff cheat sheet# ##git mergetool In the middle file (future merged file), you can navigate between conflicts with ]c and [c. Choose which version you want to keep with :diffget //2 or :diffget //3 (the //2 and //3 are unique identifiers for the target/master copy and … ... read more »
This article covers AWS EKS via eksctl, originally published as a secure GitHub Gist snippet. apiVersion: eksctl.io/v1alpha5 kind: ClusterConfig metadata: name: eksctl-us-west-2-managed region: us-west-2 vpc: id: vpc-0b953326cd7a2f917 subnets: public: us-west-2a: id: subnet-0947f8d8495f046d6 us-west-2c: id: subnet-0d4ae0a69651a70f3 #totally isolated subnets, no NAT private: us-west-2a: id: … ... read more »
TL;DR# My matrix looks like: # invoke.yaml - PyInvoke Configuration for Salted Containers Matrix Validation run: echo: true pty: true # Matrix build parameters for Salted containers matrix: distros: - ubuntu-22.04 - ubuntu-20.04 - debian-11 - debian-12 salt_versions: - "3006.1" - "3005.1" - "3004.2" engines: - reclass - saltclass # Default deployment / testing configuration … ... read more »
Dockerfile is nice, but it’s a puppet toy when it comes to scale. I am looking for a solution to consistently build many docker images with shared layers and consistent and predictable build workflow. TL;DR 🔗︎# My use-case is simple. I want to build matrix of docker images for kitchen-salt CI, containerized Salt-Master and bare-bone OS boilerplates. With Salt, salt formulas installed or without … ... read more »
Sum up all features on salt-formulas project (https://github.com/salt-formulas ). For the first, and only this time, for the whole year. The most features comes from Mirantis and it’s MCP product portfolio, however the public participation in the past year was also important. As the I generated it, and as I have done only limited post-processing the content might contain some formatting issues. … ... read more »
Flexible way to perform configuration management actions in the Helm chart’s. We uses years Salt, Chef, Ansible, … to do complex configuration steps, but when it came to implement a new feature in Helm Chart app folks once again tend to fall back to bash, curl and the Helm hell templates. TL;DR 🔗︎# My use-case is simple. I want to update Influxdb chart . and provide way to: create database … ... read more »
Three mens, one free week, roadtrip in Albania. Tirana, riviera, south and finally the transit Budapest. TL;DR 🔗︎# We planned the trip one week before we left. Albania is known for its raw nature, mountains, and coast. Visiting mountains in the north part at the mid of the October was not an option as the weather is colder and we wanted to travel light. We got nice recommendations from … ... read more »
This article is about encrypting Satl external pillars with NACL. TL;DR 🔗︎# Salt NACL is based on another SaltStack project libnacl , an wrapper for libsodium and Salt nacl resources (module , runner , renderer and ext_pillar ). Overview of merged features to develop branch: NACL module, runner (around 2015.x) NACL update with secretbox, sealedbox (around 2017/Aug) NACL render with boxed syntax … ... read more »
TL;DR# An overview how to implement salt-formula test's with kitchen-salt. Overview# In this article I will talk about writing and testing https://github.com/salt-formulas[salt-formulas ]. An curated collection of formulas behind salt-formulas community. The concepts however will fit to any salt formula. If you are interested in https://github.com/salt-formulas[salt-formulas ] read more at: … ... read more »
On ubuntu 16.04 is still an old version of OpenSSH client that don’t support include statement’s on it’s .ssh/config. I manage my dotfiles in git repos and one such is .ssh/config.d. The script below is capable take that repo as source and generate the configuration. ... read more »
Recently I wrote an handy script to pre-open byobu session window to most of the minions. And split pane on each minion that create’s cluster. ... read more »
Docker Swarm# I have been working closely with TCP Cloud in my spare time during past weeks to evaluate Docker Swarm cluster orchestration. Kind of easy level to get some insight into the product and it’s bugs ;). Yeah.. it’s not production ready yet! Anyway I am going to deliver a sweet talk and open discussion at today’s Docker Meetup (Prague). For these who may concern the presentation is … ... read more »
LEVEL DEVil workshops# Running a DevOps workshop for Poland colleagues in March was a one thing but from a day one I was quite sure I will do have to repeat it locally. Practicing DevOps and Continuous Delivery in company as IBM and for the enterprise customers might be a tough task. That’s nothing about enterprises, IBM is actually on a global level doing pretty much well in my eyes in the kind … ... read more »
DevOps workshop with Chef# At the end of the 2015 I was asked by IBM colleague from Poland who is leading a team of Java developers to develop and deliver a DevOps workshop. I took a challenge and delivered March 9-10 in Warsaw personally. The slides from the event are available at: http://slides.com/petrmichalec/devops-workshop Agenda 🔗︎# At first quite challenge as the DevOps topic is so wide, … ... read more »
Work in progress… I am now working on DevOps workshop that would show up Chef, Consul, Docker possibilities in DEV and orchestration together with KitchenCI and InSpec testing and auditing. As a first stage I created my own version for DevOps kung-fu presentation: http://slides.com/petrmichalec/epcim-devops-cult DevOpsKungFu presentation Note: this was originaly presented by Adam Jacob / CTO of … ... read more »
The url: https://gist.github.com/epcim One simple example by many ... read more »
As my Django site from 2006 or so went recently south I decided to to make it up from scratch. Original apealive.net website Even though I am now pretty solid in DevOps, applying it on low frequency used blog and keeping django running for years it’s overhead. I will rather spend that one with my kids. Sorry loved #django #python ;-(. On the other hand, during the time, I wrote few pages using … ... read more »
Expecting BABE, promo poster & trailer. Welcome BABE Došlo k chybě.# Nelze spustit JavaScript. \ ... read more »
Mikuláš pictures leaked - PDF. ... read more »
Jsme tři! A vy jste od 21:46 pasovaný na prarodiče, strýce a tetky. Měříme 51cm, Vážíme 3020g a jmenujeme se Mikuláš Michalec. Adrika i Mikuláš jsou v pořádku. Prý brnkačka za dvě kačky (říkali sestřičky). APe a M ... read more »
In the last year we were looking for new place for living. Today we just purchased it. The ground is located in Stará Boleslav and quite close to city center. We also have some pictures how it may look like once finished. Friends: ehm... The opening party is not yet planed :-) ... Location# http://mapy.cz/s/4KIH Plans# Hope, you like it as we do! ... read more »
Nechali jsme si u Markéty S. udělat krásné fotky naší rozinky a její rodiny. A myslíme moc se to povedlo. Adrika měla jako vždy bezva náladu a tak to fakt jelo. Sluší jim to moc. APe se tam nakonec raubíř taky vnutil. Jak jinak. My už máme jasno. U fotografa zastavíme pravidelně. Není nad pořádný fotky! On a Ona She and He Spot the APe ... read more »
Saturday was last ride this year. Rychlik p 1831 Jordán odjídí z Praha hl.n. v 8:43. Vlak nečeká na žádné přípoje. Uschova během přepravy rozířená přeprava spoluzavazadel, předevím jízdních kol. Praha-Hostivař 8:56 Čerčany 9:21 Beneov u Prahy 9:31 Střezimíř 10:14 Ve ctvrt na jedenact vyrazime ze zastavky Strezimir a pojedeme po hrebenech nad Prciceme pres Sedlcany na Neveklov, smerem k Sazave a … ... read more »
Some our friends says.. we haven't seen you with your Yeti yet. So here we go with pictures. Three months back we did bought Skoda Yeti 2.0 TDI. Eye-candy, isn't it? ... read more »
With feelings of "just" longer vacation we are back at home country. Adriana noted that it's cold and a minute later paced a question When this Europe vacation ends? Just for all our readers. We are in CR since 25.12. Since that time to Feb 06 we have been staying in our flat over night just for one night. Seems we are still live like an backpackers :-D. Sure there was couple of reasons … ... read more »
Vydávám pdf verzi pamětí mojí babičky. Je to rodiná záležitost, ale třeba se najde i někdo jiný kdo se začte. Sestavené to je tak jak jsem dostal nakázáno podle číslování. Na konci jsou pak různé články a dopisy které publikovala v tisku. Open publication - Free publishing ... read more »
Summary# I have managed to grab Questions and Answers from scanned PDF version of real grammar book and create an Anki deck from it. Although OCR was not perfect at all I was able to restore 50% of all exercises using some smart reg ex replacements in vim editor. Publishing final deck is not possible because of legal issues but I have decided to publish this how-to. Update: I have decided to … ... read more »
Working holiday on New Zealand - Y1m1# Autor: Petr Michalec, Adriana Michalcova Contacts: <a href="mailto:epcim@apealive.net" class="reference external">epcim@apealive.net, <a href="mailto:adrika@apealive.net" class="reference external">adrika@apealive.net Release info Notes about our working holiday on New Zealand in 2010. There is also a … ... read more »
Takže jsme se dali konečně do pohybu. Zatím uvádím kontakty kde jsme k zastižení. Blog z cest zatím publikujeme přes travelpod.com. internet telefon - (skype.com) cze_pmichalec email ape @ apealive.net (prijde to oboum) www stránky, blog http://apealive.net a http://www.travelpod.com/members/epcim chat/instant messaging epcim @ njs.netlab.cz (integruje jabber, icq, facebook) APe ... read more »
Patek 8.1.2010 Už se na Vás těšíme. Adrika slavi 18-tiny, Takze se sejdeme unas v 30pm. Akcicka, kalbicka. APe ... read more »
Je to nějakou dobu co jsem se zaměřil na výběr aplikace co by mi opět pomohl zapomenout zapomínat. Tenhle post jsem připravil jako návod pro všechny kamarády, kdo budou mít zájem se do toho taky pustit. Tak před deseti lety jsem si pořídil [1]_ sw Supermemo na učení anglických slovíček. Nutno dodat, že v tomhle oboru mám jen ty nejlepší zkušenosti. Za rok a půl jsem natřískal do hlavy přes 4000 … ... read more »
If nothing else, our first dance is online: https://www.youtube.com/watch?v=TgyVdBeBVgk Došlo k chybě.# Nelze spustit JavaScript. \ ... read more »
Tak jsem právě nahrál novou verzi webu. Lucka s Karlem mne určitě utlučou, že jsem raději neupravoval fotografie z "večerníčkové" akce. Na ty se ovšem taky těším, takže jsou hned v pořadí. Co je na webu nového. Dokončena stránka tagů, upravena stránka bookmarků, lehce vylepšen vzhed a konečně podpora captcha fieldu u komentářů, takže konec spamům. ... read more »
Potřeboval jsem odstranit diakritiku z názvů souborů. Pod winxp s cygwinem (tr viz dále nefungoval a o příkazu unaccent jsem nevěděl). PS: Filtruji .svn adresáře. S unaccent by to bylo asi výrazně rychlejší. IFS je asi zbytečné. Umí si poradit s duplicitami. Adresáře neřeší. Výsledek vypadá takto: #!/bin/bash srcenc=cp1250 SAVEIFS=$IFS IFS=$(echo -en “\n\b”) if [ $# -eq 0 ];then echo “Usage: $0 … ... read more »
Znáte to, občas je dobré si nějaká slovíčka zopakovat. Hledal jsem nějaký pěkný opensource co by mi vynahradil dnes už poněkud zastaralé a v linuxu nepodporované Supermemo . No a našel jsem minimálně dva pěkné kousky. Tak za týden se podělím o zkušenosti, teď mě čeká konverze znalostní databáze supermemo2004 do Q&A formátu co schroustají ty první dva. Anki - http://ichi2.net/anki/index.html … ... read more »
Rozlučku organizuje svědek. Pozvaní dostali email, ostatní pokud jsem na někoho zapomenul, se tedy dostaví jako překvapení :-D** Termín : 11.4.2009 Plán : Odpolední program - motokáry v Letňanech - http://www.motokary.com Večerní program - "Na zlatou pivní Štreku Prahou" Možná a pravděpodobná zastavení U Černého vola, Loretánské nám. 1 U Jelínka, Charvátova 1 U Zlateho Tygra, H usova 17 … ... read more »
Ahoj, dnes prakticky. Všichni fotíme. Mám v rukávu pár triků pro manipulaci s exif informací uloženou ve fotografii. Při zpracování fotek z Thajska jsem měl záběry z cca pěti fotoaparátů. Někteří autoři měnili čas fotoaparátu během přejezdů čaosových zón, jiní ne. Bylo třeba hromadně opravit čas ve všech fotkách a pokud možno dosáhnout jednotného řazení fotek v adresáři pro příjemné procházení. … ... read more »
Rodinám a kamarádům - pár linků kde nás můžete sledovat na naší cestě: http://picasaweb.google.com/ape.prague/Thailand09_APeHroch http://picasaweb.google.com/ape.prague/Thailand09 Kde jsme co děláme se budeme snažit prezentovat na travelpod , menší denní události - pokud se dostaneme k internetu pak zde twitter . V pondělí 26.1.2009 v 15:00h nám letí letadlo z Mnichova do Dubaje. Ráno pak letíme … ... read more »
** Adriana Dlouhá a Petr Michalec oznamují den svého sňatku 24.4.2009 v 15hod v Dřevčické tvrzi Dostaveníčko | Cesta | Program | Dary | Rozlučka | Kontakty | Karaoke Aktualizováno: 23/03/2009 - [A] Prosíme všechny pozvané o potvrzení účasti emailem na ape (At) apealive.net. [B] Link na fotografie z pozvánky . [C] Všechna práva vlastníka, výrobce a vlastníků autorských práv k dílům na naší pozvánce … ... read more »
Wau .. it just works. As was expected. Unbelievable 3:-o We are ready to begin. Let's go explore and generate bugs. huh.. And of course many thanks to folks behind: django, python, vim, linux, dojo and all other stuff I used. PMi ... read more »