IRC chat logs for #ltsp on irc.libera.chat (webchat)


Channel log from 13 August 2020   (all times are UTC)

00:03vagrantc has left IRC (vagrantc!~vagrant@unaffiliated/vagrantc, Quit: leaving)
02:16clntkhtru has joined IRC (clntkhtru!57e15846@wc.42120015012.clnt.kht.ru)
02:30clntkhtru has left IRC (clntkhtru!57e15846@wc.42120015012.clnt.kht.ru)
06:47vsuojanen has left IRC (vsuojanen!~vsuojanen@cable-hml-58568f-194.dhcp.inet.fi, Ping timeout: 240 seconds)
06:49vsuojanen has joined IRC (vsuojanen!~vsuojanen@cable-hml-50dda4-246.dhcp.inet.fi)
07:25kvaps has joined IRC (kvaps!2e1c6842@wedos.wedos.net)
07:30
<kvaps>
it seems there is some bug in ubuntu's network_configuration script in initramfs-tools
07:30
https://gist.github.com/kvaps/83cedefb9b1605fda91d75cdb778a716#file-initramfs-no-ip-console-L591-L744
07:32
`ip: SIOCGIFFLAGS: No such device` look like that the device does not yet exists when dhclient is called
07:33
oh it exists , but renamed to eno1 previusly
07:34RaphGro has joined IRC (RaphGro!~raphgro@fedora/raphgro)
08:18
<kvaps>
yep there is a race between mlx4_en and dhclient
08:43
`modprobe af_packet; wait_for_udev 10` solved problem
09:11woernie has left IRC (woernie!~werner@p5b296b80.dip0.t-ipconnect.de, Ping timeout: 256 seconds)
09:12woernie has joined IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de)
11:54gvy has joined IRC (gvy!~mike@altlinux/developer/mike)
12:20
<kvaps>
alkisg: it was amazing journey to find and solve this race conditions, after I found how nfsroot developers are doing that *facepalm*
12:21
the just run configure_networking in a loop
12:26gvy has left IRC (gvy!~mike@altlinux/developer/mike, Quit: apt-get install hexchat)
12:27adrianorg has joined IRC (adrianorg!~adrianorg@189.114.158.29)
12:31adrianor1 has left IRC (adrianor1!~adrianorg@179.177.213.222.dynamic.adsl.gvt.net.br, Ping timeout: 256 seconds)
12:31gvy has joined IRC (gvy!~mike@altlinux/developer/mike)
13:07
<alkisg>
kvaps: hehe, been there, done that :D
13:07
At one time my own implementation of "configure_networking" was much more stable than the one in initramfs-tools...
13:08
But they play with it so much that it's not worth to try to keep up with all the changes...
13:08
<kvaps>
Yep also initramfs-tools for debian and ubuntu are bit different
13:09
<alkisg>
Ubuntu got netplan so they changed it quite a bit
13:09
dhclient is better than ipconfig, but it should go upstream in debian, not downstream in ubuntu...
13:12
<kvaps>
I need to set an `HOSTS_x` variable for the ltsp applet from external file, do you think will `PRE_INIT_KUBERNETES_HOSTS=". /etc/ltsp/kubeadm-join.env"` work?
13:14
<alkisg>
Sure, also: echo HOSTS_X=blah > /usr/share/ltsp/client/applet/55-environment.sh
13:15
I.e. the external script can generate an ltsp script in that path
13:17
<kvaps>
Thanks, I'll try
13:17
Always wanted to ask, what do you use instead of RCFILE?
13:19
I usually ship the .service files with the ltsp.conf and installing them like this https://github.com/kvaps/kubefarm/blob/master/deploy/helm/kubefarm/templates/ltsp-configmap.yaml#L86-L90
13:24
<alkisg>
kvaps: POST_SERVICE_x="blah"
13:25
There's the `ltsp service` applet for that; it works on the server too
13:25
<kvaps>
got it
13:26
> also: echo HOSTS_X=blah > /usr/share/ltsp/client/applet/55-environment.sh That's pretty cool I can define new applets as a configmaps in kubernetes :D
13:27
<alkisg>
And if you're using multiple servers, [server-mac] parameters => also works to run different things on each server
13:28
<kvaps>
no-no my server is pretty stupid, there is just dnsmasq for tftp in single-port-mode and nginx, nothing else
13:36woernie has left IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de, Ping timeout: 256 seconds)
13:37woernie has joined IRC (woernie!~werner@p5b296b80.dip0.t-ipconnect.de)
14:28woernie has left IRC (woernie!~werner@p5b296b80.dip0.t-ipconnect.de, Ping timeout: 240 seconds)
14:29
<kvaps>
alkisg: cloud you trigger ltsp-cloud build pls?
14:30woernie has joined IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de)
14:33
<alkisg>
Done; off for now...
14:35
<kvaps>
thanks!
14:51RaphGro has left IRC (RaphGro!~raphgro@fedora/raphgro, Quit: Please remember your own message. It'll be read as soon as possible.)
14:52RaphGro has joined IRC (RaphGro!~raphgro@fedora/raphgro)
14:55woernie_ has joined IRC (woernie_!~werner@p5b296b80.dip0.t-ipconnect.de)
14:55woernie has left IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de, Ping timeout: 264 seconds)
15:08
<kvaps>
alkisg: is ltsp package required on the clients?
15:14woernie_ has left IRC (woernie_!~werner@p5b296b80.dip0.t-ipconnect.de, Ping timeout: 256 seconds)
15:16woernie has joined IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de)
15:20
<alkisg>
kvaps: no, but squashfs module needs to be in the initramfs (ltsp puts it there)
15:21
<kvaps>
ack
16:06woernie has left IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de, Ping timeout: 240 seconds)
16:06woernie has joined IRC (woernie!~werner@p5b296b80.dip0.t-ipconnect.de)
16:31kvaps has left IRC (kvaps!2e1c6842@wedos.wedos.net, Remote host closed the connection)
16:49vagrantc has joined IRC (vagrantc!~vagrant@unaffiliated/vagrantc)
17:14kvaps has joined IRC (kvaps!2e1c6842@wedos.wedos.net)
17:16
<kvaps>
alkisg: haven't you think to generate repeatable ssh keys for the clients?
17:19RaphGro has left IRC (RaphGro!~raphgro@fedora/raphgro, Quit: Please remember your own message. It'll be read as soon as possible.)
17:26
<alkisg>
kvaps: it needs a step for the server to trust the clients, so reverse epoptes connections are a lot better...
17:26
If one needs it though, he can surely implement it, and/or wireguard keys too
17:29
<kvaps>
> reverse epoptes connections are a lot better... Do you mean case when clients accessing server not vise-versa?
17:37
<alkisg>
Yes, that's how epoptes works
17:37
The server public key goes to the ltsp image, so the clients trust the server
17:37
and there's no need for the server to trust the clients that way, it's like https, not like ssh
17:40
<kvaps>
Kubernetes is working the same way
17:43
But I would like to have some additional method like SSH to perform debug operations if its needed.
17:44
<alkisg>
Sure, ssh can easily be activated...
17:45
<highvoltage>
~/win 15
17:45
<kvaps>
Yep I'm using this already, I'm running ssh-keygen each new boot, and now I just thinking about some alternative
17:46
<alkisg>
You can have static ssh keys and symlink them with POST_INIT
17:47
You can e.g. put them in /etc/ltsp/ so that they go in ltsp.img
17:48
<kvaps>
Yep, that's possible but still less secure than generate always the same pairs using some salt value
17:49
<alkisg>
The salt can be something from dmidecode, the machine serial number, the board uuid etc
17:50
But telling ssh-keygen to use specific salt is tricky
17:50
While e.g. wireguard configuration is a lot more easy and secure
17:52
<kvaps>
yeah, cool idea. machine serial number should be enough
17:57
https://serverfault.com/questions/398633/can-ssh-keygen-be-seeded-to-generate-the-same-key
18:40kvaps has left IRC (kvaps!2e1c6842@wedos.wedos.net, Ping timeout: 245 seconds)
18:45gvy has left IRC (gvy!~mike@altlinux/developer/mike, Quit: $HOME)
18:58woernie has left IRC (woernie!~werner@p5b296b80.dip0.t-ipconnect.de, Remote host closed the connection)
18:59woernie has joined IRC (woernie!~werner@p5b296b80.dip0.t-ipconnect.de)
20:02kvaps has joined IRC (kvaps!2e1c6842@wedos.wedos.net)
20:02
<kvaps>
https://github.com/cornfeedhobo/ssh-keydgen
20:25spectra has left IRC (spectra!~spectra@debian/developer/spectra, Ping timeout: 272 seconds)
20:41spectra has joined IRC (spectra!~spectra@debian/developer/spectra)
21:38kvaps has left IRC (kvaps!2e1c6842@wedos.wedos.net, Remote host closed the connection)