Linux and Unix Users Group at Virginia Teck Wiki - User contributions [en]

Construct

2026-09-18T18:03:42Z

Clj: add construct page

[https://github.com/vtluug/construct/ Construct] is VTLUUG's pseudo-mono repo of the future. It contains [https://nixos.org NixOS] configurations for [[Bastille]], [[Vesuvius]], [[Rowhammer]], and more! It also has some [https://kubernetes.io Kubernetes] manifests, but they aren't automatically applied currently.

== Why ==
Many person-hours have been spent on this repo, and we plan to spend many more, so it's reasonable to ask why Construct is the way it is. I think it's helpful to contrast with the "cowboy-style" system administration that you usually see at our scale:
# Notice problem
# SSH in
# Change some configs, reload etc
# Done!
Whereas the Construct way is more like
# Notice problem
# Make issue
# Make local branch
# Test/deploy loop (we don't have a staging environment :P)
# Make pull request
# It eventually gets merged into main
# Done…
The latter is clearly worse in the short-term, but in the long-term it means that:
* The reason for a change is documented
* We have (some) code review before pull requests are merged
* Fixes in shared configuration are actually shared

== Why Nix(OS) ==
With NixOS, our deploys are an atomic unit. If a deploy fails, <code>nixos-rebuild</code> will fully roll it back. In the [https://github.com/vtluug/construct/pull/31 near future], <code>nixos-version --configuration-revision</code> will tell us what git commit a machine is currently running. NixOS modules make it easy to share common configuration while still overriding stuff where needed, and Nix + Nixpkgs makes packaging our own software in a reproducible way much easier.

Infrastructure:Bastille

2026-04-21T00:26:33Z

Clj: suggest grafana

[[Infrastructure:Bastille|Bastille]] is our Lenovo Nextscale chassis donated by [[User:Timelord|jpo]] from his VT Surplus spoils.

It contains twelve like 'blades', with:

* 2x Intel(R) Xeon(R) E5-2680 v3 (48) @ 3.30 GHz, 12 cores 24 threads each
* 256 GiB DDR4
* a fully-featured remote management interface, with a webUI kvm
* two gigabit eth NICs (Both connected), and one Intel X520 2x10G SFP+ (Unused)
* notably, no peripheral ports other than a multiplexed one that uses a proprietary adapter to VGA, Serial, 2x USB

These blades are appropriately named:
<pre>
[
"backbiter"
"damocles"
"durendal"
"eyelander"
"excalibur"
"gram"
"gryffindor"
"kusanagi"
"narsil"
"oathbringer"
"riptide"
"sting"
]
</pre>

They are at the moment netbooted from [[Infrastructure:Vesuvius]] as NixOS k3s nodes.

== Things To Host On All This (Post Suggestions!!!) ==

* hentai at home (rsk)
* tor relay (rsk)
** both of the above possibly better as a slim nixos VM on something like spectre?
* nix build server (clj)
* build/parameter optimization rust compiler (clj)
* folding@home (ap, eri)
* port sczi over (mkl)
** slskd/slskd:latest
** quay.io/oauth2-proxy/oauth2-proxy:latest
** <s>luuul/4get:latest</s> ported
** linuxserver/qbittorrent:latest
** qmcgaw/gluetun
** quay.io/oauth2-proxy/oauth2-proxy:latest
** mariadb:10.4.32
** vtluug/mediawiki-vtluug:1.1
** linuxserver/swag
** vectorim/element-web:latest
** quay.io/dexidp/dex:latest
** <s>vtluug/pyqdb</s> ported
** thelounge/thelounge:latest
** vtluug-site-vtluug-site
** vaultwarden/server:latest
** gitea/gitea:nightly
** t4skforce/syncthing-relay-discovery:latest
* Tigerbeetle (clj, meme suggestion)
* Something like Sagemath but in a way that doesn't give people free ACE (clj)
* map stuff (mhazinsk)
** OSM tile server
** async LIDAR processing - laz2ept/[https://caves.science/ sinkholes], etc
* [https://github.com/coder/coder coder] ephemeral dev environments for members (mhazinsk)
* [https://aleph.occrp.org/ OCCRP Aleph] for VT FOIA requests as a hokieprivacy project (mhazinsk)
* [https://ooni.org/install/cli OONI probe] (mhazinsk)
* browsertrix (pew)
* grafana (ARC and many others have done this and it looks cool) (clj)

[[Category:Infrastructure]]
[[Category:Hosts]]

Infrastructure:Bastille

2025-12-05T21:05:33Z

Clj:

[[Infrastructure:Bastille|Bastille]] is our Lenovo Nextscale chassis donated by [[User:Timelord|jpo]] from his VT Surplus spoils.

It contains twelve like 'blades', with:

* 2x Intel(R) Xeon(R) E5-2680 v3 (48) @ 3.30 GHz, 12 cores 24 threads each
* 256 GiB DDR4
* a fully-featured remote management interface, with a webUI kvm
* two gigabit eth NICs (Both connected), and one Intel X520 2x10G SFP+ (Unused)
* notably, no peripheral ports other than a multiplexed one that uses a proprietary adapter to VGA, Serial, 2x USB

These blades are appropriately named:
<pre>
[
"backbiter"
"damocles"
"durendal"
"eyelander"
"excalibur"
"gram"
"gryffindor"
"kusanagi"
"narsil"
"oathbringer"
"riptide"
"sting"
]
</pre>

They are at the moment netbooted from [[Infrastructure:Vesuvius]] as NixOS k3s nodes.

== Things To Host On All This (Post Suggestions!!!) ==

* hentai at home (rsk)
* tor relay (rsk)
** both of the above possibly better as a slim nixos VM on something like spectre?
* nix build server (clj)
* build/parameter optimization rust compiler (clj)
* folding@home (ap, eri)
* port sczi over (mkl)
** slskd/slskd:latest
** quay.io/oauth2-proxy/oauth2-proxy:latest
** luuul/4get:latest
** linuxserver/qbittorrent:latest
** qmcgaw/gluetun
** quay.io/oauth2-proxy/oauth2-proxy:latest
** mariadb:10.4.32
** vtluug/mediawiki-vtluug:1.1
** linuxserver/swag
** vectorim/element-web:latest
** quay.io/dexidp/dex:latest
** vtluug/pyqdb
** thelounge/thelounge:latest
** vtluug-site-vtluug-site
** vaultwarden/server:latest
** gitea/gitea:nightly
** t4skforce/syncthing-relay-discovery:latest
* Tigerbeetle (clj, meme suggestion)
* Something like Sagemath but in a way that doesn't give people free ACE (clj)

[[Category:Infrastructure]]
[[Category:Hosts]]

Infrastructure:Bastille

2025-12-05T21:05:05Z

Clj:

[[Infrastructure:Bastille|Bastille]] is our Lenovo Nextscale chassis donated by [[User:Timelord|jpo]] from his VT Surplus spoils.

It contains twelve like 'blades', with:

* 2x Intel(R) Xeon(R) E5-2680 v3 (48) @ 3.30 GHz, 12 cores 24 threads each
* 256 GiB DDR4
* a fully-featured remote management interface, with a webUI kvm
* two gigabit eth NICs (Both connected), and one Intel X520 2x10G SFP+ (Unused)
* notably, no peripheral ports other than a multiplexed one that uses a proprietary adapter to VGA, Serial, 2x USB

These blades are appropriately named:
<pre>
[
"backbiter"
"damocles"
"durendal"
"eyelander"
"excalibur"
"gram"
"gryffindor"
"kusanagi"
"narsil"
"oathbringer"
"riptide"
"sting"
]
</pre>

They are at the moment netbooted from [[Infrastructure:Vesuvius]] as NixOS k3s nodes.

== Things To Host On All This (Post Suggestions!!!) ==

* hentai at home (rsk)
* tor relay (rsk)
** both of the above possibly better as a slim nixos VM on something like spectre?
* nix build server (clj)
* build/parameter optimization rust compiler (clj)
* folding@home (ap, eri)
* port sczi over (mkl)
** slskd/slskd:latest
** quay.io/oauth2-proxy/oauth2-proxy:latest
** luuul/4get:latest
** linuxserver/qbittorrent:latest
** qmcgaw/gluetun
** quay.io/oauth2-proxy/oauth2-proxy:latest
** mariadb:10.4.32
** vtluug/mediawiki-vtluug:1.1
** linuxserver/swag
** vectorim/element-web:latest
** quay.io/dexidp/dex:latest
** vtluug/pyqdb
** thelounge/thelounge:latest
** vtluug-site-vtluug-site
** vaultwarden/server:latest
** gitea/gitea:nightly
** t4skforce/syncthing-relay-discovery:latest
* Tigerbeetle (clj, meme suggestion)
* Sagemath (clj)

[[Category:Infrastructure]]
[[Category:Hosts]]

Infrastructure:Bastille

2025-12-02T19:07:49Z

Clj:

[[Infrastructure:Bastille|Bastille]] is our Lenovo Nextscale chassis donated by [[User:Timelord|jpo]] from his VT Surplus spoils.

It contains twelve like 'blades', with:

* 2x Intel(R) Xeon(R) E5-2680 v3 (48) @ 3.30 GHz, 12 cores 24 threads each
* 256 GiB DDR4
* a fully-featured remote management interface, with a webUI kvm
* two gigabit eth NICs (Both connected), and one Intel X520 2x10G SFP+ (Unused)
* notably, no peripheral ports other than a multiplexed one that uses a proprietary adapter to VGA, Serial, 2x USB

These blades are appropriately named:
<pre>
[
"backbiter"
"damocles"
"durendal"
"eyelander"
"excalibur"
"gram"
"gryffindor"
"kusanagi"
"narsil"
"oathbringer"
"riptide"
"sting"
]
</pre>

They are at the moment netbooted from [[Infrastructure:Vesuvius]] as NixOS k3s nodes.

== Things To Host On All This (Post Suggestions!!!) ==

* hentai at home (rsk)
* tor relay (rsk)
** both of the above possibly better as a slim nixos VM on something like spectre?
* nix build server (clj)
* build/parameter optimization rust compiler (clj)
* folding@home (ap, eri)
* port sczi over (mkl)
** slskd/slskd:latest
** quay.io/oauth2-proxy/oauth2-proxy:latest
** luuul/4get:latest
** linuxserver/qbittorrent:latest
** qmcgaw/gluetun
** quay.io/oauth2-proxy/oauth2-proxy:latest
** mariadb:10.4.32
** vtluug/mediawiki-vtluug:1.1
** linuxserver/swag
** vectorim/element-web:latest
** quay.io/dexidp/dex:latest
** vtluug/pyqdb
** thelounge/thelounge:latest
** vtluug-site-vtluug-site
** vaultwarden/server:latest
** gitea/gitea:nightly
** t4skforce/syncthing-relay-discovery:latest
* Tigerbeetle (clj, meme suggestion)

[[Category:Infrastructure]]
[[Category:Hosts]]

Infrastructure:Bastille

2025-11-13T04:36:20Z

Clj: /* Things To Host On All This (Post Suggestions!!!) */

Infrastructure:Bastille

2025-11-13T04:35:02Z

Clj: /* Things To Host On All This (Post Suggestions!!!) */