Infrastructure:Bastille - Revision history

Rsk at 04:42, 14 September 2026

2026-09-14T04:42:00Z

Rsk at 04:26, 14 September 2026

2026-09-14T04:26:25Z

Rsk at 04:15, 14 September 2026

2026-09-14T04:15:19Z

Rsk at 03:47, 14 September 2026

2026-09-14T03:47:46Z

Rsk at 03:47, 14 September 2026

2026-09-14T03:47:17Z

Rsk at 03:24, 14 September 2026

2026-09-14T03:24:23Z

Rsk at 20:09, 11 September 2026

2026-09-11T20:09:24Z

Rsk at 20:07, 11 September 2026

2026-09-11T20:07:44Z

Rsk at 20:07, 11 September 2026

2026-09-11T20:07:20Z

Clj: suggest grafana

2026-04-21T00:26:33Z

suggest grafana

@@ Line 78: / Line 78: @@
 === Operational ===
-All users with a VTLUUG SSO account (read: FreeIPA/acidburn) can SSH to [[Infrastructure:Vesuvius]] on the VTLUUG LAN.
+All users with a VTLUUG SSO account (read: FreeIPA/acidburn) can SSH to [[Infrastructure:Vesuvius]] from the VTLUUG LAN or the public IPv6 address.
 From there, all users with sudo access can use `kubectl` to manage the cluster, or proxy/jump to other nodes through the backend fabric.
 == Things To Host On All This (Post Suggestions!!!) ==

← Older revision		Revision as of 04:26, 14 September 2026
Line 71:		Line 71:

	The frontend networks, uses DHCP with [[Infrastructure:Shellshock]], while the backend network is statically routed.		The frontend networks, uses DHCP with [[Infrastructure:Shellshock]], while the backend network is statically routed.
		+
		+	The blades have completely ephemeral disks -- the k3s node passwords and join tokens are shipped via agenix, targeting an ssh host key that is sealed by TPM1.2 and kept in the netboot image.

	You can spy their config here [https://github.com/vtluug/construct/blob/main/hosts/bastille/blade.nix]		You can spy their config here [https://github.com/vtluug/construct/blob/main/hosts/bastille/blade.nix]

@@ Line 28: / Line 28: @@
 They are at the moment netbooted from [[Infrastructure:Vesuvius]] as NixOS k3s nodes.
 {| class="wikitable sortable"
-! Hostname !! Frontend IP4 !! Backend IP4 !! Notes
+! Hostname !! Frontend IP4 !! Backend IP4 !! Global IP6 !! Notes
 |-
-| [[Infrastructure:Vesuvius|vesuvius]] || 10.98.0.23 || 10.98.3.1 || k3s control plane; PXE boot image server
+| [[Infrastructure:Vesuvius|vesuvius]] || 10.98.0.23 || 10.98.3.1 || 2607:b400:6:cc80:21e:67ff:feca:9c12 || k3s control plane; PXE boot image server
 |-
-| backbiter || 10.98.0.25 || 10.98.3.2 ||
+| backbiter || 10.98.0.25 || 10.98.3.2 || 2607:b400:6:cc80:42f2:e9ff:fec6:655f ||
 |-
-| damocles || 10.98.0.26 || 10.98.3.3 ||
+| damocles || 10.98.0.26 || 10.98.3.3 || 2607:b400:6:cc80:42f2:e9ff:fec6:67db ||
 |-
-| durendal || 10.98.0.27 || 10.98.3.4 ||
+| durendal || 10.98.0.27 || 10.98.3.4 || 2607:b400:6:cc80:42f2:e9ff:fec6:6895 ||
 |-
-| excalibur || 10.98.0.29 || 10.98.3.5 ||
+| excalibur || 10.98.0.29 || 10.98.3.5 || 2607:b400:6:cc80:42f2:e9ff:fec6:6967 ||
 |-
-| eyelander || 10.98.0.28 || 10.98.3.6 ||
+| eyelander || 10.98.0.28 || 10.98.3.6 || 2607:b400:6:cc80:42f2:e9ff:fec6:6943 ||
 |-
-| gram || 10.98.0.30 || 10.98.3.7 ||
+| gram || 10.98.0.30 || 10.98.3.7 || 2607:b400:6:cc80:42f2:e9ff:fec6:7459 ||
 |-
-| [[Infrastructure:Prospit|prospit]] || - || - || [[User:Enzoisotton]] took this out of the server room to test pxe booting, yell at him until it's back
+| [[Infrastructure:Prospit|prospit]] || - || - || - || [[User:Enzoisotton]] took this out of the server room to test pxe booting, yell at him until it's back
 |-
-| gryffindor || 10.98.0.31 || 10.98.3.8 ||
+| gryffindor || 10.98.0.31 || 10.98.3.8 || 2607:b400:6:cc80:42f2:e9ff:fec6:74d7 ||
 |-
-| kusanagi || 10.98.0.32 || - || the SFP+ NIC appears broken. may work if re-seated.
+| kusanagi || 10.98.0.32 || - || 2607:b400:6:cc80:42f2:e9ff:fec6:7597 || the SFP+ NIC appears broken. may work if re-seated.
 |-
-| narsil || 10.98.0.33 || 10.98.3.10 ||
+| narsil || 10.98.0.33 || 10.98.3.10 || 2607:b400:6:cc80:42f2:e9ff:fec6:759d ||
 |-
-| oathbringer || 10.98.0.34 || 10.98.3.11 ||
+| oathbringer || 10.98.0.34 || 10.98.3.11 || 2607:b400:6:cc80:42f2:e9ff:fec6:75f1 ||
 |-
-| riptide || 10.98.0.35 || 10.98.3.13 ||
+| riptide || 10.98.0.35 || 10.98.3.13 || 2607:b400:6:cc80:42f2:e9ff:fec6:7621 ||
 |-
-| sting || 10.98.0.36 || 10.98.3.14 ||
+| sting || 10.98.0.36 || 10.98.3.14 || 2607:b400:6:cc80:42f2:e9ff:fec6:7723 ||
 |}
 Each machine has a management interface on 10.98.2.0/24, with the same last octet as its backend IP -- i.e. riptide can be managed from 10.98.2.13.

@@ Line 77: / Line 77: @@
 All users with a VTLUUG SSO account (read: FreeIPA/acidburn) can SSH to [[Infrastructure:Vesuvius]] on the VTLUUG LAN.
-From there, all users with sudo access can use `kubectl` to manage the cluster, or proxy/jump to other nodes.
+From there, all users with sudo access can use `kubectl` to manage the cluster, or proxy/jump to other nodes through the backend fabric.
 == Things To Host On All This (Post Suggestions!!!) ==

← Older revision		Revision as of 03:47, 14 September 2026
Line 28:		Line 28:

	They are at the moment netbooted from [[Infrastructure:Vesuvius]] as NixOS k3s nodes.		They are at the moment netbooted from [[Infrastructure:Vesuvius]] as NixOS k3s nodes.
		+
		+	{\| class="wikitable sortable"
		+	! Hostname !! Frontend IP4 !! Backend IP4 !! Notes
		+	\|-
		+	\| [[Infrastructure:Vesuvius\|vesuvius]] \|\| 10.98.0.23 \|\| 10.98.3.1 \|\| k3s control plane; PXE boot image server
		+	\|-
		+	\| backbiter \|\| 10.98.0.25 \|\| 10.98.3.2 \|\|
		+	\|-
		+	\| damocles \|\| 10.98.0.26 \|\| 10.98.3.3 \|\|
		+	\|-
		+	\| durendal \|\| 10.98.0.27 \|\| 10.98.3.4 \|\|
		+	\|-
		+	\| excalibur \|\| 10.98.0.29 \|\| 10.98.3.5 \|\|
		+	\|-
		+	\| eyelander \|\| 10.98.0.28 \|\| 10.98.3.6 \|\|
		+	\|-
		+	\| gram \|\| 10.98.0.30 \|\| 10.98.3.7 \|\|
		+	\|-
		+	\| [[Infrastructure:Prospit\|prospit]] \|\| - \|\| - \|\| [[User:Enzoisotton]] took this out of the server room to test pxe booting, yell at him until it's back
		+	\|-
		+	\| gryffindor \|\| 10.98.0.31 \|\| 10.98.3.8 \|\|
		+	\|-
		+	\| kusanagi \|\| 10.98.0.32 \|\| - \|\| the SFP+ NIC appears broken. may work if re-seated.
		+	\|-
		+	\| narsil \|\| 10.98.0.33 \|\| 10.98.3.10 \|\|
		+	\|-
		+	\| oathbringer \|\| 10.98.0.34 \|\| 10.98.3.11 \|\|
		+	\|-
		+	\| riptide \|\| 10.98.0.35 \|\| 10.98.3.13 \|\|
		+	\|-
		+	\| sting \|\| 10.98.0.36 \|\| 10.98.3.14 \|\|
		+	\|}
		+
		+	Each machine has a management interface on 10.98.2.0/24, with the same last octet as its backend IP -- i.e. riptide can be managed from 10.98.2.13.
		+
		+	== Guide ==
		+
		+	=== Technical ===
		+
		+	Each listed blade has four connections: two 8p8c NICs attached to [[Infrastructure:Magma]], one for the frontend network, and one for its management interface, then two SFP+ NICs bonded together and connected to [[Infrastructure:Pahoehoe]] via QSFP+ breakout cable. The 20G bonded interface is used for the cluster's backend interconnect.
		+
		+	The frontend networks, uses DHCP with [[Infrastructure:Shellshock]], while the backend network is statically routed.
		+
		+	You can spy their config here [https://github.com/vtluug/construct/blob/main/hosts/bastille/blade.nix]
		+
		+	=== Operational ===
		+
		+	All users with a VTLUUG SSO account (read: FreeIPA/acidburn) can SSH to [[Infrastructure:Vesuvius]] on the VTLUUG LAN.
		+
		+	From there, all users with sudo access can use `kubectl` to manage the cluster, or proxy/jump to other nodes.

	== Things To Host On All This (Post Suggestions!!!) ==		== Things To Host On All This (Post Suggestions!!!) ==

← Older revision		Revision as of 03:24, 14 September 2026
Line 68:		Line 68:
	[[Category:Infrastructure]]		[[Category:Infrastructure]]
	[[Category:Hosts]]		[[Category:Hosts]]
		+	[[Category:Bastille]]

@@ Line 6: / Line 6: @@
 * 256 GiB DDR4
 * a fully-featured remote management interface, with a webUI kvm
-* two gigabit eth NICs (Both connected), and one Intel X520 2x10G SFP+ (Unused)
+* two gigabit eth NICs, and one Intel X520 2x10G SFP+
 * notably, no peripheral ports other than a multiplexed one that uses a proprietary adapter to VGA, Serial, 2x USB

@@ Line 45: / Line 45: @@
 ** quay.io/oauth2-proxy/oauth2-proxy:latest
 ** mariadb:10.4.32
-** vtluug/mediawiki-vtluug:1.1
+** <s>vtluug/mediawiki-vtluug:1.1</s> ported
 ** linuxserver/swag
 ** vectorim/element-web:latest

@@ Line 51: / Line 51: @@
 ** <s>vtluug/pyqdb</s> ported
 ** thelounge/thelounge:latest
-** vtluug-site-vtluug-site
+** <s>vtluug-site-vtluug-site</s> ported
 ** vaultwarden/server:latest
 ** gitea/gitea:nightly

@@ Line 64: / Line 64: @@
 * [https://ooni.org/install/cli OONI probe] (mhazinsk)
 * browsertrix (pew)
 [[Category:Infrastructure]]
 [[Category:Hosts]]