From 1a8dda02cd361cf2bf868863de750be4cd688ca3 Mon Sep 17 00:00:00 2001 From: Paul Buetow Date: Sun, 13 Jul 2025 19:47:18 +0300 Subject: Update content for html --- ...5-07-14-f3s-kubernetes-with-freebsd-part-6.html | 29 +++++++++++++------- gemfeed/atom.xml | 31 +++++++++++++++------- 2 files changed, 41 insertions(+), 19 deletions(-) (limited to 'gemfeed') diff --git a/gemfeed/2025-07-14-f3s-kubernetes-with-freebsd-part-6.html b/gemfeed/2025-07-14-f3s-kubernetes-with-freebsd-part-6.html index a1830ef9..0033f824 100644 --- a/gemfeed/2025-07-14-f3s-kubernetes-with-freebsd-part-6.html +++ b/gemfeed/2025-07-14-f3s-kubernetes-with-freebsd-part-6.html @@ -762,16 +762,19 @@ paul@f0:~ % doas sysrc zfskeys_datasets="zdata/enc zdata/e zfskeys_datasets: -> zdata/enc zdata/enc/nfsdata zroot/bhyve # Set correct key locations for all datasets -paul@f0:~ % doas zfs set keylocation=file:///keys/f0.lan.buetow.org:zdata.key zdata/enc/nfsdata +paul@f0:~ % doas zfs set \ + keylocation=file:///keys/f0.lan.buetow.org:zdata.key zdata/enc/nfsdata # On f1 - include the replicated dataset paul@f1:~ % doas sysrc zfskeys_enable=YES zfskeys_enable: YES -> YES -paul@f1:~ % doas sysrc zfskeys_datasets="zdata/enc zroot/bhyve zdata/sink/f0/zdata/enc/nfsdata" +paul@f1:~ % doas sysrc \ + zfskeys_datasets="zdata/enc zroot/bhyve zdata/sink/f0/zdata/enc/nfsdata" zfskeys_datasets: -> zdata/enc zroot/bhyve zdata/sink/f0/zdata/enc/nfsdata # Set key location for replicated dataset -paul@f1:~ % doas zfs set keylocation=file:///keys/f0.lan.buetow.org:zdata.key zdata/sink/f0/zdata/enc/nfsdata +paul@f1:~ % doas zfs set \ + keylocation=file:///keys/f0.lan.buetow.org:zdata.key zdata/sink/f0/zdata/enc/nfsdata
Important notes:
@@ -1121,7 +1124,8 @@ http://www.gnu.org/software/src-highlite --> paul@f1:~ % doas pkg install -y stunnel # Copy certificates from f0 -paul@f0:~ % doas tar -cf /tmp/stunnel-certs.tar -C /usr/local/etc/stunnel server-cert.pem server-key.pem ca +paul@f0:~ % doas tar -cf /tmp/stunnel-certs.tar \ + -C /usr/local/etc/stunnel server-cert.pem server-key.pem ca paul@f0:~ % scp /tmp/stunnel-certs.tar f1:/tmp/ paul@f1:~ % cd /usr/local/etc/stunnel && doas tar -xf /tmp/stunnel-certs.tar @@ -1387,7 +1391,8 @@ CURRENT_STATE=$(/usr/local/bin/carp | awk '{print $NF}'exit 0 fi -# Check if the marker file exists (identifies that the ZFS data set is properly mounted) +# Check if the marker file exists +# (identifies that the ZFS data set is properly mounted) if [ ! -f "$MARKER_FILE" ]; then log_message "SKIP: Marker file $MARKER_FILE not found" exit 0 @@ -1539,7 +1544,10 @@ http://www.gnu.org/software/src-highlite --> # Verify mount [root@r0 ~]# mount | grep k3svolumes -127.0.0.1:/data/nfs/k3svolumes on /data/nfs/k3svolumes type nfs4 (rw,relatime,vers=4.2,rsize=131072,wsize=131072,namlen=255,hard,proto=tcp,port=2323,timeo=600,retrans=2,sec=sys,clientaddr=127.0.0.1,local_lock=none,addr=127.0.0.1) +127.0.0.1:/data/nfs/k3svolumes on /data/nfs/k3svolumes + type nfs4 (rw,relatime,vers=4.2,rsize=131072,wsize=131072, + namlen=255,hard,proto=tcp,port=2323,timeo=600,retrans=2,sec=sys, + clientaddr=127.0.0.1,local_lock=none,addr=127.0.0.1) # For persistent mount, add to /etc/fstab: 127.0.0.1:/data/nfs/k3svolumes /data/nfs/k3svolumes nfs4 port=2323,_netdev 0 0 @@ -1725,9 +1733,12 @@ ls: cannot access '/data/nfs/k3svolumes/': Stale fi # 5. Check automatic recovery (within 10 seconds) [root@r0 ~]# journalctl -u nfs-mount-monitor -f -Jul 06 10:15:32 r0 nfs-monitor[1234]: NFS mount unhealthy detected at Sun Jul 6 10:15:32 EEST 2025 -Jul 06 10:15:32 r0 nfs-monitor[1234]: Attempting to fix stale NFS mount at Sun Jul 6 10:15:32 EEST 2025 -Jul 06 10:15:33 r0 nfs-monitor[1234]: NFS mount fixed at Sun Jul 6 10:15:33 EEST 2025 +Jul 06 10:15:32 r0 nfs-monitor[1234]: NFS mount unhealthy detected at \ + Sun Jul 6 10:15:32 EEST 2025 +Jul 06 10:15:32 r0 nfs-monitor[1234]: Attempting to fix stale NFS mount at \ + Sun Jul 6 10:15:32 EEST 2025 +Jul 06 10:15:33 r0 nfs-monitor[1234]: NFS mount fixed at \ + Sun Jul 6 10:15:33 EEST 2025
Failover Timeline:
diff --git a/gemfeed/atom.xml b/gemfeed/atom.xml index adcfa57e..13675b76 100644 --- a/gemfeed/atom.xml +++ b/gemfeed/atom.xml @@ -1,6 +1,6 @@ - 2025-07-13T16:55:45+03:00 + 2025-07-13T19:45:38+03:00 foo.zone feed To be in the .zone! @@ -769,16 +769,19 @@ paul@f0:~ % doas sysrc zfskeys_datasets="zdata/enc zdata/e zfskeys_datasets: -> zdata/enc zdata/enc/nfsdata zroot/bhyve # Set correct key locations for all datasets -paul@f0:~ % doas zfs set keylocation=file:///keys/f0.lan.buetow.org:zdata.key zdata/enc/nfsdata +paul@f0:~ % doas zfs set \ + keylocation=file:///keys/f0.lan.buetow.org:zdata.key zdata/enc/nfsdata # On f1 - include the replicated dataset paul@f1:~ % doas sysrc zfskeys_enable=YES zfskeys_enable: YES -> YES -paul@f1:~ % doas sysrc zfskeys_datasets="zdata/enc zroot/bhyve zdata/sink/f0/zdata/enc/nfsdata" +paul@f1:~ % doas sysrc \ + zfskeys_datasets="zdata/enc zroot/bhyve zdata/sink/f0/zdata/enc/nfsdata" zfskeys_datasets: -> zdata/enc zroot/bhyve zdata/sink/f0/zdata/enc/nfsdata # Set key location for replicated dataset -paul@f1:~ % doas zfs set keylocation=file:///keys/f0.lan.buetow.org:zdata.key zdata/sink/f0/zdata/enc/nfsdata +paul@f1:~ % doas zfs set \ + keylocation=file:///keys/f0.lan.buetow.org:zdata.key zdata/sink/f0/zdata/enc/nfsdata
Important notes:
@@ -1128,7 +1131,8 @@ http://www.gnu.org/software/src-highlite --> paul@f1:~ % doas pkg install -y stunnel # Copy certificates from f0 -paul@f0:~ % doas tar -cf /tmp/stunnel-certs.tar -C /usr/local/etc/stunnel server-cert.pem server-key.pem ca +paul@f0:~ % doas tar -cf /tmp/stunnel-certs.tar \ + -C /usr/local/etc/stunnel server-cert.pem server-key.pem ca paul@f0:~ % scp /tmp/stunnel-certs.tar f1:/tmp/ paul@f1:~ % cd /usr/local/etc/stunnel && doas tar -xf /tmp/stunnel-certs.tar @@ -1394,7 +1398,8 @@ CURRENT_STATE=$(/usr/local/bin/carp | awk '{print $NF}'exit 0 fi -# Check if the marker file exists (identifies that the ZFS data set is properly mounted) +# Check if the marker file exists +# (identifies that the ZFS data set is properly mounted) if [ ! -f "$MARKER_FILE" ]; then log_message "SKIP: Marker file $MARKER_FILE not found" exit 0 @@ -1546,7 +1551,10 @@ http://www.gnu.org/software/src-highlite --> # Verify mount [root@r0 ~]# mount | grep k3svolumes -127.0.0.1:/data/nfs/k3svolumes on /data/nfs/k3svolumes type nfs4 (rw,relatime,vers=4.2,rsize=131072,wsize=131072,namlen=255,hard,proto=tcp,port=2323,timeo=600,retrans=2,sec=sys,clientaddr=127.0.0.1,local_lock=none,addr=127.0.0.1) +127.0.0.1:/data/nfs/k3svolumes on /data/nfs/k3svolumes + type nfs4 (rw,relatime,vers=4.2,rsize=131072,wsize=131072, + namlen=255,hard,proto=tcp,port=2323,timeo=600,retrans=2,sec=sys, + clientaddr=127.0.0.1,local_lock=none,addr=127.0.0.1) # For persistent mount, add to /etc/fstab: 127.0.0.1:/data/nfs/k3svolumes /data/nfs/k3svolumes nfs4 port=2323,_netdev 0 0 @@ -1732,9 +1740,12 @@ ls: cannot access '/data/nfs/k3svolumes/': Stale fi # 5. Check automatic recovery (within 10 seconds) [root@r0 ~]# journalctl -u nfs-mount-monitor -f -Jul 06 10:15:32 r0 nfs-monitor[1234]: NFS mount unhealthy detected at Sun Jul 6 10:15:32 EEST 2025 -Jul 06 10:15:32 r0 nfs-monitor[1234]: Attempting to fix stale NFS mount at Sun Jul 6 10:15:32 EEST 2025 -Jul 06 10:15:33 r0 nfs-monitor[1234]: NFS mount fixed at Sun Jul 6 10:15:33 EEST 2025 +Jul 06 10:15:32 r0 nfs-monitor[1234]: NFS mount unhealthy detected at \ + Sun Jul 6 10:15:32 EEST 2025 +Jul 06 10:15:32 r0 nfs-monitor[1234]: Attempting to fix stale NFS mount at \ + Sun Jul 6 10:15:32 EEST 2025 +Jul 06 10:15:33 r0 nfs-monitor[1234]: NFS mount fixed at \ + Sun Jul 6 10:15:33 EEST 2025
Failover Timeline:
-- cgit v1.2.3