Building a hyperconverged Kubernetes cluster with MicroK8s and Ceph

This guide explains how to build a highly-available, hyperconverged Kubernetes cluster using MicroK8s, Ceph and MetalLB on commodity hardware or virtual machines. This could be useful for small production deployments, dev/test clusters, or a nerdy toy. Other guides are available – this one is written from a sysadmin point of view, focusing on stability and […]

Read more "Building a hyperconverged Kubernetes cluster with MicroK8s and Ceph"

Rethinking database architecture

Originally published 2015-09-02 on the UoB Unix blog The eduroam wireless network has a reliance on a database for the authorization and accounting parts of AAA (authentication, authorization and accounting – are you who you say you are, what access are you allowed, and what did you do while connected). When we started dabbling with database-backed AAA in 2007 […]

Read more "Rethinking database architecture"

Merging SELinux policies

Originally published 2016-08-01 on the UoB Unix blog We make extensive use of SELinux on all our systems. We manage SELinux config and policy with the jfryman/selinux Puppet module, which means we store SELinux policies in plain text .te format – the same format that audit2allow generates them in. One of our SELinux policies that covers permissions for NRPE is a large file. When we generate […]

Read more "Merging SELinux policies"

Camera database

This is going to be a long article about photography and databases. Mostly databases, and in particular how to model certain photographic entities in a relational database. If you’re not interested in databases, stop reading now! I have quite a collection of cameras and lenses and I wanted to track as much information as possible […]

Read more "Camera database"

Merging my blogs

Anyone who has come to this page either from photos.jonathangazeley.com or blog.jonathangazeley.com will notice I’ve now merged the two blogs in a single site called http://www.jonathangazeley.com. For now there are automatic redirects in place, and my RSS feed and all historic links will continue to work. But please do change your bookmarks, and if you […]

Read more "Merging my blogs"