Klaus Zerwes zerwes

Importing a Docker container into Proxmox/LXC

Importing the container

For this we are going to be using lxc-create, which comes pre-installed on Proxmox but needs further dependencies to fetch the OCI images from Docker:

apt update && apt -y install skopeo umoci jq

Fractional Scaling

With a bigger display 2x scaling might be too big. I'm trying out experimental support for fractional scaling in Gnome. To opt out again it is necessary to undo this experimental features setting:

$ gsettings set org.gnome.mutter experimental-features "['scale-monitor-framebuffer']"

In addition to fractional scaling that setting allows different scaling factors per monitor!

The only issue I'm seeing so far is that apps running with XWayland look fuzzy. That includes web browsers. But! Firefox and Chrome both have opt-in support for Wayland which fixes the problem.

People

`:bowtie:`	😄 `:smile:`	😆 `:laughing:`
😊 `:blush:`	😃 `:smiley:`	☺️ `:relaxed:`
😏 `:smirk:`	😍 `:heart_eyes:`	😘 `:kissing_heart:`
😚 `:kissing_closed_eyes:`	😳 `:flushed:`	😌 `:relieved:`
😆 `:satisfied:`	😁 `:grin:`	😉 `:wink:`
😜 `:stuck_out_tongue_winking_eye:`	😝 `:stuck_out_tongue_closed_eyes:`	😀 `:grinning:`
😗 `:kissing:`	😙 `:kissing_smiling_eyes:`	😛 `:stuck_out_tongue:`

Wireguard + VXLAN demo

Scripts to confgire a group of hosts on a LAN to use VXLAN over Wireguard.

	frontend front_https
	acl network_allowed src 100.111.222.100
	acl host_www hdr(host) -i zero-sys.net
	http-request deny if host_www !network_allowed

	# ansible-playbook -D testxmlemptytag.yml

	PLAY [localhost] ************************************************************************************************************************************************************

	TASK [Gathering Facts] ******************************************************************************************************************************************************
	ok: [127.0.0.1]

	TASK [ansible.builtin.copy] *************************************************************************************************************************************************
	changed: [127.0.0.1]

	#!/bin/sh

	# based on https://github.com/OpenVPN/openvpn/blob/master/contrib/OCSP_check/OCSP_check.sh
	# for testing ocsp support in openvpn @ opnsense

	# OCSP responder URL (mandatory)
	# you can extract this from the cert ...
	ocsp_url=`openssl x509 -in /var/etc/openvpn/server${1}.ca -noout -ocsp_uri`

	# CA CERTIFICATE

	# Any configuration directives you include here will override
	# RT's default configuration file, RT_Config.pm
	#
	# To include a directive here, just copy the equivalent statement
	# from RT_Config.pm and change the value. We've included a single
	# sample value below.
	#
	# This file is actually a perl module, so you can include valid
	# perl code, as well.
	#

	#!/bin/bash
	# vim: tabstop=4 expandtab shiftwidth=4 softtabstop=4 smartindent nu ft=bash

	declare -i RET=0
	STATUS="OK"
	O=$(REDISCLI_AUTH="$(sed '/^masterauth/!d;s/.* //g' /etc/redis/redis.conf)" redis-cli ping 2>&1)
	RET=$?
	if [ $RET -gt 0 ]; then
	RET=2
	STATUS="CRITICAL"

	# Monitoring on interface eth0
	tcpdump -i eth0 -n port 67 and port 68

Klaus Zerwes zerwes

Importing a Docker container into Proxmox/LXC

Importing the container

Fractional Scaling

Wireguard + VXLAN demo

Wireguard routing