Paweł Szaga home page
PCR registers: 0 - Core system firmware executable code 1 - Core system firmware data/host platform configuration 4 - Boot loader and additional drivers 5 - GPT/Partition table 7 - SecureBoot state 8 - GRUB - Commands and kernel command line 9 - GRUB - All files read (including kernel image) Check if SecureBoot is… Continue reading Using TPM 2.0 on Ubuntu 26.04 to unlock LUKS encrypted volumes during boot
Change prisivioning model to unmap to enable TRIM for USB disk: echo unmap > /sys/block/sda/device/scsi_disk/*/provisioning_mode verify settings: # cat /sys/block/sda/device/scsi_disk/*/provisioning_mode unmap during LUKS volumen mounting add --allow-discards: cryptsetup luksOpen --allow-discards /dev/sda encrypted_disk verify, both device and encrypted volume should shows non-zero values: # lsblk --discard /dev/sda NAME DISC-ALN DISC-GRAN… Continue reading Enabling TRIM for LUKS encrypted USB disk
Deploy K8s HA (Multi-Master) on Ubuntu servers using Ansible Architecture Ansible inventory file: [masters] k8s-master1 ansible_host=10.10.10.11 node_name=k8s-master1 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 k8s-master2 ansible_host=10.10.10.12 node_name=k8s-master2 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 k8s-master3 ansible_host=10.10.10.13 node_name=k8s-master3 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 [workers] k8s-worker1 ansible_host=10.10.10.21 node_name=k8s-worker1 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 k8s-worker2 ansible_host=10.10.10.22 node_name=k8s-worker2 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 k8s-worker3 ansible_host=10.10.10.23 node_name=k8s-worker3 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 Ansible playbook: --- - hosts: all become: true … Continue reading Deploy K8s HA (Multi-Master) on Ubuntu servers using Ansible
Deploy PostgreSQL HA (Patroni, etcd, HAproxy) on Ubuntu servers using Ansible Architecture Verify commands #etcd etcdctl --endpoints=http://10.10.10.111:2379,http://10.10.10.112:2379,http://10.10.10.113:2379 member list etcdctl --endpoints=http://10.10.10.111:2379,http://10.10.10.112:2379,http://10.10.10.113:2379 endpoint health etcdctl --endpoints=http://10.10.10.111:2379,http://10.10.10.112:2379,http://10.10.10.113:2379 endpoint status #patroni patronictl -c /etc/patroni/patroni.yml topology ls /var/lib/postgresql/18/main -l /usr/lib/postgresql/18/bin/pg_controldata /var/lib/postgresql/18/main #haproxy watch 'echo "show stat" | nc -U /var/lib/haproxy/stats | cut -d "," -f 1,2,5-11,18,24,27,30,36,50,37,56,57,62 | column -s,… Continue reading Deploy PostgreSQL HA (Patroni, etcd, HAproxy) on Ubuntu servers using Ansible
Append YAML file with docker-compose definition for new PostgreSQL 18 database: nextcloud-postgres18: container_name: nextcloud-postgres18 hostname: nextcloud-postgres18 image: postgres:18-alpine restart: always volumes: - /data/nextcloud-postgresql18-data64:/var/lib/postgresql environment: - POSTGRES_PASSWORD= - POSTGRES_DB=nextcloud - POSTGRES_USER=nextcloud… Continue reading Nextcloud - Upgrading PostgreSQL database running as Docker container from 17 to 18