Fedora - unlock LUKS full disk encrypted system using USB stick

Published on Author admin

Follow below steps to enable unlocking LUKS full disk encrypted system using key file stored on USB stick Format USB key with FAT32 filesystem. Generate random keyfile: dd if=/dev/urandom of=/path/to/usbdisk/keyfile bs=4096 count=1 Add key to luks volume: cryptsetup luksAddKey /dev/sda6 /path/to/usbdisk/keyfile Check USB partition disk UUID: lsblk /dev/sdb1 -o NAME,UUID XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX - UUID of LUKS… Continue reading Fedora - unlock LUKS full disk encrypted system using USB stick →

Fedora 36 - fix for issue with new kernel installation

Published on Author admin

Sympthons: On UEFI Fedora 36 machines with long upgrade history (for instance starting from F25) you can encounter problem that after "dnf update kernel-core" new kernels are not being installed. Reason: When directory /boot/efi// is present, system is trying to install new kernel images into /boot/efi// instead of /boot/, which issues with /boot/efi/ overflow. Resoloution:… Continue reading Fedora 36 - fix for issue with new kernel installation →

Running nested VMware ESXi 7.0 host under KVM hypervisor

Published on Author admin

Prerequisites: hardware support for VT-x enabled nested virtualization for KVM Use below command to create KVM virtual machine containing VMware ESXi: virt-install --virt-type=kvm --name=vmware-esxi7 \ --ram 4096 --vcpus=4 \ --virt-type=kvm --hvm \ --cdrom /home/pawel/ISO/VMware/VMware-VMvisor-Installer-7.0U3d-19482537.x86_64.iso \ --network network:default,model=vmxnet3 \ --graphics vnc --video qxl \ --disk pool=default,size=32,sparse=true,bus=sata,format=qcow2 \ --boot cdrom,hd --noautoconsole --force \ --cpu host-passthrough --os-variant linux2020… Continue reading Running nested VMware ESXi 7.0 host under KVM hypervisor →

Docker 20.10 fails to start on CentOS 8 and Fedora 33

Published on Author admin

After upgrading Docker to version 20.10 on CentOS 8 and Fedora 33 we can see that it fails to start docker.service. In docker.service logs and firewalld.service logs we can see following message: ERROR: ZONE_CONFLICT: 'docker0' already bound to a zone Solution for this issue: sudo firewall-cmd --zone=trusted --remove-interface=docker0 sudo firewall-cmd --zone=trusted --remove-interface=docker0 --permanent

Jenkins Pipeline for building, testing and running Docker containers

Published on Author admin

Example Jenkins Pipeline for building, testing and running Docker containers. Ingredients: • Jenkinsfile - Pipeline specification • GitHub - source code repository (for app and Jenkinsfile) • DockerHub - container registry Required Jenkins plugins: • GitHub plugin • Docker Commons Plugin • Build With Parameters • Pipeline plugin Pipeline architecture schema: