Using TPM 2.0 on Ubuntu 26.04 to unlock LUKS encrypted volumes during boot

Published on Author admin

Check if SecureBoot is enabled: mokutil --sb-state Detecting the TPM 2.0 device: sudo systemd-cryptenroll --tpm2-device=list Enrolling the hardware token, binding to PCRs 0, 1, 4, 5, 7, 8, 9: sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+1+4+5+7+8+9 /dev/nvme0n1p3 verify: sudo systemd-cryptenroll /dev/nvme0n1p3 show LUKS keyslots: sudo cryptsetup luksDump /dev/nvme0n1p3 verify used PCRs: sudo cryptsetup luksDump --dump-json-metadata /dev/nvme0n1p3 | grep… Continue reading Using TPM 2.0 on Ubuntu 26.04 to unlock LUKS encrypted volumes during boot →

Enabling TRIM for LUKS encrypted USB disk

Published on Author admin

Change prisivioning model to unmap to enable TRIM for USB disk: echo unmap > /sys/block/sda/device/scsi_disk/*/provisioning_mode verify settings: # cat /sys/block/sda/device/scsi_disk/*/provisioning_mode unmap during LUKS volumen mounting add --allow-discards: cryptsetup luksOpen --allow-discards /dev/sda encrypted_disk verify, both device and encrypted volume should shows non-zero values: # lsblk --discard /dev/sda NAME             DISC-ALN DISC-GRAN… Continue reading Enabling TRIM for LUKS encrypted USB disk →

Deploy K8s HA (Multi-Master) on Ubuntu servers using Ansible

Published on Author admin

Deploy K8s HA (Multi-Master) on Ubuntu servers using Ansible Architecture Ansible inventory file: [masters] k8s-master1 ansible_host=10.10.10.11 node_name=k8s-master1 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 k8s-master2 ansible_host=10.10.10.12 node_name=k8s-master2 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 k8s-master3 ansible_host=10.10.10.13 node_name=k8s-master3 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 [workers] k8s-worker1 ansible_host=10.10.10.21 node_name=k8s-worker1 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 k8s-worker2 ansible_host=10.10.10.22 node_name=k8s-worker2 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 k8s-worker3 ansible_host=10.10.10.23 node_name=k8s-worker3 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 Ansible playbook: --- - hosts: all   become: true  … Continue reading Deploy K8s HA (Multi-Master) on Ubuntu servers using Ansible →

Deploy PostgreSQL HA (Patroni, etcd, HAproxy) on Ubuntu servers using Ansible

Published on Author admin

Deploy PostgreSQL HA (Patroni, etcd, HAproxy) on Ubuntu servers using Ansible Architecture Verify commands #etcd etcdctl --endpoints=http://10.10.10.111:2379,http://10.10.10.112:2379,http://10.10.10.113:2379 member list etcdctl --endpoints=http://10.10.10.111:2379,http://10.10.10.112:2379,http://10.10.10.113:2379 endpoint health etcdctl --endpoints=http://10.10.10.111:2379,http://10.10.10.112:2379,http://10.10.10.113:2379 endpoint status #patroni patronictl -c /etc/patroni/patroni.yml topology ls /var/lib/postgresql/18/main -l /usr/lib/postgresql/18/bin/pg_controldata /var/lib/postgresql/18/main #haproxy watch 'echo "show stat" | nc -U /var/lib/haproxy/stats | cut -d "," -f 1,2,5-11,18,24,27,30,36,50,37,56,57,62 | column -s,… Continue reading Deploy PostgreSQL HA (Patroni, etcd, HAproxy) on Ubuntu servers using Ansible →

Nextcloud - Upgrading PostgreSQL database running as Docker container from 17 to 18

Published on Author admin

Append YAML file with docker-compose definition for new PostgreSQL 18 database:   nextcloud-postgres18:     container_name: nextcloud-postgres18     hostname: nextcloud-postgres18     image: postgres:18-alpine     restart: always     volumes:       - /data/nextcloud-postgresql18-data64:/var/lib/postgresql     environment:       - POSTGRES_PASSWORD=       - POSTGRES_DB=nextcloud       - POSTGRES_USER=nextcloud… Continue reading Nextcloud - Upgrading PostgreSQL database running as Docker container from 17 to 18 →