Year: 2026

Using TPM 2.0 on Ubuntu 26.04 to unlock LUKS encrypted volumes during boot

Published on Author admin

Check if SecureBoot is enabled: mokutil --sb-state Detecting the TPM 2.0 device: sudo systemd-cryptenroll --tpm2-device=list Enrolling the hardware token, binding to PCRs 0, 1, 4, 5, 7, 8, 9: sudo systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+1+4+5+7+8+9 /dev/nvme0n1p3 verify: sudo systemd-cryptenroll /dev/nvme0n1p3 show LUKS keyslots: sudo cryptsetup luksDump /dev/nvme0n1p3 verify used PCRs: sudo cryptsetup luksDump --dump-json-metadata /dev/nvme0n1p3 | grep… Continue reading Using TPM 2.0 on Ubuntu 26.04 to unlock LUKS encrypted volumes during boot →

Enabling TRIM for LUKS encrypted USB disk

Published on Author admin

Change prisivioning model to unmap to enable TRIM for USB disk: echo unmap > /sys/block/sda/device/scsi_disk/*/provisioning_mode verify settings: # cat /sys/block/sda/device/scsi_disk/*/provisioning_mode unmap during LUKS volumen mounting add --allow-discards: cryptsetup luksOpen --allow-discards /dev/sda encrypted_disk verify, both device and encrypted volume should shows non-zero values: # lsblk --discard /dev/sda NAME             DISC-ALN DISC-GRAN… Continue reading Enabling TRIM for LUKS encrypted USB disk →

Deploy K8s HA (Multi-Master) on Ubuntu servers using Ansible

Published on Author admin

Deploy K8s HA (Multi-Master) on Ubuntu servers using Ansible Architecture Ansible inventory file: [masters] k8s-master1 ansible_host=10.10.10.11 node_name=k8s-master1 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 k8s-master2 ansible_host=10.10.10.12 node_name=k8s-master2 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 k8s-master3 ansible_host=10.10.10.13 node_name=k8s-master3 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 [workers] k8s-worker1 ansible_host=10.10.10.21 node_name=k8s-worker1 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 k8s-worker2 ansible_host=10.10.10.22 node_name=k8s-worker2 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 k8s-worker3 ansible_host=10.10.10.23 node_name=k8s-worker3 ansible_user=root ansible_ssh_private_key_file=~/.ssh/id_ed25519 Ansible playbook: --- - hosts: all   become: true  … Continue reading Deploy K8s HA (Multi-Master) on Ubuntu servers using Ansible →