#hashicorpnomad — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #hashicorpnomad, aggregated by home.social.
-
@blog I really hate manual toil, so I built something to make my life a bit easier (and wrote about it). If you love Tailscale and Nomad, you'll probably find this interesting... #Tailscale #HashiCorpNomad
-
Et boom, un wiki pour centraliser mes docs dispersées sur mon blog ... On commence par #HashicorpNomad https://wiki.fredix.xyz/nomad
-
Cryptojackers Caught Mining Monero via Exposed DevOps Infrastructure https://www.securityweek.com/cryptojackers-caught-mining-monero-via-exposed-devops-infrastructure/ #Malware&Threats #cryptocurrency #HashiCorpNomad #Cybercrime #Monero #XMLRig #Wiz
-
Cryptojackers Caught Mining Monero via Exposed DevOps Infrastructure https://www.securityweek.com/cryptojackers-caught-mining-monero-via-exposed-devops-infrastructure/ #Malware&Threats #cryptocurrency #HashiCorpNomad #Cybercrime #Monero #XMLRig #Wiz
-
And that's it, the end of a Homelabbing era. The Nomad cluster is devoid of jobs.
-
The issue is seemingly a change in how the fingerprinting of Consul/Vault is done during the Nomad client startup. If Consul/Vault aren't up yet, fingerprinting fails, and then Nomad seems to think Vault/Consul is not available...?
Anyway, the result is that Nomad thinks the nodes can't run anything.
A simple restart of the clients after Vault/Consul are up seems to fix the issue. A server restart was not necessary.
-
If you're running Nomad with Consul/Vault, skip the 1.9.6 update for now, or be prepared to restart the Nomad clients after your node reboot: https://github.com/hashicorp/nomad/issues/25097
All nodes are seen as unavailable for any job, meaning nothing gets started. This only becomes visible after too many nodes have been updated for the remainder to run all of your services.
1/2
-
I think it's just not possible to map the same port onto a port on host and have a consul proxy listen on it. Admittedly, it's a somewhat weird config, but I could have sworn I had it working at one point. But looking through all my Nomad jobs, I found that I only ever map ports other than the Consul Connect one to other Consul services.
I finally ended up resurrecting an old Consul ingress gateway config to allow entry into the Connect Mesh.
-
#homelab test successful: Runs #minecraft.
-
Et boom un article sur l'installation de @peertube en environnement #HashiCorpNomad avec un doigt de #postmarketOS
https://fredix.xyz/2024/09/peertube/
#peertube -
Anyone familiar with #hashicorpnomad or #hashicorpconsul know how to fix my broken healthcheck for a client node?
It says it's not enabled when it is, and even #nomad itself sees that it is. It's only #consul that's failing.
-
> Nomad is simple to deploy and highly scalable, but exactly how scalable? Production clusters reach 10,000 clients and beyond... The 1 million and 2 million container challenges provide an impressive baseline for scheduling performance, but they were not intended to create a realistic scenario for constant experimentation.
>
> The nomad-bench project set out to create reusable infrastructure automation...Really proud of the team's work!
https://www.hashicorp.com/blog/nomad-bench-load-testing-and-benchmarking-for-nomad
-
#BM, #VM, #Cloud, #IoT, #Edge 에 이르기까지 쉽게 적용할 수 있는 #HashiCorpNomad 를 경험해 보세요! 이규석님의 워크샵에서는 Nomad의 개념과 구조, 아키텍처, 스케줄러 동작 원리, 상호작용 방법, Job 및 Driver, 클러스터 구성과 HA 설정에 대해 다룹니다. 실제 Job 예제와 함께 실습 참여자 간 클러스터를 구성하는 시간도 마련되어 있습니다. 지금 등록하세요! #Nomad #클라우드 #IoT #엣지컴퓨팅 #클러스터 #UbuCon Korea
2024.ubuntu-kr.org/tickets
-
Mystery solved: After the Nomad upgrade yesterday, my service volume backups started failing. I'm doing my backups by mounting Nomad's CSI mount dir form the host into the backup container and running restic on the volume dirs therein. And it looks like Nomad introduced namespacing for the volume mount dirs, so my backups were not able to find the right directories. Fixed now, and the backups are running through nicely again.
-
@lhaig @in0rdr I realized that I was still running my demo of the enterprise version which I am not allowed to anymore.
So it was a bigger upgrade than expected 🙂 .
There is no downgrade path so it was a rebuild of the cluster and then submitting the jobs again.
#HashiCorpNomad -
Hi #HashiCorpNomad Folks,
I have been trying for a long time to get a CIS benchmark for Nomad completed and have a draft to share. https://workbench.cisecurity.org/communities/175 for 1.5 to start.If you would like to support me and you have access to the workbench please comment there and suggest changes.
I am still missing quite a bit of controls and would appreciate support to improve on what should be there. No controls for Vault and Consul yet. -
@hmiron “Don’t build on rented land” is incredibly salient.
Advances that #k8s has made to make the playing field equal, #HashiCorpNomad still makes a compelling argument... right up until you consider the TOS and licensing changes.
-
#homelab sometimes takes me back to the #VHS versus #Betamax wars.
I've been switching my cluster back to #Kubernetes from #HashiCorpNomad
Nomad is better than Kubernetes on my homelab network. In fact I'd venture it's better for home and small business (see the wikipedia size description of "small" business in the US). Medium+ businesses have the capital to deal with Kubernetes.
On the other hand, Kubernetes is standard, and part of homelab it's a chance to use/learn the industry standard.
-
A new Nomad Task Driver Plugin is always exciting, but to see one written in a language other than Go is extra exciting! Our plugin interface was always intended to be cross-language, but we never had to time to release bindings in languages other than Go.
-
Nomad has a security release today for one of our worst vulnerabilities. 😔
It's a path traversal that allows reading/writing the host filesystem from inside a container. Classic symlink TOCTOU path traversal.
The only silvering lining is that it does require coordination/knowledge-sharing between the Nomad user and the container to pull off. The code has to know what files are being templated by Nomad and leverage them for path traversal via symlink.
https://groups.google.com/g/nomad-tool/c/zSy6Gmzrzww/m/n0eDnz0cAQAJ
-
#HashiTalks 2024 takes place NEXT WEEK on February 15-16, and I'll be speaking AGAIN this year! Be sure to catch my "KubeNomad" talk, in which I explain how I managed to run #Kubernetes on #HashicorpNomad.
DATE: Feb 15th
TIME: 14:45 ESTRegister here: https://hashitalks2024.splashthat.com/
-
👀 Rivet open source game server based on Nomad 🎉
-
👋 I'm about to go live for #HashiCorpNomad community office hours! I'll be showing off some JWTs and JWKS and WIF and all kinds of fun stuff. Drop by!