home.social

#k3s — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #k3s, aggregated by home.social.

  1. Last night and today was spent trying to get #gluetun working under #k3s with #protonvpn 's free plan...

    Still can't get it to work.

  2. Last night and today was spent trying to get #gluetun working under #k3s with #protonvpn 's free plan...

    Still can't get it to work.

  3. Last night and today was spent trying to get #gluetun working under #k3s with #protonvpn 's free plan...

    Still can't get it to work.

  4. Last night and today was spent trying to get #gluetun working under #k3s with #protonvpn 's free plan...

    Still can't get it to work.

  5. My first try at #k0s didn't go super well. I'm not giving up on it just yet, but doesn't seem to be near as simple/automagic out of box as #k3s is. I might try again in a few days.

  6. My first try at #k0s didn't go super well. I'm not giving up on it just yet, but doesn't seem to be near as simple/automagic out of box as #k3s is. I might try again in a few days.

  7. My first try at #k0s didn't go super well. I'm not giving up on it just yet, but doesn't seem to be near as simple/automagic out of box as #k3s is. I might try again in a few days.

  8. My first try at #k0s didn't go super well. I'm not giving up on it just yet, but doesn't seem to be near as simple/automagic out of box as #k3s is. I might try again in a few days.

  9. My first try at #k0s didn't go super well. I'm not giving up on it just yet, but doesn't seem to be near as simple/automagic out of box as #k3s is. I might try again in a few days.

  10. Has anyone tested Coraza as a WAF in Kubernetes? I switched to the traefik-modsecurity-plugin because roughly 50–75% of all HTTP/2 traffic was returning HTTP 500.

    #Kubernetes #k8s #k3s #traefik #waf #coraza #modsecurity

  11. Has anyone tested Coraza as a WAF in Kubernetes? I switched to the traefik-modsecurity-plugin because roughly 50–75% of all HTTP/2 traffic was returning HTTP 500.

    #Kubernetes #k8s #k3s #traefik #waf #coraza #modsecurity

  12. Has anyone tested Coraza as a WAF in Kubernetes? I switched to the traefik-modsecurity-plugin because roughly 50–75% of all HTTP/2 traffic was returning HTTP 500.

    #Kubernetes #k8s #k3s #traefik #waf #coraza #modsecurity

  13. Has anyone tested Coraza as a WAF in Kubernetes? I switched to the traefik-modsecurity-plugin because roughly 50–75% of all HTTP/2 traffic was returning HTTP 500.

    #Kubernetes #k8s #k3s #traefik #waf #coraza #modsecurity

  14. Need to document how I deployed a home #EDR #SIEM on #k3s with Tailscale but had to update my #mcp server first! github.com/mdfranz/elastic-sec

  15. Need to document how I deployed a home #EDR #SIEM on #k3s with Tailscale but had to update my #mcp server first! github.com/mdfranz/elastic-sec

  16. Need to document how I deployed a home #EDR #SIEM on #k3s with Tailscale but had to update my #mcp server first! github.com/mdfranz/elastic-sec

  17. Need to document how I deployed a home #EDR #SIEM on #k3s with Tailscale but had to update my #mcp server first! github.com/mdfranz/elastic-sec

  18. Need to document how I deployed a home #EDR #SIEM on #k3s with Tailscale but had to update my #mcp server first! github.com/mdfranz/elastic-sec

  19. 🧱 Defense in depth across four policy domains: filesystem (blocks reads/writes outside allowed paths), network (hot-reloadable), process (blocks privilege escalation & dangerous syscalls), and inference (reroutes model API calls)

    ⚙️ Under the hood it runs a #K3s #Kubernetes cluster inside a single #Docker container — no separate K8s install needed. A gateway coordinates sandbox lifecycle & acts as the auth boundary

  20. 🧱 Defense in depth across four policy domains: filesystem (blocks reads/writes outside allowed paths), network (hot-reloadable), process (blocks privilege escalation & dangerous syscalls), and inference (reroutes model API calls)

    ⚙️ Under the hood it runs a #K3s #Kubernetes cluster inside a single #Docker container — no separate K8s install needed. A gateway coordinates sandbox lifecycle & acts as the auth boundary

  21. 🧱 Defense in depth across four policy domains: filesystem (blocks reads/writes outside allowed paths), network (hot-reloadable), process (blocks privilege escalation & dangerous syscalls), and inference (reroutes model API calls)

    ⚙️ Under the hood it runs a #K3s #Kubernetes cluster inside a single #Docker container — no separate K8s install needed. A gateway coordinates sandbox lifecycle & acts as the auth boundary

  22. 🧱 Defense in depth across four policy domains: filesystem (blocks reads/writes outside allowed paths), network (hot-reloadable), process (blocks privilege escalation & dangerous syscalls), and inference (reroutes model API calls)

    ⚙️ Under the hood it runs a #K3s #Kubernetes cluster inside a single #Docker container — no separate K8s install needed. A gateway coordinates sandbox lifecycle & acts as the auth boundary

  23. 🧱 Defense in depth across four policy domains: filesystem (blocks reads/writes outside allowed paths), network (hot-reloadable), process (blocks privilege escalation & dangerous syscalls), and inference (reroutes model API calls)

    ⚙️ Under the hood it runs a #K3s #Kubernetes cluster inside a single #Docker container — no separate K8s install needed. A gateway coordinates sandbox lifecycle & acts as the auth boundary

  24. 🚀 alexellis/k3sup

    bootstrap K3s over SSH in < 60s 🚀

    Deploys lightweight Kubernetes (k3s) clusters via SSH in under 60 seconds, fetching kubeconfig automatically for local kubectl access and supporting multi-node HA setups

    ⭐ Stars: 7384
    📅 Last Update: May 23, 2026

    github.com/alexellis/k3sup

    #selfhosted #homelab #selfhost #selfhosting #opensource #kubernetes #k3s

  25. 🚀 alexellis/k3sup

    bootstrap K3s over SSH in < 60s 🚀

    Deploys lightweight Kubernetes (k3s) clusters via SSH in under 60 seconds, fetching kubeconfig automatically for local kubectl access and supporting multi-node HA setups

    ⭐ Stars: 7384
    📅 Last Update: May 23, 2026

    github.com/alexellis/k3sup

    #selfhosted #homelab #selfhost #selfhosting #opensource #kubernetes #k3s

  26. Not sure why, but upgrading a #k3s test node from #AlpineLinux v3.22 to v3.23 causes etcd to shit itself.

    Holding the nodes in the cluster at v3.22 for now until I figure out why.

    This is why I have a test cluster that does mostly nothing! Better to FAFO in test than in prod. :)

    #AdventuresInSelfHosting

  27. 病假给了我很多时间去搞homelab 今天把terraform module 加上了, ansible playbook也跑起来了,这边 tofu apply 然后 ansible-playbook 进行config. 还把tasks 整合进了 roles. 今天还读了一点production kubernetes 觉得受益匪浅! 非常棒的一本书!

    病假后半段我状态好点了不再一整天都虚弱躺着了就开始不停思考, 我感觉自己把整个人生都分析和重构了一遍, 从财务规划到退休计划从职业发展到知识管理…

    明天打算把这两步整合一下:provision a VM, install k3s, install Rancher, then let Rancher create/register another downstream cluster 顺便处理下cert-manager DNS-01 拿证书

    #homelab #ansible #opentofu #k3s #rancher #certmanager

  28. 病假给了我很多时间去搞homelab 今天把terraform module 加上了, ansible playbook也跑起来了,这边 tofu apply 然后 ansible-playbook 进行config. 还把tasks 整合进了 roles. 今天还读了一点production kubernetes 觉得受益匪浅! 非常棒的一本书!

    病假后半段我状态好点了不再一整天都虚弱躺着了就开始不停思考, 我感觉自己把整个人生都分析和重构了一遍, 从财务规划到退休计划从职业发展到知识管理…

    明天打算把这两步整合一下:provision a VM, install k3s, install Rancher, then let Rancher create/register another downstream cluster 顺便处理下cert-manager DNS-01 拿证书

    #homelab #ansible #opentofu #k3s #rancher #certmanager

  29. I'm making progress on my local #LLM experiments. Now we moved from single node to 2 node Kubernetes, here a blog post about my initial setup with a bunch of new Bench-marking results: blog.t1m.me/blog/building-own-

    Currently using a simple #k3s server / agent set-up, with DNS-1 certificate issuing and everything in a private #tailscale network.

    Already taking the next steps towards migrating from #ollama to #vLLM and optimizing prompt / model caching + routing. Several more changes coming up :)

  30. I'm making progress on my local #LLM experiments. Now we moved from single node to 2 node Kubernetes, here a blog post about my initial setup with a bunch of new Bench-marking results: blog.t1m.me/blog/building-own-

    Currently using a simple #k3s server / agent set-up, with DNS-1 certificate issuing and everything in a private #tailscale network.

    Already taking the next steps towards migrating from #ollama to #vLLM and optimizing prompt / model caching + routing. Several more changes coming up :)

  31. I'm making progress on my local #LLM experiments. Now we moved from single node to 2 node Kubernetes, here a blog post about my initial setup with a bunch of new Bench-marking results: blog.t1m.me/blog/building-own-

    Currently using a simple #k3s server / agent set-up, with DNS-1 certificate issuing and everything in a private #tailscale network.

    Already taking the next steps towards migrating from #ollama to #vLLM and optimizing prompt / model caching + routing. Several more changes coming up :)

  32. I'm making progress on my local #LLM experiments. Now we moved from single node to 2 node Kubernetes, here a blog post about my initial setup with a bunch of new Bench-marking results: blog.t1m.me/blog/building-own-

    Currently using a simple #k3s server / agent set-up, with DNS-1 certificate issuing and everything in a private #tailscale network.

    Already taking the next steps towards migrating from #ollama to #vLLM and optimizing prompt / model caching + routing. Several more changes coming up :)

  33. I'm making progress on my local #LLM experiments. Now we moved from single node to 2 node Kubernetes, here a blog post about my initial setup with a bunch of new Bench-marking results: blog.t1m.me/blog/building-own-

    Currently using a simple #k3s server / agent set-up, with DNS-1 certificate issuing and everything in a private #tailscale network.

    Already taking the next steps towards migrating from #ollama to #vLLM and optimizing prompt / model caching + routing. Several more changes coming up :)

  34. Wow that was a long break, I've got very little time to talk here lately, work and life taking over...

    But damn was there some activity on the k3s cluster 😅

    Stalwart is finally up and running, with all of my domain names
    I've tested what happens when the server is down (because outages do happen) and everything was delivered as expected

    And using SMTP2Go to avoid having to maintain an IP reputation

    Chef's kiss

    #cluster #k3s #k8s #stalwart #mail #smtp #smtp2go #break #pause

  35. Wow that was a long break, I've got very little time to talk here lately, work and life taking over...

    But damn was there some activity on the k3s cluster 😅

    Stalwart is finally up and running, with all of my domain names
    I've tested what happens when the server is down (because outages do happen) and everything was delivered as expected

    And using SMTP2Go to avoid having to maintain an IP reputation

    Chef's kiss

    #cluster #k3s #k8s #stalwart #mail #smtp #smtp2go #break #pause

  36. Wow that was a long break, I've got very little time to talk here lately, work and life taking over...

    But damn was there some activity on the k3s cluster 😅

    Stalwart is finally up and running, with all of my domain names
    I've tested what happens when the server is down (because outages do happen) and everything was delivered as expected

    And using SMTP2Go to avoid having to maintain an IP reputation

    Chef's kiss

    #cluster #k3s #k8s #stalwart #mail #smtp #smtp2go #break #pause

  37. Wow that was a long break, I've got very little time to talk here lately, work and life taking over...

    But damn was there some activity on the k3s cluster 😅

    Stalwart is finally up and running, with all of my domain names
    I've tested what happens when the server is down (because outages do happen) and everything was delivered as expected

    And using SMTP2Go to avoid having to maintain an IP reputation

    Chef's kiss

    #cluster #k3s #k8s #stalwart #mail #smtp #smtp2go #break #pause

  38. Rebuilding my #homelab once more. I switched from #k3s to #talos quite a while ago. As it goes, my experiments left k8s in a ... well ... undefined state. Time to set it up all over again. Sending a huge thanks to Jochen from a few months ago for automating everything. #Talos + #Ansible + #Argo make for really nice experience and I got all my services back in no time, including data.

  39. Rebuilding my #homelab once more. I switched from #k3s to #talos quite a while ago. As it goes, my experiments left k8s in a ... well ... undefined state. Time to set it up all over again. Sending a huge thanks to Jochen from a few months ago for automating everything. #Talos + #Ansible + #Argo make for really nice experience and I got all my services back in no time, including data.

  40. Rebuilding my #homelab once more. I switched from #k3s to #talos quite a while ago. As it goes, my experiments left k8s in a ... well ... undefined state. Time to set it up all over again. Sending a huge thanks to Jochen from a few months ago for automating everything. #Talos + #Ansible + #Argo make for really nice experience and I got all my services back in no time, including data.

  41. Rebuilding my #homelab once more. I switched from #k3s to #talos quite a while ago. As it goes, my experiments left k8s in a ... well ... undefined state. Time to set it up all over again. Sending a huge thanks to Jochen from a few months ago for automating everything. #Talos + #Ansible + #Argo make for really nice experience and I got all my services back in no time, including data.

  42. Rebuilding my #homelab once more. I switched from #k3s to #talos quite a while ago. As it goes, my experiments left k8s in a ... well ... undefined state. Time to set it up all over again. Sending a huge thanks to Jochen from a few months ago for automating everything. #Talos + #Ansible + #Argo make for really nice experience and I got all my services back in no time, including data.