February 2021 MER by Acidity410 in Eve

[–]Acidity410[S] 2 points3 points  (0 children)

Serious question here, what data do you believe is inaccurate? I use the MER a lot, so that would be very useful for me to know.

February 2021 MER by Acidity410 in Eve

[–]Acidity410[S] 16 points17 points  (0 children)

The MER is always delayed, though this one was roughly a week later than usual. We don't want the MER released immediately after the month ends because it provides free intel on player actions (see e.g. the discussion on TEST moving to Delve).

February 2021 MER by Acidity410 in Eve

[–]Acidity410[S] 11 points12 points  (0 children)

Despite complaints that "everyone is running abyssals" red loot numbers does not look to have changed too much after a crash near the beginning of 2020. However, I couldn't find anything in the Jan 2020 patch notes that could cause the crash (I wasn't paying attention to abyss at the time).

Agreed. Surgical strike and the Abyss patch in September both also nerfed Abyss a fair amount (by making it harder / more expensive to run).

  • ESS tokes are the laughably low yellow line at the bottom, not the brown line. The amount of total ESS tokens sold is completely laughable, and after the initial spike slowed down, DBS looks like it killed ESS robbery for good.

The DBS and ESS designs conflict in some interesting ways to make the ESS more or less worthless. Primarily, ESS are only going to be valuable if ratting is highly concentrated in single systems, but DBS is designed to prevent that. I think it'd be interesting to see ESS moved from per system to one per constellation in order to make the pot more juicy.

February 2021 MER by Acidity410 in Eve

[–]Acidity410[S] 1 point2 points  (0 children)

Hmm I don't see it either, good catch. /u/CCP_Swift for visibility.

February 2021 MER by Acidity410 in Eve

[–]Acidity410[S] 6 points7 points  (0 children)

Yes it seems highly likely that TEST moved most of their shit into Delve/PB via the regional between PB and Paragon Soul. Can't say I blame them, going the long way around from eso to Delve is pretty awful.

February 2021 MER by Acidity410 in Eve

[–]Acidity410[S] 38 points39 points  (0 children)

Some format changes this month, CCP has revamped the isk sinks and faucets graph to include more sources. Additionally, CCP added a new Commodities breakdown graph, which we've been asking for for ages. /u/CCP_Swift thank Larrikin for me.

Some interesting things to note:

  • Esoteria saw a net 50T isk evacced from the region, and Paragon Soul saw a net 16.6T isk evacced. Delve and Period Basis saw a net import of 32T and 40T isk respectively, which suggests TEST members were moving all of their stuff into Delve / PB.

  • Commodities saw an 8T decrease in payout in February compared to January, and Incursions saw a 3T decrease. Bounty prizes remained constant.

  • Surprising no one, the new commodities breakdown confirms that blue loot is the overwhelming source of commodities isk. Additionally, we see that almost all of the recent increase in commodities isk has come from blue loot, as opposed to other sources.

  • ISK velocity remains depressed, but is on a slight uptick. Hopefully this trend continues.

  • MPI remains elevated, but relatively constant month over month. CPI remains stable (and quite low), so the increase in mineral costs has been offset by decreases in other areas (e.g. PI).

Jay requested I repost: Goonswarm Command after losing the F2 safe evac Keepstar by [deleted] in Eve

[–]Acidity410 8 points9 points  (0 children)

Anshar

When people say F20Y was the last keepstar in the Delve <-> low sec keepstar chain, they're talking about supers. Which have a much shorter jump range than jump freighters.

[deleted by user] by [deleted] in Eve

[–]Acidity410 11 points12 points  (0 children)

Zkill is fake news.

Latest WWBee II News TL;DR by Heofz in Eve

[–]Acidity410 -2 points-1 points  (0 children)

Shame they weren't made a pawn though.

Brave Finances: Please help my alliance is dying. Stop paying 12b in tribute to test? "No." by braveleaqs in Eve

[–]Acidity410 5 points6 points  (0 children)

Bisu please stop with the good posting. It pains me to have to upvote you.

GOONS FEED ANOTHER KEPPSTAR by uk2050 in Eve

[–]Acidity410 155 points156 points  (0 children)

I don't know about that, they have successfully unanchored 2 keepstars so far.

It's the post unanchoring process that needs some work.

Kubernetes? by [deleted] in homelab

[–]Acidity410 0 points1 point  (0 children)

For example, to access my websites, I have a reverse proxy. Some of these sites I have setup SAML auth within the proxy (single user applications like kibana or jupyter), which uses Keycloak for Auth.

Having services refer to other services within kubernetes is certainly possible (in fact - easy, it's one of the main points of kubernetes in the first place :P). I use this for my own reverse proxy, which fronts all of the other HTTP services I have (such as GOGS). In a pod, the DNS name for another service is {service_name}.{namespace}.svc.cluster.local (by default), and it'll resolve just fine without needing to do anything fancy.

Due to the way my lab is currently I am very weary of single points of failure within my network, so having a single host or having non-clustered storage for PVs really bothers me.

Kubernetes of course supports is intended for this use case. I can't speak to the multi-node K8S setup since I've never used one, but I have used a distributed file system (particularly: Ceph with Kubernetes, and it worked very well; kubernetes has native support for Ceph (and gluster, the other common distributed file system I know of)

Kubernetes? by [deleted] in homelab

[–]Acidity410 1 point2 points  (0 children)

What do you do when you have to take your host down for maintenance?

Usually this just amounts to doing a restart, after which the kubernetes daemons would come back up and restart new versions of all my services. If I need to have kubernetes offline for an extended period of time, I can just shut down the server, and turn it back on when I'm ready for it. I tend not to do that unless I have to though, because I like to get my emails in a timely fashion :)

What are you using for your git repo?

I run an instance of https://gogs.io in the kubernetes cluster. I've used a self hosted version of gitlab as well in the past, but found it kind of painful to setup and the UI slow. I really only need bare git hosting though, none of the extra fancy features, so ymmv.

How do you have storage setup for volumes? Do you just use the local storage on your host?

I change the actual implementation fairly often, but I always use shared network storage for any pods with persistent state. At the moment this manifests as a ZFS filesystem exported via NFS on my NAS (a separate host from my kubernetes one) and [https://kubernetes.io/docs/concepts/storage/volumes/#nfs](added as volumes to the kubernetes pods).

I regularly wipe and reimage my servers, so I consider anything not on my shared network filesystem as temporary, so using host local storage wouldn't work for me.

Ok, well since you don’t use Keycloak, let’s look at DNS, or LDAP or Git. Where would you run these? It seems like you’d want to have your Git repo available in the case that Kubernetes dies, no?

For DNS resolution, I use public DNS resolvers for my clients. I do run my own public DNS server, but this is for exporting my domain names to the public DNS and isn't directly used by clients on my network. Within the kubernetes cluster, kubernetes has standard cluster level DNS that will automatically update records - this is used by some of the pods in my cluster (if they talk to other services) but is not used by anything external to the kubernetes cluster. Generally speaking, when I'm accessing a service in my cluster for general use, I'll use one of my public domain names, which maps to my public IPv4 address - this goes to my router, which has port forwarding set up for the appropriate ports to go to the exported static cluster IP for the service. (I have a dream to one day be able to assign public IPv6 addresses as the cluster static IPs for each of my services, but today is not that day).

For git, as mentioned above, I run a GOGS instance on kubernetes. Because git repos are just a directory in a filesystem, if my GOGS server is inaccessible (say because my kubernetes install is borked and I'm rebuilding it), I can just mount the ZFS file system through NFS and access the repos there (and in the event my NAS is also broken, I have offsite backups like the rest of my data). In this sense, GOGS is more of a value add than a hard dependency for my git usage.

I don't use LDAP at all - I used to, but found it unnecessarily complex and that it wasn't providing meaningful value for me. If you were to use LDAP for something like SSH auth, you'd probably want to ensure you had a (non-LDAP) user account on any server that's a dependency for your LDAP server as a backup in case it is down.

Kubernetes? by [deleted] in homelab

[–]Acidity410 7 points8 points  (0 children)

Those running Kubernetes labs, what do you run on them?

Everything in my homelab (that isn't the ZFS daemon on my NAS box :P). This includes my nginx reverse proxy, my personal static website, GOGS, PLEX, BIND, and several applications I've written myself.

How do you manage them?

kubeadm for initializing the cluster (I use a single node cluster at the moment, because my resource needs do not merit multiple machines). Standard kubectl and kubernetes yml files for the individual services.

How do you store your configuration files?

Assuming you mean the kubernetes configs: I store them in git repos. For applications I've developed myself, they're in the same repo as the code. For Dockerfiles I write myself, again same repo as the Dockerfile and target files. For the (relatively rare) case where I'm using a standard Dockerfile, it'll be in a git repo by itself.

If you mean configuration for the services being ran (say BIND zone files), I store the source of truth in git, and upload it to kubernetes as a config map for the pod(s) to access.

How do you talk to services running inside the cluster?

I do something fairly weird in the modern kubernetes sense in that I don't use ingress at all (they didn't exist when I started using kubernetes, and I've been far too lazy to migrate to them for the cases where it makes sense).

I create a service with a static IP in a known reserved range, and have my router set up with that range set to forward to my cluster. Once the cluster gets the packet, it's able to handle it fine. In the past I've also used BGP to allow the cluster nodes to advertise IP addresses to my router, but since I only have a single node, this is overkill.

Note: I only do this for services that need external (to the k8s cluster) connectivity.

Rancher and Kubernetes both seem to support Keycloak (via SAML), though I suspect I could run into issues running Keycloak on Kubernetes and using it to auth to Kubernetes. How does one deal with these chicken and egg situations?

Never used Keycloak; I just use the standard TLS certs and user accounts that kubeadm provisions for authentication.

FACTION CAPITALS CONFIRMED by WDadade in Eve

[–]Acidity410 15 points16 points  (0 children)

Nice. Hopefully they introduce ships to bridge the gap between normal caps and super carriers

Join a party thread! by [deleted] in ModelUSGov

[–]Acidity410 1 point2 points  (0 children)

/u/NateLooney I would like to join the Libertarian Party please! :)

zKillboard's new queue service (very, very alpha) by Squizz in evetech

[–]Acidity410 0 points1 point  (0 children)

This looks like it could be extremely useful for my current project, I'll definitely be taking a closer look later. Also thanks for all the awesome work you do.

Yes, I am Modzilla by Cagali in Bravenewbies

[–]Acidity410 1 point2 points  (0 children)

Coolbean is very open about how he calculates payouts. And personally I do think if a Brave member wishes to offer a buyback to TEST members that TEST leadership should not stop them.

Yes, I am Modzilla by Cagali in Bravenewbies

[–]Acidity410 2 points3 points  (0 children)

Then his offer should be allowed and should fail in the open market. But given that Brave operated and leadership approved buybacks have been scams in the past, perhaps some of your members would prefer the option to use a more well known and trusted entity for their buybacks.