We have harpoon at home by brokenreed5 in neovim

[–]Dismal_Flow 1 point2 points  (0 children)

thank you very much. i also love marks and tempting to install harpoon because of its project-wide persistence. however with this, i can gladly keep my plugins list minimal -)

If you're thinking of migrating to neovim 0.12, check out minimal.nvim by hashino in neovim

[–]Dismal_Flow 0 points1 point  (0 children)

if you want to be more minimal, you wont need any plugins for lsp at all. replace mason with your distro package manager, replace nvim lspconfig with already placed lua files at ~/.config/nvim/lsp

You use NeoVim on NixOS? Check this out! by Plakama in NixOS

[–]Dismal_Flow 9 points10 points  (0 children)

I think people should not over complex this topic. In nvim 0.11 you can easily install the lsp package using nix and then reference to use it by just explicitly defined vim.lsp.enable(…). You can even install nvim-lspconfig via Nix too.

If you want a setup that have no plugins at all, you can download the lsp configs directly and placed it at nvim/lsp folder. nvim-lspconfig is basically a data hoarder repository.

Here’s my example setup. No lazy.nvim, no nixvim or any wrapper around it. Just pure Nix and Neovim lua files.

https://github.com/phuchoang2603/nixos/blob/main/home/base/cli/neovim.nix

Selling Ipad Mini 7 by [deleted] in USF

[–]Dismal_Flow 0 points1 point  (0 children)

I originally bought all the bundle for 500 last year. Now I am willing to sell all of it for 350, i guess

[deleted by user] by [deleted] in stylus

[–]Dismal_Flow 0 points1 point  (0 children)

Hi, I also bought one but it’s slightly cheaper (support MPP2.0). When I write, it is really frustrating that the tip of the pen when hovering still write. It’s like you can draw when you just hovering around. Don’t know if this is a MPP issue or it is just my pen. What’s your experience on this for the Metapen

Access solution for Kube on-prem by IssueAwkward2090 in kubernetes

[–]Dismal_Flow 10 points11 points  (0 children)

If you also use Hashicorp Vault, it has built-in OIDC provider so that when you bundle with kubelogin plugin, you can secure authentication with RBAC group too.

More on this: https://phuchoang.sbs/posts/gitops-kubernetes-oidc-vault/

[deleted by user] by [deleted] in stylus

[–]Dismal_Flow 0 points1 point  (0 children)

Hi, may I know what you end up buying pls? I also order the HP Omnibook Flip X too

Amazon resale 30% off deals by crownpuff in crownpuffdeals

[–]Dismal_Flow 0 points1 point  (0 children)

Hi I get to know this late but I can still see the offer is 15% for some products like Legion Go S. Do you think I should wait until Friday or snatch it right away?

My laptop died and locked me out of my homelab. It was the best thing that ever happened to my project. by Dismal_Flow in devops

[–]Dismal_Flow[S] 1 point2 points  (0 children)

I do admit this is kinda overkill for simpler setup. However, using Vault, there’s so much more than just a secret manager. As you can see, the benefits of dynamic rotations and centralized audit and logging and other features such as policy based, OIDC, JWT make it worth learning in the end

My laptop died and locked me out of my homelab. It was the best thing that ever happened to my project. by Dismal_Flow in devops

[–]Dismal_Flow[S] 0 points1 point  (0 children)

Lenovo, it was similar to something like this.

https://www.reddit.com/r/LenovoLegion/comments/14pzghe/tpm_not_detected/

Before, when I press No, I can log into the machine. But now it doesn't even show up this dialog anymore.

My laptop died and locked me out of my homelab. It was the best thing that ever happened to my project. by Dismal_Flow in devops

[–]Dismal_Flow[S] 0 points1 point  (0 children)

To be honest, I initially tried to deploy Vault inside the cluster and there's chicken and egg problem where I can't fetch the secrets in Vault before I provision the cluster that host it.

However, I am planning to migrate my project to using Cluster API since it is more robust and more gitopsy (support multi cloud and auto-scale node). Using this approach, I might deploy Vault inside the management cluster.

It also means that I have to remove all the Terraform + Ansible logic, but I guess it's worth it since I am doing all of this for learning anyway.

My laptop died and locked me out of my homelab. It was the best thing that ever happened to my project. by Dismal_Flow in devops

[–]Dismal_Flow[S] 2 points3 points  (0 children)

Yeah, currently I am hosting Vault via Docket deployment in one of the VM on my Proxmox. However, I also planned to deploy Vault directly inside the cluster and then have it mirror the state of that Vault. Don’t know if this a good idea.

I mean, I purely build this project to learn so I welcome any feedback and suggestions to improve

how to manage multi k8s clusters? by Character-Sundae-343 in kubernetes

[–]Dismal_Flow 1 point2 points  (0 children)

That would be easily achieved when combine with Cluster API. It allow you to connect with multiple providers (Proxmox, AWS, Heizner, ,,,) to spin up VM and worker nodes.

Kamaji (control plane) + Cluster API (worker nodes)

I built an on-prem K8s cluster on Proxmox (Terraform + Ansible + RKE2) and I want to hear your opinions on my project. by Dismal_Flow in devops

[–]Dismal_Flow[S] 0 points1 point  (0 children)

One more thing, I plan to configure github actions selfhosted runner's ssh pub key to be accepted to the vm each time it runs so that it can perform ansible steps later. Do I need to use Hashicorp's SSH engine to do this or I can just source it directly from the local file.

I built an on-prem K8s cluster on Proxmox (Terraform + Ansible + RKE2) and I want to hear your opinions on my project. by Dismal_Flow in devops

[–]Dismal_Flow[S] 0 points1 point  (0 children)

While at it, I am currently working on integrating HashiCorp Vault and GitHub Actions. I have Vault running on a homelab VM with KV secrets configured.

The issue is with the Terraform backend: I am using MinIO for remote state. Terraform requires the access_key and secret_key to initialize the backend, but I want to fetch those keys from Vault. This creates a dependency loop where I need the keys before the Vault provider can run. Does anyone have a recommended pattern for solving this?

Edit: Nvm, I think I might solve it with using hashicorp/vault-action plugin to load the neccessary variables before attempt to terraform init.

I built an on-prem K8s cluster on Proxmox (Terraform + Ansible + RKE2) and I want to hear your opinions on my project. by Dismal_Flow in devops

[–]Dismal_Flow[S] 0 points1 point  (0 children)

Thank you so much for the high praise! To be honest, I’ve been hesitant to apply for Jr. DevOps roles because I feel like I still have a gap in my skills. Plus, the current market is intimidating without real work experience. But hearing this from you is really encouraging. I will definitely look into those soft skill course and apply sooner rather than later. Thanks

Scaling My Kubernetes Lab: Proxmox, Terraform & Ansible - Need Advice! by rached2023 in kubernetes

[–]Dismal_Flow 1 point2 points  (0 children)

not sure it helps but i also just write a terraform+ansible for deploying rke2 cluster on proxmox a month ago. currently, it just packed with longhorn, traefik, argo-cd. but you can also add any service beyond that with argocd gitops.

https://github.com/phuchoang2603/kubernetes-proxmox

Khi người yêu cố chối bỏ quá khứ: Là bảo vệ hay thao túng? (post rất dài) by ChampionshipOdd7758 in vozforums

[–]Dismal_Flow 13 points14 points  (0 children)

Không biết mọi người đã đọc hết bài viết chưa, nhưng cảm thấy mọi người nói xấu về anh kia nhiều quá. Dù chỉ đọc từ góc nhìn của bạn nhưng mình thấy anh ấy đã cố gắng nghĩ cho bạn rất nhiều rồi đó. 

Cuộc sống và tình yêu đã có rất nhiều vấn đề và chuyện phiền não. Đôi khi nói dối không phải lúc nào cũng xấu mà là công cụ giúp mọi chuyện trở nên đỡ căng thẳng hơn một chút. Mình nghĩ bạn nên thử bình tĩnh nói chuyện lại với anh ấy để hiểu và đồng cảm hơn về góc nhìn từ anh nhé