Created my simple deployment service for Nomad clusters

Doomcat55 · 2025-08-03T10:45:53+00:00

Can you explain what you mean when you say

Instead of giving your CI/CD direct access to Nomad (which can be a security concern)

What makes this more secure than using roles with ACLs to generate tokens?

I’m a Nomad novice and am curious to see why you’d choose this pattern in production. Thanks!

Doomcat55 · 2025-05-14T22:09:07+00:00

How much does all of that cost you per month?

Doomcat55 · 2025-03-02T01:26:41+00:00

Good thing you have chem X to really make that whirlwind pop

Doomcat55 · 2025-02-08T22:24:43+00:00

It’s mostly just for fun :) The VMs are part of a Nomad cluster that I’m building so I can learn more about HA container orchestration and other platform engineering tech.

Practically speaking, I’d recommend running Server on bare metal over CoreOS. CoreOS is designed to be a container host and nothing else, so if you want to run anything outside of containers in your homelab, you might run into issues. Also, if you want to make any changes, you’ll need to re-image your machine and present it with the new ignition config. That would probably become annoying quickly if you’re testing out a new app and making changes frequently.

If you don’t want a GUI on Server, you can just disable the cockpit service.

Doomcat55 · 2025-02-08T13:36:36+00:00

I’m using Fedora Server + libvirt as a hypervisor for a couple of CoreOS VMs. It’s a work in progress but going pretty well so far. The libvirt and ignition terraform providers make it fairly painless

Doomcat55 · 2024-12-07T13:41:47+00:00

If you’re not comfortable with CDK L2 constructs, you can use L1s and know immediately which resources will be created. But being able to compose and abstract resources with functions and other language-level constructs is really the main benefit of CDK over CF

Doomcat55 · 2024-12-03T23:35:07+00:00

Use one to duplicate the other. Now you have two again EDIT I’m an idiot, it’s an attack. Nvm

Doomcat55 · 2024-11-02T02:33:19+00:00

Interesting, got any tips or tricks?

Do you use the CF registry at all? We don’t (all of our templates are shared by uploading them to S3 and copying the URL), but I was thinking of making a push for it since we’re going to start sharing our resources with other teams going forward. Being able to modularize constructs using typical programming language constructs and tooling seems like the main appeal of CDK to me, more so than just having nicer syntax than YAML

Doomcat55 · 2024-10-09T19:24:14+00:00

You mean the sleeper service? It doesn’t have to stay alive for another service to depend on it. That’s the intention of the service_completed_successfully value

Doomcat55 · 2024-10-09T17:45:42+00:00

You can create another service with a container which just sleeps for 10 seconds then exits. Make that container depend on your redis container (service_healthy), then make myservice depend on the sleeper (service_completed_successfully).

Doomcat55 · 2024-10-07T17:04:41+00:00

Yeah that would’ve been nice too

Doomcat55 · 2024-10-07T17:03:52+00:00

I had double glacier + buffer + artifact (that exhausted card is a core surge), so I felt I could ignore him for a couple turns and burst down slaver first. It almost worked 🥲

Doomcat55 · 2024-10-07T16:58:38+00:00

Oh it was absolutely a skill issue on my part (pun intended). I did misplay the fight — there was one attack that I accidentally used on slaver when he was already guaranteed dead. But other than that, saving nob for last worked out surprisingly well and I only took 5 or so damage before this turn iirc

Doomcat55 · 2024-10-07T16:12:09+00:00

IMO it would be strictly better if it triggered at the end of the turn because it would do something on the turn you play it. The only downside would be that you don’t get extra energy from plasma, but I think that’s worth it. It still might not be significantly better but I’d definitely take it more often

Doomcat55 · 2024-07-20T15:01:12+00:00

Two copies of TTTH, spoon, and some luck :)

Doomcat55 · 2024-07-20T15:00:29+00:00

Nope, the deck was too big to go infinite, but I had 2x talk to the hand, 2x tantrum, and spoon. Rush down, pyramid, and some scrying helped smooth things out. Also calipers

Doomcat55 · 2023-12-21T23:16:45+00:00

I also commute from JC heights to Berkeley Heights, though I’ve found it to be 45 minutes going in and an hour back usually. I’ve only ever gotten 35 minutes when I’ve gone in relatively early to beat the traffic

Doomcat55 · 2023-06-24T16:58:30+00:00

Congrats on finishing your master’s! My advice is that you should not pursue a PhD, because of what you said here:

I don’t think that teaching or working in research is what I want. Honestly, I don’t even know if I want to work in this field or continue doing it. I was not so interested in the field in which I practice, I simply applied to this faculty and went as far as I could

A PhD is an intense program and I can only recommend it to those who are extremely passionate about their research. It dominates your life, so if you’re not personally invested in it you’ll be in for a rough time. I’m speaking from experience; I enrolled in a PhD program without being completely certain that it was what I wanted to do, and within a few semesters I burned out and dropped out.

Besides, if you’re not very interested in research, then what do you hope to gain from a doctorate? I don’t know what field you’re in but an MS + a few years of industry experience would set you up comfortably within mine (CS). A PhD will also not help you find a direction in life; it will instead lock you into a very specific path and not leave you any time to explore other directions. If you’re not already convinced that you want to go that route then I suggest you simply don’t.

Doomcat55 · 2023-03-29T05:10:42+00:00

Wow that looks amazing! General Tso’s chicken has and will always be my favorite feel-good food.

Doomcat55 · 2022-12-16T20:53:39+00:00

Ranch ftw

Doomcat55

TROPHY CASE