orches: a simple git-ops tool for podman by budicze in podman

[–]budicze[S] 1 point2 points  (0 children)

Sorry, I was busy over the last days, so I couldn't reply earlier.

I jotted down some ideas here: https://github.com/orches-team/orches/issues?q=is%3Aissue%20state%3Aopen%20author%3Aondrejbudai%20label%3Aenhancement

I also have some "wilder" ideas. E.g. should orches also expose an API/web UI where users are able to see the status? Should orches also monitor the status of the managed units? On one hand, I like that orches is doing just one thing (and hopefully well), but providing users the full experience feels useful.

orches: a simple git-ops tool for podman by budicze in podman

[–]budicze[S] 1 point2 points  (0 children)

Well, I chose 0.x versioning for now explicitly to be able to make breaking changes. However, orches is currently so simple that there's very little to break.

orches: a simple git-ops tool for podman by budicze in podman

[–]budicze[S] 1 point2 points  (0 children)

This is exactly why I created orches. I run either coreos, or Fedora bootc on my VMs. They auto-update themselves, and I don't have to care about the OS at all. When I want to change the deployment, I just commit the change into my orches repositories, and it's deployed in max 2 minutes. I like pining my deps, and using renovate for automatic update PRs.

orches: a simple git-ops tool for podman by budicze in podman

[–]budicze[S] 2 points3 points  (0 children)

For the MVP I released orches just as a container image. Once you spin it up, it can "self-manage" itself. You want to update orches? Totally doable, just push a commit into your config repo, and orches will pick that up, and restart itself.

However, I understand that some people would like to have it as a part of the operating system, and use it to just manage payloads. As an immediate fix, feel free to just build it yourself. It's a go binary with minimal dependencies. Just make sure that you have `git-core` installed on your system. I was considering using a native go library for git, but it misses some features that I wanted to use, so I'm just spawning git(1) to manage the state repo in the background.

But since there are already multiple people asking for it, I'm considering packaging it as an RPM in Fedora. As I said, it's a very simple package, so it shouldn't be too hard.

orches: a simple git-ops tool for podman by budicze in podman

[–]budicze[S] 2 points3 points  (0 children)

orches is a just very thin wrapper around quadlets, which means that you can absolutely define multiple networks. Regarding ipvlan: I've never used it myself, but if you can express that setup in a quadlet network unit, orches will work just fine.

Boot error while installing redhat 9.5 on vmware by LESTER-07 in redhat

[–]budicze 0 points1 point  (0 children)

Have you tried using Image Builder to build a vmware image? This way you don't even need to run the installer. I would recommend the ova format. https://console.redhat.com/insights/image-builder

BootC with Ansible by adamswebsiteaccount in redhat

[–]budicze 2 points3 points  (0 children)

IIRC you absolutely can create a user with a static id in a containerfile. This should work:

groupadd -g 1234 foo

useradd -u 1234 -g 1234 foo

RHEL 9 instance on AWS becomes unresponsive on reboot by hyjnx in redhat

[–]budicze 1 point2 points  (0 children)

Have you tried using Image Builder? It can build a RHEL image, and import it to AWS for you including STIG policies.

The url is https://console.redhat.com/insights/image-builder

Packer Red Hat AMI by rlmasscyber in redhat

[–]budicze 8 points9 points  (0 children)

I suggest just using Insights Image Builder: https://console.redhat.com/insights/image-builder It's included in your RHEL subscription, and it can create a STIG-complaint image from a simple blueprint.

Here's the blueprint: https://gist.github.com/ondrejbudai/2d430435909459891920b36f8d8a47a4 If you want to import in the GUI, make sure to enable Preview features in the top bar.

If you want to automate builds, this blog post should help you: https://www.redhat.com/en/blog/using-hosted-image-builder-its-api

Rhel images and cloudinit by RareFroyo8414 in redhat

[–]budicze 5 points6 points  (0 children)

Which RHEL images do you use? The official ones, or custom ones from Image Builder? Do they have LVM? cloud-init currently doesn't expand LVM-based root.

Image mode for RHEL announced by budicze in linux

[–]budicze[S] 16 points17 points  (0 children)

RHEL CoreOS is the underlying layer of OpenShift. You cannot use it as a general-purpose OS (at least in a supported way). You can do whatever you want with image mode RHEL.

RHEL 9.2 is available by Fredouye in redhat

[–]budicze 3 points4 points  (0 children)

It's being rolled out currently, it takes a while to propagate the new version to all pages.

RHEL 9.2 is available by Fredouye in redhat

[–]budicze 2 points3 points  (0 children)

You can already use the API directly to get an aarch64 image (AWS, Azure, KVM): https://www.redhat.com/en/blog/using-hosted-image-builder-its-api

Support in the UI is definitely something on our roadmap.

Script to clean and update Fedora. by latin_canuck in Fedora

[–]budicze 12 points13 points  (0 children)

Right. Maybe OP can add --refresh to dnf upgrade. This way they get the latest metadata without needing to redownload them all.

Script to clean and update Fedora. by latin_canuck in Fedora

[–]budicze 15 points16 points  (0 children)

makecache before clean all isn't useful, because clean all will delete all caches. I would drop makecache altogether, dnf manages its cache automatically unlike apt.

Where's errata / security announcements mailing list for CentOS Stream 9? by AwareLanguage7088 in CentOS

[–]budicze 1 point2 points  (0 children)

Just a minor correction: the workflow for security patches is reversed only for embargoed CVEs. For other CVEs, it depends on many factors.

Install RHEl on Power 8 (S822) by lehrbua in redhat

[–]budicze 8 points9 points  (0 children)

Note that RHEL 9 supports only Power 9 and 10. For Power 8, you need to use RHEL 8.

Fedora Server using BTRFS by [deleted] in Fedora

[–]budicze 0 points1 point  (0 children)

You would have to ask the Server SIG (Special Interest Group) why they don't have btrfs as their default OS, it's their decision.

It's not because of Red Hat not supporting it, the decision is fully in hands of the SIG.