{"person_view":{"person":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"counts":{"person_id":18478318,"post_count":3,"comment_count":11},"is_admin":false},"site":{"id":10,"name":"Lemmy","sidebar":"[What is Lemmy.ml](https://lemmy.ml/post/70280)\n\n# Rules\n1. No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia. [Code of Conduct](https://join-lemmy.org/docs/en/code_of_conduct.html).\n1. Be respectful, [especially when disagreeing](https://lemmy.ml/post/1140303). Everyone should feel welcome here.\n1. No porn.\n1. No Ads / Spamming.\n\n\nFeel free to ask questions over in:\n- [!lemmy_support](https://lemmy.ml/c/lemmy_support)\n- [Matrix Chat](https://matrix.to/#/#lemmy-space:matrix.org)\n- [Mastodon @LemmyDev](https://mastodon.social/@LemmyDev)","published":"2023-06-29T05:09:20.044287Z","updated":"2025-06-20T14:34:49.130437Z","icon":"https://lemmy.ml/pictrs/image/fa6d9660-4f1f-4e90-ac73-b897216db6f3.png","description":"A community of privacy and FOSS enthusiasts, run by Lemmy’s developers","actor_id":"https://lemmy.ml/","last_refreshed_at":"2025-06-27T01:34:09.399519Z","inbox_url":"https://lemmy.ml/inbox","public_key":"-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hFY2e7ltFZtoWEAW4/o\nTWEUS8i76KNhQIyuzCQBELB5tajA6WzHjeX4pOLVXc5l5dwSbFHL/98S4k9ZRA0Z\nLyJ7lUfnAYilR21qH+HPmw1QxPvaHJMc1USs+bhapz0+jlZASxXztDvr8xcXf5RR\nPTlfp4zDeQJYsgp2PRS6gRspLJ/9LqFCn05mrnuSTw6CGTDWRteaxO7gXWbQ69vP\nYrwY0Pmd6T9SX4yPsyPN3e2FPGuEhxR44rg8zTdvZje/jkDhdrQfEUQRiCDl39j2\nBJAh/DVPByffCT5283SKtasoAKENalYgJD9rAMRPlctK9t6pvK7iaM5tfsRpk5/e\nRQIDAQAB\n-----END PUBLIC KEY-----\n","instance_id":16},"comments":[{"comment":{"id":17668490,"creator_id":18478318,"post_id":24674242,"content":"Oh boy ^^ I have the app installed but always thought the name sounds really bad. Never knew what it meant. Thanks :)","removed":false,"published":"2025-06-26T13:53:53.869513Z","deleted":false,"ap_id":"https://lemmy.ml/comment/19497400","local":false,"path":"0.17668490","distinguished":false,"language_id":0},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"post":{"id":24674242,"name":"OsmAnd 5.1 (Android) | OsmAnd","url":"https://osmand.net/blog/osmand-android-5-1-released/","creator_id":996686,"community_id":1002949,"removed":false,"locked":false,"published":"2025-06-26T13:38:48.565284Z","deleted":false,"nsfw":false,"embed_title":"OsmAnd 5.1 (Android) | OsmAnd","embed_description":"The new Android update is here!","ap_id":"https://discuss.tchncs.de/post/39429293","local":false,"language_id":0,"featured_community":false,"featured_local":false,"url_content_type":"text/html"},"community":{"id":1002949,"name":"osmand","title":"OpenStreetMap + App = OsmAnd!","description":"OsmAnd is a great open source Maps mobile app that uses OpenStreetMap!","removed":false,"published":"2020-02-14T19:13:25.379487Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/osmand","local":false,"hidden":false,"posting_restricted_to_mods":false,"instance_id":16,"visibility":"Public"},"counts":{"comment_id":17668490,"score":2,"upvotes":2,"downvotes":0,"published":"2025-06-26T13:53:53.869513Z","child_count":0},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false},{"comment":{"id":17665831,"creator_id":18478318,"post_id":24646490,"content":"Yes, it is absolutely valid that you decided to commercialise your project and keeping parts or all of the code closed. As I work in the public sector and we are encouraged to use open source and write open source software, my knowledge regarding closed software solutions is thin. Is there a \"standard way\" how closed software is able to guarantee private key safety? I could imagine solutions where there is a separate handler that is open source so that one can verify that only specific information is passed into the closed software area, but this doesn't sound feasible when talking about full terminal support within the closed software.\n\nAgain, there is nothing wrong with going commercial! I am sure I will release closed software (side projects), too, at some point.","removed":false,"published":"2025-06-26T11:18:31.496512Z","updated":"2025-06-26T11:19:29.560911Z","deleted":false,"ap_id":"https://lemmy.ml/comment/19494897","local":false,"path":"0.17662983.17664638.17665831","distinguished":false,"language_id":0},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"post":{"id":24646490,"name":"XPipe - A connection hub for all your servers: Status update for the v16 release","url":"https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fsh.itjust.works%2Fpictrs%2Fimage%2F82c131d4-56ee-41d6-98b2-204f1cf92c27.png","body":"\nToday I can share a major development status update of [XPipe](https://github.com/xpipe-io/xpipe), a connection hub that allows you to access your entire server infrastructure from your local desktop. It can make your life easier when working with any kind of servers by eliminating all the commonly tedious tasks that come up when interacting with remote systems, either from the terminal or from a graphical interface. XPipe comes with integrations for SSH, docker and other containers, various hypervisors, and more without requiring setup on your remote systems. You can also keep using your favourite text/code editors, terminals, password managers, shells, command-line tools, and more with it.\n\n![Hub](https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fi.imgur.com%2FtSXWF75.png)\n\n## Docker compose\n\nThis release introduces support for docker compose. Containers in compose projects are grouped together and can be managed all at the same time via compose project entries.\n\nThe container state information shown is also improved, always showing the container state in combination with the system information.\n\n![Compose](https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fi.imgur.com%2F9mLHAJ5.png)\n\n## Batch mode\n\nThere is now a batch mode available that allows you to select multiple systems via checkboxes and perform actions for the entire batch. This can include starting/stopping, automatically adding available subconnections, or running scripts on all selected systems.\n\nYou can toggle the batch mode in the top left corner.\n\n![Batch](https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fi.imgur.com%2FHI59oyV.png)\n\n## Password managers\n\nThe password manager integrations have been upgraded:\n- There is now support for KeePassXC\n- All password manager integrations have been reworked to work out of the box without configuration\n- There is now support to use password manager SSH agents more easily\n- You can now unlock the xpipe vault with your password manager\n\n![Password Manager](https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fi.imgur.com%2FcExxaql.png)\n\n## Terminals\n\nThe terminal integration comes with many new features:\n- There is now built-in support for the terminal multiplexers tmux, zellij, and screen. This is especially useful for terminals without tabbing support.\n- There is also now built-in support for custom prompts with starship, oh-my-posh, and oh-my-zsh.\n- On Windows, you now have the ability to use a WSL distribution as the terminal environment, allowing you to use the new terminal multiplexer integration seamlessly on Windows systems as well.\n\n## SSH\n\nVarious improvements were made to the SSH implementation:\n- The SSH gateway implementation has been reworked so that you can now use local SSH keys and other identities for connections with gateways\n- The VSCode SSH remote integration has been reworked to allow more connections it to be opened in vscode. It now supports essentially all simple SSH connections, custom SSH connections, SSH config connections, and VM SSH connections. This support includes gateways\n- There is now built-in support to refresh an SSO openpubkey with the opkssh tool when needed\n- There is now the option to enable verbose ssh output to diagnose connection issues better\n- For VMs, you can now choose to not use the hypervisor host as SSH gateway and instead directly connect to the VM IP\n\n## Other\n\n- Connection names, e.g. VM names, will now automatically update on refresh when they were changed\n- You can now launch custom scripts within XPipe with a command output dialog window without having to open a terminal\n- Various installation types like the linux apt/rpm repository and homebrew installations now support automatic updates as well\n- The k8s integration will now automatically add all namespaces for the current context when searching for connections\n- The application window will now hide any unnecessary sidebars when being resized to a small width. This makes it much easier to use XPipe in a tiling window arrangement\n- The webtop has been updated to have terminal multiplexers, proper konsole tab support, disabled kwallet, and more\n- Various error messages and connection creation dialogs now contain a help link to the documentation sections\n\n## A note on the open-source model\n\nSince it has come up a few times, in addition to the note in the git repository, I would like to clarify that XPipe is not fully FOSS software. The core that you can find on GitHub is Apache 2.0 licensed, but the distribution you download ships with closed-source extensions. There's also a licensing system in place with limitations on what kind of systems you can connect to in the community edition as I am trying to make a living out of this. I understand that this is a deal-breaker for some, so I wanted to give a heads-up.\n\n## Outlook\n\nIf this project sounds interesting to you, you can check it out on [GitHub](https://github.com/xpipe-io/xpipe), visit the [Website](https://xpipe.io/), or check out the [Docs](https://docs.xpipe.io/) for more information.\n\nEnjoy!\n","creator_id":178543,"community_id":20,"removed":false,"locked":false,"published":"2025-06-26T00:02:34.109555Z","updated":"2025-06-26T00:05:56.221275Z","deleted":false,"nsfw":false,"thumbnail_url":"https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fsh.itjust.works%2Fpictrs%2Fimage%2F82c131d4-56ee-41d6-98b2-204f1cf92c27.png","ap_id":"https://sh.itjust.works/post/40972154","local":false,"language_id":37,"featured_community":false,"featured_local":false,"url_content_type":"image/png"},"community":{"id":20,"name":"linux","title":"Linux","description":"From Wikipedia, the free encyclopedia\n\nLinux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n\nDistributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word \"Linux\" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n\n\n### Rules\n* Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n* No misinformation\n* No NSFW content\n* No hate speech, bigotry, etc \n\n### Related Communities\n* [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n* [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture) \n* [!technology@lemmy.ml](https://lemmy.ml/c/technology) \n* [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware) \n\nCommunity icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)","removed":false,"published":"2019-06-01T15:07:36.179766Z","updated":"2022-06-18T17:36:20.924834Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/linux","local":false,"icon":"https://lemmy.ml/pictrs/image/q98XK4sKtw.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":16,"visibility":"Public"},"counts":{"comment_id":17665831,"score":1,"upvotes":1,"downvotes":0,"published":"2025-06-26T11:18:31.496512Z","child_count":1},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false},{"comment":{"id":17663206,"creator_id":18478318,"post_id":24630071,"content":"Hey, I had my struggles with app icons as well when I wrote a small app for myself so I am not really equipped to create the PR (also due to current time limitations). If no one is found for that, I can give it a shot at the end of the year, but I am sure you will find someone sooner than that.\n\nHowever, I know of a free icon website and have looked through their icons to suggest a few to you:\n\n- Simple Eye https://uxwing.com/view-icon/\n- Thin line art eye https://uxwing.com/see-icon/\n- Eye in \"scanning square\" (corners of a square are hinted, the eye is inside; typical \"scanning square\" for qr code scanners) https://uxwing.com/eye-scanning-icon/\n- Binoculars https://uxwing.com/binoculars-icon/\n- Spectacles https://uxwing.com/spectacles-icon/\n- Happy man with VR glasses https://uxwing.com/virtual-reality-vr-icon/\n- Old video recorder https://uxwing.com/video-camera-icon/\n- Square with red dot insids and text record https://uxwing.com/screen-recorder-icon/\n\nUxwings license is amazing: https://uxwing.com/license/ you can use the icons for basically anything and can even alter them.\n\nPersonally, I like \"Eye in \"scanning square\"\" the most as it symbolizes the technical aspect of scanning/capturing the surroundings.\n\nWhile I haven't used it yetis, there is also https://icon.kitchen/ for icon generation.","removed":false,"published":"2025-06-26T07:40:02.489278Z","updated":"2025-06-26T07:41:57.866918Z","deleted":false,"ap_id":"https://lemmy.ml/comment/19492445","local":false,"path":"0.17663206","distinguished":false,"language_id":0},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"post":{"id":24630071,"name":"A FOSS Android project looking for a 15-minute help","body":"TLdR. Nothing major, just needs help finding an app icon.\n\nI'm developing [VScan](https://github.com/RastislavKish/VScan), a little project aiming to research how vision LLMs could help out blind people on travel and in their every-day life by substituting eyesight for various visual tasks.\n\nMy project is not a \"magical AI app\" which is going to solve every problem on the click of a button. In fact, I don't use the \"AI branding\" at all, because I think it's very misleading for the general audience. It's more of an experiment to find out if the blind people could use LLMs as tools for visual cognition in a way that would be useful.\n\nI'm trying to be as clear and specific as I can about the used technology, and providing as much customization as possible without sacrificing convenience. Of course, the project is completely open-source, does not collect any user data and while the first generations only supported GPT models, because that was the only thing usable for vision at the time, the current dev version already supports defining an arbitrary LLM provider (including a self-hosted server), and the ability to choose any model supported by the respective provider.\n\nI'm facing just one major issue. I'm blind myself, coding the app as my personal tool. And I'm having quite a hard time finding an app icon that would work on the modern Android systems and setting it up properly. To be honest, I'm quite lost in the various suggested standards, there are the ordinary raster PNG icons, vector based SVG icons, and these days Android seems to also have some multi-part contextual XML based icons which as far as I understand should adapt to the different screens, configurations, themes etc. but I genuinely have no idea where to find these and sofar whatever I tried ended up as some undefinable point cloud on the screen.\n\nNormally I wouldn't care about such things, but having an app icon is the requirement for getting accepted into app stores like F-Droid or Google Play, and subsequently, to the users. Nobody these days is willing to side-load apps anymore.\n\nIf anybody with Android development experience could take a look on this, I would be very grateful. All that's needed to do is finding a suitable icon on one of the icon portals, preferably in shape of an eye, or a camera (the one used to mark video recording), although the exact appearance doesn't really matter, the users won't see it anyway. It can be free or paid, as far as the price is reasonable. Then you can either open a PR yourself (the project does not require anything special to build, it's just the ordinary Android Studio stuff), or you could explain to me how to implement the icons and I will try to follow.\n\nThanks for your attention! I apologize if this is not the right place to post this, mods feel free to remove if necessary.\n","creator_id":3725648,"community_id":25,"removed":false,"locked":false,"published":"2025-06-25T17:14:31.784345Z","deleted":false,"nsfw":false,"ap_id":"https://lemmy.ml/post/32250103","local":false,"language_id":0,"featured_community":false,"featured_local":false},"community":{"id":25,"name":"opensource","title":"Open Source","description":"All about open source! Feel free to ask questions, and share news, and interesting stuff!\n\n# Useful Links\n* [Open Source Initiative](https://opensource.org/)\n* [Free Software Foundation](https://www.fsf.org/)\n* [Electronic Frontier Foundation](https://www.eff.org/)\n* [Software Freedom Conservancy](https://sfconservancy.org/)\n* [It's FOSS](https://itsfoss.com/)\n* [Android FOSS Apps Megathread](https://lemmy.ml/comment/8733242)\n\n# Rules\n* Posts must be relevant to the open source ideology\n* No NSFW content\n* No hate speech, bigotry, etc \n\n# Related Communities\n* [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture) \n* [!libre_software@lemmy.ml](https://lemmy.ml/c/libre_software) \n* [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware) \n* [!linux@lemmy.ml](https://lemmy.ml/c/linux) \n* [!technology@lemmy.ml](https://lemmy.ml/c/technology) \n\nCommunity icon from opensource.org, but we are not affiliated with them. ","removed":false,"published":"2019-08-19T09:43:37.618982Z","updated":"2024-03-08T00:55:57.243595Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/opensource","local":false,"icon":"https://lemmy.ml/pictrs/image/a64z2tlDDD.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":16,"visibility":"Public"},"counts":{"comment_id":17663206,"score":2,"upvotes":2,"downvotes":0,"published":"2025-06-26T07:40:02.489278Z","child_count":0},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false},{"comment":{"id":17662983,"creator_id":18478318,"post_id":24646490,"content":"Giving it a quick scan, it does look interesting. I am not sure whether I will try it as I don't see the need to visualise beyond what I can do with a shell and the openstack dashboard, but there can definitely be use cases for it.\n\nNot being FOSS is the deal-breaker though. Not sure if I am too much of a sceptic but I prefer open source when having software that accesses my private key/servers.","removed":false,"published":"2025-06-26T07:18:43.379072Z","deleted":false,"ap_id":"https://lemmy.ml/comment/19492245","local":false,"path":"0.17662983","distinguished":false,"language_id":0},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"post":{"id":24646490,"name":"XPipe - A connection hub for all your servers: Status update for the v16 release","url":"https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fsh.itjust.works%2Fpictrs%2Fimage%2F82c131d4-56ee-41d6-98b2-204f1cf92c27.png","body":"\nToday I can share a major development status update of [XPipe](https://github.com/xpipe-io/xpipe), a connection hub that allows you to access your entire server infrastructure from your local desktop. It can make your life easier when working with any kind of servers by eliminating all the commonly tedious tasks that come up when interacting with remote systems, either from the terminal or from a graphical interface. XPipe comes with integrations for SSH, docker and other containers, various hypervisors, and more without requiring setup on your remote systems. You can also keep using your favourite text/code editors, terminals, password managers, shells, command-line tools, and more with it.\n\n![Hub](https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fi.imgur.com%2FtSXWF75.png)\n\n## Docker compose\n\nThis release introduces support for docker compose. Containers in compose projects are grouped together and can be managed all at the same time via compose project entries.\n\nThe container state information shown is also improved, always showing the container state in combination with the system information.\n\n![Compose](https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fi.imgur.com%2F9mLHAJ5.png)\n\n## Batch mode\n\nThere is now a batch mode available that allows you to select multiple systems via checkboxes and perform actions for the entire batch. This can include starting/stopping, automatically adding available subconnections, or running scripts on all selected systems.\n\nYou can toggle the batch mode in the top left corner.\n\n![Batch](https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fi.imgur.com%2FHI59oyV.png)\n\n## Password managers\n\nThe password manager integrations have been upgraded:\n- There is now support for KeePassXC\n- All password manager integrations have been reworked to work out of the box without configuration\n- There is now support to use password manager SSH agents more easily\n- You can now unlock the xpipe vault with your password manager\n\n![Password Manager](https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fi.imgur.com%2FcExxaql.png)\n\n## Terminals\n\nThe terminal integration comes with many new features:\n- There is now built-in support for the terminal multiplexers tmux, zellij, and screen. This is especially useful for terminals without tabbing support.\n- There is also now built-in support for custom prompts with starship, oh-my-posh, and oh-my-zsh.\n- On Windows, you now have the ability to use a WSL distribution as the terminal environment, allowing you to use the new terminal multiplexer integration seamlessly on Windows systems as well.\n\n## SSH\n\nVarious improvements were made to the SSH implementation:\n- The SSH gateway implementation has been reworked so that you can now use local SSH keys and other identities for connections with gateways\n- The VSCode SSH remote integration has been reworked to allow more connections it to be opened in vscode. It now supports essentially all simple SSH connections, custom SSH connections, SSH config connections, and VM SSH connections. This support includes gateways\n- There is now built-in support to refresh an SSO openpubkey with the opkssh tool when needed\n- There is now the option to enable verbose ssh output to diagnose connection issues better\n- For VMs, you can now choose to not use the hypervisor host as SSH gateway and instead directly connect to the VM IP\n\n## Other\n\n- Connection names, e.g. VM names, will now automatically update on refresh when they were changed\n- You can now launch custom scripts within XPipe with a command output dialog window without having to open a terminal\n- Various installation types like the linux apt/rpm repository and homebrew installations now support automatic updates as well\n- The k8s integration will now automatically add all namespaces for the current context when searching for connections\n- The application window will now hide any unnecessary sidebars when being resized to a small width. This makes it much easier to use XPipe in a tiling window arrangement\n- The webtop has been updated to have terminal multiplexers, proper konsole tab support, disabled kwallet, and more\n- Various error messages and connection creation dialogs now contain a help link to the documentation sections\n\n## A note on the open-source model\n\nSince it has come up a few times, in addition to the note in the git repository, I would like to clarify that XPipe is not fully FOSS software. The core that you can find on GitHub is Apache 2.0 licensed, but the distribution you download ships with closed-source extensions. There's also a licensing system in place with limitations on what kind of systems you can connect to in the community edition as I am trying to make a living out of this. I understand that this is a deal-breaker for some, so I wanted to give a heads-up.\n\n## Outlook\n\nIf this project sounds interesting to you, you can check it out on [GitHub](https://github.com/xpipe-io/xpipe), visit the [Website](https://xpipe.io/), or check out the [Docs](https://docs.xpipe.io/) for more information.\n\nEnjoy!\n","creator_id":178543,"community_id":20,"removed":false,"locked":false,"published":"2025-06-26T00:02:34.109555Z","updated":"2025-06-26T00:05:56.221275Z","deleted":false,"nsfw":false,"thumbnail_url":"https://lemmy.ml/api/v3/image_proxy?url=https%3A%2F%2Fsh.itjust.works%2Fpictrs%2Fimage%2F82c131d4-56ee-41d6-98b2-204f1cf92c27.png","ap_id":"https://sh.itjust.works/post/40972154","local":false,"language_id":37,"featured_community":false,"featured_local":false,"url_content_type":"image/png"},"community":{"id":20,"name":"linux","title":"Linux","description":"From Wikipedia, the free encyclopedia\n\nLinux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n\nDistributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word \"Linux\" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n\n\n### Rules\n* Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n* No misinformation\n* No NSFW content\n* No hate speech, bigotry, etc \n\n### Related Communities\n* [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n* [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture) \n* [!technology@lemmy.ml](https://lemmy.ml/c/technology) \n* [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware) \n\nCommunity icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)","removed":false,"published":"2019-06-01T15:07:36.179766Z","updated":"2022-06-18T17:36:20.924834Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/linux","local":false,"icon":"https://lemmy.ml/pictrs/image/q98XK4sKtw.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":16,"visibility":"Public"},"counts":{"comment_id":17662983,"score":10,"upvotes":10,"downvotes":0,"published":"2025-06-26T07:18:43.379072Z","child_count":3},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false},{"comment":{"id":17645981,"creator_id":18478318,"post_id":24564610,"content":"That's a good idea. While I have opened some ports that are commonly used by kubernetes, I didn't think about flannel requiring additional open ports. I will look into this. It's also mentioned in the troubleshooting guide, but I looked for debugging advice there and only scanned the other sections: https://github.com/flannel-io/flannel/blob/master/Documentation/troubleshooting.md#firewalls","removed":false,"published":"2025-06-25T15:01:11.121851Z","deleted":false,"ap_id":"https://lemmy.ml/comment/19477015","local":false,"path":"0.17644504.17645981","distinguished":false,"language_id":0},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"post":{"id":24564610,"name":"Asking For Help: Kubernetes Pods Unable To Reach Each Other (Flannel, Networking)","body":"I am not entirely sure whether this sub is also intended for asking questions, but after opening the question on stack overflow and only getting an AI answer, I thought it would be worth a shot to ask here. What follows is a rather long question, but most of it is just debugging information to avoid obvious questions.\n\nI have created a small kubernetes cluster (6 nodes) using kubeadm and flannel as the CNI in an openstack project. This is my first time using more than a single node kubernetes cluster.\n\nI set up the kubernetes cluster's master via \n\n```yaml\n# tasks file for kubernetes_master\n- name: Install required packages\n apt:\n name:\n - curl\n - gnupg2\n - software-properties-common\n - apt-transport-https\n - ca-certificates\n state: present\n update_cache: yes\n\n- name: Install Docker\n apt:\n name: docker.io\n state: present\n update_cache: yes\n\n- name: Remove Keyrings Directory (if it exists)\n ansible.builtin.shell: rm -rf /etc/apt/keyrings\n\n- name: Remove Existing Kubernetes Directory (if it exists)\n ansible.builtin.shell: sudo rm -rf /etc/apt/sources.list.d/pkgs_k8s_io_core_stable_v1_30_deb.list\n\n- name: Disable swap\n ansible.builtin.command:\n cmd: swapoff -a\n\n#- name: Ensure swap is disabled on boot\n# ansible.builtin.command:\n# cmd: sudo sed -i -e '/\\/swap.img\\s\\+none\\s\\+swap\\s\\+sw\\s\\+0\\s\\+0/s/^/#/' /etc/fstab\n\n- name: Ensure all swap entries are disabled on boot\n ansible.builtin.command:\n cmd: sudo sed -i -e '/\\s\\+swap\\s\\+/s/^/#/' /etc/fstab\n\n- name: Add kernel modules for Containerd\n ansible.builtin.copy:\n dest: /etc/modules-load.d/containerd.conf\n content: |\n overlay\n br_netfilter\n\n- name: Load kernel modules for Containerd\n ansible.builtin.shell:\n cmd: modprobe overlay && modprobe br_netfilter\n become: true\n\n- name: Add kernel parameters for Kubernetes\n ansible.builtin.copy:\n dest: /etc/sysctl.d/kubernetes.conf\n content: |\n net.bridge.bridge-nf-call-ip6tables = 1\n net.bridge.bridge-nf-call-iptables = 1\n net.ipv4.ip_forward = 1\n\n- name: Load kernel parameter changes\n ansible.builtin.command:\n cmd: sudo sysctl --system\n\n- name: Configuring Containerd (building the configuration file)\n ansible.builtin.command:\n cmd: sudo sh -c \"containerd config default > /opt/containerd/config.toml\"\n\n- name: Configuring Containerd (Setting SystemdCgroup Variable to True)\n ansible.builtin.command:\n cmd: sudo sed -i 's/SystemdCgroup = false/SystemdCgroup = true/' /opt/containerd/config.toml\n\n- name: Reload systemd configuration\n ansible.builtin.command:\n cmd: systemctl daemon-reload\n\n- name: Restart containerd service\n ansible.builtin.service:\n name: containerd\n state: restarted\n\n- name: Allow 6443/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 6443/tcp\n\n- name: Allow 2379:2380/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 2379:2380/tcp\n\n- name: Allow 22/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 22/tcp\n\n- name: Allow 8080/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 8080/tcp\n\n- name: Allow 10250/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 10250/tcp\n\n- name: Allow 10251/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 10251/tcp\n\n- name: Allow 10252/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 10252/tcp\n\n- name: Allow 10255/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 10255/tcp\n\n- name: Allow 5473/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 5473/tcp\n\n- name: Enable the firewall\n ansible.builtin.ufw:\n state: enabled\n\n- name: Reload the firewall\n ansible.builtin.command:\n cmd: sudo ufw reload\n\n- name: Prepare keyrings directory and update permissions\n file:\n path: /etc/apt/keyrings\n state: directory\n mode: '0755'\n\n- name: Download Kubernetes GPG key securely\n ansible.builtin.shell: curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.30/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg\n\n- name: Add Kubernetes repository\n ansible.builtin.apt_repository:\n repo: \"deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.30/deb/ /\"\n state: present\n\n- name: Install kubeadm, kubelet, kubectl\n ansible.builtin.apt:\n name:\n - kubelet\n - kubeadm\n - kubectl\n state: present\n update_cache: yes\n\n- name: Hold kubelet, kubeadm, kubectl packages\n ansible.builtin.command:\n cmd: sudo apt-mark hold kubelet kubeadm kubectl\n\n- name: Replace /etc/default/kubelet contents\n ansible.builtin.copy:\n dest: /etc/default/kubelet\n content: 'KUBELET_EXTRA_ARGS=\"--cgroup-driver=cgroupfs\"'\n\n- name: Reload systemd configuration\n ansible.builtin.command:\n cmd: systemctl daemon-reload\n\n- name: Restart kubelet service\n ansible.builtin.service:\n name: kubelet\n state: restarted\n\n- name: Update System-Wide Profile for Kubernetes\n ansible.builtin.copy:\n dest: /etc/profile.d/kubernetes.sh\n content: |\n export KUBECONFIG=/etc/kubernetes/admin.conf\n export ANSIBLE_USER=\"sysadmin\"\n\n# only works if not executing on master\n#- name: Reboot the system\n# ansible.builtin.reboot:\n# msg: \"Reboot initiated by Ansible for Kubernetes setup\"\n# reboot_timeout: 150\n\n- name: Replace Docker daemon.json configuration\n ansible.builtin.copy:\n dest: /etc/docker/daemon.json\n content: |\n {\n \"exec-opts\": [\"native.cgroupdriver=systemd\"],\n \"log-driver\": \"json-file\",\n \"log-opts\": {\n \"max-size\": \"100m\"\n },\n \"storage-driver\": \"overlay2\"\n }\n\n- name: Reload systemd configuration\n ansible.builtin.command:\n cmd: systemctl daemon-reload\n\n- name: Restart Docker service\n ansible.builtin.service:\n name: docker\n state: restarted\n\n- name: Update Kubeadm Environment Variable\n ansible.builtin.command:\n cmd: sudo sed -i -e '/^\\[Service\\]/a Environment=\"KUBELET_EXTRA_ARGS=--fail-swap-on=false\"' /usr/lib/systemd/system/kubelet.service.d/10-kubeadm.conf\n\n- name: Reload systemd configuration\n ansible.builtin.command:\n cmd: systemctl daemon-reload\n\n- name: Restart kubelet service\n ansible.builtin.service:\n name: kubelet\n state: restarted\n\n- name: Pull kubeadm container images\n ansible.builtin.command:\n cmd: sudo kubeadm config images pull\n\n- name: Initialize Kubernetes control plane\n ansible.builtin.command:\n cmd: kubeadm init --pod-network-cidr=10.244.0.0/16\n creates: /tmp/kubeadm_output\n register: kubeadm_init_output\n become: true\n changed_when: false\n\n- name: Set permissions for Kubernetes Admin\n file:\n path: /etc/kubernetes/admin.conf\n state: file\n mode: '0755'\n\n- name: Store Kubernetes initialization output to file\n copy:\n content: \"{{ kubeadm_init_output.stdout }}\"\n dest: /tmp/kubeadm_output\n become: true\n delegate_to: localhost\n\n- name: Generate the Join Command\n ansible.builtin.shell: cat /tmp/kubeadm_output | tail -n 2 | sed ':a;N;$!ba;s/\\\\\\n\\s*/ /g' > /tmp/join-command\n delegate_to: localhost\n\n- name: Set permissions for the Join Executable\n file:\n path: /tmp/join-command\n state: file\n mode: '0755'\n delegate_to: localhost\n```\n\nmanually reboot the node and installed flannel via `kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml`. Worker's are created in a similar way (without flannel). I omit their script for now but I can add it if it seems important.\n\nI then had dns resolution issues with a helm chart which is why I tried to investigate network issues and noticed that instances are unable to ping each other.\n\nI am unsure how to debug this issue further.\n\n# Debug Info\n\n```\nkubectl get nodes\nNAME STATUS ROLES AGE VERSION\nk8s-master-0 Ready control-plane 4h38m v1.30.14\nk8s-worker-0 Ready 4h35m v1.30.14\nk8s-worker-1 Ready 4h35m v1.30.14\nk8s-worker-2 Ready 4h35m v1.30.14\nk8s-worker-3 Ready 4h35m v1.30.14\nk8s-worker-4 Ready 4h35m v1.30.14\nk8s-worker-5 Ready 4h34m v1.30.14\n```\n\n```\nkube-flannel-ds-275hx 1/1 Running 0 150m 192.168.33.149 k8s-worker-0 \nkube-flannel-ds-2rplc 1/1 Running 0 150m 192.168.33.38 k8s-worker-5 \nkube-flannel-ds-2w98x 1/1 Running 0 150m 192.168.33.113 k8s-worker-1 \nkube-flannel-ds-g4vb6 1/1 Running 0 150m 192.168.33.167 k8s-worker-4 \nkube-flannel-ds-mpwbz 1/1 Running 0 150m 192.168.33.163 k8s-worker-2 \nkube-flannel-ds-qmbgc 1/1 Running 0 150m 192.168.33.117 k8s-master-0 \nkube-flannel-ds-sgdgs 1/1 Running 0 150m 192.168.33.243 k8s-worker-3 \n```\n\n```\nip addr show flannel.1\n4: flannel.1: mtu 1400 qdisc noqueue state UNKNOWN group default \n link/ether a2:4a:11:1f:84:ef brd ff:ff:ff:ff:ff:ff\n inet 10.244.0.0/32 scope global flannel.1\n valid_lft forever preferred_lft forever\n inet6 fe80::a04a:11ff:fe1f:84ef/64 scope link \n valid_lft forever preferred_lft forever\n```\n\n```\nip route\ndefault via 192.168.33.1 dev ens3 proto dhcp src 192.168.33.117 metric 100 \n10.244.0.0/24 dev cni0 proto kernel scope link src 10.244.0.1 \n10.244.1.0/24 via 10.244.1.0 dev flannel.1 onlink \n10.244.2.0/24 via 10.244.2.0 dev flannel.1 onlink \n10.244.3.0/24 via 10.244.3.0 dev flannel.1 onlink \n10.244.4.0/24 via 10.244.4.0 dev flannel.1 onlink \n10.244.5.0/24 via 10.244.5.0 dev flannel.1 onlink \n10.244.6.0/24 via 10.244.6.0 dev flannel.1 onlink \n169.254.169.254 via 192.168.33.3 dev ens3 proto dhcp src 192.168.33.117 metric 100 \n172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown \n192.168.33.0/24 dev ens3 proto kernel scope link src 192.168.33.117 metric 100 \n192.168.33.1 dev ens3 proto dhcp scope link src 192.168.33.117 metric 100 \n192.168.33.2 dev ens3 proto dhcp scope link src 192.168.33.117 metric 100 \n192.168.33.3 dev ens3 proto dhcp scope link src 192.168.33.117 metric 100 \n192.168.33.4 dev ens3 proto dhcp scope link src 192.168.33.117 metric 100 \n```\n\n```\nkubectl run -it --rm dnsutils --image=busybox:1.28 --restart=Never -- nslookup kubernetes.default\nIf you don't see a command prompt, try pressing enter.\n\nAddress 1: 10.96.0.10\n\nnslookup: can't resolve 'kubernetes.default'\npod \"dnsutils\" deleted\npod default/dnsutils terminated (Error)\n```\n\n```\nkubectl get pods -n kube-system -l k8s-app=kube-dns\nNAME READY STATUS RESTARTS AGE\ncoredns-55cb58b774-6vb7p 1/1 Running 1 (4h19m ago) 4h38m\ncoredns-55cb58b774-wtrz6 1/1 Running 1 (4h19m ago) 4h38m\n```\n\n## Ping Test\n\n```\nubuntu@k8s-master-0:~$ kubectl run pod1 --image=busybox:1.28 --restart=Never --command -- sleep 3600\npod/pod1 created\nubuntu@k8s-master-0:~$ kubectl run pod2 --image=busybox:1.28 --restart=Never --command -- sleep 3600\npod/pod2 created\n```\n\n```\nubuntu@k8s-master-0:~$ kubectl get pods -o wide\nNAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES\npod1 1/1 Running 0 15m 10.244.5.2 k8s-worker-1 \npod2 1/1 Running 0 15m 10.244.4.2 k8s-worker-3 \nubuntu@k8s-master-0:~$ kubectl exec -it pod1 -- sh\n/ # ping 10.244.5.2\nPING 10.244.5.2 (10.244.5.2): 56 data bytes\n64 bytes from 10.244.5.2: seq=0 ttl=64 time=0.107 ms\n64 bytes from 10.244.5.2: seq=1 ttl=64 time=0.091 ms\n64 bytes from 10.244.5.2: seq=2 ttl=64 time=0.090 ms\n^C\n--- 10.244.5.2 ping statistics ---\n3 packets transmitted, 3 packets received, 0% packet loss\nround-trip min/avg/max = 0.090/0.096/0.107 ms\n/ # 10.244.4.2\nsh: 10.244.4.2: not found\n/ # ping 10.244.4.2\nPING 10.244.4.2 (10.244.4.2): 56 data bytes\n^C\n--- 10.244.4.2 ping statistics ---\n2 packets transmitted, 0 packets received, 100% packet loss\n/ # exit\ncommand terminated with exit code 1\n```\n\nIf I understand flannel correctly, it is fine that the pods are in other subnets as the ip routes manage the forwarding.","creator_id":18478318,"community_id":1156024,"removed":false,"locked":false,"published":"2025-06-24T12:46:08.001458Z","updated":"2025-06-24T12:47:00.000763Z","deleted":false,"nsfw":false,"ap_id":"https://lemmy.ml/post/32187018","local":false,"language_id":37,"featured_community":false,"featured_local":false},"community":{"id":1156024,"name":"kubernetes","title":"Kubernetes","description":"Welcome to Kubernets community. The CNCF graduated project.","removed":false,"published":"2020-10-30T08:39:00.303135Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/kubernetes","local":false,"hidden":false,"posting_restricted_to_mods":false,"instance_id":16,"visibility":"Public"},"counts":{"comment_id":17645981,"score":1,"upvotes":1,"downvotes":0,"published":"2025-06-25T15:01:11.121851Z","child_count":0},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false},{"comment":{"id":17624893,"creator_id":18478318,"post_id":24564610,"content":"Can you elaborate on that? I am not sure whether you are promoting the usage of Calico over Flannel in general or if you think that using Calico would not result in this issue or if Calico would be easier to debug if such an issue arise.\n\nI decided to use flannel because it was labeled as the easiest. I know that Calico is most popular.","removed":false,"published":"2025-06-24T17:00:18.211850Z","deleted":false,"ap_id":"https://lemmy.ml/comment/19457839","local":false,"path":"0.17623438.17624893","distinguished":false,"language_id":0},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"post":{"id":24564610,"name":"Asking For Help: Kubernetes Pods Unable To Reach Each Other (Flannel, Networking)","body":"I am not entirely sure whether this sub is also intended for asking questions, but after opening the question on stack overflow and only getting an AI answer, I thought it would be worth a shot to ask here. What follows is a rather long question, but most of it is just debugging information to avoid obvious questions.\n\nI have created a small kubernetes cluster (6 nodes) using kubeadm and flannel as the CNI in an openstack project. This is my first time using more than a single node kubernetes cluster.\n\nI set up the kubernetes cluster's master via \n\n```yaml\n# tasks file for kubernetes_master\n- name: Install required packages\n apt:\n name:\n - curl\n - gnupg2\n - software-properties-common\n - apt-transport-https\n - ca-certificates\n state: present\n update_cache: yes\n\n- name: Install Docker\n apt:\n name: docker.io\n state: present\n update_cache: yes\n\n- name: Remove Keyrings Directory (if it exists)\n ansible.builtin.shell: rm -rf /etc/apt/keyrings\n\n- name: Remove Existing Kubernetes Directory (if it exists)\n ansible.builtin.shell: sudo rm -rf /etc/apt/sources.list.d/pkgs_k8s_io_core_stable_v1_30_deb.list\n\n- name: Disable swap\n ansible.builtin.command:\n cmd: swapoff -a\n\n#- name: Ensure swap is disabled on boot\n# ansible.builtin.command:\n# cmd: sudo sed -i -e '/\\/swap.img\\s\\+none\\s\\+swap\\s\\+sw\\s\\+0\\s\\+0/s/^/#/' /etc/fstab\n\n- name: Ensure all swap entries are disabled on boot\n ansible.builtin.command:\n cmd: sudo sed -i -e '/\\s\\+swap\\s\\+/s/^/#/' /etc/fstab\n\n- name: Add kernel modules for Containerd\n ansible.builtin.copy:\n dest: /etc/modules-load.d/containerd.conf\n content: |\n overlay\n br_netfilter\n\n- name: Load kernel modules for Containerd\n ansible.builtin.shell:\n cmd: modprobe overlay && modprobe br_netfilter\n become: true\n\n- name: Add kernel parameters for Kubernetes\n ansible.builtin.copy:\n dest: /etc/sysctl.d/kubernetes.conf\n content: |\n net.bridge.bridge-nf-call-ip6tables = 1\n net.bridge.bridge-nf-call-iptables = 1\n net.ipv4.ip_forward = 1\n\n- name: Load kernel parameter changes\n ansible.builtin.command:\n cmd: sudo sysctl --system\n\n- name: Configuring Containerd (building the configuration file)\n ansible.builtin.command:\n cmd: sudo sh -c \"containerd config default > /opt/containerd/config.toml\"\n\n- name: Configuring Containerd (Setting SystemdCgroup Variable to True)\n ansible.builtin.command:\n cmd: sudo sed -i 's/SystemdCgroup = false/SystemdCgroup = true/' /opt/containerd/config.toml\n\n- name: Reload systemd configuration\n ansible.builtin.command:\n cmd: systemctl daemon-reload\n\n- name: Restart containerd service\n ansible.builtin.service:\n name: containerd\n state: restarted\n\n- name: Allow 6443/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 6443/tcp\n\n- name: Allow 2379:2380/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 2379:2380/tcp\n\n- name: Allow 22/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 22/tcp\n\n- name: Allow 8080/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 8080/tcp\n\n- name: Allow 10250/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 10250/tcp\n\n- name: Allow 10251/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 10251/tcp\n\n- name: Allow 10252/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 10252/tcp\n\n- name: Allow 10255/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 10255/tcp\n\n- name: Allow 5473/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 5473/tcp\n\n- name: Enable the firewall\n ansible.builtin.ufw:\n state: enabled\n\n- name: Reload the firewall\n ansible.builtin.command:\n cmd: sudo ufw reload\n\n- name: Prepare keyrings directory and update permissions\n file:\n path: /etc/apt/keyrings\n state: directory\n mode: '0755'\n\n- name: Download Kubernetes GPG key securely\n ansible.builtin.shell: curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.30/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg\n\n- name: Add Kubernetes repository\n ansible.builtin.apt_repository:\n repo: \"deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.30/deb/ /\"\n state: present\n\n- name: Install kubeadm, kubelet, kubectl\n ansible.builtin.apt:\n name:\n - kubelet\n - kubeadm\n - kubectl\n state: present\n update_cache: yes\n\n- name: Hold kubelet, kubeadm, kubectl packages\n ansible.builtin.command:\n cmd: sudo apt-mark hold kubelet kubeadm kubectl\n\n- name: Replace /etc/default/kubelet contents\n ansible.builtin.copy:\n dest: /etc/default/kubelet\n content: 'KUBELET_EXTRA_ARGS=\"--cgroup-driver=cgroupfs\"'\n\n- name: Reload systemd configuration\n ansible.builtin.command:\n cmd: systemctl daemon-reload\n\n- name: Restart kubelet service\n ansible.builtin.service:\n name: kubelet\n state: restarted\n\n- name: Update System-Wide Profile for Kubernetes\n ansible.builtin.copy:\n dest: /etc/profile.d/kubernetes.sh\n content: |\n export KUBECONFIG=/etc/kubernetes/admin.conf\n export ANSIBLE_USER=\"sysadmin\"\n\n# only works if not executing on master\n#- name: Reboot the system\n# ansible.builtin.reboot:\n# msg: \"Reboot initiated by Ansible for Kubernetes setup\"\n# reboot_timeout: 150\n\n- name: Replace Docker daemon.json configuration\n ansible.builtin.copy:\n dest: /etc/docker/daemon.json\n content: |\n {\n \"exec-opts\": [\"native.cgroupdriver=systemd\"],\n \"log-driver\": \"json-file\",\n \"log-opts\": {\n \"max-size\": \"100m\"\n },\n \"storage-driver\": \"overlay2\"\n }\n\n- name: Reload systemd configuration\n ansible.builtin.command:\n cmd: systemctl daemon-reload\n\n- name: Restart Docker service\n ansible.builtin.service:\n name: docker\n state: restarted\n\n- name: Update Kubeadm Environment Variable\n ansible.builtin.command:\n cmd: sudo sed -i -e '/^\\[Service\\]/a Environment=\"KUBELET_EXTRA_ARGS=--fail-swap-on=false\"' /usr/lib/systemd/system/kubelet.service.d/10-kubeadm.conf\n\n- name: Reload systemd configuration\n ansible.builtin.command:\n cmd: systemctl daemon-reload\n\n- name: Restart kubelet service\n ansible.builtin.service:\n name: kubelet\n state: restarted\n\n- name: Pull kubeadm container images\n ansible.builtin.command:\n cmd: sudo kubeadm config images pull\n\n- name: Initialize Kubernetes control plane\n ansible.builtin.command:\n cmd: kubeadm init --pod-network-cidr=10.244.0.0/16\n creates: /tmp/kubeadm_output\n register: kubeadm_init_output\n become: true\n changed_when: false\n\n- name: Set permissions for Kubernetes Admin\n file:\n path: /etc/kubernetes/admin.conf\n state: file\n mode: '0755'\n\n- name: Store Kubernetes initialization output to file\n copy:\n content: \"{{ kubeadm_init_output.stdout }}\"\n dest: /tmp/kubeadm_output\n become: true\n delegate_to: localhost\n\n- name: Generate the Join Command\n ansible.builtin.shell: cat /tmp/kubeadm_output | tail -n 2 | sed ':a;N;$!ba;s/\\\\\\n\\s*/ /g' > /tmp/join-command\n delegate_to: localhost\n\n- name: Set permissions for the Join Executable\n file:\n path: /tmp/join-command\n state: file\n mode: '0755'\n delegate_to: localhost\n```\n\nmanually reboot the node and installed flannel via `kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml`. Worker's are created in a similar way (without flannel). I omit their script for now but I can add it if it seems important.\n\nI then had dns resolution issues with a helm chart which is why I tried to investigate network issues and noticed that instances are unable to ping each other.\n\nI am unsure how to debug this issue further.\n\n# Debug Info\n\n```\nkubectl get nodes\nNAME STATUS ROLES AGE VERSION\nk8s-master-0 Ready control-plane 4h38m v1.30.14\nk8s-worker-0 Ready 4h35m v1.30.14\nk8s-worker-1 Ready 4h35m v1.30.14\nk8s-worker-2 Ready 4h35m v1.30.14\nk8s-worker-3 Ready 4h35m v1.30.14\nk8s-worker-4 Ready 4h35m v1.30.14\nk8s-worker-5 Ready 4h34m v1.30.14\n```\n\n```\nkube-flannel-ds-275hx 1/1 Running 0 150m 192.168.33.149 k8s-worker-0 \nkube-flannel-ds-2rplc 1/1 Running 0 150m 192.168.33.38 k8s-worker-5 \nkube-flannel-ds-2w98x 1/1 Running 0 150m 192.168.33.113 k8s-worker-1 \nkube-flannel-ds-g4vb6 1/1 Running 0 150m 192.168.33.167 k8s-worker-4 \nkube-flannel-ds-mpwbz 1/1 Running 0 150m 192.168.33.163 k8s-worker-2 \nkube-flannel-ds-qmbgc 1/1 Running 0 150m 192.168.33.117 k8s-master-0 \nkube-flannel-ds-sgdgs 1/1 Running 0 150m 192.168.33.243 k8s-worker-3 \n```\n\n```\nip addr show flannel.1\n4: flannel.1: mtu 1400 qdisc noqueue state UNKNOWN group default \n link/ether a2:4a:11:1f:84:ef brd ff:ff:ff:ff:ff:ff\n inet 10.244.0.0/32 scope global flannel.1\n valid_lft forever preferred_lft forever\n inet6 fe80::a04a:11ff:fe1f:84ef/64 scope link \n valid_lft forever preferred_lft forever\n```\n\n```\nip route\ndefault via 192.168.33.1 dev ens3 proto dhcp src 192.168.33.117 metric 100 \n10.244.0.0/24 dev cni0 proto kernel scope link src 10.244.0.1 \n10.244.1.0/24 via 10.244.1.0 dev flannel.1 onlink \n10.244.2.0/24 via 10.244.2.0 dev flannel.1 onlink \n10.244.3.0/24 via 10.244.3.0 dev flannel.1 onlink \n10.244.4.0/24 via 10.244.4.0 dev flannel.1 onlink \n10.244.5.0/24 via 10.244.5.0 dev flannel.1 onlink \n10.244.6.0/24 via 10.244.6.0 dev flannel.1 onlink \n169.254.169.254 via 192.168.33.3 dev ens3 proto dhcp src 192.168.33.117 metric 100 \n172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown \n192.168.33.0/24 dev ens3 proto kernel scope link src 192.168.33.117 metric 100 \n192.168.33.1 dev ens3 proto dhcp scope link src 192.168.33.117 metric 100 \n192.168.33.2 dev ens3 proto dhcp scope link src 192.168.33.117 metric 100 \n192.168.33.3 dev ens3 proto dhcp scope link src 192.168.33.117 metric 100 \n192.168.33.4 dev ens3 proto dhcp scope link src 192.168.33.117 metric 100 \n```\n\n```\nkubectl run -it --rm dnsutils --image=busybox:1.28 --restart=Never -- nslookup kubernetes.default\nIf you don't see a command prompt, try pressing enter.\n\nAddress 1: 10.96.0.10\n\nnslookup: can't resolve 'kubernetes.default'\npod \"dnsutils\" deleted\npod default/dnsutils terminated (Error)\n```\n\n```\nkubectl get pods -n kube-system -l k8s-app=kube-dns\nNAME READY STATUS RESTARTS AGE\ncoredns-55cb58b774-6vb7p 1/1 Running 1 (4h19m ago) 4h38m\ncoredns-55cb58b774-wtrz6 1/1 Running 1 (4h19m ago) 4h38m\n```\n\n## Ping Test\n\n```\nubuntu@k8s-master-0:~$ kubectl run pod1 --image=busybox:1.28 --restart=Never --command -- sleep 3600\npod/pod1 created\nubuntu@k8s-master-0:~$ kubectl run pod2 --image=busybox:1.28 --restart=Never --command -- sleep 3600\npod/pod2 created\n```\n\n```\nubuntu@k8s-master-0:~$ kubectl get pods -o wide\nNAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES\npod1 1/1 Running 0 15m 10.244.5.2 k8s-worker-1 \npod2 1/1 Running 0 15m 10.244.4.2 k8s-worker-3 \nubuntu@k8s-master-0:~$ kubectl exec -it pod1 -- sh\n/ # ping 10.244.5.2\nPING 10.244.5.2 (10.244.5.2): 56 data bytes\n64 bytes from 10.244.5.2: seq=0 ttl=64 time=0.107 ms\n64 bytes from 10.244.5.2: seq=1 ttl=64 time=0.091 ms\n64 bytes from 10.244.5.2: seq=2 ttl=64 time=0.090 ms\n^C\n--- 10.244.5.2 ping statistics ---\n3 packets transmitted, 3 packets received, 0% packet loss\nround-trip min/avg/max = 0.090/0.096/0.107 ms\n/ # 10.244.4.2\nsh: 10.244.4.2: not found\n/ # ping 10.244.4.2\nPING 10.244.4.2 (10.244.4.2): 56 data bytes\n^C\n--- 10.244.4.2 ping statistics ---\n2 packets transmitted, 0 packets received, 100% packet loss\n/ # exit\ncommand terminated with exit code 1\n```\n\nIf I understand flannel correctly, it is fine that the pods are in other subnets as the ip routes manage the forwarding.","creator_id":18478318,"community_id":1156024,"removed":false,"locked":false,"published":"2025-06-24T12:46:08.001458Z","updated":"2025-06-24T12:47:00.000763Z","deleted":false,"nsfw":false,"ap_id":"https://lemmy.ml/post/32187018","local":false,"language_id":37,"featured_community":false,"featured_local":false},"community":{"id":1156024,"name":"kubernetes","title":"Kubernetes","description":"Welcome to Kubernets community. The CNCF graduated project.","removed":false,"published":"2020-10-30T08:39:00.303135Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/kubernetes","local":false,"hidden":false,"posting_restricted_to_mods":false,"instance_id":16,"visibility":"Public"},"counts":{"comment_id":17624893,"score":0,"upvotes":1,"downvotes":1,"published":"2025-06-24T17:00:18.211850Z","child_count":0},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false},{"comment":{"id":17547655,"creator_id":18478318,"post_id":24378850,"content":"Fellow German here. Since October 2023 the information regarding Israel x Gaza has been wonky. Before that in history class (~10 years ago) the conflict has been viewed as \"They are both responsible for the current state, peace talks never worked, sometimes there was hope but both did bad things\". The focus was in general more on israel as a state and gaza as the less defined part that suffers. Personally, I was never happy with a country that defines itself by their religion. I also felt like taking Israel back after such a long time and driving out the inhabitants is difficult to defend.\n\nOctober 2023: The government immediately stood behind Israel and it took a *long* time until Israel's behaviour was really questioned by journalists/media. Politicians still hold back. Many Germans, me included, thought something along the lines of \"it is a very complex situation that goes back years. It was never resolved and it is understandable to some degree that Israel never wants to be terrorised like this again.\" - a bit like America's actions after 9/11.\n\nFor me the greatest shift came with the killed aid workers and finally with Amnesty International's recognition of a genocide. I didn't entirely trust any (whether pro or con) media footage before that due to claims from both sides that the other side is faking them.\n\nBefore the election I asked the parties what their plans are regarding Israel and Gaza. None answered. A while ago I have asked the new government what their plans are and linked the Amnesty International genocide pdf. I got an answer but just a forwarding to another agency which I haven't heard back from yet.\n\nI still think the conflict is rather complex, but Israel is currently largely at fault. I have no idea how the situation can ever be solved as I don't see a power great and willing enough to enforce any peaceful contract between the parties. While I think it was unjust to recreate Israel the way it was recreated, I don't think it's feasible to undo a state. The ideal solution would be to unify both countries under a good constitution that gives everyone equal rights, review the stealing of land to find compromises and forget everything so that the coming generations are unable to not see that we are all equal but this will never happen.","removed":false,"published":"2025-06-21T09:08:43.396553Z","deleted":false,"ap_id":"https://lemmy.ml/comment/19387707","local":false,"path":"0.17547655","distinguished":false,"language_id":0},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"post":{"id":24378850,"name":"Majority of Germans now hold negative view of Israel : Survey","url":"https://www.aa.com.tr/en/europe/majority-of-germans-now-hold-negative-view-of-israel-survey/3605776","body":"German public opinion has shifted dramatically against Israel, with 57% now holding a negative view of the country following its military actions in Gaza, according to a new survey released Friday. \n\nThe poll by Allensbach research institute for the Frankfurter Allgemeine Zeitung newspaper marks a striking reversal from 2022, when only 23% expressed negative views of Israel. \n\nThe survey found growing concerns about Israel's military attacks, with 65% of Germans considering Israel's actions in Gaza “inappropriate.” Only 13% voiced support for the military campaign. \n\nIn a particularly notable finding, 73% of respondents indicated they saw “some truth” in the statement that Israel's actions in Gaza constitute “genocide,” while only 9% explicitly rejected this characterization. ","creator_id":6180553,"community_id":16151,"removed":false,"locked":false,"published":"2025-06-20T22:18:57.764977Z","deleted":false,"nsfw":false,"embed_title":"Majority of Germans now hold negative view of Israel : Survey","embed_description":"Israel's military actions in Gaza and regional aggression have dramatically shifted public opinion: 57% now hold a negative view of the country, while 37% consider Israel a major threat to world peace - Anadolu Ajansı","thumbnail_url":"https://cdnuploads.aa.com.tr/uploads/Contents/2025/06/20/thumbs_b_c_adf2dc4db365df194018772494142aec.jpg?v=154855","ap_id":"https://lemmy.ml/post/32012845","local":false,"language_id":0,"featured_community":false,"featured_local":false,"url_content_type":"text/html; charset=utf-8"},"community":{"id":16151,"name":"europe","title":"Europe","description":"Europe\n\n# Rules:\n\n\n1) All sources allowed. Voting decides what is reliable unless\n2) Articles which have been proven false beyond any doubt may be removed\n3) No personal attacks\n4) Posts in English, translations allowed","removed":false,"published":"2019-10-17T21:39:08.765197Z","updated":"2025-06-13T21:35:17.693026Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/europe","local":false,"icon":"https://lemmy.ml/pictrs/image/fe238f89-4ba2-4005-847c-44b5ccb0a8af.webp","hidden":false,"posting_restricted_to_mods":false,"instance_id":16,"visibility":"Public"},"counts":{"comment_id":17547655,"score":2,"upvotes":2,"downvotes":0,"published":"2025-06-21T09:08:43.396553Z","child_count":0},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false},{"comment":{"id":17528772,"creator_id":18478318,"post_id":23514590,"content":"There's also https://github.com/revoltchat which is very discord-like but still lacks some vital features that are currently in development like screensharing (if I am not misremembering)","removed":false,"published":"2025-06-20T13:20:51.084815Z","deleted":false,"ap_id":"https://lemmy.ml/comment/19370422","local":false,"path":"0.17528772","distinguished":false,"language_id":0},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"post":{"id":23514590,"name":"Peersuite is an opensource alternative to slack/discord","url":"https://github.com/openconstruct/Peersuite","body":" Hello everyone, about a month ago I open-sourced my web app Peersuite. It's peer-to-peer instead of having servers, and all data is encrypted in transit with AES-GCM algorithm.\n\nFeatures:\n- chat with channels, images, PMs, and file send ( no size limit)\n- audio/video conferencing No hard cap on users but since it's a mesh network it would degrade at over 15 users\n- Screensharing tab, window, or entire screen\n- whiteboard for diagrams/drawing\n- group document creation/editing\n- kanban board for task management\n\n Since there is no server, you can download a workspace to an encrypted file to restore later, this saves you chats, documents, everything.\n This software is new, and still undergoing heavy development, but I think it's a valid choice over closed source solutions with no encryption.\n\nCurrently you can use it on the web at https://peersuite.space/\nDownload desktop versions from github\nDownload docker image from https://hub.docker.com/repository/docker/openconstruct/peersuite\n\nYou can also install it as a PWA on desktop or mobile. I have an android port in the works, If anyone would like to test let that me know, and I'll PM you for your email.\n\nI've also done some initial work on a nodejs server so that you can keep a workspace open 24/7 effectively having a server.\n\nSuper happy to get any kind of feedback, positive or negative.","creator_id":8343,"community_id":25,"removed":false,"locked":false,"published":"2025-06-04T21:52:18.973537Z","deleted":false,"nsfw":false,"embed_title":"GitHub - openconstruct/Peersuite: Peer to peer workspace","embed_description":"Peer to peer workspace. Contribute to openconstruct/Peersuite development by creating an account on GitHub.","thumbnail_url":"https://opengraph.githubassets.com/6ab1bf32f756a2909a2050bcfb111adcdd9a0f431b0f7d973fbf158d801d27c7/openconstruct/Peersuite","ap_id":"https://lemmy.world/post/30814476","local":false,"language_id":0,"featured_community":false,"featured_local":false,"url_content_type":"text/html; charset=utf-8"},"community":{"id":25,"name":"opensource","title":"Open Source","description":"All about open source! Feel free to ask questions, and share news, and interesting stuff!\n\n# Useful Links\n* [Open Source Initiative](https://opensource.org/)\n* [Free Software Foundation](https://www.fsf.org/)\n* [Electronic Frontier Foundation](https://www.eff.org/)\n* [Software Freedom Conservancy](https://sfconservancy.org/)\n* [It's FOSS](https://itsfoss.com/)\n* [Android FOSS Apps Megathread](https://lemmy.ml/comment/8733242)\n\n# Rules\n* Posts must be relevant to the open source ideology\n* No NSFW content\n* No hate speech, bigotry, etc \n\n# Related Communities\n* [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture) \n* [!libre_software@lemmy.ml](https://lemmy.ml/c/libre_software) \n* [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware) \n* [!linux@lemmy.ml](https://lemmy.ml/c/linux) \n* [!technology@lemmy.ml](https://lemmy.ml/c/technology) \n\nCommunity icon from opensource.org, but we are not affiliated with them. ","removed":false,"published":"2019-08-19T09:43:37.618982Z","updated":"2024-03-08T00:55:57.243595Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/opensource","local":false,"icon":"https://lemmy.ml/pictrs/image/a64z2tlDDD.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":16,"visibility":"Public"},"counts":{"comment_id":17528772,"score":1,"upvotes":1,"downvotes":0,"published":"2025-06-20T13:20:51.084815Z","child_count":0},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false},{"comment":{"id":17526067,"creator_id":18478318,"post_id":24346674,"content":"\nI tend towards: No. I can't know for sure, but given how pdfs are structured this sounds very difficult.\n\nA workaround might be to automatically place white boxes over those, but you can probably still select the text underneath afterwards.","removed":false,"published":"2025-06-20T10:11:37.928481Z","updated":"2025-06-20T10:14:03.249985Z","deleted":false,"ap_id":"https://lemmy.ml/comment/19367850","local":false,"path":"0.17526067","distinguished":false,"language_id":0},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"post":{"id":24346674,"name":"How to delete a certain element present on all pages of a pdf?","url":"https://lemmy.world/post/31704871","body":"So one of my pdfs has a page number and a link at the bottom of every page. It's around 500 pages so I dont want to edit it manually. Is there any way I can delete those things all at once from all pages of the pdf? \n\nMaybe ghost script or python script can do this?\n\nI also notice there isn't a PDF community in Lemmy, maybe somebody should create one.\n\nThanks a lot in advance.","creator_id":18488318,"community_id":25,"removed":false,"locked":false,"published":"2025-06-20T09:29:57.298582Z","updated":"2025-06-21T00:17:41.741245Z","deleted":false,"nsfw":false,"embed_title":"How to delete a certain element present on all pages of a pdf? - Lemmy.World","embed_description":"So one of my pdfs has a page number and a link at the bottom of every page. It’s\naround 500 pages so I dont want to edit it manually. Is there any way I can\ndelete those things all at once from all pages of the pdf? Maybe ghost script or\npython script can do this? I also notice there isn’t a PDF community in Lemmy,\nmaybe somebody should create one. Thanks a lot in advance.","ap_id":"https://lemmy.world/post/31704871","local":false,"language_id":0,"featured_community":false,"featured_local":false,"url_content_type":"text/html; charset=utf-8"},"community":{"id":25,"name":"opensource","title":"Open Source","description":"All about open source! Feel free to ask questions, and share news, and interesting stuff!\n\n# Useful Links\n* [Open Source Initiative](https://opensource.org/)\n* [Free Software Foundation](https://www.fsf.org/)\n* [Electronic Frontier Foundation](https://www.eff.org/)\n* [Software Freedom Conservancy](https://sfconservancy.org/)\n* [It's FOSS](https://itsfoss.com/)\n* [Android FOSS Apps Megathread](https://lemmy.ml/comment/8733242)\n\n# Rules\n* Posts must be relevant to the open source ideology\n* No NSFW content\n* No hate speech, bigotry, etc \n\n# Related Communities\n* [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture) \n* [!libre_software@lemmy.ml](https://lemmy.ml/c/libre_software) \n* [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware) \n* [!linux@lemmy.ml](https://lemmy.ml/c/linux) \n* [!technology@lemmy.ml](https://lemmy.ml/c/technology) \n\nCommunity icon from opensource.org, but we are not affiliated with them. ","removed":false,"published":"2019-08-19T09:43:37.618982Z","updated":"2024-03-08T00:55:57.243595Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/opensource","local":false,"icon":"https://lemmy.ml/pictrs/image/a64z2tlDDD.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":16,"visibility":"Public"},"counts":{"comment_id":17526067,"score":1,"upvotes":3,"downvotes":2,"published":"2025-06-20T10:11:37.928481Z","child_count":0},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false},{"comment":{"id":17525754,"creator_id":18478318,"post_id":24345997,"content":"Good point! Trilium has been handed over to TriliumNext so it is linked in the repository directly and soon will be replaced by TriliumNext (afaik).","removed":false,"published":"2025-06-20T09:43:30.153912Z","updated":"2025-06-20T09:44:15.267640Z","deleted":false,"ap_id":"https://lemmy.ml/comment/19367542","local":false,"path":"0.17525430.17525754","distinguished":false,"language_id":37},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"post":{"id":24345997,"name":"Trilium - An Obsidian Alternative For Notetaking","url":"https://github.com/TriliumNext/trilium","body":"A highly customizable FOSS note taking app which enables you to better manage your campaigns, plots and everything. Build your own knowledge base, include your relevant media with your plot hooks and just have everything in one place.","creator_id":18478318,"community_id":2100,"removed":false,"locked":false,"published":"2025-06-20T09:01:31.430750Z","deleted":false,"nsfw":false,"embed_title":"GitHub - TriliumNext/Trilium: Build your personal knowledge base with Trilium Notes","embed_description":"Build your personal knowledge base with Trilium Notes - TriliumNext/Trilium","thumbnail_url":"https://opengraph.githubassets.com/ee55451752e9302f5ebcae5271db3c24fe0d2e37acb16bdd9e332c0083abfbf9/TriliumNext/Trilium","ap_id":"https://lemmy.ml/post/31979615","local":false,"language_id":37,"featured_community":false,"featured_local":false,"url_content_type":"text/html; charset=utf-8"},"community":{"id":2100,"name":"rpg_tools","title":"Tools for tabletop role-playing games.","description":"Software, online services, physical objects - anything that might help DMs and players in their sessions.\n\n**Some rules:**\n- As per usual: be excellent to each other\n- Post one tool per thread\n- Try to provide descriptive title","removed":false,"published":"2023-07-10T16:51:31.107976Z","updated":"2023-07-16T17:57:38.740911Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.world/c/rpg_tools","local":false,"icon":"https://lemmy.world/pictrs/image/0135a98f-da0c-408c-b0b1-3b8226672110.png","banner":"https://lemmy.world/pictrs/image/36c6495d-37bf-4c5e-aa42-92243252fe93.jpeg","hidden":false,"posting_restricted_to_mods":false,"instance_id":24,"visibility":"Public"},"counts":{"comment_id":17525754,"score":1,"upvotes":1,"downvotes":0,"published":"2025-06-20T09:43:30.153912Z","child_count":0},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false},{"comment":{"id":17525252,"creator_id":18478318,"post_id":19143796,"content":"Thanks for sharing! Haven't had the time to give it a listen yet, but will check it out soon.","removed":false,"published":"2025-06-20T08:49:08.010496Z","deleted":false,"ap_id":"https://lemmy.ml/comment/19367041","local":false,"path":"0.17525252","distinguished":false,"language_id":37},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"post":{"id":19143796,"name":"Super Duper DND Playlist Compendium","body":"\nHere’s all playlists I collected, from different users across Spotify and Apple Music. All genres covered, from horror to fantasy. Enjoy!\n\n**PLAYLISTERBR** - [Follow on Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96)\n\nSci-Fi Atmospheric: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/4mgWF2xaqKcI97uF1TTvya) | [Apple Music](https://itunes.apple.com/playlist/sci-fi-atmospheric/pl.u-AkAmmNkCW5N525)\n\nDreamy: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/6wp3iHbbPw1Lc63CI9T2tt) | [Apple Music](https://itunes.apple.com/playlist/dreamy/pl.u-PDb40gZFPvmvLv)\n\nDisturbing: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/18YC1ZwDR7daGWAwckLYNS) | [Apple Music](https://itunes.apple.com/playlist/disturbing/pl.u-LdbqE7vCjYLYxY)\n\nMesmerizing: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/6OZwRjEn8BtOs4WUrk3om7Q) | [Apple Music](https://itunes.apple.com/playlist/mesmerizing/pl.u-6mo4lGvfl7M7B7)\n\nEerie: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/58Jd6D2bbr2wbKgVdn9E7M) | [Apple Music](https://itunes.apple.com/playlist/eerie/pl.u-6mo4lDmhl7M7B7)\n\nHypnotic: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/0VoggjrJO74Cku6nDs9ZXW) | [Apple Music](https://itunes.apple.com/playlist/hypnotic/pl.u-vxy6kNxslbGbzb)\n\nHaunting: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/0tHdgCPXpBCSvuvNrzROfl) | [Apple Music](https://itunes.apple.com/playlist/haunting/pl.u-LdbqqeBTjYLYxY)\n\nSuspenseful: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/3C2XyUp72iOeCvtUvhpTfD) | [Apple Music](https://itunes.apple.com/playlist/suspenseful/pl.u-b3b88G9S5MmMyM)\n\nUnsettling: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/0I0PzvLyhTqaIYZvDxnHwK) | [Apple Music](https://itunes.apple.com/playlist/unsettling/pl.u-PDb44vVCPvmvLv)\n\nUnnerving: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/4mP5onRv311x1DfKjKXzGY) | [Apple Music](https://itunes.apple.com/playlist/unnerving/pl.u-Ymb00XqTZRpRPR)\n\nMagical: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/08SJXeIzXhIAmdrjTsk6sJ) | [Apple Music](https://itunes.apple.com/playlist/magical/pl.u-vxy66A4IlbGbzb)\n\nExotic: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/0lQ3XhhqE8FJvDgV9bpTVy) | [Apple Music](https://itunes.apple.com/playlist/exotic/pl.u-LdbqDKgtjYLYxY)\n\nFuturebleak: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/58iVmHKG0JXE7D6vWrPCwZ) | [Apple Music](https://itunes.apple.com/playlist/futuristic/pl.u-Zmbl3NlhR7y707m)\n\nGloomy: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/3ITQMqpckDSCWjQJ5vZEp8) | [Apple Music](https://itunes.apple.com/playlist/cosmogony/pl.u-ZmbljRmuR7y707)\n\nDemonic: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/1e9C71v540e6A2XYncWVNZ) | [Apple Music](https://itunes.apple.com/playlist/cosmogony/pl.u-ZmbljRmuR7y707)\n\nDespairing/Relieving: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/2XVq5C5zWqVIH7kmM6BbxW) | [Apple Music](https://itunes.apple.com/playlist/cosmogony/pl.u-ZmbljRmuR7y707)\n\nDaunting: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/1MJWhuR3cvjL6HHWtnmxX3) | [Apple Music](https://itunes.apple.com/playlist/cosmogony/pl.u-ZmbljRmuR7y707)\n\nHorrifying: [Spotify](https://open.spotify.com/user/s3kg0w50k3i9u64qq6z6h8d96/playlist/3AZGnj4Vnx5wiBQDteYErw) | [Apple Music](https://itunes.apple.com/playlist/cosmogony/pl.u-ZmbljRmuR7y707)\n\nSynthwave: [Spotify](https://open.spotify.com/user/ahu76hsmxi3bvuadmghyj1n8m/playlist/59R0q1tgDz8qhz8kcTYEBF) | [Apple Music](https://music.apple.com/playlist/synthwave-music/pl.u-PDb49ApFPvmvLv)\n\nCyberpunk: [Spotify](https://open.spotify.com/user/ahu76hsmxi3bvuadmghyj1n8m/playlist/3DXmTGTzFXidCURMgqM9B7) | [Apple Music](https://music.apple.com/playlist/synthwave-space-opera/pl.u-PDb4WJ6FPvmvLv)\n\nRetrowave: [Spotify](https://open.spotify.com/user/joepass2005/playlist/4MOaQn5CPPzvB1gN3K7Ar5) | [Apple Music](https://music.apple.com/playlist/new-wave-synthpop/pl.u-Ymb07WgCZRpRPR);\n\n\n\n\n\n**PLAYLISTERBR2** - [Follow on Spotify](https://open.spotify.com/user/nl148xya6odttnx1x2von0yob)\n\n\n\n\nDark Isolation: [Spotify](https://open.spotify.com/playlist/0RbI62kj3R7dvLRUrVALkw)\n\nDark Future: [Spotify](https://open.spotify.com/playlist/54hVKrd1hOqqCOyBXMT0vN)\n\nNightmarish: [Spotify](https://open.spotify.com/playlist/1IarYd8vg93MRLfx7EpJtQ)\n\nFuture Nexus: [Spotify](https://open.spotify.com/playlist/1IarYd8vg93MRLfx7EpJtQ)\n\nTormentor: [Spotify](https://open.spotify.com/playlist/0nu9vFlNTKG84NT7N0tz9w)\n\nAbysmal: [Spotify](https://open.spotify.com/playlist/1m64pvRLBGr1HyTUQz4OI3)\n\nOutgamers: [Spotify](https://open.spotify.com/playlist/6p4oypo3qRGOBqdZFhj8Zc)\n\nSynthpunk: [Spotify](https://open.spotify.com/playlist/1IgjdAxHG0HT0ezBrZA9vQ)\n\nPost Apocalypse: [Spotify](https://open.spotify.com/playlist/3GZbHk9gB6YBTzbJ9G74As)\n\nApocalypse: [Spotify](https://open.spotify.com/playlist/2XkoGLhoBnPJIAy5LtaRlg)\n\nSyntheticity: [Spotify](https://open.spotify.com/playlist/4FYFdyNlPEZx9p7PK0dEjT)\n\nTenebrosity: [Spotify](https://open.spotify.com/playlist/0L8jNyLThS7FfOy0aT2pq6)\n\nThanatology: [Spotify](https://open.spotify.com/playlist/50H7GEyq7vC0VPlUfSmFeo)\n\nAnxiety: [Spotify](https://open.spotify.com/playlist/48ViLqm8loVFAHU8JlYuwk)\n\nTeratology: [Spotify](https://open.spotify.com/playlist/36YoVSbL9OMDapnDbSYcOi)\n\nPyromania: [Spotify](https://open.spotify.com/playlist/656xtCyX6pYsoPE7YhtuQj)\n\nBushido: [Spotify](https://open.spotify.com/playlist/1hwTM7UbFJMgyys5Nb2XgG)\n\nConspiracy: [Spotify](https://open.spotify.com/playlist/6ePGSGp4lk7h6wio0LLqZc)\n\nPhobia: [Spotify](https://open.spotify.com/playlist/2nLASIhuq9I2pfsnaeBezV)\n\nCosmogony: [Spotify](https://open.spotify.com/playlist/6o9zUbslQOkmCytVT571J7)\n\nMythology: [Spotify](https://open.spotify.com/playlist/72kro1jDAT7GKuNO0ftsF7)\n\nFuturology: [Spotify](https://open.spotify.com/playlist/0YOCJWX0kTIAracAqOHnGb)\n\nTaumaturgy: [Spotify](https://open.spotify.com/playlist/5pDTifdUxwrDnmiHqXQ9KS)\n\nCriminology: [Spotify](https://open.spotify.com/playlist/7M8DCBy3xvcYvpiDGHVNnQ)\n\nDemonology: [Spotify](https://open.spotify.com/playlist/6jHEVFwemK2BeNlUENIB9I)\n\nChiromancy: [Spotify](https://open.spotify.com/playlist/490GER7klKEt5kGNBmyZou)\n\nTechnocracy: [Spotify](https://open.spotify.com/playlist/4XOyXpGXXQJsjltED1rnmp)\n\nNecromancy: [Spotify](https://open.spotify.com/playlist/3DzkPsWQ1LkTdQ6yZ2cLnT)\n\nNeuromancy: [Spotify](https://open.spotify.com/playlist/7cr7AmhwVr1W6GXYp2eRkN);\n\n\n\n\n\n\n**DIMITRI DE ALENCAR** [Follow on Spotify](https://open.spotify.com/artist/2aA8615xM2SAgC5HpI5uiY)\n\n\n\n\nFollow his page for the playlists, which are at the bottom of the page. Each one is in the 3-4 hour range and they are:\n\n**Dungeon Crawling**: dark ambiences for setting the mood for exploring labyrinths/caves/catacombs or dark forests etc.;\n\n**Crossing The Ocean**: for pirate-themed adventures, or any campaign heavy on nautical/river combat;\nIn The Village: when the group reaches a town, tavern or trading outpost, for generally pacific encounters with villagers and townspeople;\n\n**Ruins and Temples**: to set the appropriate mood when in sacred places, sacerdotal houses, monuments or exploring sacred ruins, magical buildings or dealing with entities from other planes;\n\n**Heroic Fight**: for epic battles against powerful dragons, mages, demons or armies, or situations that require heroism from the PCs;\n\n**Distant Places**: for travels far away from the group’s places of origin, be it distant kingdoms or towns or even other planes.\n\n**NEW The Magical Forest**: be it when looking for a legendary unicorn or a reclusive mage, the woods can be full of wonders… and dangers.\n\nIf you want to go really dark, try the playlist called **DARK AMBIENT**\n\n**Ambient Retrowave**: you just landed at Gliese IV, an apparently abandoned planetoid which was a penal colony. As you explore the place, you feel that you’re being watched by someone… or something.;\n\n**Instrumental Retrowave**: enemy fighters breached the outer rim, and all fighters from your brigade are launched to battle. Like a menacing swarm approaching, you see bogeys right and left that you have to engage;\n\n**Synthwave Selection**: you are in the biggest space station in the quadrant, looking for your undercover contact. You have to find them first, searching in luxurious halls, rusty and half lit corridors, crowded gateways and suspect entertainment places. Bring your own oxygen though.\n\n**Eerie Sci Fi**: your space freighter was boarded by a ship from unknown origin. You hear the hiss from hatches being opened. Will the newcomers see you as allies or foes… or food;\n\nIf you want to go for a space opera mood, try the one called **SPACESURF**\n","creator_id":76120,"community_id":2100,"removed":false,"locked":false,"published":"2025-03-07T18:54:21.043862Z","deleted":false,"nsfw":false,"ap_id":"https://lemmy.ml/post/26860740","local":false,"language_id":37,"featured_community":false,"featured_local":false},"community":{"id":2100,"name":"rpg_tools","title":"Tools for tabletop role-playing games.","description":"Software, online services, physical objects - anything that might help DMs and players in their sessions.\n\n**Some rules:**\n- As per usual: be excellent to each other\n- Post one tool per thread\n- Try to provide descriptive title","removed":false,"published":"2023-07-10T16:51:31.107976Z","updated":"2023-07-16T17:57:38.740911Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.world/c/rpg_tools","local":false,"icon":"https://lemmy.world/pictrs/image/0135a98f-da0c-408c-b0b1-3b8226672110.png","banner":"https://lemmy.world/pictrs/image/36c6495d-37bf-4c5e-aa42-92243252fe93.jpeg","hidden":false,"posting_restricted_to_mods":false,"instance_id":24,"visibility":"Public"},"counts":{"comment_id":17525252,"score":1,"upvotes":1,"downvotes":0,"published":"2025-06-20T08:49:08.010496Z","child_count":0},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false}],"posts":[{"post":{"id":24564610,"name":"Asking For Help: Kubernetes Pods Unable To Reach Each Other (Flannel, Networking)","body":"I am not entirely sure whether this sub is also intended for asking questions, but after opening the question on stack overflow and only getting an AI answer, I thought it would be worth a shot to ask here. What follows is a rather long question, but most of it is just debugging information to avoid obvious questions.\n\nI have created a small kubernetes cluster (6 nodes) using kubeadm and flannel as the CNI in an openstack project. This is my first time using more than a single node kubernetes cluster.\n\nI set up the kubernetes cluster's master via \n\n```yaml\n# tasks file for kubernetes_master\n- name: Install required packages\n apt:\n name:\n - curl\n - gnupg2\n - software-properties-common\n - apt-transport-https\n - ca-certificates\n state: present\n update_cache: yes\n\n- name: Install Docker\n apt:\n name: docker.io\n state: present\n update_cache: yes\n\n- name: Remove Keyrings Directory (if it exists)\n ansible.builtin.shell: rm -rf /etc/apt/keyrings\n\n- name: Remove Existing Kubernetes Directory (if it exists)\n ansible.builtin.shell: sudo rm -rf /etc/apt/sources.list.d/pkgs_k8s_io_core_stable_v1_30_deb.list\n\n- name: Disable swap\n ansible.builtin.command:\n cmd: swapoff -a\n\n#- name: Ensure swap is disabled on boot\n# ansible.builtin.command:\n# cmd: sudo sed -i -e '/\\/swap.img\\s\\+none\\s\\+swap\\s\\+sw\\s\\+0\\s\\+0/s/^/#/' /etc/fstab\n\n- name: Ensure all swap entries are disabled on boot\n ansible.builtin.command:\n cmd: sudo sed -i -e '/\\s\\+swap\\s\\+/s/^/#/' /etc/fstab\n\n- name: Add kernel modules for Containerd\n ansible.builtin.copy:\n dest: /etc/modules-load.d/containerd.conf\n content: |\n overlay\n br_netfilter\n\n- name: Load kernel modules for Containerd\n ansible.builtin.shell:\n cmd: modprobe overlay && modprobe br_netfilter\n become: true\n\n- name: Add kernel parameters for Kubernetes\n ansible.builtin.copy:\n dest: /etc/sysctl.d/kubernetes.conf\n content: |\n net.bridge.bridge-nf-call-ip6tables = 1\n net.bridge.bridge-nf-call-iptables = 1\n net.ipv4.ip_forward = 1\n\n- name: Load kernel parameter changes\n ansible.builtin.command:\n cmd: sudo sysctl --system\n\n- name: Configuring Containerd (building the configuration file)\n ansible.builtin.command:\n cmd: sudo sh -c \"containerd config default > /opt/containerd/config.toml\"\n\n- name: Configuring Containerd (Setting SystemdCgroup Variable to True)\n ansible.builtin.command:\n cmd: sudo sed -i 's/SystemdCgroup = false/SystemdCgroup = true/' /opt/containerd/config.toml\n\n- name: Reload systemd configuration\n ansible.builtin.command:\n cmd: systemctl daemon-reload\n\n- name: Restart containerd service\n ansible.builtin.service:\n name: containerd\n state: restarted\n\n- name: Allow 6443/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 6443/tcp\n\n- name: Allow 2379:2380/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 2379:2380/tcp\n\n- name: Allow 22/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 22/tcp\n\n- name: Allow 8080/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 8080/tcp\n\n- name: Allow 10250/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 10250/tcp\n\n- name: Allow 10251/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 10251/tcp\n\n- name: Allow 10252/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 10252/tcp\n\n- name: Allow 10255/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 10255/tcp\n\n- name: Allow 5473/tcp through firewall\n ansible.builtin.command:\n cmd: sudo ufw allow 5473/tcp\n\n- name: Enable the firewall\n ansible.builtin.ufw:\n state: enabled\n\n- name: Reload the firewall\n ansible.builtin.command:\n cmd: sudo ufw reload\n\n- name: Prepare keyrings directory and update permissions\n file:\n path: /etc/apt/keyrings\n state: directory\n mode: '0755'\n\n- name: Download Kubernetes GPG key securely\n ansible.builtin.shell: curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.30/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg\n\n- name: Add Kubernetes repository\n ansible.builtin.apt_repository:\n repo: \"deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.30/deb/ /\"\n state: present\n\n- name: Install kubeadm, kubelet, kubectl\n ansible.builtin.apt:\n name:\n - kubelet\n - kubeadm\n - kubectl\n state: present\n update_cache: yes\n\n- name: Hold kubelet, kubeadm, kubectl packages\n ansible.builtin.command:\n cmd: sudo apt-mark hold kubelet kubeadm kubectl\n\n- name: Replace /etc/default/kubelet contents\n ansible.builtin.copy:\n dest: /etc/default/kubelet\n content: 'KUBELET_EXTRA_ARGS=\"--cgroup-driver=cgroupfs\"'\n\n- name: Reload systemd configuration\n ansible.builtin.command:\n cmd: systemctl daemon-reload\n\n- name: Restart kubelet service\n ansible.builtin.service:\n name: kubelet\n state: restarted\n\n- name: Update System-Wide Profile for Kubernetes\n ansible.builtin.copy:\n dest: /etc/profile.d/kubernetes.sh\n content: |\n export KUBECONFIG=/etc/kubernetes/admin.conf\n export ANSIBLE_USER=\"sysadmin\"\n\n# only works if not executing on master\n#- name: Reboot the system\n# ansible.builtin.reboot:\n# msg: \"Reboot initiated by Ansible for Kubernetes setup\"\n# reboot_timeout: 150\n\n- name: Replace Docker daemon.json configuration\n ansible.builtin.copy:\n dest: /etc/docker/daemon.json\n content: |\n {\n \"exec-opts\": [\"native.cgroupdriver=systemd\"],\n \"log-driver\": \"json-file\",\n \"log-opts\": {\n \"max-size\": \"100m\"\n },\n \"storage-driver\": \"overlay2\"\n }\n\n- name: Reload systemd configuration\n ansible.builtin.command:\n cmd: systemctl daemon-reload\n\n- name: Restart Docker service\n ansible.builtin.service:\n name: docker\n state: restarted\n\n- name: Update Kubeadm Environment Variable\n ansible.builtin.command:\n cmd: sudo sed -i -e '/^\\[Service\\]/a Environment=\"KUBELET_EXTRA_ARGS=--fail-swap-on=false\"' /usr/lib/systemd/system/kubelet.service.d/10-kubeadm.conf\n\n- name: Reload systemd configuration\n ansible.builtin.command:\n cmd: systemctl daemon-reload\n\n- name: Restart kubelet service\n ansible.builtin.service:\n name: kubelet\n state: restarted\n\n- name: Pull kubeadm container images\n ansible.builtin.command:\n cmd: sudo kubeadm config images pull\n\n- name: Initialize Kubernetes control plane\n ansible.builtin.command:\n cmd: kubeadm init --pod-network-cidr=10.244.0.0/16\n creates: /tmp/kubeadm_output\n register: kubeadm_init_output\n become: true\n changed_when: false\n\n- name: Set permissions for Kubernetes Admin\n file:\n path: /etc/kubernetes/admin.conf\n state: file\n mode: '0755'\n\n- name: Store Kubernetes initialization output to file\n copy:\n content: \"{{ kubeadm_init_output.stdout }}\"\n dest: /tmp/kubeadm_output\n become: true\n delegate_to: localhost\n\n- name: Generate the Join Command\n ansible.builtin.shell: cat /tmp/kubeadm_output | tail -n 2 | sed ':a;N;$!ba;s/\\\\\\n\\s*/ /g' > /tmp/join-command\n delegate_to: localhost\n\n- name: Set permissions for the Join Executable\n file:\n path: /tmp/join-command\n state: file\n mode: '0755'\n delegate_to: localhost\n```\n\nmanually reboot the node and installed flannel via `kubectl apply -f https://raw.githubusercontent.com/coreos/flannel/master/Documentation/kube-flannel.yml`. Worker's are created in a similar way (without flannel). I omit their script for now but I can add it if it seems important.\n\nI then had dns resolution issues with a helm chart which is why I tried to investigate network issues and noticed that instances are unable to ping each other.\n\nI am unsure how to debug this issue further.\n\n# Debug Info\n\n```\nkubectl get nodes\nNAME STATUS ROLES AGE VERSION\nk8s-master-0 Ready control-plane 4h38m v1.30.14\nk8s-worker-0 Ready 4h35m v1.30.14\nk8s-worker-1 Ready 4h35m v1.30.14\nk8s-worker-2 Ready 4h35m v1.30.14\nk8s-worker-3 Ready 4h35m v1.30.14\nk8s-worker-4 Ready 4h35m v1.30.14\nk8s-worker-5 Ready 4h34m v1.30.14\n```\n\n```\nkube-flannel-ds-275hx 1/1 Running 0 150m 192.168.33.149 k8s-worker-0 \nkube-flannel-ds-2rplc 1/1 Running 0 150m 192.168.33.38 k8s-worker-5 \nkube-flannel-ds-2w98x 1/1 Running 0 150m 192.168.33.113 k8s-worker-1 \nkube-flannel-ds-g4vb6 1/1 Running 0 150m 192.168.33.167 k8s-worker-4 \nkube-flannel-ds-mpwbz 1/1 Running 0 150m 192.168.33.163 k8s-worker-2 \nkube-flannel-ds-qmbgc 1/1 Running 0 150m 192.168.33.117 k8s-master-0 \nkube-flannel-ds-sgdgs 1/1 Running 0 150m 192.168.33.243 k8s-worker-3 \n```\n\n```\nip addr show flannel.1\n4: flannel.1: mtu 1400 qdisc noqueue state UNKNOWN group default \n link/ether a2:4a:11:1f:84:ef brd ff:ff:ff:ff:ff:ff\n inet 10.244.0.0/32 scope global flannel.1\n valid_lft forever preferred_lft forever\n inet6 fe80::a04a:11ff:fe1f:84ef/64 scope link \n valid_lft forever preferred_lft forever\n```\n\n```\nip route\ndefault via 192.168.33.1 dev ens3 proto dhcp src 192.168.33.117 metric 100 \n10.244.0.0/24 dev cni0 proto kernel scope link src 10.244.0.1 \n10.244.1.0/24 via 10.244.1.0 dev flannel.1 onlink \n10.244.2.0/24 via 10.244.2.0 dev flannel.1 onlink \n10.244.3.0/24 via 10.244.3.0 dev flannel.1 onlink \n10.244.4.0/24 via 10.244.4.0 dev flannel.1 onlink \n10.244.5.0/24 via 10.244.5.0 dev flannel.1 onlink \n10.244.6.0/24 via 10.244.6.0 dev flannel.1 onlink \n169.254.169.254 via 192.168.33.3 dev ens3 proto dhcp src 192.168.33.117 metric 100 \n172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown \n192.168.33.0/24 dev ens3 proto kernel scope link src 192.168.33.117 metric 100 \n192.168.33.1 dev ens3 proto dhcp scope link src 192.168.33.117 metric 100 \n192.168.33.2 dev ens3 proto dhcp scope link src 192.168.33.117 metric 100 \n192.168.33.3 dev ens3 proto dhcp scope link src 192.168.33.117 metric 100 \n192.168.33.4 dev ens3 proto dhcp scope link src 192.168.33.117 metric 100 \n```\n\n```\nkubectl run -it --rm dnsutils --image=busybox:1.28 --restart=Never -- nslookup kubernetes.default\nIf you don't see a command prompt, try pressing enter.\n\nAddress 1: 10.96.0.10\n\nnslookup: can't resolve 'kubernetes.default'\npod \"dnsutils\" deleted\npod default/dnsutils terminated (Error)\n```\n\n```\nkubectl get pods -n kube-system -l k8s-app=kube-dns\nNAME READY STATUS RESTARTS AGE\ncoredns-55cb58b774-6vb7p 1/1 Running 1 (4h19m ago) 4h38m\ncoredns-55cb58b774-wtrz6 1/1 Running 1 (4h19m ago) 4h38m\n```\n\n## Ping Test\n\n```\nubuntu@k8s-master-0:~$ kubectl run pod1 --image=busybox:1.28 --restart=Never --command -- sleep 3600\npod/pod1 created\nubuntu@k8s-master-0:~$ kubectl run pod2 --image=busybox:1.28 --restart=Never --command -- sleep 3600\npod/pod2 created\n```\n\n```\nubuntu@k8s-master-0:~$ kubectl get pods -o wide\nNAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES\npod1 1/1 Running 0 15m 10.244.5.2 k8s-worker-1 \npod2 1/1 Running 0 15m 10.244.4.2 k8s-worker-3 \nubuntu@k8s-master-0:~$ kubectl exec -it pod1 -- sh\n/ # ping 10.244.5.2\nPING 10.244.5.2 (10.244.5.2): 56 data bytes\n64 bytes from 10.244.5.2: seq=0 ttl=64 time=0.107 ms\n64 bytes from 10.244.5.2: seq=1 ttl=64 time=0.091 ms\n64 bytes from 10.244.5.2: seq=2 ttl=64 time=0.090 ms\n^C\n--- 10.244.5.2 ping statistics ---\n3 packets transmitted, 3 packets received, 0% packet loss\nround-trip min/avg/max = 0.090/0.096/0.107 ms\n/ # 10.244.4.2\nsh: 10.244.4.2: not found\n/ # ping 10.244.4.2\nPING 10.244.4.2 (10.244.4.2): 56 data bytes\n^C\n--- 10.244.4.2 ping statistics ---\n2 packets transmitted, 0 packets received, 100% packet loss\n/ # exit\ncommand terminated with exit code 1\n```\n\nIf I understand flannel correctly, it is fine that the pods are in other subnets as the ip routes manage the forwarding.","creator_id":18478318,"community_id":1156024,"removed":false,"locked":false,"published":"2025-06-24T12:46:08.001458Z","updated":"2025-06-24T12:47:00.000763Z","deleted":false,"nsfw":false,"ap_id":"https://lemmy.ml/post/32187018","local":false,"language_id":37,"featured_community":false,"featured_local":false},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"community":{"id":1156024,"name":"kubernetes","title":"Kubernetes","description":"Welcome to Kubernets community. The CNCF graduated project.","removed":false,"published":"2020-10-30T08:39:00.303135Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/kubernetes","local":false,"hidden":false,"posting_restricted_to_mods":false,"instance_id":16,"visibility":"Public"},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":24564610,"comments":4,"score":2,"upvotes":2,"downvotes":0,"published":"2025-06-24T12:46:08.001458Z","newest_comment_time":"2025-06-25T15:01:11.121851Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"hidden":false,"creator_blocked":false,"unread_comments":4},{"post":{"id":24347235,"name":"How To View Post by Community by Server?","body":"I know of the \"Search\" feature at the bottom and the \"Local\" \"All\" feature at the top - where local refers to the server you logged into.\n\nHowever, to discover new communities, I like listing all the communities of a server, select a community to list all the posts and then take a look whether some posts are interesting. I could see using this to find communities I would like to subscribe to.\n\nAm I just blind or is this core feature missing? In the web version this can be done by selecting a server>communities>select a community>go through the posts.","creator_id":18478318,"community_id":135,"removed":false,"locked":false,"published":"2025-06-20T09:49:50.332397Z","deleted":false,"nsfw":false,"ap_id":"https://lemmy.ml/post/31980822","local":false,"language_id":0,"featured_community":false,"featured_local":false},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"community":{"id":135,"name":"jerboa","title":"Jerboa","description":"[Jerboa](https://github.com/dessalines/jerboa) is a native-android client for Lemmy, built using the native android framework, Jetpack Compose.\n\n**Warning**: You can submit issues, but between Lemmy and lemmy-ui, I probably won't have too much time to work on them. Learn jetpack compose like I did if you want to help make this app better.\n\n### Built With\n\n- [Android Jetpack Compose](https://developer.android.com/jetpack/compose)\n- [Kotlin](https://kotlinlang.org/)\n- [Retrofit](https://square.github.io/retrofit/)\n\n## Features\n\n- Open source, [AGPL License](/LICENSE).\n\n## Installation / Releases\n\n- [Releases](https://github.com/dessalines/jerboa/releases)\n\n## Support / Donate\n\nJerboa is made by Lemmy's developers, and is free, open-source software, meaning no advertising, monetizing, or venture capital, ever. Your donations directly support full-time development of the project.\n\n- [Support on Liberapay](https://liberapay.com/Lemmy).\n- [Support on OpenCollective](https://opencollective.com/lemmy).\n- [Support on Patreon](https://www.patreon.com/dessalines).\n- [List of Sponsors](https://join-lemmy.org/sponsors).\n\n### Crypto\n\n- bitcoin: `1Hefs7miXS5ff5Ck5xvmjKjXf5242KzRtK`\n- ethereum: `0x400c96c96acbC6E7B3B43B1dc1BB446540a88A01`\n- monero: `41taVyY6e1xApqKyMVDRVxJ76sPkfZhALLTjRvVKpaAh2pBd4wv9RgYj1tSPrx8wc6iE1uWUfjtQdTmTy2FGMeChGVKPQuV`\n- cardano: `addr1q858t89l2ym6xmrugjs0af9cslfwvnvsh2xxp6x4dcez7pf5tushkp4wl7zxfhm2djp6gq60dk4cmc7seaza5p3slx0sakjutm`\n\n## Contact\n\n- [Mastodon](https://mastodon.social/@LemmyDev)\n- [Matrix](https://matrix.to/#/#lemmy:matrix.org)\n","removed":false,"published":"2022-01-18T20:11:46.896005Z","updated":"2023-04-25T20:02:22.344700Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.ml/c/jerboa","local":false,"icon":"https://lemmy.ml/pictrs/image/1e752249-fae3-4e01-9c47-fc57c3e8a489.png","hidden":false,"posting_restricted_to_mods":false,"instance_id":16,"visibility":"Public"},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":24347235,"comments":0,"score":8,"upvotes":9,"downvotes":1,"published":"2025-06-20T09:49:50.332397Z","newest_comment_time":"2025-06-20T09:49:50.332397Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"hidden":false,"creator_blocked":false,"unread_comments":0},{"post":{"id":24345997,"name":"Trilium - An Obsidian Alternative For Notetaking","url":"https://github.com/TriliumNext/trilium","body":"A highly customizable FOSS note taking app which enables you to better manage your campaigns, plots and everything. Build your own knowledge base, include your relevant media with your plot hooks and just have everything in one place.","creator_id":18478318,"community_id":2100,"removed":false,"locked":false,"published":"2025-06-20T09:01:31.430750Z","deleted":false,"nsfw":false,"embed_title":"GitHub - TriliumNext/Trilium: Build your personal knowledge base with Trilium Notes","embed_description":"Build your personal knowledge base with Trilium Notes - TriliumNext/Trilium","thumbnail_url":"https://opengraph.githubassets.com/ee55451752e9302f5ebcae5271db3c24fe0d2e37acb16bdd9e332c0083abfbf9/TriliumNext/Trilium","ap_id":"https://lemmy.ml/post/31979615","local":false,"language_id":37,"featured_community":false,"featured_local":false,"url_content_type":"text/html; charset=utf-8"},"creator":{"id":18478318,"name":"VoxAliorum","banned":false,"published":"2025-06-18T10:38:49.422928Z","actor_id":"https://lemmy.ml/u/VoxAliorum","local":false,"deleted":false,"bot_account":false,"instance_id":16},"community":{"id":2100,"name":"rpg_tools","title":"Tools for tabletop role-playing games.","description":"Software, online services, physical objects - anything that might help DMs and players in their sessions.\n\n**Some rules:**\n- As per usual: be excellent to each other\n- Post one tool per thread\n- Try to provide descriptive title","removed":false,"published":"2023-07-10T16:51:31.107976Z","updated":"2023-07-16T17:57:38.740911Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.world/c/rpg_tools","local":false,"icon":"https://lemmy.world/pictrs/image/0135a98f-da0c-408c-b0b1-3b8226672110.png","banner":"https://lemmy.world/pictrs/image/36c6495d-37bf-4c5e-aa42-92243252fe93.jpeg","hidden":false,"posting_restricted_to_mods":false,"instance_id":24,"visibility":"Public"},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":24345997,"comments":2,"score":8,"upvotes":10,"downvotes":2,"published":"2025-06-20T09:01:31.430750Z","newest_comment_time":"2025-06-20T09:43:30.153912Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"hidden":false,"creator_blocked":false,"unread_comments":2}],"moderates":[]}