From 132fa6ae3a48e2e3c83f00d9bc2fde1c14be1609 Mon Sep 17 00:00:00 2001
From: Pratham Patel <thefirst1322@gmail.com>
Date: Sun, 28 Aug 2022 15:58:10 +0530
Subject: [PATCH] use the name balakrishna instead of balaji

---
 content/posts/adinath.md     |   2 +-
 content/posts/balakrishna.md | 484 +++++++++++++++++++++++++++++++++++
 content/posts/harinarayan.md |   4 +-
 3 files changed, 487 insertions(+), 3 deletions(-)
 create mode 100644 content/posts/balakrishna.md

diff --git a/content/posts/adinath.md b/content/posts/adinath.md
index 06f41dc..95f0a7c 100644
--- a/content/posts/adinath.md
+++ b/content/posts/adinath.md
@@ -81,7 +81,7 @@ arm_freq=2000
 
 ```bash
 cd $HOME/.ssh
-ssh-keygen -t ed25519 -f balaji
+ssh-keygen -t ed25519 -f balakrishna
 ssh-keygen -t ed25519 -f gitea
 ssh-keygen -t ed25519 -f github
 ssh-keygen -t ed25519 -f gitlab
diff --git a/content/posts/balakrishna.md b/content/posts/balakrishna.md
new file mode 100644
index 0000000..090c61d
--- /dev/null
+++ b/content/posts/balakrishna.md
@@ -0,0 +1,484 @@
+---
+
+title: "Setup balakrishna (Fedora Server arm64)"
+date: 2022-07-23T08:00:30+05:30
+draft: false
+toc: true
+
+---
+
+## Stage 0000: Flash SD Card
+
+Verify the checksum first
+
+```bash
+echo "<CHECKSUM> *Fedora-Server-VERSION.aarch64.raw.xz" | shasum --check
+```
+
+Flash the SD Card
+
+```bash
+xzcat Fedora-Server-VERSION.aarch64.raw.xz | sudo dd status=progress bs=4M of=/dev/XXX
+sync && sync && sync
+sudo lvchange -an /dev/fedora_fedora/root
+sudo eject /dev/XXX
+```
+
+---
+
+
+## Stage 0001: Immediate initial setup
+
+
+### Set hostname
+
+```bash
+sudo hostnamectl set-hostname balakrishna
+```
+
+
+### Set timezone
+
+```bash
+sudo timedatectl set-timezone Asia/Kolkata
+```
+
+
+### Set DNS Servers
+
+```bash
+nmcli connection modify "$(nmcli -g name,device connection show | grep "eth0" | cut -f1 -d":")" ipv4.dns "1.1.1.2,1.0.0.2"
+nmcli connection modify "$(nmcli -g name,device connection show | grep "eth0" | cut -f1 -d":")" ipv4.ignore-auto-dns yes
+```
+
+
+### Enable loading the Wireguard kernel module at boot.
+
+```bash
+echo "wireguard" | sudo tee /etc/modules-load.d/wireguard.conf
+```
+
+
+### Modify motd
+
+```bash
+echo "\n# added by PRATHAM\n/home/pratham/.scripts/motd/show_logs.sh" | sudo tee -a /etc/profile
+```
+
+
+### REBOOT! (hostname needs to come in effect)
+
+```bash
+sudo reboot +0
+```
+
+
+### Expand the rootfs
+
+```bash
+# Fedora Server (LVM + XFS)
+sudo growpart /dev/mmcblk0 3
+sudo pvresize /dev/mmcblk0p3
+sudo lvextend /dev/fedora_fedora/root -l+100%FREE
+sudo xfs_growfs -d /
+
+# RHEL clone (Rocky Linux)
+sudo rootfs-expand
+```
+
+
+### DNF
+
+Parallel downloads: 20 (lol)
+
+Exclude package `shim-aa64` (causes uboot to panic)
+
+```bash
+echo -ne "\nmax_parallel_downloads=20\nlog_compress=True\nfastestmirror=False\nexcludepkgs=shim-aa64" | sudo tee -a /etc/dnf/dnf.conf
+#sudo dnf install https://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm
+
+sudo dnf clean all
+```
+
+
+### Remove Kernel cmdline args
+
+```bash
+sudo grubby --remove-args=quiet --update-kernel=ALL
+sudo grubby --remove-args=rhgb --update-kernel=ALL
+```
+
+
+### Generate SSH keys
+
+```bash
+cd $HOME/.ssh
+ssh-keygen -t ed25519 -f adinath
+ssh-keygen -t ed25519 -f gitea
+ssh-keygen -t ed25519 -f github
+ssh-keygen -t ed25519 -f gitlab
+ssh-keygen -t ed25519 -f harinarayan
+ssh-keygen -t ed25519 -f zfs
+```
+
+
+### Reboot
+
+```bash
+sudo reboot +0
+```
+
+---
+
+
+## Stage 0010
+
+### Upgrade packages
+
+```bash
+# Fedora Server
+sudo dnf --refresh update
+
+# RHEL clone (Rocky Linux 9)
+sudo dnf --refresh update
+sudo dnf config-manager --set-enabled crb
+sudo dnf install epel-release
+sudo dnf --refresh update
+```
+
+
+### Reboot
+
+```bash
+sudo reboot +0
+```
+
+---
+
+
+## Stage 0011: Install stuff
+
+### Install packages
+
+```bash
+sudo dnf install aardvark-dns aria2 bat btop buildah cockpit cockpit-file-sharing cockpit-machines cockpit-packagekit cockpit-pcp cockpit-podman cockpit-session-recording console-setup cronie cronie-anacron curl fd-find git git-delta hd-idle hdparm htop iotop libvirt-daemon-kvm libwebp-tools mediainfo neovim nload nodejs openssh-server overpass-mono-fonts perl-Digest-SHA podman podman-compose qemu qemu-kvm qemu-kvm-core qrencode-libs ripgrep rsync samba-common skim slirp4netns smartmontools ssmtp tmux tree unrar unzip util-linux-user vim-enhanced wget wget2 yt-dlp yt-dlp-zsh-completion zsh zsh-syntax-highlighting
+
+# sudo dnf install plocate
+# sudo dnf install qemu-device-display-virtio-gpu
+
+chsh -s $(which zsh) $(whoami)
+
+# RHEL clone (Rocky Linux) only
+sudo dnf module install container-tools
+```
+
+
+### vim-plug (Neovim)
+
+```bash
+sh -c 'curl -fLo "${XDG_DATA_HOME:-$HOME/.local/share}"/nvim/site/autoload/plug.vim --create-dirs https://raw.githubusercontent.com/junegunn/vim-plug/master/plug.vim'
+```
+
+**Open `nvim` and type `:PlugInstall`**
+
+
+### Enable systemd services
+
+```bash
+sudo systemctl enable cockpit.socket cockpit.service 
+sudo systemctl enable crond.service
+sudo systemctl enable podman.socket
+```
+
+
+### Add ports (for services)
+
+```bash
+sudo firewall-cmd --add-service=cockpit --permanent
+sudo firewall-cmd --reload
+```
+
+---
+
+
+## Stage 0100: ZFS
+
+### Compile the latest version of ZFS
+
+Get the latest GA release tag [from here](https://github.com/openzfs/zfs/tags).
+
+```bash
+git clone --depth 1 --branch <latest_tag_name> https://github.com/openzfs/zfs
+
+# Fedora Server
+sudo dnf install autoconf automake dkms elfutils-libelf-devel gcc git kernel-doc kernel-devel-$(uname -r) kernel-rpm-macros libaio-devel libattr-devel libblkid-devel libcurl-devel libffi-devel libtirpc-devel libtool libudev-devel libuuid-devel make ncompress openssl-devel python3 python3-cffi python3-devel python3-packaging python3-setuptools rpm-build zlib-devel
+
+# RHEL clone (Rocky Linux)
+sudo dnf install gcc make autoconf automake libtool rpm-build libtirpc-devel libblkid-devel libuuid-devel libudev-devel openssl-devel zlib-devel libaio-devel libattr-devel elfutils-libelf-devel python3 python3-devel python3-setuptools python3-cffi raspberrypi2-kernel4-devel libffi-devel git ncompress libcurl-devel bind-utils tree podman cockpit-podman podman-compose
+sudo dnf install --enablerepo=epel --enablerepo=powertools python3-packaging dkms
+
+cd zfs
+sh autogen.sh
+./configure
+make -j1 rpm-utils rpm-dkms
+
+sudo yum localinstall *.$(uname -p).rpm *.noarch.rpm
+
+echo "zfs" | sudo tee /etc/modules-load.d/zfs.conf
+```
+
+
+### Enable necessary services
+
+```bash
+sudo systemctl enable zfs-import-cache.service
+sudo systemctl enable zfs-import-scan.service
+sudo systemctl enable zfs-mount.service
+sudo systemctl enable zfs-share.service
+sudo systemctl enable zfs.target
+sudo systemctl enable zfs-zed.service
+```
+
+
+### Make sure an import cache file exists
+
+```bash
+sudo zpool set cachefile=/etc/zfs/zpool.cache trayimurti
+```
+
+
+### Creating a new zpool?
+
+```bash
+sudo zpool create -o ashift=12 trayimurti /dev/sda
+
+sudo zfs set atime=off trayimurti
+sudo zfs set primarycache=all trayimurti
+sudo zfs set recordsize=1M trayimurti
+sudo zfs set xattr=sa trayimurti
+
+sudo zfs create trayimurti/containers
+sudo zfs create trayimurti/containers/volumes
+sudo zfs create trayimurti/containers/volumes/blog
+sudo zfs create trayimurti/containers/volumes/caddy
+sudo zfs create trayimurti/containers/volumes/gitea
+sudo zfs create trayimurti/containers/volumes/mach
+sudo zfs create trayimurti/containers/volumes/nextcloud
+
+sudo zfs create trayimurti/torrents
+sudo zfs set recordsize=16K trayimurti/torrents
+sudo zfs create trayimurti/torrents/downloads
+sudo zfs create trayimurti/torrents/downloads/.incomplete
+sudo zfs create trayimurti/torrents/config
+
+sudo chown pratham:pratham -vR /trayimurti
+sudo chown pratham:pratham -vR /trayimurti/torrents
+
+sudo zfs allow -u pratham create,destroy,mount,snapshot,send,hold trayimurti
+
+sudo zpool export trayimurti
+
+sudo zpool import
+sudo zpool import -d /dev/disk/by-id <pool-id>
+
+sudo zpool set cachefile=/etc/zfs/zpool.cache trayimurti
+
+zpool status -v
+zfs list
+
+sudo zpool scrub trayimurti
+```
+
+
+### Reboot
+
+```bash
+sudo reboot +0
+```
+
+---
+
+
+## Stage 0101: Containers
+
+### Open ports
+
+```bash
+sudo firewall-cmd --permanent --add-port=8080/tcp --add-port=8443/tcp --add-port=8010/tcp --add-port=8011/tcp --add-port=8020/tcp --add-port=8030/tcp --add-port=8040/tcp --add-port=8050/tcp --add-port=8051/tcp --add-port=8052/udp
+sudo firewall-cmd --reload
+sudo firewall-cmd --list-ports
+```
+
+
+### Pull images
+
+```bash
+sleep 60 && podman pull lscr.io/linuxserver/transmission:latest
+sleep 60 && podman pull docker.io/gitea/gitea:latest
+sleep 60 && podman pull docker.io/klakegg/hugo:alpine
+sleep 60 && podman pull docker.io/library/caddy:alpine
+sleep 60 && podman pull docker.io/library/nextcloud:production
+sleep 60 && podman pull docker.io/library/postgres:alpine
+```
+
+
+### Get fs ready
+
+```bash
+sudo zfs set atime=off trayimurti
+sudo zfs set primarycache=all trayimurti
+sudo zfs set recordsize=1M trayimurti
+sudo zfs set xattr=sa trayimurti
+
+sudo zfs create trayimurti/containers
+sudo zfs create trayimurti/containers/volumes
+sudo zfs create trayimurti/containers/volumes/blog
+sudo zfs create trayimurti/containers/volumes/caddy
+sudo zfs create trayimurti/containers/volumes/gitea
+sudo zfs create trayimurti/containers/volumes/mach
+sudo zfs create trayimurti/containers/volumes/nextcloud
+
+sudo zfs create trayimurti/torrents
+sudo zfs set recordsize=16K trayimurti/torrents
+sudo zfs create trayimurti/torrents/downloads
+sudo zfs create trayimurti/torrents/downloads/.incomplete
+sudo zfs create trayimurti/torrents/config
+
+sudo chown pratham:pratham -vR /trayimurti/containers/volumes
+sudo chown pratham:pratham -vR /trayimurti/torrents
+
+sudo zfs allow -u pratham send,snapshot,hold trayimurti
+```
+
+
+### Create directories for mounting container volumes
+
+```bash
+mkdir -vp /trayimurti/containers/volumes/caddy/{site,ssl/{private,certs},caddy_{data,config}}
+mkdir -vp /trayimurti/containers/volumes/gitea/{database,web}
+mkdir -vp /trayimurti/containers/volumes/nextcloud/{database,web}
+```
+
+
+### Hugo
+
+```bash
+git clone git@gitlab.com:shivohamx3/blog.git /trayimurti/containers/volumes/blog
+cd /trayimurti/containers/volumes/blog && git submodule init && git submodule update
+git clone git@gitlab.com:shivohamx3/machines.git /trayimurti/containers/volumes/mach
+cd /trayimurti/containers/volumes/mach && git submodule init && git submodule update
+```
+
+
+### Caddy
+
+1. Visit the [Cloudflare dashboard](https://dash.cloudflare.com/)
+2. Select domain
+3. On the left sidebar, select 'SSL/TLS'. Make sure _Encryption Mode_ is **Full (strict)**.
+4. Under 'SSL/TLS', goto '**Origin Server**'.
+5. Create a new Certificate **with default values**.
+6. Populate `/trayimurti/containers/volumes/caddy/ssl/{certs/certificate.pem,private/key.pem}`.
+7. Change permissions for `/trayimurti/containers/volumes/caddy/ssl/private`.
+
+```bash
+chmod 700 -v /trayimurti/containers/volumes/caddy/ssl/private
+chmod 600 -v /trayimurti/containers/volumes/caddy/ssl/private/key.pem
+```
+
+Copy `Caddyfile` to the appropriate directory.
+
+```bash
+cp -v Caddyfile /trayimurti/containers/volumes/caddy/
+```
+
+
+### Cockpit
+
+something-something enable SSL for cockpit
+
+```bash
+sudo cp cockpit.conf /etc/cockpit/cockpit.conf
+```
+
+
+### Generate container secrets for passwords
+
+```bash
+openssl rand -base64 20 | podman secret create gitea_database_user_password -
+openssl rand -base64 20 | podman secret create nextcloud_database_user_password -
+```
+
+
+### Enable user lingering
+
+```bash
+sudo loginctl enable-linger
+```
+
+
+### Start containers
+
+```bash
+podman-compose -f master-compose.yml up -d
+```
+
+
+### Generate systemd files and enable them
+
+```bash
+cd $HOME/.config/systemd/user
+
+podman generate systemd -f --name caddy-vishwambhar --new
+podman generate systemd -f --name gitea-chitragupta --new
+podman generate systemd -f --name gitea-govinda --new
+podman generate systemd -f --name hugo-mahayogi --new
+podman generate systemd -f --name hugo-vaikunthnatham --new
+podman generate systemd -f --name nextcloud-chitragupta --new
+podman generate systemd -f --name nextcloud-govinda --new
+podman generate systemd -f --name nextcloud-karma --new
+podman generate systemd -f --name transmission-raadhe --new
+
+systemctl --user daemon-reload
+
+systemctl --user enable container-caddy-vishwambhar container-gitea-chitragupta container-gitea-govinda container-hugo-mahayogi container-hugo-vaikunthnatham container-nextcloud-chitragupta container-nextcloud-govinda container-nextcloud-karma container-transmission-raadhe
+```
+
+---
+
+
+## Stage 0111: cron
+
+### user crontab
+
+```bash
+# a zfs scrub takes place on the first Friday of every month
+# this is done at 21:00 hours
+# so stop all containers before the scrub takes place
+# DON'T DO THIS THO
+#55 20 * * 5 [ $(date +\%d) -le 07 ] && systemctl --user stop container-caddy-vishwambhar container-gitea-chitragupta container-gitea-govinda container-hugo-mahayogi container-hugo-vaikunthnatham container-nextcloud-chitragupta container-nextcloud-govinda container-nextcloud-karma container-transmission-raadhe
+
+# maintenance script
+# [[ if zpool scrub is not running ]]
+#   -> [[ if containers are not running ]]
+#     -> start containers
+* * * * * bash /home/pratham/.scripts/cron/pratham/maintenance.sh
+```
+
+
+### root crontab
+
+```bash
+# update fs database every 6 hours
+* */6 * * * updatedb
+
+# create zfs snapshot of `nextcloud` volume every Friday
+0 0 * * 5 bash /home/pratham/.scripts/cron/root/zfs-bak.sh
+
+# start scrub
+# on the first Friday of every month
+# at 2100 hours
+0 21 * * 5 [ $(date +\%d) -le 07 ] && /sbin/zpool scrub
+
+# maintenance script
+#0 20 * * * bash /home/pratham/.scripts/cron/root/maintenance.sh
+```
diff --git a/content/posts/harinarayan.md b/content/posts/harinarayan.md
index 6513267..db30c95 100644
--- a/content/posts/harinarayan.md
+++ b/content/posts/harinarayan.md
@@ -48,7 +48,7 @@ sudo systemctl enable nvidia-suspend nvidia-hibernate nvidia-resume
 ```bash
 cd $HOME/.ssh
 ssh-keygen -t ed25519 -f adinath
-ssh-keygen -t ed25519 -f balaji
+ssh-keygen -t ed25519 -f balakrishna
 ssh-keygen -t ed25519 -f gitea
 ssh-keygen -t ed25519 -f github
 ssh-keygen -t ed25519 -f gitlab
@@ -268,7 +268,7 @@ sudo zfs create bhugol/media/movies
 sudo zfs create bhugol/media/tv_series
 
 sudo zfs create bhugol/backup
-sudo zfs create bhugol/backup/balaji
+sudo zfs create bhugol/backup/balakrishna
 sudo zfs create bhugol/backup/adinath
 sudo zfs create bhugol/backup/vidhata
 sudo zfs create bhugol/backup/harinarayan