Setting Up Hashicorp Vault on FreeBSD

Vault works well on FreeBSD, but there are a couple of quirks to be aware of. This guide will help take care of those. Installing Vault Follow the normal install method: pkg install vault Settings for use in Jail Using vault in a jail requires the option allow.mlock to be set. Using ezjail and a jail called vault just modify the config file /usr/local/etc/ezjail/vault on the host and set:
Continue Reading -->

PXE Booting multiple Raspberry Pi 3s with FreeBSD

To make it easier to upgrade the various Raspberry Pis that are around, lets PXE boot them so they can be upgraded easily. In this article we will use the following tools to create a shared base system and then individual mounts for each RPi: NFS Poudriere PXE TFTP ZFS To make cable management easier, each Raspberry Pi is connected to a PoE switch using one of these Adafruit PoE Splitter.
Continue Reading -->

Building FreeBSD cloudinit images for Terraform

Setting up FreeBSD to run cloudinit to make custom images is pretty easy. The first step is to boot a basic image or the install ISO and install FreeBSD. Once it is up and running then install cloudinit: pkg install net/cloud-init And enable cloudinit: sysrc cloudinit_enable=YES Currently there is a bug in cloud-init where it does not try to mount the correct filesystem with the correct type on FreeBSD.
Continue Reading -->

Testing Nomad & Consul with FreeBSD Jails

For awhile now I have been meaning to evaluate Nomad and Consul for managing servers as well as batch jobs. It has lots of features that are attractive and would make managing services very easy using the Consul service mesh and health checks. One of the downsides is that it takes some configuration and setup to get it configured for maximum success, with multiple copies of the Nomad Server and Consul Server running in each datacenter. The other side of the coin is other solutions require setting up an external database that will then have to be managed and monitored.


Continue Reading -->

Updated Tarsnap Backup Script

For awhile I have been using a Tarsnap backup script written by Tim Bishop. It is very handy but recently I was setting up Tarsnap again on a new machine and I noticed that it is not designed to be run more frequently than daily. So I decided to take a stab at making it handle being run more often and keeping the number of daily/weekly/monthly backups that are actually desired.
Continue Reading -->