~/blog/*

Notes, guides, and things learned from the lab

Setting Up a PXE Boot Server on SUSE Linux

2025-12-18 25 min read

Learn how to build a complete PXE boot server on SUSE Linux for network-based OS installations. This comprehensive guide covers dnsmasq configuration for DNS and DHCP services, TFTP server setup for boot files, and HTTP server configuration for OS images. Perfect for mass deployments, diskless workstations, and deploying Harvester HCI clusters across multiple nodes with automated configuration.

PXE Boot SUSE Linux dnsmasq Harvester Network Boot
Read more

Virtual Private Cloud Configuration with KubeOVN

2025-12-18 15 min read

Building isolated network environments in Kubernetes has become essential for multi-tenant deployments. KubeOVN, a powerful software-defined networking solution, enables the creation of Virtual Private Clouds (VPCs) with advanced features like network isolation, security groups, and VPC peering. Learn how to configure and deploy VPCs with three-tier architecture in a Harvester HCI environment.

Kubernetes KubeOVN Networking VPC Security
Read more

Understanding VPC Peering in Kubernetes

2025-12-18 12 min read

VPC peering is a fundamental networking concept that enables communication between isolated network environments. Discover how KubeOVN implements VPC peering in Kubernetes, allowing you to build complex multi-VPC architectures while maintaining strong isolation guarantees. This deep dive covers peering concepts, configuration patterns, and troubleshooting techniques.

Kubernetes KubeOVN VPC Peering OVN SDN
Read more

Getting Started with Kubernetes on Edge Devices

2025-12-18

Kubernetes has become the de facto standard for container orchestration, but deploying it on edge devices presents unique challenges. In this post, we explore how to use lightweight distributions like K3s and RKE2 to build efficient edge computing clusters.

Kubernetes Edge Computing RKE2
Read more

Building Secure Mail Servers in 2025

2025-12-15

Email remains a critical communication tool, but setting up a secure mail server requires careful attention to security, spam filtering, and authentication. We share our experience configuring Postfix, Dovecot, and modern security protocols like DKIM and SPF.

Email Security DevOps
Read more

Automating Infrastructure with Edge Image Builder

2025-12-10

SUSE Edge Image Builder (EIB) allows you to create custom, bootable ISO images with pre-configured Kubernetes clusters. Learn how we use declarative YAML configurations to build immutable infrastructure that can be deployed at scale.

Infrastructure Automation SUSE
Read more

SSL/TLS Best Practices with Let's Encrypt

2025-12-05

Free SSL certificates from Let's Encrypt have made HTTPS accessible to everyone. This guide covers best practices for certificate management, auto-renewal strategies, and proper Nginx configuration for optimal security and performance.

SSL/TLS Security Nginx
Read more