Nilson Lopes noslin005

Kubernetes kubelet certs LAB

Break Certs

#!/usr/bin/env bash

NODE="${1}"
NODE_FQDN="${NODE}.example.com"

Deploy Guacamole using Podman Kube

Directory Structuy

mkdir -p /mnt/containers/guacamole/{storage/drive,storage/record,data/postgres,init,nginx/conf.d,nginx/certs}

Headless VNC Server Setup Reference

AlmaLinux / RHEL 8+ — Single shared session via x11vnc on a dedicated virtual display

Architecture

xinit (~/.xinitrc + Xvfb :10) → x11vnc (port 5910)

Create a backup of current driver

KVER=$(uname -r)

tar --numeric-owner -czpf /tmp/nvidia_driver_files.tar.gz \
    /lib/modules/$KVER/kernel/drivers/video/nvidia* \
    /lib/modules/$KVER/kernel/drivers/video/nvidia/ \
    /usr/lib64/libcuda* \

FreeIPA/IDM Setup

RHEL8 IPA Server

Use the procedure below to create a rhel8 IPA and to test migrating IPA from rhel8 to rhel9.

ipa1 (rhel8)

HOSTNAME=ipa1.example.com

https://access.redhat.com/labs/idmupgradehelper/

https://www.freeipa.org/page/V4/FreeIPA-on-FIPS

https://floblanc.wordpress.com/2023/08/23/interoperability-of-rhel-7-8-9-idm-server-and-rhel-7-8-9-idm-client/

https://oneuptime.com/blog/post/2026-03-04-migrate-identity-management-rhel-8-to-rhel-9/view

https://sambaxp.org/fileadmin/user_upload/sambaxp2023-Slides/Bokovoy_sXP23_FIPS_140_3.pdf

Create a Bootable Raw Disk

Attach Virtual Disk

sudo kpartx -avs test.img

Create Partition

sudo parted /dev/loop0 mktable msdos
sudo parted /dev/loop0 mkpart primary ext4 1 100%

sudo parted /dev/loop0 set 1 boot on

Remove LUKS Encryption from a Encrypted Rocky Linux 9

DISCLAIMER: USE AT YOUR OWN RISK

This procedure converts a LUKS2 container to LUKS1 and then decrypts it in place using cryptsetup reencrypt --decrypt.

Warning

	#!/bin/bash
	set -e

	echo "=== PulseAudio Setup ==="

	echo "[1/5] Installing packages..."
	sudo dnf install -y -q pulseaudio pulseaudio-utils alsa-plugins-pulseaudio

	echo "[2/5] Restarting PulseAudio..."
	pulseaudio -k 2>/dev/null \|\| true

	```bash
	export PS1='\n\[\033[1;37m\][\[\033[1;32m\]*\[\033[1;37m\]]\[\033[1;37m\]\342\224\200\[\033[1;37m\][\[\033[1;32m\]\h\[\033[1;37m\]]\[\033[1;37m\]\342\224\200[\[\033[1;34m\]\w\[\033[1;37m\]]\n\[\033[1;37m\]\342\224\224\342\224\200\342\224\200> \[\033[0m\]'