Posts on Viki Pranata

Running LLM OpenAI Open Source Model with vLLM and GPU NVIDIA L4

Mon, 15 Dec 2025 00:00:00 +0700

Running LLM OpenAI Open Source Model with vLLM and GPU NVIDIA L4

Kubernetes Cluster RKE2 with Cilium eBPF CNI

Mon, 16 Jun 2025 00:00:00 +0700

Building Rancher Kubernetes Engine 2 without kube-proxy with Cilium eBPF CNI

Lightweight Kubernetes Cluster with Multi Masters K3S and CRI-O

Fri, 06 Jun 2025 00:00:00 +0700

Create lightweight container orchestrations with Kubernetes Rancher K3S and CRI-O for Container Runtime

Build Docker Swarm Cluster with Rocky Linux 9.5

Thu, 05 Jun 2025 00:00:00 +0700

Create container orchestrations with Docker Swarm

High Availabililty VyOS Stream with Config Sync

Sat, 05 Apr 2025 00:00:00 +0700

Installing and setup VyOS 1.5 Stream version with high availability and config sync

Operating OpenStack via CLI

Sun, 16 Mar 2025 00:30:00 +0700

Operating OpenStack via the command line, which can be used for preparing COA (Certified OpenStack Administrator)

Openstack 2024.2 with Kolla Ansible

Sun, 16 Mar 2025 00:00:00 +0700

Deployment Openstack Cloud with Kolla Ansible

Ceph Reef Deployment

Sat, 15 Mar 2025 00:00:00 +0700

Deployment Software Defined Storage with Ceph Reef

High Availability with Keepalived

Wed, 04 Sep 2024 09:00:00 +0700

Installing Packages Dependencies

dnf install -y keepalived

Keepalived Configuration

Keepalived state reference

MASTER-MASTER (if down, back to top priority)
MASTER-BACKUP (if down, back to MASTER)
BACKUP-BACKUP (if down, respect to node with MASTER state)
Routers with priority 101 will become MASTER and Routers with priority 100 will become BACKUP.

Configure First Node

cat <<EOF | tee /etc/keepalived/keepalived.conf
global_defs {
    router_id JumpServer
    enable_script_security
    vrrp_check_unicast_src
}

vrrp_track_process track_openvpn {
    process openvpn
    weight 2
}

vrrp_instance VIP {
    state MASTER
    interface eth1
    virtual_router_id 69
    priority 101
    advert_int 1
    nopreempt

    authentication {
        auth_type PASS
        auth_pass Pa\$\$w0rd
    }

    unicast_src_ip 10.79.80.1
    unicast_peer {
        10.79.80.2
    }

    virtual_ipaddress {
        103.150.80.130/28 dev eth0
        10.79.80.254/24 dev eth1
    }

    virtual_routes {
        0.0.0.0/0 via 103.150.80.142 dev eth0 metric 100
    }

    static_routes {
        0.0.0.0/0 via 10.79.80.251 dev eth1 metric 101
    }

    track_process {
        track_openvpn
    }
}
EOF

Restart service and set to run while system boot

Linux OpenVPN Server with Google Authenticators

Wed, 04 Sep 2024 09:00:00 +0700

Installing package dependencies

dnf install -y epel-release
dnf install -y openvpn openssl easy-rsa policycoreutils-python-utils

Creating and Setting Up an OpenVPN Server Certificates

Set of environment variable for easy_rsa

cat <<EOF | tee vars
set_var EASYRSA_ALGO ec
set_var EASYRSA_CURVE prime256v1
set_var EASYRSA_CA_EXPIRE 3650
set_var EASYRSA_CERT_EXPIRE 3650
set_var EASYRSA_CRL_DAYS 3650
EOF

Then execute ./easyresa init-pki

Create certificate authority (CA) and sever certificate.

SERVER_CN=jumpserver
SERVER_NAME=jumpserver

./easyrsa --batch --req-cn="$SERVER_CN" build-ca nopass
./easyrsa --batch build-server-full "$SERVER_NAME" nopass
./easyrsa gen-crl

Linux Join Active Directory

Tue, 03 Sep 2024 09:20:00 +0700

After we Setup Active Directory Server in Windows Server 2022 now we can use this LDAP/AD User to login to server environments.

Installing packages

dnf install -y realmd oddjob oddjob-mkhomedir sssd adcli samba-common-tools

Set dns server to AD server

cat <<EOF | tee -a /etc/resolv.conf
search lab.homelab.is-a.dev
nameserver 10.79.80.3
EOF

Discover to AD server

realm discover lab.homelab.is-a.dev

Joining linux host to AD server

Setup Active Directory Server with Windows Server 2022

Tue, 03 Sep 2024 09:00:00 +0700

This pages is work in progress

Setup Active Directory Domain Services

Setup finish and server will be restart.

Create Organizational Unit and Security Group

Create User and Assign to Security Group

Add a Domain Controller to an Existing Domain

Setup finish and server will be restart.

Linux Networking Self Notes

Mon, 02 Sep 2024 09:10:00 +0700

Configure Linux NAT Forwarding

Enable kernel parameter

echo 'net.ipv4.ip_forward = 1' > /etc/sysctl.d/99-forwarding.conf
sysctl --system

Setup firewalld configuration

nmcli connection migrate
nmcli connection modify eth0 connection.zone public
nmcli device modify eth0 connection.zone public
nmcli connection modify eth1 connection.zone internal
nmcli device modify eth1 connection.zone internal

firewall-cmd --permanent --zone=public --add-masquerade
firewall-cmd --permanent --new-policy NAT-int-to-ext
firewall-cmd --permanent --policy NAT-int-to-ext --add-ingress-zone internal
firewall-cmd --permanent --policy NAT-int-to-ext --add-egress-zone public
firewall-cmd --permanent --policy NAT-int-to-ext --set-target ACCEPT
firewall-cmd --reload

Special case for Proxmox Virtual Environment

Linux Resize Disk

Sun, 01 Sep 2024 09:00:00 +0700

Expand Space without Rebooting VM

Current usage disk with lsblk command

And here is LVM partition table

First step we need grow partition in /dev/sda3, install package growpart first

dnf install -y cloud-utils-growpart

Then we resize partition with this command

growpart /dev/sda 3

See the different before and after, if you don’t use LVM partition scheme just execute resize2fs /dev/sda3 to full fill the partition.

pvresize /dev/sda3
pvs
vgs

Posts on Viki Pranata

Running LLM OpenAI Open Source Model with vLLM and GPU NVIDIA L4

Kubernetes Cluster RKE2 with Cilium eBPF CNI

Lightweight Kubernetes Cluster with Multi Masters K3S and CRI-O

Build Docker Swarm Cluster with Rocky Linux 9.5

High Availabililty VyOS Stream with Config Sync

Operating OpenStack via CLI

Openstack 2024.2 with Kolla Ansible

Ceph Reef Deployment

High Availability with Keepalived

Installing Packages Dependencies

Keepalived Configuration

Configure First Node

Linux OpenVPN Server with Google Authenticators

Installing package dependencies

Creating and Setting Up an OpenVPN Server Certificates

Linux Join Active Directory

Join Active Directory and Configure to Login with User AD

Setup Active Directory Server with Windows Server 2022

Setup Active Directory Domain Services

Create Organizational Unit and Security Group

Create User and Assign to Security Group

Add a Domain Controller to an Existing Domain

Linux Networking Self Notes

Configure Linux NAT Forwarding

Linux Resize Disk

Expand Space without Rebooting VM