Bryan Pfremmer pfremm

Proxmox VE 6.x release includes a feature to add custom cloud-init configs. Unfortunately there is poor documentation, so I had to figure this out by adding pieces of information together.

The custom cloud-init files (user-data, meta-data, network-config)

The cloud-init files need to be stored in a snippet. This is not very well documented:

Go to Storage View -> Storage -> Add -> Directory
Give it an ID such as snippets, and specify any path on your host such as /snippets
Under Content choose Snippets and de-select Disk image (optional)
Upload (scp/rsync/whatever) your user-data, meta-data, network-config files to your proxmox server in /snippets/snippets/ (the directory should be there if you followed steps 1-3)

Setting up netboot.xyz with an EdgeRouter

This document covers how to setup netboot.xyz, a service that provides iPXE-based installation and live boot of a bunch of operating systems, on a Ubiquiti EdgeRouter.

Assumptions

I've made a few assumptions throughout this document that will probably be different for your setup:

security and hardening options for systemd service units

A common and reliable pattern in service unit files is thus:

NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
ProtectSystem=strict

Last Updated: March 2023

IMPORTANT: Ignore the out-of-date steps below for getting Chromium keys.

Instead, read this up-to-date guide (Jan 2023) written by @LearningToPi.

P.S. Thank you to every contributor below who provided tips over the years on what should be a straightforward process: setting up Chromium for local development.

Long live the web!

	https://www.worksonarm.com/explore/freebsd/
	https://wiki.freebsd.org/arm64
	https://wiki.freebsd.org/arm64?action=AttachFile&do=view&target=arm64_build.sh
	https://ci.freebsd.org/job/FreeBSD-stable-11-aarch64-build/
	https://github.com/HardenedBSD/hardenedbsd-ports/blob/master/sysutils/Makefile
	https://www.aliexpress.com/item/32880728063.html
	http://www.banana-pi.org/r64.html
	http://espressobin.net/
	http://wiki.espressobin.net/tiki-index.php

	#!/usr/bin/env python3
	# Combining coroutines running in an asyncio event loop with
	# blocking tasks in thread pool and process pool executors.
	#
	# Based on https://pymotw.com/3/asyncio/executors.html, but this version runs both
	# threads and processes at the same time and interleaves them with asyncio coroutines.
	#
	# All appears to be working.
	#

	apiVersion: extensions/v1beta1
	kind: PodSecurityPolicy
	metadata:
	name: restricted
	annotations:
	seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default'
	apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default'
	seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
	apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
	spec:

	// EmonLibrary examples openenergymonitor.org, Licence GNU GPL V3

	#include "EmonLib.h" // Include Emon Library



	#define VOLT_CAL 148.7
	#define CURRENT_CAL 62.6

	EnergyMonitor emon1; // Create an instance

	# Repo: someuser/myframework
	# Fork: superteam/myframework

	# Track:
	git clone https://github.com/superteam/myframework.git
	cd myframework
	git remote add upstream https://github.com/someuser/myframework.git

	# Update:
	git fetch upstream

	minikube start --kubernetes-version=v1.7.0 --extra-config=apiserver.Authorization.Mode=RBAC

	kubectl create clusterrolebinding add-on-cluster-admin --clusterrole=cluster-admin --serviceaccount=kube-system:default

	minikube dashboard