Linux on Budiman JoJo

The Pain and Peculiarity of NixOS Networking with systemd-networkd

Thu, 06 Mar 2025 12:20:51 +0700

Setting up networking on NixOS with systemd-networkd should, in theory, be a straightforward and declarative process. Just define your network configurations in Nix, let systemd-networkd handle the interfaces, and enjoy a seamless, reproducible setup. But reality hits differently. My journey with systemd-networkd on NixOS has been a mix of frustration, debugging marathons, and the occasional victory that feels more like luck than mastery. In this article, I’ll go over some of the quirks I’ve encountered, the pitfalls that made me question my sanity, and the workarounds that (sometimes) saved the day.

My Journey Containerizing Fullstack Java GUI App

Thu, 01 Feb 2024 18:45:56 +0000

Do you find yourself stuck with an outdated application, due to the absence of viable alternatives or work requirements? Well, you’re not alone. In this blog post, I’ll share my experience dealing with an old Java application that not only require an obsolete version but also demanded a specific environment setup, including a Postgres server and a CUPS server. To liberate my system from these complexity, I embarked on the journey of containerizing the entire stack. Join me as I recount the challenges faced and the valuable lessons learned along the way.

How I Write Kubernetes Manifests

Wed, 22 Feb 2023 18:45:56 +0000

While tools like Helm and kustomize can significantly reduce the amount of manual Kubernetes manifests writing, it’s often impossible to completely avoid it (even (kustomization.yaml file is itself a Kubernetes manifest). For instance, you may need to create a basic ingress because the chart you’re using doesn’t provide a template for it, or generate a certificate for your domain with cert-manager. In this post, I’ll describe how I leverage VSCode snippets and yaml-language-server to write Kubernetes manifests.

Neovim Is Awesome

Sat, 27 Aug 2022 12:20:51 +0700

I was a long time Vim user, long before Neovim was born. I was sold to Neovim when CoC came out and there were some features that don’t work with Vim. At that time, Neovim was marketed as Vim but with more sane default experience. As time goes by, now Neovim is more than just Vim with better defaults. In this post, I will share my two cents on why Neovim is so much better than Vim, at least for me.

Managing Dotfiles With Chezmoi

Mon, 13 Dec 2021 23:54:07 +0000

The biggest difference between my setup and your setup might be our configuration files. In Unix world we call them dotfiles. Dotfiles are files whose filename starts with a dot and hidden by default in our file managers.

How I GitOps Home Assistant Configurations

Thu, 04 Nov 2021 17:37:02 +0000

I always love the idea of GitOps, where everything I have in a git repo represents the current state of my application. But not everything are made for GitOps, so we have to sort of “make it work”. In this post, I will show you how I manage to GitOps my Home Assistant configurations. Spoiler, this is hacky and messy at the same time, so please bear this in mind before continuing.

Automating Kubernetes Nodes Reboot with Kured

Thu, 28 Oct 2021 16:05:01 +0000

Having an up-to-date Kubernetes node is important, especially security updates. Sometimes an update requires a reboot to take effect, and you don’t want to keep checking them manually. In this post, I will share about how I automate my Kubernetes nodes to reboot when necessary using Kured.

Variable Substitution in Flux GitOps

Wed, 27 Oct 2021 13:36:08 +0000

Sometimes there are values that you want to use multiple times in your manifest files. Usually, we define them using a config map or secret and we either mount them as a file or environment variable. This is easy if you don’t use GitOps and have a small amount of pods. Also, having a single configmap and secret will clean up a lot of mess out of your cluster, and this is what variable substitution will do for you. I find this really useful especially for sensitive information you don’t want people all around the world to see. In this post, I will show you how I do variable substitution using Flux GitOps tool.

How I Manage My Kubernetes Manifests Using Flux

Wed, 20 Oct 2021 18:45:56 +0000

GitOps is currently the most popular way to manage your services. It’s sort of what DevOps is but with Git. To put it in a simple way, it is a practice where you manage everything through git. Whatever you have in your git repository is what your cluster current state is. Because GitOps is so popular there are a lot of new tools focusing on GitOps right now, and Flux is one of them. In this post I will give you a glance on how I manage my Kubernetes manifests using Flux.

Raspberry Pi Media Server Series 4 - Setting Up Docker

Wed, 18 Dec 2019 01:24:55 +0000

This is the forth part of my Raspberry Pi Media Server series. If you haven’t read our previous part, here’s where we discussed setting up external drives on Raspberry Pi. In this part, we are going to setting up Docker on Raspberry Pi. Here’s what you will get if you follow through the end of the tutorial:

Docker and Docker Compose installed
Docker data will be in the external drives
Systemd will only start Docker if external drives are mounted

Getting Started

Before we get our hands on setting up docker on our Raspberry Pi, let’s first do a system update. If you are on Manjaro, the command will be:

Raspberry Pi Media Server Series 3 - External Drives

Mon, 09 Dec 2019 17:35:52 +0000

This is the third part of Raspberry Pi Media Server series, if you haven’t read our previous part, here’s where we discussed securing SSH server on Raspberry Pi. In this post, I’m going to share how I setup external drives on my Raspberry Pi. Here’s a glimpse on my setup before you decided to read this entire lengthy page:

Raspberry Pi Media Server Series 2 - Secure Ssh

Sat, 30 Nov 2019 10:31:59 +0000

This is the second part of my Raspberry Pi Media Server series. On previous post, I wrote about installing Manjaro Linux ARM into my Raspberry Pi 4. Now, we are going to secure our SSH server on Raspberry Pi so that we can at least prevent brute-force attempt on our future home media server from the evil outside world. Securing SSH server is one of the most crucial part of every server that can be accessible on the internet.

Raspberry Pi Media Server Series 1 - Installing Manjaro

Mon, 25 Nov 2019 00:04:50 +0000

So you bought a Raspberry Pi and you don’t know what should you do with it. Well, in this series I want to share my way of using my Raspberry Pi. I bet you already guessed it right by reading the title. Yes, this is the first part of my Raspberry Pi Media Server series. Before I continue, here’s what I have for this project:

A full set of 2GB Raspberry Pi 4 Model B
ORICO 3.5 inch Dual Bay Aluminum Alloy USB3.0 Hard Drive Enclosure (9528U3)
Two 1TB Hard Disk Drive
A memory card reader