@FATeknollogee said in VMware Community Homelabs:

Why don't we see this from the other Type-1 groups?

One thing the VMware "community" is very good at is grass roots movement.

From @lamw on Twitter:
https://www.virtuallyghetto.com/2020/02/vmware-community-homelabs-project.html

VMware Community Homelabs

There's a ton of stuff out there on IRC, Reddit, Slack, Telegram, and other mediums for the other types of servers.

https://www.reddit.com/r/homelab/ I mean this is literally people just posting their home labs and specs. I'm not sure what else you want?

@Pete-S said in VMware Community Homelabs:

@Obsolesce said in VMware Community Homelabs:

@FATeknollogee said in VMware Community Homelabs:

Why don't we see this from the other Type-1 groups?

One thing the VMware "community" is very good at is grass roots movement.

From @lamw on Twitter:
https://www.virtuallyghetto.com/2020/02/vmware-community-homelabs-project.html

VMware Community Homelabs

Because there is thing thing called the cloud, which is way cheaper and way more beneficial and efficient than spending thousands on hardware upfront.

Whatever it is, excluding some very specific scenarios, I'd rather learn and build it in Azure or AWS... You know, Two birds one stone.

The cloud is flexible but not cheap. It's only cheaper if your needs are very small or very dynamic. If you need performance or storage, cloud instances will get proportionally even more expensive.

And they know it of course. That's why they expand their services to make it harder to move the workload to another cloud provider or your own datacenter.

It 100% depends on the type of work. If you're taking in 5 billion requests per day, there's no way it's going to be cheaper on site than in public cloud.

Even with CFD type work where you'd normally have a cluster. You have to weigh the capex of the servers and the ongoing cost of the maintenance and utilities vs just spinning up 10-20 nodes when you need it. However if you get into long running solves like 6 months or so, then it might be cheaper on site. It really depends on the work load.

We also use Antora for any documentation that goes along with the role.

It's stored with the Ansible role in Git.

@black3dynamite said in Remote PowerShell from Fedora to Windows:

@stacksofplates said in Remote PowerShell from Fedora to Windows:

Sssd works with multiple domains.

If sssd is installed will I be able to use -Authentication Kerberos without needing to join to a domain or when accessing Windows machines that isn’t joined to a domain?

No it only works for domains.

@scottalanmiller said in Remote PowerShell from Fedora to Windows:

@stacksofplates said in Remote PowerShell from Fedora to Windows:

You'd have to join the Fedora system to the domain. Luckily it's really easy with sssd and realmd.

That's annoying when you manage lots of different domains.

Sssd works with multiple domains. But that wasn't mentioned here.

Kerberos is more secure than strictly key based authentication, and easier from the user perspective anyway.

@black3dynamite said in Remote PowerShell from Fedora to Windows:

@stacksofplates said in Remote PowerShell from Fedora to Windows:

Can you just use Kerberos for your authentication?

This didn't work for
Enter-PSSession -ComputerName hostname -Authentication Kerberos -Credential 'username'

Enter-PSSession : Connecting to remote server hostname failed with the following error message : Kerberos verify cred with password failed No credentials were supplied, or the credentials were unavailable or inaccessible For more information, see the about_Remote_Troubleshooting Help topic.
At line:1 char:1
+ Enter-PSSession -ComputerName hostname -Authentication Kerberos -Cr ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo          : InvalidArgument: (hostname:String) [Enter-PSSession], PSRemotingTransportException
+ FullyQualifiedErrorId : CreateRemoteRunspaceFailed

You'd have to join the Fedora system to the domain. Luckily it's really easy with sssd and realmd.

Then you can use Kerberos for both SSH and hopefully this connection as well.

Is this on a domain joined box? Can you just use Kerberos for your authentication?

It's been a long time since I used it (like 2014) but it worked really well back then. I do more with containers now so I haven't looked into using it at home.

@scottalanmiller said in Managing Type 1 Hyper Visors:

@stacksofplates said in Managing Type 1 Hyper Visors:

I don't use their stuff, I just use the cli because I can automate that with Ansible or Terraform or whatever, but I'd love to have a REST API for bare KVM. Doesn't even need a GUI, it would just make interacting with systems so much easier.

I find it surprising that there is much concern for this on smaller scale systems like where this would be common. A really nice feature enhancement, to be sure, but surprised to see it as something many people would care about.

It would make writing interactions with it much easier and make smaller scale systems much easier to manage and more popular.

Firecracker is a great example of using KVM with an API first mindset.