infra
/
ignition
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
32 Commits
1 Branch
0 Tags
103 KiB
Shell 93.3%
Makefile 6.7%
 
 
Go to file
Dustin 1cdd12454f collectd: Set collectd_t domain permissive 
The default SELinux policy for *collectd* does not allow it all the
necessary access for the way we use it.  Notably, it cannot bind to the
HTTP port to export Prometheus metrics, and it is not allowed to use
netlink to read interface statistics.  The latter is not a huge deal, as
it can fall back to the legacy procfs interface, but the former is a
nonstarter.

Eventually, I should write an SELinux module with the correct
permissions (and submit the changes upstream), but for now, we'll just
make the `collectd_t` domain permissive.
 		2023-10-04 21:01:38 -05:00
.gitattributes frigate: Enable Frigate+ integration 2023-09-21 22:29:51 -05:00
.gitignore flash: Clean up/add support for RPi 3 2023-10-04 20:50:30 -05:00
65-apex.rules gasket-driver: Install Coral EdgeTPU driver 2023-09-16 07:58:48 -05:00
Makefile fetchcert: Add script to fetch certs from K8s 2023-09-21 22:30:23 -05:00
butane-watch.sh meta: Add Makefile 2023-09-16 08:15:08 -05:00
collectd.yaml collectd: Set collectd_t domain permissive 2023-10-04 21:01:38 -05:00
common.yaml common: Add config shared by all hosts 2023-10-03 20:07:29 -05:00
fetchcert.service fetchcert: Add script to fetch certs from K8s 2023-09-21 22:30:23 -05:00
fetchcert.sh fetchcert: Add script to fetch certs from K8s 2023-09-21 22:30:23 -05:00
fetchcert.timer fetchcert: Add script to fetch certs from K8s 2023-09-21 22:30:23 -05:00
fetchcert.yaml fetchcert: Add script to fetch certs from K8s 2023-09-21 22:30:23 -05:00
flash.zsh flash: Clean up/add support for RPi 3 2023-10-04 20:50:30 -05:00
frigate.container frigate: Disable systemd filesystem isolation 2023-09-21 22:29:51 -05:00
frigate.env.gpg frigate: Enable Frigate+ integration 2023-09-21 22:29:51 -05:00
frigate.nginx frigate: Configure nginx reverse proxy 2023-09-21 22:32:59 -05:00
frigate.sysusers frigate: Manage state dir with tmpfiles.d 2023-09-19 10:44:34 -05:00
frigate.tmpfiles frigate: Manage state dir with tmpfiles.d 2023-09-19 10:44:34 -05:00
frigate.token.gpg nvr1: Deploy nginx 2023-09-21 22:34:14 -05:00
frigate.yaml frigate: Configure nginx reverse proxy 2023-09-21 22:32:59 -05:00
gasket-driver.container gasket-driver: Install Coral EdgeTPU driver 2023-09-16 07:58:48 -05:00
gasket-driver.yaml gasket-driver: Install Coral EdgeTPU driver 2023-09-16 07:58:48 -05:00
install-kubelet.service Initial commit 2023-07-17 15:16:01 -05:00
install-packages.service packages: Add framework for installing packages 2023-09-21 22:29:51 -05:00
install-packages.sh packages: Add framework for installing packages 2023-09-21 22:29:51 -05:00
k8s-aarch64-n0.yaml common: Add config shared by all hosts 2023-10-03 20:07:29 -05:00
k8s-aarch64-n1.yaml k8s-aarch6-n1: Add new Kubernetes node 2023-10-03 19:59:14 -05:00
kubelet.yaml Initial commit 2023-07-17 15:16:01 -05:00
local_exporter.config local_exporter: Exporter for Zincati metrics 2023-10-03 15:29:58 -05:00
local_exporter.container local_exporter: Remove After=zincati dependency 2023-10-04 20:50:30 -05:00
local_exporter.yaml local_exporter: Exporter for Zincati metrics 2023-10-03 15:29:58 -05:00
nginx.conf nginx: Deploy nginx in a container 2023-09-21 22:29:51 -05:00
nginx.container frigate: Configure nginx reverse proxy 2023-09-21 22:32:59 -05:00
nginx.yaml fetchcert: Add script to fetch certs from K8s 2023-09-21 22:30:23 -05:00
notify-shutdown.service notify-shutdown: Send a message on shutdown 2023-09-21 22:34:14 -05:00
notify-shutdown.yaml notify-shutdown: Send a message on shutdown 2023-09-21 22:34:14 -05:00
nvr1.yaml common: Add config shared by all hosts 2023-10-03 20:07:29 -05:00
packages.yaml packages: Add framework for installing packages 2023-09-21 22:29:51 -05:00
ssh-bootstrap.service step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
ssh-bootstrap.sh step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
sshkeys.yaml sshkeys: Trust certificates issued by the CA 2023-10-03 20:06:37 -05:00
step-ssh-renew.env step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
step-ssh-renew.target step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
step-ssh-renew.timer step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
step-ssh-renew@.container step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
step-ssh.yaml step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
zram.yaml zram: Configure swap-on-zram 2023-09-16 08:15:08 -05:00