Blog

Here are my notes from the week:

Announcement of OpenShift 4.14 on Power

Power Developer Exchange: Red Hat OpenShift 4.14 Now Available on IBM Power

IBM® is very excited to announce that Red Hat OpenShift 4.14 has been released and is available to run natively on IBM Power.

Multi-Architecture Compute

With Red Hat OpenShift 4.14, Multi-Architecture Compute comes to IBM Power and IBM Z platforms. Multi-Architecture Compute provides a single heterogeneous cluster, enabling fit-for-purpose computing, so that customers can align tasks and applications to CPU strengths and software availability rather than to one architecture. This also helps reduce the cost and complexity of solutions that require multiple architectures. 

https://community.ibm.com/community/user/powerdeveloper/blogs/brandon-pederson1/2023/11/08/red-hat-openshift-414-now-available-on-ibm-power

Brunch and Learn with MAC

Paul Chapman is hosting a lunch and learn on Multi-architecture Compute. It’s a good session to join.

Hey, would you like to join me for this short brunch and learn? I will discuss and demonstrate Red Hat OpenShift Multi-Architecture Computing (MAC).

MAC now supports x86, ARM, and Power Worker Nodes, all within the same Red Hat OpenShift Cluster. It should be an exciting and informative event. I'd love to have your company and hear your feedback.

–10:30 GMT/UTC 17th November 2023
–Register here https://ibm.biz/BdPYQH

#powermod
#power10 #ibmpowersystems #ibmpowersystemsvirtualservers
#redhatopenshiftcontainerplatform #redhatopenshift
#containersolutions #containers 

https://ibm.biz/BdPYQH

Butane with Key File

On a linux intel or arm machine, y ou can run the following:

1. Create the butane alias

alias butane='podman run --rm --interactive         \
              --security-opt label=disable          \
              --volume "$(pwd)":/pwd --workdir /pwd \
              quay.io/coreos/butane:latest'

2. Generate the key_file contents

openssl genrsa -out out.rsa 4096

3. Use this file

cat <<EOF > 99-worker-luks.bu
variant: openshift
version: 4.14.0
metadata:
  name: 99-worker-luks
  labels:
    machineconfiguration.openshift.io/role: worker
storage:
    luks:
    - name: luks-encrypt-worker
      device: /dev/disk/by-partlabel/root
      key_file:
        source: data:;base64,$(cat out.rsa | gzip - | base64 --wrap=0)
        compression: gzip
EOF

3. Run the Butane command

butane 99-worker-luks.bu -o 99-worker-luks.yaml

It generates:

# Generated by Butane; do not edit
apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfig
metadata:
  labels:
    machineconfiguration.openshift.io/role: worker
  name: 99-worker-luks
spec:
  config:
    ignition:
      version: 3.4.0
    storage:
      luks:
        - device: /dev/disk/by-partlabel/root
          keyFile:
            compression: gzip
            source: data:;base64,<EXCLUDED>
          name: luks-encrypt-worker

You probably need to consider:

luks:
   enabled: false
   filesystem_device: /dev/mapper/root
   format: xfs
   wipeFileSystem: true
   device: /dev/disk/by-partlabel/root
   label: luks-root
   options:
      - --cipher
      - aes-cbc-essiv:sha256
   wipeVolume: true
   name: root

The cipher options probably needs some work.

Ref: https://github.com/ocp-power-automation/ocp4-playbooks/blob/efb74c59edfc8de2f2579f7b754463a718028c56/playbooks/roles/ocp-config/templates/99-node-machineconfig.yaml.j2#L14 

Ref: https://github.com/ocp-power-automation/ocp4-playbooks/blob/efb74c59edfc8de2f2579f7b754463a718028c56/playbooks/roles/ocp-config/defaults/main/main.yaml#L23 

Ref: https://coreos.github.io/butane/upgrading-openshift/ 

Ref: https://coreos.github.io/butane/config-openshift-v4_14/ 

Ref: https://coreos.github.io/butane/examples/

List of Red Hat Products released in October 2023

In the month of October, the following Red Hat products were released on IBM Power. 

https://community.ibm.com/community/user/powerdeveloper/blogs/ashwini-sule/2023/11/09/red-hat-products-oct-2023

A few updates this week are:

Red Hat OpenShift Container Platform 4.14.0 for Power Systems

The Red Hat team released OpenShift Container Platform with new support for Power Systems.

The features I worked on with my team are:

• Multi-Architecture Compute with Power
• oc-mirror plugin

The installer and client are available at link

Hack to List Interfaces

# ip -j -4 -o address  | jq -r '.[].addr_info[] | select(.dev == "env2").local'
192.168.166.70

systemd Commands Cheat Sheet

Users and administrators query and control systemd behavior through the systemctl command. This systemd Cheat Sheet presents the most common uses of systemctl, along with journalctl for displaying information about systemd activities from its logs.

https://developers.redhat.com/cheat-sheets/systemd-commands-cheat-sheet?sc_cid=7013a000003SyUMAA0

The systemd cheat sheet is a good reference. Very comprehensive.

Posts on OCP 4.14

Paul Chapman updated the community on the new features in 4.14.

https://www.linkedin.com/posts/chapmanp_openshift-container-platform-414-release-activity-7125400057436073984-68Ju?utm_source=share&utm_medium=member_desktop

1. Updated Open Source Container images for Power now available in IBM Container Registry

The IBM Linux on Power team posted an updated container list including new versions of MongoDB

https://community.ibm.com/community/user/powerdeveloper/blogs/priya-seth/2023/04/05/open-source-containers-for-power-in-icr

2. The Acme Air application that uses multiarchitecture compute is moved on quay and github.

The source code is at https://github.com/ocp-power-demos/acmeair-multiarchitecture-compute

The images are at https://quay.io/repository/powercloud/acme-airlines-mac?tab=tags

These images are helpful when exploring multiarch compute.

3. YouTube: What’s new in OpenShift 4.14

https://www.youtube.com/watch?v=T0Je1UMqRNc

4. Paul Chapman’s Invitation to IBM Power’s Multi-Architecture Cluster Early Adoption & Feedback Program

This site has a short introduction and call to action. It’s great to see videos on Multiarchitecture Compute.

https://www.linkedin.com/posts/chapmanp_invitation-to-ibm-powers-multi-architecture-activity-7119940146019328002-5tjH

Here are the very cool things I learned this week:

CRI-O Graduated

CRI-O has graduated at the CNCF – see the announcement Cloud Native Computing Foundation Announces Graduation of CRI-O. This points to the maturity of Cloud Native runtimes.

Checking an Ignition on a Failed Instance

I use PowerVS and had a bad ignition file, so I logged in via the Console in PowerVS. Then run journalctl -xe, and then mount the ignition file and cat it out.

There are two ways to grab the ignition files for the workers in the cluster:

1. A downloaded ignition file stored (in data folder) using curl:

• curl -k http://api.demo.ocp-multiarch.xyz:22623/config/worker -o worker.ign -H "Accept: application/vnd.coreos.ignition+json;version=3.2.0"

2. Download the ignition file using the oc commandline

• oc extract -n openshift-machine-api secret/worker-user-data --keys=userData --to=-

I’m adding this because I use it every day, and others might find it helpful.