Author Archives: Jethro Carr

Pipegate

The joys of home ownership never stop giving and I’ve been having some fun with my old nemesis of plumbing… A few weeks back we got a rather curt letter from Wellington Water/Wellington City Council (WCC) advising us that they … Continue reading

Tagged , , , , | Leave a comment

Welly

Been getting out and enjoying Wellington lately, it should be a great summer!

Tagged , , , , , | Leave a comment

My IAM policy is correct, but awscli isn’t working?

I ran into a weird issue recently where a single AWS EC2 instance was failing to work properly with it’s IAM role for EC2. Whilst the role allowed access to DescribeInstances action, awscli would repeatedly claim it didn’t have permission … Continue reading

Tagged , , , | Leave a comment

The Proprietary Renaissance

noun, re·nais·sance often attributive \ˌre-nə-ˈsän(t)s, -ˈzän(t)s, -ˈsäⁿs, -ˈzäⁿs, ˈre-nə-ˌ, chiefly British ri-ˈnā-sən(t)s\ : a situation or period of time when there is a new interest in something that has not been popular in a long time : a period of … Continue reading

Tagged , , , , , , , , , , , , , , , | 4 Comments

Your cloud pricing isn’t webscale

Thankfully in 2015 most (but not all) proprietary software providers have moved away from the archaic ideology of software being licensed by the CPU core – a concept that reflected the value and importance of systems back when you were buying … Continue reading

Tagged , , , , , , , , , , , , , , , | 2 Comments

Not all routing is equal

Ran into an interesting issue with my Routerboard CRS226-24G-2S+ “Cloud Router Switch” which is basically a smart layer 3 capable switch running Mikrotik’s RouterOS. Whilst it’s specs mean it’s intended for switching rather than routing, given it has the full … Continue reading

Tagged , , , , , | Leave a comment

More Puppet Stuff

I’ve been continuing to migrate to my new server setup and Puppetising along the way, the outcome is yet more Puppet modules: The puppetlabs-firewall module performs very poorly with large rulesets, to work around this with my geoip/rirs module, I’ve … Continue reading

Tagged , , , , , , , | 3 Comments

Finding & purging Puppet exported resources

Puppet exported resources is a pretty awesome feature – essentially it allows information from one node to be used on another to affect the resulting configuration. We use this for clever things like having nodes tell an Icinga/Nagios server what monitoring … Continue reading

Tagged , , , | 1 Comment

MacOS won’t build anything? Check xcode license

One of the annoyances of the MacOS platform is that whilst there’s a nice powerful UNIX underneath, there’s a rather dumb layer of top that does silly things like preventing the app store password being saved, or as I found … Continue reading

Tagged , , , | 2 Comments

Puppet modules

I’m in the middle of doing a migration of my personal server infrastructure from a 2006-era colocation server onto modern cloud hosting providers. As part of this migration, I’m rebuilding everything properly using Puppet (use it heavily at work so it’s … Continue reading

Tagged , , , , , , , , , , , , | 1 Comment