I keep my ssh keys locked with passwords in a KeePassXC, that are in turn locked with a YubiKey with fingerprint as a 2FA – pretty decent, I’d say 🙂 Once KeePassXC is unlocked, it automatically feeds all the keys to the ssh-agent. That means that when you try to use ssh-agent (and you most probably want to) to connect …

MinIO works apparently properly, the mc tool lists everything well, but WebGUI shows no objects in the buckets, having the “Loading” bar just spinning at the bottom? The WebScokets proxying is probably not properly set in the upstream NginXs! This works, though: for console: and for data:

Istio would not inject the side-car into a namespace labeled for the injection, for example: a redeployment would fail when forced: the istio-init would fail, as seen in the logs of the pod: with a really sparse Error output: Fortunately, the very container info is a bit more verbose: So, an IPTables-related issue, after all? Yes, RockyLinux, used for this …