diff --git a/.github/workflows/flux-diff.yaml b/.github/workflows/flux-diff.yaml
index 519b71664013b..8d504a573cc9c 100644
--- a/.github/workflows/flux-diff.yaml
+++ b/.github/workflows/flux-diff.yaml
@@ -5,7 +5,10 @@ name: "Flux Diff"
on:
pull_request:
branches: ["main"]
- paths: ["kubernetes/**"]
+ paths:
+ - kubernetes/main/apps/**
+ - kubernetes/main/flux/**
+ - kubernetes/shared/**
concurrency:
group: ${{ github.workflow }}-${{ github.event.number || github.ref }}
diff --git a/.github/workflows/helm-repository-sync.yaml b/.github/workflows/helm-repository-sync.yaml
index d32ec49e5807d..3c23d1211478e 100644
--- a/.github/workflows/helm-repository-sync.yaml
+++ b/.github/workflows/helm-repository-sync.yaml
@@ -63,7 +63,7 @@ jobs:
for r in "${repos[@]}"; do
IFS=':' read -r repo_namespace repo_name <<< "${r}"
flux --namespace ${repo_namespace} \
- reconcile source helm ${repo_name}
+ reconcile source helm ${repo_name} || true
done
- if: ${{ github.event.inputs.helmRepoNamespace != '' && github.event.inputs.helmRepoName != '' }}
@@ -71,4 +71,4 @@ jobs:
shell: bash
run: |
flux --namespace ${{ github.event.inputs.helmRepoNamespace }} \
- reconcile source helm ${{ github.event.inputs.helmRepoName }}
+ reconcile source helm ${{ github.event.inputs.helmRepoName }} || true
diff --git a/.github/workflows/pre-pull-images.yaml b/.github/workflows/pre-pull-images.yaml
index ddcdd49bcce7d..c89f2a851ee26 100644
--- a/.github/workflows/pre-pull-images.yaml
+++ b/.github/workflows/pre-pull-images.yaml
@@ -5,7 +5,10 @@ name: "Pre-pull Images"
on:
pull_request:
branches: ["main"]
- paths: ["kubernetes/**"]
+ paths:
+ - kubernetes/main/apps/**
+ - kubernetes/main/flux/**
+ - kubernetes/shared/**
concurrency:
group: ${{ github.workflow }}-${{ github.event.number || github.ref }}
diff --git a/README.md b/README.md
index f72bc14f3ad8f..b63f2e095625d 100644
--- a/README.md
+++ b/README.md
@@ -162,7 +162,13 @@ In my cluster there are two instances of [ExternalDNS](https://github.com/kubern
-[![Star History Chart](https://api.star-history.com/svg?repos=onedr0p/home-ops&type=Date)](https://star-history.com/#onedr0p/home-ops&Date)
+
+
+
diff --git a/kubernetes/main/apps/default/cross-seed/app/helmrelease.yaml b/kubernetes/main/apps/default/cross-seed/app/helmrelease.yaml
index 3499ed0d9cb38..578fd9c5a75c6 100644
--- a/kubernetes/main/apps/default/cross-seed/app/helmrelease.yaml
+++ b/kubernetes/main/apps/default/cross-seed/app/helmrelease.yaml
@@ -34,7 +34,7 @@ spec:
app:
image:
repository: ghcr.io/cross-seed/cross-seed
- tag: 6.5.2@sha256:d0a9e80d026e37806960ac3551e97b7cf75ae16470dbbf1df217a7aec86cf9c5
+ tag: 6.6.0@sha256:9c67a3dc12beb8c4699094fbc4cc2888ebd071712a99ff252dc28d5706fcee0a
env:
CROSS_SEED_PORT: &port 80
TZ: America/New_York
diff --git a/kubernetes/main/talos/192.168.42.10.sops.yaml.j2 b/kubernetes/main/talos/192.168.42.10.sops.yaml.j2
index 1445c8a9295b3..6fece96b00695 100644
--- a/kubernetes/main/talos/192.168.42.10.sops.yaml.j2
+++ b/kubernetes/main/talos/192.168.42.10.sops.yaml.j2
@@ -37,15 +37,16 @@ machine:
diskSelector:
model: Samsung SSD 870
extraKernelArgs:
- - i915.enable_guc=3 # Meteor Lake CPU
- - apparmor=0 # Less security, faster puter
- - init_on_alloc=0 # Less security, faster puter
- - init_on_free=0 # Less security, faster puter
- - intel_iommu=on # PCI Passthrough
- - iommu=pt # PCI Passthrough
- - mitigations=off # Less security, faster puter
- - module_blacklist=igc # Disable onboard NIC
- - security=none # Less security, faster puter
+ - i915.enable_guc=3 # Meteor Lake CPU / iGPU
+ - apparmor=0 # Less security, faster puter
+ - init_on_alloc=0 # Less security, faster puter
+ - init_on_free=0 # Less security, faster puter
+ - intel_iommu=on # PCI Passthrough
+ - iommu=pt # PCI Passthrough
+ - mitigations=off # Less security, faster puter
+ - module_blacklist=igc # Disable onboard NIC
+ - security=none # Less security, faster puter
+ - sysctl.kernel.kexec_load_disabled=1 # Meteor Lake CPU / iGPU
# i915-ucode, intel-ucode, mei, thunderbolt
image: factory.talos.dev/installer/de3b865124c5616da8084826167f8c0b0fbc9b905b146290db797024e84097fc:{{ ENV.TALOS_VERSION }}
wipe: false
diff --git a/kubernetes/main/talos/192.168.42.11.sops.yaml.j2 b/kubernetes/main/talos/192.168.42.11.sops.yaml.j2
index a1d5911c64f82..2f8e122261ac8 100644
--- a/kubernetes/main/talos/192.168.42.11.sops.yaml.j2
+++ b/kubernetes/main/talos/192.168.42.11.sops.yaml.j2
@@ -37,15 +37,16 @@ machine:
diskSelector:
model: Samsung SSD 870
extraKernelArgs:
- - i915.enable_guc=3 # Meteor Lake CPU
- - apparmor=0 # Less security, faster puter
- - init_on_alloc=0 # Less security, faster puter
- - init_on_free=0 # Less security, faster puter
- - intel_iommu=on # PCI Passthrough
- - iommu=pt # PCI Passthrough
- - mitigations=off # Less security, faster puter
- - module_blacklist=igc # Disable onboard NIC
- - security=none # Less security, faster puter
+ - i915.enable_guc=3 # Meteor Lake CPU / iGPU
+ - apparmor=0 # Less security, faster puter
+ - init_on_alloc=0 # Less security, faster puter
+ - init_on_free=0 # Less security, faster puter
+ - intel_iommu=on # PCI Passthrough
+ - iommu=pt # PCI Passthrough
+ - mitigations=off # Less security, faster puter
+ - module_blacklist=igc # Disable onboard NIC
+ - security=none # Less security, faster puter
+ - sysctl.kernel.kexec_load_disabled=1 # Meteor Lake CPU / iGPU
# i915-ucode, intel-ucode, mei, thunderbolt
image: factory.talos.dev/installer/de3b865124c5616da8084826167f8c0b0fbc9b905b146290db797024e84097fc:{{ ENV.TALOS_VERSION }}
wipe: false
diff --git a/kubernetes/main/talos/192.168.42.12.sops.yaml.j2 b/kubernetes/main/talos/192.168.42.12.sops.yaml.j2
index 6738b65d77b56..3f6ecda88ae5f 100644
--- a/kubernetes/main/talos/192.168.42.12.sops.yaml.j2
+++ b/kubernetes/main/talos/192.168.42.12.sops.yaml.j2
@@ -37,15 +37,16 @@ machine:
diskSelector:
model: Samsung SSD 870
extraKernelArgs:
- - i915.enable_guc=3 # Meteor Lake CPU
- - apparmor=0 # Less security, faster puter
- - init_on_alloc=0 # Less security, faster puter
- - init_on_free=0 # Less security, faster puter
- - intel_iommu=on # PCI Passthrough
- - iommu=pt # PCI Passthrough
- - mitigations=off # Less security, faster puter
- - module_blacklist=igc # Disable onboard NIC
- - security=none # Less security, faster puter
+ - i915.enable_guc=3 # Meteor Lake CPU / iGPU
+ - apparmor=0 # Less security, faster puter
+ - init_on_alloc=0 # Less security, faster puter
+ - init_on_free=0 # Less security, faster puter
+ - intel_iommu=on # PCI Passthrough
+ - iommu=pt # PCI Passthrough
+ - mitigations=off # Less security, faster puter
+ - module_blacklist=igc # Disable onboard NIC
+ - security=none # Less security, faster puter
+ - sysctl.kernel.kexec_load_disabled=1 # Meteor Lake CPU / iGPU
# i915-ucode, intel-ucode, mei, thunderbolt
image: factory.talos.dev/installer/de3b865124c5616da8084826167f8c0b0fbc9b905b146290db797024e84097fc:{{ ENV.TALOS_VERSION }}
wipe: false