Guides for Specific Cases in Cozystack Deployment on Cozystack

How to install Talos on a single-disk machine

Mon, 01 Jan 0001 00:00:00 +0000

Default Talos setup assumes that each node has a primary and secondary disks, used for system and user storage, respectively. However, it’s possible to use a single disk, allocating space for user storage.

This configuration must be applied with the first talosctl apply or talm apply — the one with the -i (--insecure) flag. Applying changes after initialization will not have any effect.

For talosctl, append the following lines to patch.yaml:

---
apiVersion: v1alpha1
kind: VolumeConfig
name: EPHEMERAL
provisioning:
 minSize: 70GiB

---
apiVersion: v1alpha1
kind: UserVolumeConfig
name: data-storage
provisioning:
 diskSelector:
 match: disk.transport == 'nvme'
 minSize: 400GiB

For talm, append the same lines at end of the first node’s configuration file, such as nodes/node1.yaml.

Public-network Kubernetes deployment

Mon, 01 Jan 0001 00:00:00 +0000

A Kubernetes cluster for Cozystack can be deployed using only public networks:

Both management and worker nodes have public IP addresses.
Worker nodes connect to the management nodes over the public Internet, without a private internal network or VPN.

Such a setup is not recommended for production, but can be used for research and testing, when hosting limitations prevent provisioning a private network.

To enable this setup when deploying with talosctl, add the following data in the node configuration files:

How to configure network bonding (LACP)

Mon, 01 Jan 0001 00:00:00 +0000

Network bonding allows you to combine multiple physical network interfaces into a single logical interface. This provides increased bandwidth and link redundancy.

LACP (Link Aggregation Control Protocol, IEEE 802.3ad) is the most common bonding mode, which dynamically negotiates link aggregation with the network switch.

LACP requires configuration on both the server and the network switch. Make sure your switch has a corresponding LACP port-channel configured for the server’s ports.

Identify network interfaces

After running talm template, the generated node configuration file will contain a comment block with discovered network interfaces:

How to Enable KubeSpan

Mon, 01 Jan 0001 00:00:00 +0000

Talos Linux provides a full mesh WireGuard network for your cluster.

To enable this functionality, you need to configure KubeSpan and Cluster Discovery in your Talos Linux configuration:

machine:
 network:
 kubespan:
 enabled: true
cluster:
 discovery:
 enabled: true

Since KubeSpan encapsulates traffic into a WireGuard tunnel, Kube-OVN should also be configured with a lower MTU value.

To achieve this, add the following to the networking component of your Platform Package:

How to enable Hugepages

Mon, 01 Jan 0001 00:00:00 +0000

Enabling Hugepages for Cozystack can be done both on initial installation and at any time after it. Applying this configuration after installation will require a full node reboot.

Read more in the Linux Kernel documentation: HugeTLB Pages.

Using Talm

Requires Talm v0.16.0 or later.

Add the following lines to values.yaml:
```
...
certSANs: []
nr_hugepages: 3000
```
vm.nr_hugepages is the count of pages per 2Mi.
Apply the configuration:
```
talm apply -f nodes/node0.yaml
```
Finally, reboot the nodes: