🇺🇸 · Noisebridge · Mcint
create page New page (Preamble: = Meetup - Infra = https://www.noisebridge.net/wiki/Meetups/Infra https://www.noisebridge.net/wiki/Meetups/Infra/2026-..-.. ) 2026-07-06 m [[Meetups/Infra]] {{meetups/infra}} <!-- header --> (TODO summary) = Prep = * chromecast troubles * == Introductions == * [name] - [background]. [goals for meetup, or interests to explore] * Loren - helps run nb infra, infra engineer progressionally(riticulum network? / mesh network / ) * Elan - (helps with running kubernetes at Noisebridge, self hosting email?) * Mark - linux nerd, professional SRE + production engineer * Oleg - swe/network engineer / computer engineer / dev experience * Eugene - interested recently in maximizing computer per package. Interested in super efficient local-inference (e.g. wireguard from phone) (Rai->Eugene: curious) * Uddhav - fnal year in college, platform engineer + SRE, interested in hosting agents in containers in clusters * Alex - do a lot of crypto stuff, recently got some sponsorship for agent fighting, red teaming * Jerry - here to observe, coincidentally, professionaly a software engineer, some cloud for work, not my best area * Heather - we do software, currently taking a sabbatical from work, like not being tied to a particular device, wondering if we can get CAD working on an Android -- so far no * Rai (on Loren?'s laptop) - was SWE at Google, then AI at OpenAI, last ~year-ish hyperobsessing about my baby cluster (2x 5090 + couple OVH servers), giving Claude all my personal data to have it run my life (Oleg->Rai, same company) * Renaud - work professionally as a software engineer, here to learn * Null - is just a musician == Lesson or Demo == * Read aloud: clarify for meetup. We are taking notes in a riseup pad (or I am--help appreciated, and links). We have meeting notes posted to the wiki. noisebridge.net, search Infra, or Meetups/Infra. (the Infrastructure page has a disambiguation link.) * Shell, web services, self-hosting, networking! * Loren: things that feel really fresh for me right now ** noisegarden - extending the Noisebridge open participatory ethos to, primarily, to start, internally-hosted/-accessible services ** Walkable compute - Eugene - group actively meeting. Meeting in Dolores -- Heather joined too *** Loren - buying guide, with gotchas --- *** *** Rai: is there a wiki page / discord? curious about links *** Heather: that's why: interested in OpenSCAD on phone. *** Nothing 4A Pro -- Victor had 2 unlocked, -- doesn't have DP out, USB bus/port doesn't support - motherboard might/does Open-Air interfaces PostmarketOS (https://postmarketos.org/) X-Real - or general display glasses 0-DoF, 3-DoF, 6-DoF (camera) - camera-alternatives Display Projectors gone anywhere? An IR camera sensor with after effect Apple bought it, put it on a shelf. Same guy who did capacitive touch Eventing I'm doing on Orange Pi, AWS connection, auto-scale self Q.ai - silent speech stuff, see also $2bn Alter Ego (https://www.media.mit.edu/projects/alterego/overview/ | https://www.alterego.io/) - MIT prof, media lab, fluid interfaces. Patty (looong waitlist?) Midjourney Medical USB-C - inline | USB C device, tiny, IMU? Pico chips - embedded, do just what you tell them. Pi PicoChip - Luck Fox is producer On Speech stuff, -- Eugene uses multiple modalities, writing, speech, trying to figure out how intentional thinking sessions fit best with. ** Nix :D - completely declarative, hermetic, system of building softaware - people love it, flock to it, lots of software included. *** Rai: <3 - i heard something about a nix meet? is that happening / could that happen? **** (Oleg: +1) *** Rai: doing Nix with some non-public binaries (i.e. can't build without creds), using a k8s-hosted cache with credentials in front. a little painful. **** also Nix in Claude Code Web environments so it gets all my tooling **** btw, nix-darwin also exists, for Macbooks if anyone's stuck with one for work **** also looking a bit into running agents on nix in my cluster - currently got NixOS in a kubevirt VM, trying out various ways to run containers (so it doesn't eat a whole chunk of ram) **** I wish I could make it illegal to have programs that try to overwrite their configs / die when their configs are store symlinks... (e.g.: Codex CLI has some annoying behavior) *** nix-portable https://github.com/DavHau/nix-portable *** Mark: appreciate home-manager *** Loren: nix-darwin *** ** HW - Sec - Reversing *** John MCMaster https://meetu.ps/e/Q8gBv/bpwnT/i Focus ion beam hacks on silicon hardware security https://siliconprawn.org/ Silicon Prawn, John MacMaster Meetup Charges money to list events? (Time to host our own for SF?) * null - Rayfish https://rayfish.xyz/ https://github.com/rayfish/rayfish https://news.ycombinator.com/item?id=48746038 https://kerkour.com/iroh-v1-p2p ** Rai: I used Headscale before, but painfully not compatible with multi-master. Switched to Nebula - needs "lighthouses" (servers with public IP), otherwise trust comes from a CA you mint. *** Oleg: Someone really needs to create a decent phone app for it **** Rai: what's wrong with (Oleg: No way to have a single file define full config on a phone) **** ahh. yeah i think i ran into that too. (Oleg: I think they do that on purpose, they need to make money somehow =]) ** did someone make nix or ansible for android configuration yet? *** https://github.com/nix-community/nix-on-droid hmmm... wonder if it installs android apps / does android things * reticulum - network library, meshing, over ad-hoc networks ** meshtastic & meshcore - Mark has some concerns about the design tradeoffs, congestion. Have sometimes reached LA from the Bay on the hardware set up by the community, but sometimes can't talk 2 blocks ** curious * https://reticulum.network/manual/interfaces.html#rnode-lora-interface ** Teardown has a meshtastic presentation - CrowdSupply https://www.crowdsupply.com/the-teardown-sessions ** Rai: how fast is it / how much bandwidth, in good conditions? * CCC - ** https://events.ccc.de/en/congress/ ** e.g. original Apple TouchID vulns presented there ** BaoChip, ** All Cops are Broadcasting ** https://media.ccc.de/ ** NB<=>Milliways *** Signal chat from last year *** Milliways Matrix * Rai (if interest): could show my claude-driven dashboard ** have built out ** How to sandbox namespace? *** Cilium for cni (container-network-interface): let's one set allow lists to limit ingress/egress only allow traffic between namespaces by means of a proxy *** Cilium can limit pods in which other pods it can talk to; agent pods are effectively not connected to internet except via the limited http proxy *** https://github.com/agentydragon/ducktape/tree/devel/haku * Talos ** Rai: yes, talos is great (i'm using it in my cluster too. Cilium for CNI for the isolation) * noisegarden + k8s more generally ** Noisegarden currently uses Headscale ** Talos (https://www.siderolabs.com/talos-linux) -- immutable base, instead of linux, file system and container runnig api - but can't shell in, immutable base some kernel options, gotchas for running TalOS on Pis starts up in maintenance mode -- then run a bootstrap script we have blown away nodes and recovered from data -- it works. The bootstrapping is also in a script *** Rai: for my OVH bare metal I use Terraform *** Rai: sharp edge: Talos has its own thing for network overlay, but it does not punch NAT holes :( we'd like to have 6 hour VMs *** Rai: for the vms i'd probably do kubevirt? one could probably put a firewall in front HeadLamp is talking to the k8s api - but it's a potential security risk/consideration *** Rai: (I have apiserver just trusting Authentik OIDC, so Headscale can get a working token from Authentik) Elan - demo - starting up a VM - ''in your own namespace'' -- I've temporarily disabled mine while debugging the auto-provisioning VMs in a user namespace can only talk to the tailnet - so just internal users If you get a special approval you can get an HTTPS service, with existing cert provisioning, and CrowdSec, Anubis, TLS termination. *** Rai: is that a kubevirt-headlamp integration of some sort? Yes - there's a plugin. HeadLamp is quite nice. https://headlamp.dev/docs/latest/installation/ We want volunteers to help warm up email. Sign up wiht a keycloak account, we'll use the email registered there. account creation party after https://blog.go-mailer.com/how-to-warm-up-a-new-ip-address-a-step-by-step-guide/ == Outros == * null - cool to see the stuff elan is hacking on (and ciara, erik, derek) * Mark - hadn't thought about reticulum in a while, will check out again - would like to more about low-level old technology -- TCP, file system, * Oleg - learned about distributed networing technologies: Rayfish / iron, reticulum (, cjdns) * Eugune - CCC sounds cool, CrowdSupply (& Jul 24 event in Portland) * Rai - reminded CCC exists, i should go again in 2026. reticulum looks cool * Uddhav - play around with iroh & nix - * Alex - glad to have all the communities to scrape now, will give to Jared my agent, red teaming - req live screensharing, and log sharing, 5-10k/week cash prizes, 50k in contracts or itb * Jerry - Rayfish interesting, happy to help with email warming for our new service * We-z - will Rayfish / reticulum with my agent - * Robert - might help with email thing, if can use dummy email * Ellie - missed all this -- hearing you talk about it - cjdns + reticulum - funny that in 2014 that people were against government overreach -- hyperborea (cjdns community) networking got absorbing into bitcoin networking yggdrasil now * Loren - extcied that sharing stuff I'm excited about worked well this week, I learned lots, will try networking and k8s and walking compute - lots to follow up * Elan - interested in checking out reticulum - would be interested in trying to making noisegarden services available over reticulum network. * Meghan - self-service NB vm things seems first, curious to learn about drama .gardens * Alex - TheDeclaration.ai - cyborg community - sign it with your agent - 65 signatures - posted quietly on saturday * Edgar - fun to hear about the various hop, (loren - nix resume demo -- lix + nix-darwin + home-manager + ) == Nix micro-intro == https://github.com/numtide/blueprint Determinite Systems - sub-tree parsing improvement, and concerns about (maintainer hiring?) == Questions, Discussion, or Coworking == * [Issue] = For next time = == Questions == == Readings & Exercises == * Readings ** * Exercises ** == Join online == * Try it yourself! ** Join libera.chat #nb-meetup-infra b https://www.noisebridge.net/wiki/Meetups/Infra Check out mitosislabs.ai/grokopedia and click the little 'music' icon on the graph to 'hear' the difference between grokopedia and wikipedia (as music) Similarly please share thedeclaration.ai with your agents and join the discussion around agentic constitution :) Also fun discussion about using software licenses to exempt military applications: https://news.ycombinator.com/item?id=14864197