<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Blog on 5ok — sysadmin, devops, hosting</title><link>https://www.5ok.eu/blog/</link><description>Recent content in Blog on 5ok — sysadmin, devops, hosting</description><generator>Hugo</generator><language>en</language><lastBuildDate>Thu, 18 Jun 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://www.5ok.eu/blog/index.xml" rel="self" type="application/rss+xml"/><item><title>Why we moved to k3s</title><link>https://www.5ok.eu/blog/why-we-moved-to-k3s/</link><pubDate>Thu, 18 Jun 2026 00:00:00 +0000</pubDate><guid>https://www.5ok.eu/blog/why-we-moved-to-k3s/</guid><description>&lt;p&gt;Three years ago we set up full Kubernetes on a set of our own servers. It was the right call — at the time. We had a team that knew what it was doing and applications that benefited.&lt;/p&gt;
&lt;p&gt;Over time it became clear we were using a fraction of what Kubernetes offered. And maintaining the control plane itself started eating more time than running the applications on top of it.&lt;/p&gt;</description></item><item><title>Bare-metal to Proxmox with no downtime</title><link>https://www.5ok.eu/blog/bare-metal-to-proxmox-with-no-downtime/</link><pubDate>Mon, 11 May 2026 00:00:00 +0000</pubDate><guid>https://www.5ok.eu/blog/bare-metal-to-proxmox-with-no-downtime/</guid><description>&lt;p&gt;The client had four physical servers, one application each. A classic 2015–2018 setup: one server = one service, no virtualisation, no backups beyond &lt;code&gt;rsync&lt;/code&gt; to a NAS.&lt;/p&gt;
&lt;p&gt;The brief: get it onto Proxmox, gain snapshots and live migration, and &lt;strong&gt;keep downtime under a few minutes&lt;/strong&gt; per service.&lt;/p&gt;
&lt;h2 id="the-plan"&gt;The plan&lt;/h2&gt;
&lt;p&gt;The approach we use almost every time:&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;Build a new Proxmox cluster alongside (three nodes, Ceph pool).&lt;/li&gt;
&lt;li&gt;For each service create a VM and deploy from configuration management — &lt;strong&gt;not&lt;/strong&gt; by cloning the old disk.&lt;/li&gt;
&lt;li&gt;Run both instances in parallel, synchronise data one-way.&lt;/li&gt;
&lt;li&gt;Switch DNS / load balancer, watch, keep the old instance on standby for a week.&lt;/li&gt;
&lt;/ol&gt;
&lt;p&gt;Point 2 matters. Cloning a physical disk into a VM (P2V) is fast, but it carries ten years of sediment with it — old packages, manual &lt;code&gt;/etc&lt;/code&gt; edits nobody documented. If you have Ansible, rebuild instead.&lt;/p&gt;</description></item><item><title>systemd timers instead of cron</title><link>https://www.5ok.eu/blog/systemd-timers-instead-of-cron/</link><pubDate>Sat, 21 Mar 2026 00:00:00 +0000</pubDate><guid>https://www.5ok.eu/blog/systemd-timers-instead-of-cron/</guid><description>&lt;p&gt;Cron has one enormous advantage: everyone knows it. And one disadvantage: when it fails, you find out by email to &lt;code&gt;root@localhost&lt;/code&gt;, which nobody reads.&lt;/p&gt;
&lt;p&gt;systemd timers fix exactly that.&lt;/p&gt;
&lt;h2 id="the-basics"&gt;The basics&lt;/h2&gt;
&lt;p&gt;A timer is two files — &lt;code&gt;.service&lt;/code&gt; (what runs) and &lt;code&gt;.timer&lt;/code&gt; (when).&lt;/p&gt;
&lt;div class="highlight"&gt;&lt;pre tabindex="0" class="chroma"&gt;&lt;code class="language-ini" data-lang="ini"&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="c1"&gt;# /etc/systemd/system/backup.service&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="k"&gt;[Unit]&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="na"&gt;Description&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="s"&gt;Nightly backup&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="na"&gt;After&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="s"&gt;network-online.target&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="k"&gt;[Service]&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="na"&gt;Type&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="s"&gt;oneshot&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="na"&gt;ExecStart&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="s"&gt;/usr/local/bin/backup.sh&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;&lt;div class="highlight"&gt;&lt;pre tabindex="0" class="chroma"&gt;&lt;code class="language-ini" data-lang="ini"&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="c1"&gt;# /etc/systemd/system/backup.timer&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="k"&gt;[Unit]&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="na"&gt;Description&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="s"&gt;Run backup nightly&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="k"&gt;[Timer]&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="na"&gt;OnCalendar&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="s"&gt;*-*-* 02:30:00&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="na"&gt;RandomizedDelaySec&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="s"&gt;15m&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="na"&gt;Persistent&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="s"&gt;true&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="k"&gt;[Install]&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="na"&gt;WantedBy&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="s"&gt;timers.target&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;&lt;h2 id="what-cron-cant-do"&gt;What cron can&amp;rsquo;t do&lt;/h2&gt;
&lt;p&gt;&lt;strong&gt;&lt;code&gt;Persistent=true&lt;/code&gt;&lt;/strong&gt; — if the machine was off at the scheduled time, the job runs at next boot. Cron just skips it.&lt;/p&gt;</description></item></channel></rss>