Tag: #air-gap
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 11 posts
11 posts are tagged #air-gap; the most recent was published on 2026-08-14.
Often tagged together: #linux 7 #rhel 7 #dnf 5 #package-management 5 #kubernetes 4
Most read in the last 90 days:
- Bringing Container Images into an Air-Gapped Network — podman save and skopeo Are Different Tools
- The Complete Guide to Installing k3s in an Air-Gapped Network — From Image Tarball Transfer to a Private Registry and Agent Joins
- Air-Gapped Kubernetes Day 2 Operations — How to Stop a Cluster From Dying of Certificate Expiry
Why Installing RHEL Packages in an Air-Gapped Network Is Genuinely Hard — Dependencies Are a Graph, and You Cannot Solve It from the Inside
Explains from first principles why bringing RHEL packages into a locked-down network for finance, government, or defense never ends at "just copy one rpm file". It covers the fact that RPM dependencies are a symbol-level
2026-08-14 · 8 min read #linux#rhel#air-gap#dnf#rpmModules and Version Pinning in an Air-Gapped Network — RHEL 8, 9, and 10 Tell Different Stories
Separates out, against the official documentation, exactly where RHEL 8 modularity goes wrong in an air-gapped network and how that story changes in RHEL 9 and RHEL 10. The key point is that in a local repository built b
2026-08-14 · 10 min read #linux#rhel#air-gap#dnf#modularityBuilding a Local Repository Inside an Air-Gapped Network — createrepo_c, repodata, .repo Files, and GPG Keys
Covers the whole process of turning a transferred bundle of rpms into a working dnf repository inside an air-gapped network. It walks through the structure of the repodata directory that createrepoc produces and the role
2026-08-14 · 10 min read #linux#rhel#air-gap#dnf#createrepoThe Air-Gapped Operations Playbook — Keeping Up with Security Patches, Rolling Back, and Managing CVE Lag
The story that begins after the transfer procedure is finished — the operations chapter, about running an air-gapped network for years. It first makes clear that slow CVE response inside an air-gapped network is not team
2026-08-14 · 13 min read #linux#rhel#air-gap#dnf#securityBringing Container Images into an Air-Gapped Network — podman save and skopeo Are Different Tools
Once the RPM transfer procedure has settled into place, the next request is almost always container images. It starts by separating podman save from the skopeo copy family — one goes through the local image store, the ot
2026-08-14 · 12 min read #linux#rhel#air-gap#podman#skopeoAir-Gap Transfer Procedure and Integrity — Building a Bundle That Still Installs the Same Way Six Months Later
Covers what to put on the transfer medium, what to verify, and how to make that bundle produce the same result when you open it again six months later. It starts with why signature verification matters more in an air-gap
2026-08-14 · 8 min read #linux#rhel#air-gap#rpm#gpgDownloading on the Outside for an Air-Gapped Transfer — dnf download, reposync, and yumdownloader Solve Different Problems
A command-by-command walkthrough of the real procedure for pulling RHEL packages, dependencies and all, on an internet-connected machine so the result can be carried into an air-gapped network. It covers exactly what --r
2026-08-14 · 10 min read #linux#rhel#air-gap#dnf#rpmk0s Air-Gapped Install and k0sctl Automation — From Building the Image Bundle to Multi-Node Upgrades
This post lays out, command by command, how to stand up and operate a k0s cluster in an air-gapped network with no internet path. It covers three ways to build an image bundle with k0s airgap list-images and bundle-artif
2026-07-31 · 15 min read #kubernetes#k0s#k0sctl#air-gap#on-premiseThe Complete Guide to Installing k3s in an Air-Gapped Network — From Image Tarball Transfer to a Private Registry and Agent Joins ♪ Listenable
Covers the whole process of standing up a k3s cluster on a network with no internet path at all, command by command. It walks through downloading the airgap image tarball and the k3s binary on a connected machine, buildi
2026-07-31 · 20 min read #kubernetes#k3s#air-gap#on-premise#containerdAir-Gapped Kubernetes Day 2 Operations — How to Stop a Cluster From Dying of Certificate Expiry ♪ Listenable
What actually kills an air-gapped cluster is usually not some spectacular outage but certificate expiry. Let a year go by with nobody touching it and the API server quietly stops, and with no internet you cannot search y
2026-07-31 · 20 min read #kubernetes#air-gap#day2-operations#etcd#certificateDesigning an Air-Gapped Image Import Pipeline — skopeo, Harbor, and a Reimport Runbook That Doesn't Rot
This post designs the pipeline for a problem almost nobody in air-gapped Kubernetes actually gets right: repeatedly and safely bringing container images in. It covers managing the import list as code, the skopeo sync com
2026-07-31 · 17 min read #kubernetes#air-gap#harbor#skopeo#supply-chain