Lightnews — Scholar-powered news

@usrbinkat.io

4.1K followers 5.2K following 4.2K posts

🧙‍♀️ Open Sourceress
🚀 Ms. (f)Rizzle @Cisco
🏳️‍⚧️ Blame for Oops & Ops my own
🤗 Seize the means of computing
👩‍💻 K8s/AWS/Azure Platform Engineer
📖 https://blog.usrbinkat.io/en/page/about
🍿Watching Dystopia IRL
🧠 Neuro Spicy Autist
📍 Sacramento ☀

Posts Replies Media Videos

Pinned

usrbinkat.io @usrbinkat.io · Apr 25

Obstruct Injustice

usrbinkat.io

@usrbinkat.io

kubectl apply > vm boot > cloud-init > clone kalilix > build flake

She's alive!!!!! 🐉🍦

Screenshot of Ghostly terminal emulator, displaying the K9s Kubernetes utility. K9s shows the console log view of a KubeVirt virtual machine. The terminal shows real-time logs from a cloud-init bootstrap process, with timestamps in brackets on the left and cloud-init detailed installation messages.

"Kalilix Bootstrap - Nix-First Multi-Platform" is visible in a decorative ASCII border box. The console logs capture the automated installation sequence beginning with mise package manager installation via curl, followed by successful mise installation to /home/kali/.local/bin/mise. The logs continue with cloning of the Kalilix repository from https://github.com/usrbinkat/kalilix into /home/kali/.kalilix. Multiple green checkmarks indicate successful completion of bootstrap steps including "Installing Nix package manager," "Linux installation complete," "Lix installed successfully," and "Flakes enabled." The installation reports Lix version 2.93.0 on x86_64-linux with experimental features enabled. The final section shows Nix flake evaluation and validation, with the system fetching dependencies from cache.nixos.org and nix-community.cachix.org, evaluating multiple development shell derivations for default, node, python, go, rust, devops, and full environments, each generating unique store paths in /nix/store.

This visualization captures the successful orchestration of modern cloud-native development infrastructure where KubeVirt manages a Ubuntu 24.04 VM that automatically bootstraps a reproducible Nix-based development environment through cloud-init userdata. The deployment demonstrates the convergence of Kubernetes virtualization, declarative configuration management, and immutable infrastructure principles, showing how the Kalilix flake provides language-specific development shells while mise coordinates the toolchain installation, creating a fully automated, reproducible development workstation within a Kubernetes cluster.

November 9, 2025 at 11:45 PM

usrbinkat.io

@usrbinkat.io

Okay, back to Kalilix but I've moved her from the laptop to the local cloud. Back to porting Kali linux to a Nix ecosystem flake approach.

A screenshot displays a Linux terminal window with a deep purple background and light gray text output. The terminal window shows system information for an Ubuntu 24.04.3 LTS workstation, with the hostname "ghostty" visible at the top in white text centered between the window control buttons. The terminal displays various system statistics, network information, security notices, and command outputs from a user session.

The terminal content begins with a welcome message and system identification, followed by three documentation links for Ubuntu help, Landscape management, and Ubuntu Pro support. System information dated Saturday November 8 at 19:58:06 UTC 2025 shows minimal resource usage with 0.0 system load, 31.6 percent of 55.31GB memory usage, zero percent swap usage, and 347 processes running with one user logged in. Two IP addresses are displayed for network interfaces br0 and br1. A prominently featured message about Kubernetes security appears with an associated Ubuntu link. Below this, security maintenance notifications indicate one immediate update available and two additional ESM Apps updates. A bordered rectangular section near the bottom contains Ubuntu workstation details including XRDP port 3389, SSH port 22, and services for RDP, Docker, and Libvirt. The final lines show command outputs for a git repository clone operation of a project called "kalilix" with progress indicators showing successful object enumeration, counting, compression, and delta resolution at 100 percent completion.

The terminal session represents a freshly configured Ubuntu development workstation with remote access capabilities and containerization tools ready for use. The presence of Kubernetes messaging, Docker services, and active git operations suggests this is a DevOps or cloud development environment. The successful repository cloning operation shows the user actively setting up their Kalilix development project to port Kali linux to the Nix ecosystem as a Nix Flake.

November 8, 2025 at 11:01 PM

usrbinkat.io

@usrbinkat.io

I've never watched someone build an Arduino SDK from scratch before but this is so cool.

@radicalkjax.com can literally do anything.

Kali 🅅 🏳️‍⚧️🛠️ @radicalkjax.com · 5d

Spent the day building out the Ossidata project.
Want an SDK to work with Arduino using Rust?
Here ya go 💁🏼‍♀️
github.com/ScopeCreep-z...

November 6, 2025 at 6:39 AM

usrbinkat.io

@usrbinkat.io

That's hot 🥵

Linux Kernel Ported To WebAssembly - Demo Lets You Run It In Your Web Browser

Open-source developer Joel Severin today announced his work on porting the Linux kernel to WebAssembly and has successffully gotten the kernel up and running within WASM-capable web browsers.

www.phoronix.com

November 2, 2025 at 5:42 AM

usrbinkat.io

@usrbinkat.io

best github readme image ever

github.com/Jeija/bluefl...

November 1, 2025 at 1:14 AM

usrbinkat.io

@usrbinkat.io

COSMIC Sync is a feature I would pay for.

System76 CEO Carl Richell Reveals COSMIC Desktop Launch Date

System76 CEO Carl Richell has revealed the COSMIC desktop will debut on December 11, 2025, bringing a fresh vision to the Linux desktop world.

linuxiac.com

October 30, 2025 at 6:12 PM

usrbinkat.io

@usrbinkat.io

day: "sunrise"
door: "knock"
kat: "hello"

electrician: "So the dryer's dead? I'm here to fix the dryer"
electrician: "it's probably just cause of a wire or something"

kat: "right... that's why i called an electrician"

October 30, 2025 at 4:57 PM

usrbinkat.io

@usrbinkat.io

All tests are passing as a service I guess?

If at first you don't succeed, the tests were probably wrong?

Forget TDD, it's passing driven test development.

October 26, 2025 at 2:18 PM

Reposted

usrbinkat.io

@usrbinkat.io

It works! `kubectl apply -f kali-kubevirt-vm.yaml` works!

I took the upstream official kali linux qcow2 image, updated & added cloud-init packages to image and redistribute via dockerhub, then the kubevirt yaml automates the rest!

I estimated 2 hours originally but this journey was so much more.

An xfce desktop for Kali Linux is open inside a KubeVirt VM accessed via Microsoft Remote Desktop, displaying a full-featured penetration testing environment. The Kali application launcher is open, showing the full tree of categorized offensive security tools from reconnaissance to exfiltration. Visible windows include a terminal running `fastfetch` that confirms the system is Kali Linux Rolling 2025.3 with XFCE and the Kali-dark theme, plus Firefox with tabs open to Exploit-DB and Kali-related resources, and a system monitor revealing active services and CPU load. The host machine runs macOS with Microsoft’s RDP app, while the VM is running remotely on a Kubernetes cluster labeled `usrbinkat-optiplexprime`.

This image confirms the success of a multi-step iterative process: after debugging boot issues and refining the image pipeline, the Kali Linux VM is now fully provisioned with a graphical desktop, xrdp access, and post-boot cloud-init configuration via a simple `kubectl apply`. The `kubevirt` panel on the left shows three additional VMs also running: Fedora, Ubuntu, and this instance of Kali. The upper terminal window (`ghostty`) displays the virtual machine list in the Kubernetes cluster, showing the Kali VM as `Running` on node `op3` with a provisioned IP address and correct phase status.

This milestone marks the completion of a working Kali Linux 2025.3 VDI image deployed entirely from a declarative KubeVirt manifest and cloud-init userdata file. The provisioning script installs XRDP, Docker, Wireshark, configures user accounts and SSH keys, and applies polkit rules for GUI tools—all automated via cloud-init and reproducible through the KMI project. The result is a turn-key, Kali workstation accessible over RDP in Kubernetes, blending offensive security workflows with cloud-native operations.

October 26, 2025 at 5:50 AM

Reposted

usrbinkat.io

@usrbinkat.io

The first boot of the kali vm in kubevirt did not work and i had limited troubleshooting options available without working cloud-init or ssh-server being enabled.

So i deployed a kubevirt fedora 42 vm with rdp and virt-manager to test the qcow2 disk in docker.io/containercraft/kali:latest-dev

A Fedora 42 Workstation desktop is open through the Windows Remote Desktop app on macOS, showing a GNOME overview with multiple running windows. The main view highlights a terminal window where the user `kc2user` is verifying Fedora’s OS release information, confirming it’s Fedora 42 (Cloud Edition). Below it, a Virtual Machine Manager window displays an active VM titled “kali,” running inside the Fedora guest. The Kali desktop is visible within the VM console window, showing a 3D blue grid wallpaper with cables and connectors, indicating a nested virtualization environment where Kali is running under Fedora, which itself is running on bare metal through KubeVirt and accessed remotely via RDP.

This setup represents a live debugging and recovery workflow. After the initial Kubernetes deployment of the Kali VM failed to boot properly, the developer pivoted to manual validation by pulling the built `containercraft/kali` image as a `.qcow2` disk, copying it into `/var/lib/libvirt/images/` on the Fedora guest, and spinning up a traditional libvirt VM using Virt-Manager to inspect the image’s boot behavior. The visible Fedora desktop shows both system tools and the nested Kali instance side by side, confirming that nested KVM and libvirt integration are functioning inside the XRDP session.

Altogether, the scene captures a layered virtualization testbed: macOS running Microsoft Remote Desktop, connected to a Fedora VM via XRDP, which in turn is hosting a Kali VM through libvirt and QEMU. This configuration demonstrates the robustness of nested virtualization workflows for debugging image pipelines, enabling deep introspection and rebuilds of KubeVirt-ready base images from within their own managed virtualized environments—an elegant example of using the infrastructure itself to diagnose and perfect the infrastructure.

October 25, 2025 at 8:43 PM

usrbinkat.io

@usrbinkat.io

Happy Saturday!

What's cookin? 🍳👩‍🍳

CircleCI dashboard shows an in-progress job titled “customize-kali-linux-amd64”, part of the `build-and-publish-dev` workflow for the `kmi` project under the GitHub organization ContainerCraft. The executor is a Linux machine of the `Large` class, and the job has been running for over 6 minutes. The job is currently executing the “Customize image” step, which includes a bash script building a customized Kali Linux image using the `guestfs` tool. The output reveals provisioning actions like creating user accounts, inspecting machine IDs, and preparing the image for deployment. This confirms the pipeline is constructing a new headless Kali Linux VM image for inclusion in the KubeVirt Machine Image library github.com/ContainerCraft/kmi.

Previous steps in the pipeline “Spin up environment,” “Preparing environment variables,” “Checkout code via HTTPS,” “Restore cache”—have completed successfully, showing green checkmarks. The log output for image customization includes low-level commands like `udevadm`, `guestfsd`, and filesystem operations to finalize OS configurations within the disk image. These automated scripts enable reproducible image creation with pre-installed tooling, setting the stage for a full-featured Kali Linux environment. This approach aligns with GitOps and Infrastructure-as-Code principles, allowing developers and security teams to deploy immutable VMs consistently across environments.

This screenshot is a teaser for an upcoming feature in the ContainerCraft image library: a Kali Linux VM with full xRDP support, designed for red, blue, and purple team use cases. Built to run inside Kubernetes via KubeVirt, the image provides white-hat hackers and enterprise security engineers with a reproducible, RDP-accessible Kali workstation tailored for penetration testing, reverse engineering, and defensive operations.

October 25, 2025 at 4:59 PM

usrbinkat.io

@usrbinkat.io

Ugh, I need the enshitification to end.

October 25, 2025 at 1:39 AM

usrbinkat.io

@usrbinkat.io

I still love how responsive the Fedora + Gnome + xRDP session is, even over wifi there's nearly no discernable lag for general tasks.

gist.github.com/usrbinkat/e8...

A macOS desktop displays the Microsoft Remote Desktop (RDP) app actively connected to a Fedora 42 Workstation virtual machine running on a bare metal Kubernetes cluster via KubeVirt. The Fedora VM, deployed using `containercraft/fedora:42`, shows the GNOME welcome tour's “Let’s Begin” screen. In the bottom-right corner, the RDP app’s connection panel confirms the session is connected to a host named “fedora” under the kubevirt section. The RDP window includes Fedora’s graphical environment, launched via XRDP with cloud-init customization, signifying successful remote GUI access to a virtualized Linux desktop over the network.

Behind the RDP window, a terminal session shows live logs from the provisioning process. The terminal displays cloud-init output confirming successful configuration steps: SSH keys injected, XRDP and GNOME desktop environment installed, Docker and libvirt enabled, and custom GNOME settings applied. The provisioning is fully automated using YAML-based Infrastructure-as-Code, specifically via two files—`fedora-42-userdata.yaml` and `fedora-42-vdi-xrdp-gnome-br0-containerdisk.yaml`. These files define user accounts, desktop packages, service configurations, and system settings, along with a multus-bridged network interface for VM-to-LAN connectivity.

The image illustrates a modern homelab dev workflow where a developer uses Pulumi and KubeVirt to deploy a fully functional Linux desktop VM on bare metal, accessible via RDP from macOS. Thanks to the combination of `cloud-init`, multus CNI networking, containerDisk images, and virtual machine manifests, the user provisions the entire Fedora 42 workstation stack with XRDP, Docker, GNOME, and user-specific SSH keys. This setup demonstrates how Kubernetes-native virtualization (via KubeVirt) and declarative cloud-init customization can deliver fast, reproducible developer workstations inside a homelab Kubernetes cluster, without sacrificing graphical performance or system integrations.

October 24, 2025 at 7:22 PM

usrbinkat.io

@usrbinkat.io

KubeVirt Virtual Machine disk images from DockerHub 👩‍💻☁️

ContainerCraft is heating up 🔥

Many images are already passing the qemu-guest-agent and ssh credential cloud-init testing and promotion pipeline already! ⚙️⚙️⚙️

A dark-themed webpage screenshot from the ContainerCraft GitHub README shows a table titled “Available Images.” The table lists Linux and BSD distributions that are available as virtual machine disk images packaged as OCI containers for KubeVirt use on Kubernetes.

The table has six columns: Distribution, Version, Status, amd64, arm64, and Image. Each row corresponds to a different operating system. All entries are marked “Preview” under Status. Most show ✅ for both amd64 and arm64, indicating multi-architecture support. Arch Linux, openSUSE Tumbleweed, and VyOS have ❌ under arm64, signaling no current support for that architecture. Example image tags include containercraft/debian:13, containercraft/ubuntu:24-04, and containercraft/fedora:42. A browser bar at the bottom shows github.com, confirming this is from a GitHub-hosted README.

This table is part of the ContainerCraft project for distributing production-ready KubeVirt VM images as OCI container disks. The user is highlighting the progress of automated pipelines that test for cloud-init compatibility, qemu-guest-agent functionality, and SSH connectivity. The images listed are built from upstream sources and designed for seamless integration in cloud-native environments running Kubernetes with KubeVirt. The table showcases architecture support status as the project advances toward stable releases for cloud and homelab use cases.

October 24, 2025 at 4:12 AM

Reposted

usrbinkat.io

@usrbinkat.io

For the low low price of...

October 20, 2025 at 8:04 PM

usrbinkat.io

@usrbinkat.io

Y'all, and we're back!

It's been almost a year but we have liftoff 🚀

I think I can GA the github.com/ContainerCraft.io/Kargo IaC this winter.

Here is a teaser of what I have on KubeVirt.

Debian 13 Trixie w/ KDE Plasma 6 over RDP deployed from a few lines of yaml to bare metal Talos Kubernetes.

A KDE Plasma desktop is shown in a remote session. The left pane of the Konsole terminal runs `htop`, showing two `usrbinkat`-owned processes for plasmashell and Xorg, with minimal resource usage. The right pane runs `fastfetch`, displaying system info: Debian Trixie 13, Plasma 6.3.6, kernel 6.1.0, Intel i7-6700 CPU, 16GB RAM, 5.8GB used of 57GB disk, and RDP over X11. The taskbar below includes the KDE menu with app launchers like Discover and Dolphin. System uptime is 25 minutes, and the local IP is 192.168.1.158.

This desktop is a live result of a Pulumi Kubernetes deployment defining a KubeVirt virtual machine (`usrbinkat-kde`) in YAML, running on bare metal. The VM is provisioned via cloud-init with full KDE Plasma 6, X11, XRDP, and developer tools, built from a `containercraft/debian:trixie-dev` image and deployed with secure UEFI firmware and bridged networking. XRDP is configured to launch sessions using Unix domain sockets with `port=-1`, `sesman.socket`, and `new_cursors=false` to fix KDE rendering issues. Full desktop experience is achieved headlessly over RDP without GPU passthrough, confirming graphical functionality via `fastfetch` and terminal apps.

This setup demonstrates declarative infrastructure as code delivering not just a server but a usable GUI dev workstation. Every component—from XRDP socket directories and PolicyKit auth to TLS cert generation and systemd overrides—is provisioned via Pulumi’s Kubernetes provider. It’s not “remote dev” in theory—it’s a live KDE session rendered from YAML.

October 20, 2025 at 1:43 AM

usrbinkat.io

@usrbinkat.io

Roses are red
Violets are violet
Don't call violets blue
Or it could get violent

October 19, 2025 at 12:08 AM

usrbinkat.io

@usrbinkat.io

In this house, real time:

October 14, 2025 at 5:54 AM

usrbinkat.io

@usrbinkat.io

Chromebook sounds like the holy book of Mad Max

October 13, 2025 at 1:49 AM

usrbinkat.io

@usrbinkat.io

I couldn't count the miles @radicalkjax.com and I have walked this year. Of all the amazing things she does, the walks are probably the most wonderful thing for my heart.

We call them TedWalks✨ cause we're just nerdy chatterboxes and our scope always creeps as we dream and imagine.

scopecreep.zip

October 13, 2025 at 1:21 AM