diff options
Diffstat (limited to 'prompts/skills/f3s/references/storage.md')
| -rw-r--r-- | prompts/skills/f3s/references/storage.md | 29 |
1 files changed, 0 insertions, 29 deletions
diff --git a/prompts/skills/f3s/references/storage.md b/prompts/skills/f3s/references/storage.md deleted file mode 100644 index d6c31b0..0000000 --- a/prompts/skills/f3s/references/storage.md +++ /dev/null @@ -1,29 +0,0 @@ -# Storage - -Persistent storage for k3s is served via **NFS over stunnel** from the FreeBSD hosts, backed by **ZFS** (`zdata` pool) with **CARP** for high availability and **zrepl** for continuous replication. - -Note: original plan was HAST, replaced by **zrepl** (ZFS send/receive) — more reliable, avoids the ZFS corruption during failover that HAST caused. - -## Sub-references - -- [ZFS Pools & Encryption](storage/zfs.md) — `zdata` pool, physical disks, USB-stored keys mounted by `f3skeys` (not `/etc/fstab`), encrypted datasets, boot-time key loading -- [USB Key Mounting](storage/usb-keys.md) — `f3skeys`, `/usr/local/sbin/f3s-mount-keys`, and current `zfskeys_datasets` per f-host -- [zrepl Replication](storage/zrepl.md) — `f0 → f1` nfsdata, `f3 → f2` freebsd VM, sink configs, troubleshooting, DL-state recovery -- [CARP HA VIP](storage/carp.md) — VIP `192.168.1.138`, `carpcontrol.sh`, mgmt script, auto-failback, SUSPENDED-pool limitation -- [NFS over stunnel](storage/nfs.md) — NFS server, mutual-TLS stunnel, Rocky client config, `/etc/fstab` -- [nfs-mount-monitor](storage/nfs-mount-monitor.md) — systemd watchdog on r-nodes (mount/stat/write probes, fail counter, cordon-and-reboot escalation) -- [Troubleshooting](storage/troubleshooting.md) — NFS issues, ZFS pool SUSPENDED recovery, **thermal** troubleshooting (Beelink S12 Pro) -- [Backups & Local-Path](storage/backups.md) — S3 Glacier Deep Archive, when to use `local-path` instead of NFS - -## Storage Summary - -| Layer | Technology | Role | -|-------|-----------|------| -| Block | M.2+2.5" SSD (f0/f1) | Physical storage | -| Filesystem | ZFS (`zdata/enc`) | Data integrity, AES-256-GCM encryption | -| Replication | `zrepl` | Continuous ZFS replication f0→f1 (1min NFS, 10min VM) | -| HA | CARP VIP 192.168.1.138 | Automatic failover for NFS/stunnel | -| Network | NFS over stunnel | Encrypted shared storage, mutual TLS auth | -| Local-path | k3s local-path provisioner | Node-local storage for SQLite/cache workloads | -| LAN access | FreeBSD relayd on CARP VIP | TCP forwarding to k3s :80/:443 | -| Backup | S3 Glacier Deep Archive | Off-site encrypted backup | |