initial commit

black-start/dockge/docker-compose.yaml

@@ -0,0 +1,22 @@
+services:
+  dockge:
+    image: louislam/dockge:1
+    restart: unless-stopped
+    ports:
+      # Host Port : Container Port
+      - 5001:5001
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ./data:/app/data
+
+      # If you want to use private registries, you need to share the auth file with Dockge:
+      # - /root/.docker/:/root/.docker
+
+      # Stacks Directory
+      # ⚠️ READ IT CAREFULLY. If you did it wrong, your data could end up writing into a WRONG PATH.
+      # ⚠️ 1. FULL path only. No relative path (MUST)
+      # ⚠️ 2. Left Stacks Path === Right Stacks Path (MUST)
+      - /opt/stacks:/opt/stacks
+    environment:
+      # Tell Dockge where is your stacks directory
+      - DOCKGE_STACKS_DIR=/opt/stacks

black-start/services/image-cache/docker-compose.yaml

@@ -0,0 +1,37 @@
+name: image-cache
+services:
+    registry-docker:
+        ports:
+            - 6000:5000
+        environment:
+            - REGISTRY_PROXY_REMOTEURL=https://registry-1.docker.io
+        restart: always
+        image: registry:2
+    registry-k8s:
+        ports:
+            - 6001:5000
+        environment:
+            - REGISTRY_PROXY_REMOTEURL=https://registry.k8s.io
+        restart: always
+        image: registry:2
+    registry-gcr:
+        ports:
+            - 6002:5000
+        environment:
+            - REGISTRY_PROXY_REMOTEURL=https://gcr.io
+        restart: always
+        image: registry:2
+    registry-ghcr:
+        ports:
+            - 6003:5000
+        environment:
+            - REGISTRY_PROXY_REMOTEURL=https://ghcr.io
+        restart: always
+        image: registry:2
+    registry-talosfactory:
+        ports:
+            - 6004:5000
+        environment:
+            - REGISTRY_PROXY_REMOTEURL=https://factory.talos.dev
+        restart: always
+        image: registry:2

black-start/services/talos-discovery/docker-compose.yaml

@@ -0,0 +1,8 @@
+version: "3.8"
+services:
+  discovery:
+    restart: unless-stopped
+    image: ghcr.io/siderolabs/discovery-service:v1.0.5
+    ports:
+      - 10.105.6.215:3000:3000
+      - 10.105.6.215:3001:3001

config-patches/cluster/weyma-image-cache.yaml

@@ -0,0 +1,19 @@
+# Image repos for major dependencies are cached on local containers for black-start readiness
+machine:
+  registries:
+    mirrors:
+      docker.io:
+        endpoints:
+          - http://10.105.6.215:6000
+      gcr.io:
+        endpoints:
+          - http://10.105.6.215:6002
+      ghcr.io:
+        endpoints:
+          - http://10.105.6.215:6003
+      registry.k8s.io:
+        endpoints:
+          - http://10.105.6.215:6001
+      factory.talos.dev:
+        endpoints:
+          - http://10.105.6.215:6004

config-patches/cluster/weyma-internal-discovery.yaml

@@ -0,0 +1,9 @@
+# Internal Talos discovery server for black-start readiness
+cluster:
+    discovery:
+        enabled: true # Enable the cluster membership discovery feature.
+        # Configure registries used for cluster member discovery.
+        registries:
+            # Service registry is using an external service to push and pull information about cluster members.
+            service:
+                endpoint: http://10.105.6.215:3000 # External service endpoint.

config-patches/cluster/weyma-pod-svc-subnets.yaml

@@ -0,0 +1,7 @@
+# Since weyma's internal subnet conflicts with the default Talos service subnet, we're going to use the next available /12
+cluster:
+  network:
+    podSubnets:
+      - 10.244.0.0/16
+    serviceSubnets:
+      - 10.112.0.0/12

config-patches/machine/weyma-talos-testcp01/hostname.yaml

@@ -0,0 +1,3 @@
+machine:
+  network:
+    hostname: "weyma-talos-testcp01"