WilliamLam.com

Packer reference for VMware Harbor Virtual Appliance

by // Leave a Comment

I recently had a need to setup a container registry for a project that I was working on and Harbor was of course my default choice. Although Harbor is pretty easy to setup, I did not want to manually go through the installation each time I needed Harbor and I figured it was time to build my own Harbor Virtual Appliance (OVA), just like I have shown in the past with these reference implementations here and here.

For those interested, you can find the reference implementation for building a Harbor Virtual Appliance at https://github.com/lamw/harbor-appliance

Note: For internal VMware Employees, if you prefer not to build the appliance yourself, drop me an email or DM and I can provide you with the link to the Harbor Appliance OVA.

When deploying the Harbor Appliance, you will find the basic OVF properties that I have encoded including networking, credentials, debugging and advanced settings. Hopefully should be pretty straight forward for anyone who has deployed an OVA before to vSphere.

[Read more...]

Passthrough of Intel Iris Xe Integrated GPU on 11th Gen NUC results in Error Code 43

by // 7 Comments

I recently ran into an issue after enabling ESXi passthrough of the new Intel Iris Xe Integrated GPU (iGPU), which is available with the latest Intel 11th Gen Pro (Tiger Canyon) NUC and SimplyNUC Topaz. After installing the latest Intel Graphics Driver and rebooting the Microsoft Windows 10 (20H2) VM, I noticed Microsoft Device Manager would show the iGPU device with the following error message:

Windows has stopped this device because it has reported problems. (Code 43)


Unfortunately, this generic error message was not very useful in identifying the underlying issue. I was hoping the process was going to be seamless like it was for enabling passthrough of the iGPU in Intel NUC 10 (Frost Canyon) NUC, especially with the higher execution units for the 11the Gen NUC i3 (48 EU), i5 (80 EU) and i7 (96 EU).

I currently have a case open with the Intel NUC team and see if they can help investigate the underlying issue for their driver. For the time being, it looks like passthrough of the new iGPU is not fully functional when using ESXi 7.0 Update 2 and I will update this blog post if/when I have further updates to share.

Quick Tip - vSphere Permission to view vSphere with Tanzu Namespaces

by // 4 Comments

If you wish to create a custom vSphere Role that has the ability to view vSphere Namespaces which is part of vSphere with Tanzu, you will need to add the user to the following vSphere Single Sign-On Group: ServiceProviderUsers, which is located under Single Sign On->Users and Groups->Groups (2nd page) within the vSphere UI.


Once added, you can logout and log back in and the user should now see the vSphere Namespaces as shown in the screenshot below. In my example, I have a user named william which is created in the default vsphere.local domain and has been assigned the user the vSphere Read Only role along with this additional SSO group. They will be able to view all resources but will not have permission to make any changes to the infrastructure. If you are using Active Directory, the exact same process works and just make sure you log out and log back in for the changes to take effect.