multus-secondary-net
Multus CNI for secondary pod interfaces (macvlan NADs on LAN), when to use vs ClusterIP/LB VIP, static-IP footguns.
Skill by giovannirco
Chalk Labs
Need help deploying multus-secondary-net?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/giovannirco-multus-secondary-net
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/multus-secondary-net
What's inside
- Skill name
multus-secondary-net- Description
- Multus CNI for secondary pod interfaces (macvlan NADs on LAN), when to use vs ClusterIP/LB VIP, static-IP footguns. Triggers: /multus, macvlan, NetworkAttachmentDefinition, secondary NIC, extra interface.
- License
- MIT
- Instructions
- 47 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
SKILL.md (first lines)
# Multus secondary networking ## When to use Multus | Need | Multus? | |------|---------| | Normal app traffic | No — ClusterIP / Gateway | | Stable LAN VIP for a Service | No — Cilium LB-IPAM | | Pod must own a **LAN IP on a second NIC** (DNS, special L2) | **Yes** | | GPU host NIC egress | Sometimes | Day-1 labs can **skip Multus** entirely. ## Pattern 1. Install Multus DaemonSet (GitOps chart). 2. Create `NetworkAttachmentDefinition` (often macvlan bridge on host NIC). 3. Annotate pod: `k8s.v1.cni.cncf.io/networks: <nad>`. ## NAD roles (examples) - general macvlan for experimental pods - DNS-oriented NAD for static addressing - GPU NIC NAD Exact `master` interface names differ per node — discover live. ## Footguns 1. Static IP collision → Multus flaps interfaces; pod stuck Init 2. Policy-routing initContainers fighting host routes 3. In-cluster DNS on Multus often more fragile than a **DNS VM outside k8s** 4. Dual Multus installs — keep **one** ## Verify ```bash kubectl get network-attachment-definitions -A kubectl get pods -n kube-system | grep -i multus kubectl describe pod <pod> | grep -i network ``` ## Related `docs/platform/networking-decisions.md` · `skills/cilium-networking/`
From giovannirco/agentic-homelab, MIT.
More from giovannirco/agentic-homelab
- 0.587score
long-session-goal
giovannirco
Keep a multi-hour agent session on track across context loss: a goal file with a checkable end, a resume routine, a checkpoint routine, a "waiting for the…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
local-ai-gpu-node
giovannirco
Run and measure local AI on a Talos GPU worker: storage off the node disk, one GPU app at a time, thermal profile per card, power limits from a privileged…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
omni-netboot
giovannirco
Self-hosted Omni with netboot enrolment: identity rules (domain, account ID, fixed IP), enrolment images, cluster templates in git, lab clusters on VMs, the…
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
talos-upgrade
giovannirco
Sequential Talos + Kubernetes upgrades: compatibility gates, one minor at a time, CNI bootstrap caution, verify steps.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
cilium-networking
giovannirco
Cilium as cluster CNI with kube-proxy replacement, Cilium LB-IPAM + L2 Announcement for Service type LoadBalancer (not MetalLB), Gateway notes.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
home-network-controllers
giovannirco
UniFi, MikroTik, or Omada for lab networking: VLANs, DHCP DNS, DNS redirect footguns, reserve infra IPs, free LB pool.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
lab-bootstrap
giovannirco
Bootstrap an agentic homelab: Proxmox, agent VM, Talos, Cilium, Argo CD, Cloudflare Tunnel, Technitium split-DNS, external-dns, agent GH App + kube access…
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
observability
giovannirco
Choose observability tier by hardware: Grafana Cloud Free + Alloy (light), self-hosted Grafana+Prometheus+Loki single, or full LGTM (Mimir/Loki/Tempo RF=1+).
SkillAFreshness: A★ 1Claude Code +9 - 0.544score
cloudflare-tunnel
giovannirco
Expose lab apps via Cloudflare Tunnel without opening home WAN ports; token hygiene; 301 loop footguns.
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
hermes-agent
giovannirco
Hermes Agent on Proxmox VM (multi-profile fleet) or Kubernetes (tenant GitOps): SOUL/skills, GitHub App, MCP (including WAHA), dashboard, s6 entrypoint…
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
technitium-split-dns
giovannirco
Bootstrap and operate Technitium for LAN split-horizon DNS: primary zones, forwarders, optional catalog secondary, client DHCP/DNAT, diagnose public CF vs…
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
explain-as-you-go
giovannirco
Narrate why before how on ops channels; link issues; keep scope tight.
SkillBFreshness: B★ 1Claude Code +9
Signals
- Stars
- 1
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Aug 3, 2026 (2 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- Repository
- github.com/giovannirco/agentic-homelab
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from giovannirco
- 0.587score
local-ai-gpu-node
giovannirco
Run and measure local AI on a Talos GPU worker: storage off the node disk, one GPU app at a time, thermal profile per card, power limits from a privileged…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
long-session-goal
giovannirco
Keep a multi-hour agent session on track across context loss: a goal file with a checkable end, a resume routine, a checkpoint routine, a "waiting for the…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
omni-netboot
giovannirco
Self-hosted Omni with netboot enrolment: identity rules (domain, account ID, fixed IP), enrolment images, cluster templates in git, lab clusters on VMs, the…
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
home-network-controllers
giovannirco
UniFi, MikroTik, or Omada for lab networking: VLANs, DHCP DNS, DNS redirect footguns, reserve infra IPs, free LB pool.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
cilium-networking
giovannirco
Cilium as cluster CNI with kube-proxy replacement, Cilium LB-IPAM + L2 Announcement for Service type LoadBalancer (not MetalLB), Gateway notes.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
talos-upgrade
giovannirco
Sequential Talos + Kubernetes upgrades: compatibility gates, one minor at a time, CNI bootstrap caution, verify steps.
SkillAFreshness: A★ 1Claude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get multus-secondary-net running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
multus-secondary-net skill. Agent Mart. https://agentmart.dev/skills/giovannirco-multus-secondary-net (last updated 2026-10-24)