I can break one container without breaking all of them? I can run them in isolated container networks and even isolated cgroups if I want to. Docker hides a lot of the core reasons tools like jails and chroot and eventually LXC were created but containers absolutely can do the things you are using vms for if you are willing to learn how they work
I built my recommendation around the likelihood this person is already using docker and therefore already has containers that would be extremely easy to run without unraid. There would be less lift to use the same config files and volume mounting they are already using.
Operationally though I would never run vms and containers in the same orchestrated system. Look at what they are asking to do. Why would you run sonarr as a container and radarr as a vm. Obviously they are going to end up just doing one or the other
I legitimately don’t understand the trendiness of proxmox given that vms are overkill compared to containers. If you are migrating from unraid you are likely already using the docker version of all your arr services so going and spinning up vms feels like a step backwards.
You can either use the exact same containers and use systemd to run them as raw services or use something like docker compose or dozens of other tools to orchestrate them. I use k8s but can’t recommend it with a straight face after taking down VMs for being overkill (very different kinds of overkill but still)
I hate this excuse because it’s so incredibly easy to keep records without keeping the account itself active. I work in healthcare and we have to do shit like this all the time with archiving patients records into an offline storage and then destroying their “hot” accounts to comply with two different incompatible laws.
It’s a duplex so the HOA only has two homes in it. The fees were designed to cover the water bill, master insurance policy, and slowly collect enough money to replace the roof every decade or two.
Unfortunately the other unit has no interest in even basic maintenance so unless we take care of everything the place slowly just falls apart. We’ve had to fight with them over every tiny repair from siding damage to a literal hole in the roof that a squirrel chewed out. They keep running an Airbnb with loud guests who throw parties despite it being against the HOA and unless we pay for our own lawyer there’s no way to actually enact the fines and stuff as laid out in the HOA rules.
We’re selling and never buying in a small HOA ever again
Good thing °R and °RA aren’t pointing guns at each other
Neither are °F and °R nor °K and °C
This is almost artfully done
I had a loan like this one. Probably a plus loan. For a while the rates for plus loans eclipsed 8% and plus loans accrue interest while you are in school. So if you don’t know what you’re doing, you can take on 4 years of interest before you even start paying. Turns a $20k loan into a $30k loan before you even graduate. Plus loans recapitalize interest whenever they come out of deferral so you actually pay interest on the interest as well. So by the time you pay the loan off that is then $41k in total payments for what was originally a 20k loan
Do this 4 times for each year of undergrad and you’ll have 164000 in total loan payments over your lifetime.
Plus loans are a government backed scam to fuck over poor kids who can’t front the cash for what the federal aid program covers. My base grants were only ~40k over 4 years and my federal unsubsidized and subsidized loans only were ~24k over 4 years.
Meanwhile the prestigious university I was accepted to charged 24k per semester. So I had 64k of aid and low interest loans to pay a tuition of 192k. After my work study added an additional 20k/yr I was still short 48k and poof there the plus loans were to “help” me.
I have no issues reading in general but I still have this experience. Like I read the entire goblet of fire in one sitting without sleeping or eating (my mom still talks about how much this freaked her out to this day) but simultaneously I have this issue all the time now as an adult when reading technical white papers for my job. Halfway in I suddenly realize I didn’t actually read the last several paragraphs.
This is exactly how ebpf was implemented for the Linux kernel. You can build watchdog processes that can see what’s happening in the kernel and build kernel interrupts but it’s actually all executed in user space and not rewriting the kernel itself. Since it’s a proper api, it also means it’s incredibly hard to fundamentally break the system, unlike when you’re just blowing away kernel code with your own shit like all these security products do.
Sometime around 35 I finally stopped being able to hear these tones just from the natural aging process.
People say aging has no upsides but I’m driven crazy by random noises so much less often now.
It’s honestly way more about plant diversity. There are a million different plants in like a ten square mile area that all look exactly like an aloe and are related. The only way to differentiate them is by hyper obscure differences like their root structure and what their sap consists of.
You don’t even need to be in the proper tropics. Walk around San Diego with a plant id app and watch it spit out a different name for the same palm tree over and over because there are actually hundreds of varietals of palm with similar extremely complex identification processes. Some with toxic fruit and some with edible fruit that look the same.
Forcing the left to vote for a cop after so many years of ACAB.
Management: Our consultants don’t know what ebpf or what immutable filesystems are so obviously your wizard magic is not better than crowdstrike. Also IT will be in charge of that one component and clickops it bypassing the entire CICD pipeline and sanity checking system you have. It’s for compliance which is our word for shut up or we fire you.
Also thanks to ebpf it’s now very easy to implement EDR without a full blown rootkit in Linux and anyone on the bleeding edge is moving away from this kind of solution
You usually run into issues if you are trying to use off the shelf tools and git providers. IMO GitHub and GitHub actions sucks hard for monorepo. The fact that all actions have to be stored in a single directory for example almost certainly is unmanageable rats nest waiting to happen at any sufficiently large business with a sufficiently complex product or set of products.
This is why companies like google run their own forms of git with custom wrappers to let you do things like pull a segment of the terabyte sized repo or run partial builds with tooling that basically runs some kind of graph against the changes. Bazel for example had to be invented to help solve that problem at Google and pants similarly for twitter (who also has a monorepo)
If you are willing to invest in using tools like bazel and own building all these complex wrappers then it can be fine. But if you want to off the shelf gitlab or GitHub actions and use your IDEs built in git tooling it’s not going to be for you. That’s the difference between what’s possible or a good idea at a medium shop vs a company with 40k engineers
In my experience at a company that just moved away from monorepo, half the off the shelf vendors and foss tools out there balk at you if you expect monorepo support. We moved away specifically because at our current company size it is more tolerable to have our different products separate and eat the occasional pain of mass pattern adjustments across the repos than to build out a team to manage the custom tooling required for a gig plus sized monorepo
Plus, even google doesn’t have a true monorepo. Chrome and Android are not in the same repo as search for example. Find your seams and manage them appropriately
unique screens have unique canvas fingerprinting.
Exactly what I just said? Don’t use unique screens and you are less identifiable. The most anonymous browser is a freshly wiped two year old Apple device running safari or chrome from a university campus or coffee shop. A million other laptops have the same base canvas fingerprint.
Fewer people use Linux. Fewer people use specialized browsers. Fewer people have external displays. All those things make you easier to fingerprint than a vanilla machine.
Is it possible you misread what I typed?
The least unique setup is not to keep doing more special shit. You underestimate how many people run a vanilla safari or chrome browser on a MacBook with no external displays.
Linux, external monitor, special browser? That all makes you more unique
I had a landlord make me pay them in zelle. Bank limits meant I had to pay them over 3 days every month. What a mess
If the function is known by all parties then the last person to send still has control
I was replying specifically in the context of the original question. Unraid already has their services tooling built out over containers so this person already is probably using containerized versions of the arr services. It would be overkill to go build vms for these services specifically for what you said. They don’t need to be windows or osx, they don’t need hardware passthrough, they don’t need a full kernel.
That aside. You absolutely can run containers as a full isolated kernel and directly map hardware to them. CGroups absolutely allows for those use cases. You may not be using docker anymore but docker is more of a crutch for beginners who probably dont need those things.
One example of this in the real world are COS and Bottlerocket which are literally distributions of Linux where even core is components are individually running under different containers via cgroups. COS runs on every GKE cluster in the world and bottlerocket on most EKS clusters.