Good opsec, really.
Edit: also I just realized this is the Privacy community lol
Good opsec, really.
Edit: also I just realized this is the Privacy community lol


Excellent, now we can be eaten by a GNU grue
I just set up Readeck a few weeks ago, and I’ve been liking it. Very minimalist, utilitarian. One feature I’d like that isn’t included is the ability to add specific labels or collections to the sidebar, but that’s my only quibble so far.
It has an official browser extension for adding urls to it, but if you can’t or don’t want to use that, it has a nice api. I use the api to add bookmarks from my phone using a termux-url-opener script, which is as easy as the extension - just hit the “share” button and select termux, and it does the rest.
Navigating around supporting bad actors in the foss community is probably far easier than in the closed, commercial software space, given that all the code, discussion, and money are out in the open.
Also I think the proportion of fascists and bad actors in the foss community is probably lower than elsewhere in the first place, given that the community is based on the free and open sharing of work and knowledge.


First time I’ve ever seen this, and I love it.

That’s pretty wild, given there are only around 6,836 extant mammal species at all. A quarter of all mammal species are bats!


The rclone fuse mount is essentially running in the memory of the container, and doesn’t translate back into the filesystem that the host presents from itself into that container.
Since rclone is available in the debian repos, the simplest and easiest option would be to do the rclone mount on the host and then pass that via bind mounting into the Plex container.
If you want to keep the rclone mounting containerized though (or if your Proxmox host is clustered, you want to mount it on the host, and you want the mount to be shared between your nodes), you can use rclone’s experimental but built-in nfs server feature: https://rclone.org/commands/rclone_serve_nfs/
Make sure your 2 containers can talk to each other over a secure network (“this server does not implement any authentication so any client will be able to access the data”), start the nfs server in the rclone container, and mount it via nfs in the Plex container.
Good luck!


apt-get clean will clear the apt cache and should give you enough temporary storage headroom on /var to do things, but if you’re bumping up on this limit often, you’ll need to reconfigure your storage.


/var is often where processes dump a lot of data (logs, databases, etc), and subpartitioning of /var sets a cap so that when too much data is dumped there, the application crashes instead of the whole system. /var/log is often recommended to be subpartitioned separately as well, so that logging can still go on if the application data fills up and crashes.
These kinds of overruns can be intentional DOS attacks, also, so the subpartitioning is often a security recommendation. NIST 800-171 requires separate partitions for /var, /var/log, /var/log/audit, and /var/tmp


Forgejo (Gitea fork used by codeberg.org) is a lightweight self-hostable option, and has a web-ui-based file editor. It’s got an official docker image, and it’s packaged for freebsd, as well, which makes it very easy to deploy and maintain either containerized or on a server.


With the size of modern linux kernels, I think 1GiB for a /boot partition is the absolute minimum I would go for a current full-sized distributuon. You’ll run into these out-of-space issues on updates all the time otherwise.
I’ve used an old, out-of-support phone as a permanently plugged-in homeassistant control panel. Not quite self-hosting as in phone-server, but a fun easy project and a great way to keep an old device in use.
The bang syntax makes duckduckgo easily the best search engine - it’s a shortcut to everything, the perfect gateway to the internet.


Can you give us the full output of the following commands?
ip addr
sysctl net.ipv6.conf.all.disable_ipv6


Four Weddings and a Funeral is a movie I adore entirely for the side characters, and pretty much ignore the two main characters and storyline completely.
The main friend group feels so real and alive and lovely, they’re charming and funny, and watching them be friends at their weddings and funeral feels like optimistic slice-of-life escapism. And beyond that, pretty much every other side character is memorable and funny and a joy to watch, especially Rowan Atkinson as the anxious priest. Great movie, 10/10, can’t remember the main characters at all.
Yep exactly! Setting up a raspberry pi low-performance computing cluster with secondary usb nics, going slowly insane trying to figure out why the vlan interfaces wouldn’t work when their base interfaces worked just fine, and going down all of the wrong rabbit holes along the way.
ifupdown2 has a 15-character interface name limit, and the systemd predictable interface naming system uses the mac address for usb nics (giving them a 15-character name), so if you try to create a vlan subinterface of a usb nic using the standard interface.vlan naming scheme on a systemd host, it will fail, and you’ll have to set up systemd network link files to rename the base interfaces to something shorter.


The ups has data output to my firewall/router via usb, which the baremetal servers all connect to via apcupsd. When the ups loses or regains AC power, it broadcasts a message to all of them and they’re each scripted to act accordingly: laptops run on their own batteries, vms migrate over to laptops, non-vital hardware shuts down, etc.
Podman/docker leave behind old images, image layers, and containers that need to be cleaned up occasionally.
podman system prunewill do so.If 8TB was taken up quickly or unexpectedly, it might be something like a container failing to start and being recreated over and over, leaving each failed container behind as it goes.
podman ps --allwill list all containers, running or stopped. Before doing the system prune run that andpodman image ls --allto see if anything looks amiss.