You can set up your own CA, sign certs and distribute the root to every one of your devices if you really wanted to.
exu
joined 2 years ago
A lot of stuff on "western" platforms is just the same stuff rebadged for 3-10x the price. I see no reason to pay that much more for the same stuff.
I haven't taken the time yet to switch my Ansible playbooks to Quadlet, so can't comment on that.
I only skimmed the manpages, thanks for the info.
I use podman mainly because it's very easy to manage using systemd services. Unfortunately, the command for generating these service files, podman-generate, is deprecated and won't receive new features.
Auto updating is done just using a simple tag and enabling a systemd timer to do it regularly for you.
It's easiest to start with the rootful mode, you won't have additional settings to set and no issues with permissions, UIDs and networking.
For networking, I always create a network per service I want to run. For example Nextcloud and its database would go in one network and you'd only forward the port for the webinterface for outside access.
In addition to networks I also use pods, this basically groups the containers together to start/stop them as one. If you use this, you have to set your port forwarding here.
Not yet, but they'll probably release it as an article on their website soon.
Time for systemd-speedrun to standardise this
There might be some savings to be had with some sort of local package cache over 10GiB Ethernet.
In case you wanted to try other TTS providers, here's a leaderboard based on user votes.
I used OpenProject before. Mainly for easy collaboration through the web though, I don't think it offers a native version.
I can really recommend acme.sh if you wanted to try a certbot alternative.
Even without escaping the container a lot of stuff can be done. Maybe the program includes a cryptominer or acts as a node in a botnet.
There's no way to be sure unless you verify the source yourself.
Maybe add Geekbench, but only within the same architecture. Tests between different architectures are not comparable.