Deebster

New account since lemmyrs.org went down, other @Deebsters are available.

  • 56 Posts
  • 961 Comments
Joined 1 year ago
cake
Cake day: October 16th, 2023

help-circle
  • I HATE those sites where popups come up when you are halfway reading something.

    Agreed, if I did want to sign up it would be when I’ve finished, not when I’m trying to read your own bloody content. I often sign up using their own domain with something like sales@ or something ruder. Petty, but it’s a small vent. and if one person stops because of it I can die happy.


  • DeebstertoPodmanPodman is so much better than Docker
    link
    fedilink
    English
    arrow-up
    6
    ·
    edit-2
    1 day ago

    I love quadlets, here’s an example:

    $ cat .config/containers/systemd/kavita.container
    [Unit]
    Description=Kavita manga server
    After=mnt-files.mount
    
    [Container]
    ContainerName=kavita
    Image=docker.io/jvmilazz0/kavita:latest
    AutoUpdate=registry
    Network=kavita.network
    PublishPort=5000:5000
    Environment=TZ=Etc/UTC
    Volume=/mnt/files/books/comics:/comics:ro
    Volume=/mnt/files/books/gnovels:/gnovels:ro
    Volume=/mnt/files/books/manga:/manga:ro
    Volume=${HOME}/kavita:/kavita/config:Z
    HealthCmd=curl -fsS http://localhost:5000/api/health || exit 1
    
    [Service]
    Restart=always
    
    [Install]
    WantedBy=default.target
    
    $ cat .config/containers/systemd/kavita.network
    [Network]
    NetworkName=kavita
    Options=isolate=true # library add uses Kavita site
    

    If you’ve dealt with systemd service files this will look familiar, with the addition of the container section.

    AutoUpdate=registry gives you automatic updates to ‘latest’ (or whatever tag you’ve set) and there’s rollbacks too, so you just have to worry about the less-critical bugs in newer versions. Personally, I feel more secure with this setup, as this box is a VPS.

    Network=kavita.network - I put all my containers in different networks (with minimal privs, so many don’t have outgoing internet access), and my reverse proxy is also in all of those networks so it can do its thing.






  • This seems quite serious, I’ll definitely be reading the CVE once it’s published. Luckily, I noticed the github notification of the release after only a couple of hours.

    edit: I read the advisory and it wasn’t too bad in terms of attacker access:

    Impact
    An attacker can use any non-existent username to bypass the authentication system and gain access to various read-only data in Navidrome, such as user playlists. However, any attempt to modify data fails due to insufficient permissions, limiting the impact to unauthorized viewing of information.










  • I just had mine arrive yesterday!

    I have one of these
    macro keyboard with 12 keys and three knobs

    I’m using ch57x-keyboard-tool to configure it, because I don’t fancy running some random closed-source Chinese code (the manual links to a file on Google Drive). It also means I can move over my config when I switch to Linux.

    I have two keys for switching between headphones and speakers, and some set up for shortcuts I forget (like ctrl-shift-e for the network monitor in Firefox). One key types “hello” just because I can.

    I’ve got the large knob controlling volume, and I can click it to toggle mute. The other two are currently set to scroll, but I don’t need that as my mouse has better ergonomics for scrolling.

    I still have plenty of unused keys and it’s got three layers so I won’t be running out in the foreseeable future.