• 20 Posts
  • 411 Comments
Joined 1 year ago
cake
Cake day: August 10th, 2023

help-circle

  • moonpiedumplingstohomelab@lemmy.mlEliteDesk 800 G6 SFF setup
    link
    fedilink
    English
    arrow-up
    2
    ·
    19 hours ago

    Excellent choice on the new SSD.

    If you are buying one of the used Elitedesks, refurbished from a business done with them, they often have their original storage removed and replaced with an extremely cheap, crappy SSD that probably won’t last long and will instead just die on you.









  • I’m gonna be real: You want kubernetes + gitops (either fluxcd or argocd or the rancher one).

    I mean sure, jenkins works, but nothing is going to be as smooth as kubernetes. I originally attempted to use ansible as many people suggested, but I got frustrated becuase it struggled to manage state in a truly declarative way (e.g. when I would change the ports in the ansible files the podman containers wouldn’t update, I had to add tasks for destroying and recreating the containers).

    I eventually just switched to kubernetes + fluxcd. I push to the git repo. The state of the kubernetes cluster changes according. Beautiful. Simple. Encrypted secrets via sops. It supports the helm package manager as well. Complex af to set up though. But it’s a huge time saver in the long run, which is why so many companies use it.




  • Not much, probably. For small scale usecase, like a VPS, AWS is horrifically expensive. For a 4GB of ram VPS, AWS is 30 USD a month, whereas you can get that for 10 USD a month, elsewhere.

    AWS does this because of vender lock in. For the few times when a consumer of theirs needs a VPS (or some other service cheaper elsewhere, it’s less effortt to continue to use AWS than to go someplace else.

    But for individuals and small organizations, like the fediverse servers, we can just start out on the cheaper options.



  • Firstly, this blog is mostly SEO spam and is probably one of the worst written articles I’ve ever seen. The article itself is more keywords than content. Even the headline is garbage, persisting after reboots is a normal feature of almost all most malware types, including rootkits. In fact, I’d say a lot of cybersecurity blogs are like this, hyping up mundane malware that presents no special threat for the clicks.

    But I’ll break this down anyways.

    The first bit about the dynamic linker, means doing things like restricting the files an app has access to, in order to prevent manipulation of how code libraries and modules are loaded, in order to prevent the injection of a malicious library. This can be done within the system, and often is by default, like how sudo refuses to load libraries it doesn’t like.

    The second bit is literally just recommending you require a password to do admin things. Of course, there’s a lot more nuance to it. Access controls, controlling what user on a system has access to what can become a lot more fine grained, but for the kinds of malware that these articles report on, an admin password will stop them.







  • Firstly, you may also be interested in: https://containerssh.io/v0.5/

    This is a similar software, but maintained. However, it doesn’t look like you limit networking with the Docker backend, beyond a simple on/off.

    An even simpler solution, is to have the the ssh entry command not be the usual shell command (/bin/bash), but rather a command that starts a shell within a container. So something like:

    podman run -it --rm -v "-v /HOST-DIR:/CONTAINER-DIR" docker.io/library/debian:bookworm bash would create a shell inside a short lived debian container (that is deleted upon disconnect) where a host directory is mounted inside the container.

    As for mysecureshell, I would assume that since it is in the Ubuntu repos, it is still being maintained. But it’s possible, since it is unmaintained that there are unknown security vulnerabilities or other issues, but:

    It’ll just be for half a dozen friends for when I want to give them larger files, or if I want them to send me full-resolution photos.

    If it’s just for your friends, it may be okay to use a less secure solution if you trust them.

    As an alternate solution: since you are looking for some sort of file searching, perhaps you could host an app explicitly designed for that, like Seafile or Nextcloud.


  • moonpiedumplingstoProgrammingThe yaml document from hell
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    24 days ago

    Yaml is a data storage format

    I have literally never seen yaml used as a data storage format, only as a configuration language. Ansible, Kubernetes, Home manager, netplan, and many, many other examples of yaml as a configuration language, but I cannot think of an example of yaml as a data storage format off the top of my head.

    Given the:

    package {
      name my-pkg
      version "1.2.3"
    
      dependencies {
        // Nodes can have standalone values as well as
        // key/value pairs.
        lodash "^3.2.1" optional=#true alias=underscore
      }
    

    On the README of the KDL Github, it looks like KDL has a similar goal to be a configuration langauge, rather than a data storage format.