Huh? You don’t like strong copyleft licences?

I have a Server with ~16 podman services, each their own user, network namespace and uids. This is managed using NixOS and Home manager (which supports quadlets) but I am changing my setup to a single node k3s cluster with user namespaces because that seems simpler to manage. Here a snippet for how the subuids/subuids are defined:

users.users.<username> = {
        subUidRanges = [{
            startUid = 100000+65536*( config.users.users.<username>.uid - 999);
            count = 65536;
        }];
        subGidRanges = [{
            startGid = 100000+65536*( config.users.users.<username>.uid - 999);
            count = 65536;
        }];
        home = "[...]";
        isNormalUser = true;
        linger = true;
        group = "users";
        openssh.authorizedKeys.keys = config.users.users.root.openssh.authorizedKeys.keys;
    };

The fix is upstream commit 3bfdc63936dd, landed in April, and distributions are rolling it out now.

How are you running podman? As a rootful systemd service or as a rootless user systemd services?

If you have an openwrt compatible router then you can use that as the tang server.

Also you can tell clevis to use both tpm and tang and require both to work.

Straight to jail

I use bitwarden send, all my devices already have access to my password database and i can save and download files or text though it. You can also use the URL to let other devices access it if you want.

It’s an addon that you enable/install inside Technitium, you only need to configure it in the Admin ui.

I used dawarich but switched to geopulse because dawarich broke too often on updates. I only rarely use it but it works well enough.

So now you have three options that you can compare, good luck?

https://xkcd.com/1200/

all my back ups are what they should be

Are you sure? While the cloud backups may not affect you the exclusions might, afaict no one even knows what exactly is excluded.

From the link:

This annoyed me. Firstly I needed that folder and Backblaze had let me down. Secondly within the Backblaze preferences I could find no way to re-enable this. In fact looking at the list of exclusions I could find no mention of .git whatsoever.

Which strongly implies that there might be other important folders that aren’t backed up. (Without .git inside a git folder it is no longer a git repository)

I don’t use backblaze but from the outside it looks like they’re cutting costs by worsening the backups to reduce storage usage.

https://rareese.com/posts/backblaze

Backblaze quietly stopped backing up .git, mounted remote storage and maybe more without showing the user what they’ve stopped backing up?

Dread it. Run from it. Enshitification arrives all the same.

Use a VPN, it’s not ideal but it’s secure.

When does your Server actually pull the repo though?

I have linkwarden set up for this.

On Android I share to the linkwarden app to save, on pc i use the Firefox addon.

Sure it’s fragmented but I’m already used to doing things different between mobile and pc anyways.

Pro tip: If you’re using openwrt or other managed network components don’t forget to automatically back those up too. I almost had to reset my openwrt router and having to reconfigure that from scratch sucks.

If logging is down and there’s no one around to log it, is it really down?

That won’t work in most cases, all https traffic isn’t cached unless you mitm https which is a bad idea and not worth it.

Only cache updates those are worth it and most have a caching server option.

Infrastructure diagram? No! In this homelab we refer to the infrastructure hyperdodecahedron.

Moral of the story. If you’re an engineer then expect enshitification through all available means.