Helmut10001

2 jam yang laludiscuss

I use local seedvault backup and then sync via round sync daily trigger to my Nextcloud WebDav Server (native seedvault was not able to use this, for some reason).

Helmut10001

kemarin duludiscuss

The best advice is often: Use a dot and start a new sentence. The best writers use very short sentences in a row and simple words. They flow easily and do not break reading. This works particularly well in science and for difficult topics.

Helmut10001

6 hari yang laludiscuss

I am very happy with Moonlight/Sunshine combo. Runs neatly on my RTX 4000 Pro GPU Server. The only thing I miss is automated resolution adjustment to connected Clients, but I was able to script this with Home Assistent Windows client.

Helmut10001

bulan laludiscuss

I get your point and this is likely also not what you mean, but I am very happy with a simple git tracking approach that I use across Proxmoxes and VMs [1].

[1]: https://du.nkel.dev/blog/2026-05-16_rootless_docker_virtiofs...

Helmut10001

bulan laludiscuss

Yeah, I ran into the same wall when setting the system up. I then reverted to the standard mount utility, which also supports id-mapping. But it is really not that known. See the links in the article that point to the source of the idea.

    > Network file systems can cause UID/GID mismatches and add network overhead. With VirtIO-FS, I use the Linux kernel's Virtual File System to translate the hypervisor's UID to the guest's unprivileged UID. This avoids exposing the host file structure. I utilize the `X-mount.idmap` fstab option for this. Documentation on this specific implementation is not easy to find. It builds upon the idmapped mounts feature introduced by Christian Brauner in Linux 5.12 [1] and its later integration with util-linux v2.39 into the standard `mount` utility [2].

    [1]: https://github.com/brauner/mount-idmapped + https://docs.kernel.org/filesystems/idmappings.html
    [2]: https://github.com/systemd/systemd/releases/tag/v254

Helmut10001

bulan laludiscuss

Thanks for the feedback! I agree. I do have a comment on this, to explain my choice:

> Podman vs Docker You may point to Podman here because Podman is natively rootless and doesn't require a daemon and additional workarounds to run rootless. I agree. However, Docker in rootless user nesting is also robust and possible, and I decided to stick to the docker-compose.yml because it is still the industry (and homelab) standard. This minimizes the time I need to translate examples or templates. Docker in rootless and Podman are mostly interchangeable at this level. Both run processes in isolated Linux namespaces on your host VM (not the Hypervisor!).

This is not 100% and may change anytime. I guess, for me, at this time, the difference between Docker in rootless and Podman is just too small, and the time needed to migrate all my docker-compose.yml's too much, to make the jump. Overall, it is not a critical decision for this architecture, more a choice.

Regarding Debian is similar, I just stick with what I am familiar with. Debian also never lost me.

Helmut10001

2 bulan yang laludiscuss

I found it pretty reliable and use it across all my docker projects, development and production.

Helmut10001

2 bulan yang laludiscuss

Install docker (systemd daemon) in a separate rootless Linux namespace (user). I wrote this down here [1]. Zero trust & separation of concerns.

[1]: https://du.nkel.dev/blog/2023-12-12_mastodon-docker-rootless...

Helmut10001

2 bulan yang laludiscuss

I have my phone always in Do Not Disturb. That's it.

Helmut10001

2 bulan yang laludiscuss

It is not possible to zoom in, as far as I can see (mobile, but tested desktop). [Edit] This allows zooming [1].

[1]: https://2b2tatlas.com/map

Helmut10001

3 bulan yang laludiscuss

I invested quite a bit in enterprises level homelab equipment 2020 to 2025 (about 10k). Happy I made it before the big bang. Eg. my SAS he8 drives will last at least till 2035. But what then? I want my children to be free, too.

Helmut10001

3 bulan yang laludiscuss

Yes, manual. It is very rare to find automatic cars of that age in Europe.

Helmut10001

3 bulan yang laludiscuss

Electronics don't usually last for more than 30 years. Pre-2007 cars can be driven for that long because they had minimal electronics and relatively oversized manufacturing. This was because managers hadn't yet taken charge of reducing material thickness to the absolute minimum.

Helmut10001

3 bulan yang laludiscuss

Our VW T4 from 2002 has 300k km on it. I consider this half it's total possible mileage, if not less. I wish they would still build reliable cars like these today.

Helmut10001

3 bulan yang laludiscuss

What I found pretty great with docker is isolating individual docker systemd instances in rootless linux namespaces (i.e. users). I wrote about this here [1]. This lets you easily create multiple services on one VM that are quite isolated from each other. This system of doing things has worked reliably for me for quite some time, even for the 'bigger' services (gitlab, nextcloud, mailcow-dockerized etc.).

[1]: https://du.nkel.dev/blog/2023-12-12_mastodon-docker-rootless...

Helmut10001

3 bulan yang laludiscuss

I had the feeling they didn't really answer the questions, that is why the goblins appeared. They simply "retired the “Nerdy” personality" because they couldn't fix it and went on.

Helmut10001

3 bulan yang laludiscuss

I added an Zenko Scality CloudServer S3-compatible Storage backend to a selfhosted Grist [1] instance. This allowed me to create forms with attachements in Grist (e.g. users can upload photos). I experimented with several and settled on Zenko Scality CloudServer [2]:

- MinIO [3] is somewhat deprecated and not really open source anymore. Its future is unsure.

- GarageHQ [4] looks pretty great and I wished I could have used this, but it is not yet feature-complete with S3 protocol and specifically missing the versioning feature (I reported this [5])

- Zenko Scality works out of the box; it is a bit too "big" for my context (aimed at thousands of parallel users) and uses 500MB memory; but it does the job for now.

I posted my compose here [6]. Since then (~months ago), it works really well and I am happy with Zenko Scality S3.

    [1]: https://github.com/gristlabs/grist-core
    [2]: https://github.com/scality/cloudserver
    [3]: https://www.min.io/
    [4]: https://garagehq.deuxfleurs.fr/
    [5]: https://git.deuxfleurs.fr/Deuxfleurs/garage/issues/166
    [6]: https://github.com/scality/Zenko/discussions/1779#discussioncomment-15869532

Helmut10001

4 bulan yang laludiscuss

The comparison pictures look like there is more dust in the air today. They don't explain this effect, so I assume it is related to time of day the photo was taken, or camera settings, not actual dust accumulation compared to 1972. However, the direct comparison gives the impression they want people to interpret like the air is getting dirtier?

Helmut10001

4 bulan yang laludiscuss

You mean via WebDav? That is definitly an option, but then it is not possible anymore to mix working file directories within Nextcloud. E.g. I have a long list of ignored files for nextcloud [1], such as .git folder etc.

I would need to create a separate file tree, splitting my work between nextcloud maintained files and working files. That feels cumbersome. On Windows, I could directly add my whole drive to nextcloud as a virtual file system.

[1]: https://gist.github.com/Sieboldianus/280afdb2f994fae6e5f6b18...

Helmut10001

4 bulan yang laludiscuss

I found virtual files support also somewhat critical. This is not really stable on Linux yet and makes using Nextcloud with 8TB and Million of files pretty difficult.

Helmut10001

Submissions

A Modern Proxmox Docker Architecture with Disposable VMs, VirtIO-FS, and ZFS

A Modern Proxmox Docker Architecture with Disposable VMs, VirtIO-FS, and ZFS

Local-only Marstek Venus e-battery integration with Home Assistant

Automating rootless Docker host updates with Ansible

Git and GitHub Stuff

Slides: The Resilient PhD/Postdoc– Building Habits to Combat Information Fatigue

Earth's clouds are shrinking, boosting global warming

Generative Text-to-Image Diffusion for Automated Map Production

Keycloak SSO with Docker Compose and Nginx

Mastodon with Docker rootless, compose, and Nginx reverse proxy

Mastodon with Docker rootless, compose, and Nginx reverse proxy

IPSEC between OPNsense and pfSense with one side behind Carrier-grade NAT

Tag Maps Rendering with Python and Mapnik

An opinionated nextcloud ignore list for developers (sync-exclude.lst)

comments