EnigmaCurry

11 ms·

1.
by EnigmaCurry 2mo ago
Thats the thing, LXC isn't a VM, its a container, so they all share the same kernel. I think its worth a shot, so I may test this.
2.
by EnigmaCurry 2mo ago
If you're going to expose static secrets to your app, it kind of doesn't matter whether they are in a single vault or in a gpg encrypted file or something. The real benefit of a vault IMHO is to distribute dynamic certificates ins
3.
by EnigmaCurry 2mo ago
Not directly related to openbao, but I've thought about this for awhile that I'd like to use ssh certificates instead of ssh keys to allow an agent a time limited SSH access to a server, and that seems to work for gating the initi
4.
by EnigmaCurry 3mo ago
Yes, I don't really touch the PVE server at all after the initial install. I just build and deploy from my Fedora workstation running nix. [1] https://github.com/EnigmaCurry/nixos-vm-template
5.
by EnigmaCurry 3mo ago
This is what I've built [1], and I'm using it daily for things like agent sandboxing when I deploy it builds a new image completely replaces the OS disk - on upgrade it only keeps its data drive mounted to /var. [1] https:&#
6.
by EnigmaCurry 3mo ago
NixOS has transformed my use of Proxmox. I configure, build, and deploy everything from my nix workstation. I don't need to use the PVE gui at all. Proxmox is just a target, and I've abstracted things enough to where I can deploy
7.
by EnigmaCurry 3mo ago
I'm happy to see this, and I have lots of thoughts about this. Building declarative services on Nix is a far superior way of distributing Linux to VMs than most any other way I've tried. I am working [1] on very similar things, bu
8.
by EnigmaCurry 4mo ago
I am learning Clojure this week, and my test project is a calculator / unit convertor [1]. I wanted it to run in the CLI and on the web, so it targets several hosted platforms: Babashka / JVM / ClojureScript. It's a sing
9.
by EnigmaCurry 4mo ago
That may have been the dumbest line in the article, the oils in question, are made out of seeds.
10.
by EnigmaCurry 4mo ago
Yes. The registrar is for the root domain. You provide your own DNS. DNS can do wildcards for any root domain its delegated.
11.
by EnigmaCurry 6mo ago
Sent from my Ipad
12.
by EnigmaCurry 6mo ago
Same. Here's how I scratch the NixOS itch on Proxmox and/or libvirt[1]. One interface for both targets. [1] https://github.com/EnigmaCurry/nixos-vm-template
13.
by EnigmaCurry 6mo ago
Yes, that solves it completely. But the exercise we were trying to do was to do it without that.
14.
by EnigmaCurry 6mo ago
> Many home routers try to preserve the source port in external mappings. This is a property called “equal delta mapping” – it won’t work on all routers but for our algorithm we’re sacrificing coverage for simplicity. It is precisely thi
15.
by EnigmaCurry 7mo ago
Use APIs for building things (and preparing for things to be built upon). Production. Use CLI for exploration, coding, and learning. Greenfield. In general, Declarative > Imperative.
16.
by EnigmaCurry 11mo ago
GPD Pocket 4
17.
by EnigmaCurry 1y ago
yes I used to use it too :) I think I've written three or four SSG since then haha.
18.
by EnigmaCurry 1y ago
> Anybody have something better? I wrote this to publish Org docs to S3 - https://github.com/EnigmaCurry/s3-publish.el - I wanted something extremely lightweight, not even wanting to commit things to git like I norm
19.
by EnigmaCurry 1y ago
Yea on Linux I can run 10 different VPNs (or 10 wg peers) no problem, this limitation of Android is super annoying to me. I think OPs solution is quite a good one for Android users.
20.
by EnigmaCurry 1y ago
This is at least a limitation in Android itself: https://developer.android.com/reference/android/net/VpnServi... "There can be only one VPN connection running at the same time. The existing interface is
21.
by EnigmaCurry 1y ago
Maybe try https://github.com/nschlia/ffmpegfs
22.
by EnigmaCurry 2y ago
I feel like my Rust code takes 3x as long to write as my Python code, but the gpt results for rust are about 10x better, because the tooling is a backstop against hallucinations. I really like the Rust tooling and I like exhaustive pattern
23.
by EnigmaCurry 3y ago
How does this compare with iSCSI?
24.
by EnigmaCurry 3y ago
EndeavourOS sway edition (community) [1] has been a pretty great start for preconfigured wayland+sway+waybar and various integration. I added some more stuff to my ~/.config in my own repo [2], but it was a good place to start, and End
25.
by EnigmaCurry 3y ago
irrevocable licenses are pretty different than subscriptions.
26.
by EnigmaCurry 3y ago
Ownership.
27.
by EnigmaCurry 3y ago
If you are stuck on wordpress, consider using a static export plugin like wp2static [1]. I have been playing around[2] with a setup where the normal WP UI is protected behind HTTP Basic Authentication, and wp2static exports the public snaps
28.
by EnigmaCurry 3y ago
Lots of apps will still show a black screen via scrcpy: * The lock screen of the device * AndOTP * Bromite Incognito mode. I think its called a "security screen" which prevents this, or something like that.
29.
by EnigmaCurry 3y ago
> some glaring issues - tramp being a major one. It’s slow and very unreliable. Over SSH? Did you turn on ssh connection sharing in ssh config? > ControlMaster auto > ControlPersist yes > ControlPath /tmp/ssh-%u-%r@%h:
30.
by EnigmaCurry 3y ago
Its a hardly a requirement, some people just enjoy doing it. You can just use someone else's config, lots to choose from.

More ›