ggpsv

4 ms·

1.
Podman rootless containers and the Copy Fail exploit(garrido.io)
141 points by ggpsv 4mo ago|25 comments
2.
by ggpsv 1y ago
Author here! Indeed, it is mostly HTTPS terminated by Caddy in the server at home. Otherwise, it is SSH.
3.
by ggpsv 1y ago
This is a good intro [0], courtesy of Redhat. This is a good example [1], cited elsewhere in this post. Documentation for quadlet systemd units [2]. [0]: https://www.redhat.com/en/blog/quadlet-podman [1]: https:&
4.
by ggpsv 1y ago
Oh yes, correct!
5.
by ggpsv 1y ago
This is no longer true as of Podman 5 and Quadlet? You can define rootless containers to run under systemd services as unprivileged users. You can use machinectl to login as said user and interact with systemctl.
6.
by ggpsv 1y ago
To add a data point here, my Framework laptop is 3 years old and I have no plans to change the mainboard anytime soon. Also, you don't change its motherboard, you change the mainboard (for my laptop, it's the CPU/integrated G
7.
by ggpsv 2y ago
Care to share a link to the fermentation forum?
8.
by ggpsv 2y ago
Is it really brutal? Can you single out "nature" and its characteristics? Brutal sounds like a value judgement, one that I suspect explains nothing about the fact. Can we accept that it just is, and we're part of that, for al
9.
by ggpsv 2y ago
A bit like PESOS (Publish elsewhere, syndicate own site). I do this when archiving my Mastodon posts in my own static site [0]. [0]: https://garrido.io/notes/archiving-and-syndicating-mastodon-...
10.
by ggpsv 2y ago
That is what I ended up doing, I wrote a blog post about it some months ago [0]. The gist of it is using private dns and exposing services only on the private network. Implementation details can vary, you decide whether to use tailscale or
11.
by ggpsv 2y ago
If you don't, can you expand on how you're doing this? Is it simply backing up the Thunderbird profile?
12.
Hetzner Considered Hostile: A PSA(tenforward.blog)
6 points by ggpsv 2y ago|5 comments
13.
by ggpsv 2y ago
Every case is different but as a baseline, you could use Ubuntu or Debian for automatic security upgrades via unattended-upgrades[0], harden ssh by allowing only pubkey authentication, disallow all public incoming connections in the firewal
14.
What self-hosting teaches(garrido.io)
2 points by ggpsv 2y ago|0 comments
15.
We Should Teach Students Unix, or the Power of Pipes(atthis.link)
7 points by ggpsv 2y ago|1 comments
16.
The Open Collective Platform is moving to a community governed non-profit(blog.opencollective.com)
1 points by ggpsv 2y ago|0 comments
17.
by ggpsv 2y ago
Fedora has worked flawlessly for me.
18.
by ggpsv 2y ago
Can you elaborate on how age (and the downstream packages) has made a difference in your workflows?
19.
by ggpsv 2y ago
You'll understand the inevitable tension on policing this issue considering that a couple of years ago Spain passed a law that made access to adequate and dignified housing a constitutional right.
20.
by ggpsv 2y ago
As mentioned in other comments by Spaniards weighing in, it's not really a big problem as in that's happening all the time. It is a multi-faceted issue, and for some, a philosophical standpoint stemming from the economic crisis,
21.
by ggpsv 2y ago
This is not the only way. See Vienna's public housing system as an example of what else can be done.
22.
by ggpsv 2y ago
That is how it actually works in Spain. You must present the contract when you legally register as a citizen in the city's town hall. That doesn't stop people from circumventing this requirement, on either side of the contract.
23.
by ggpsv 2y ago
I found his first appearance [0] in Rupert Spira's show to be a good introduction to his arguments. For a more thorough examination, his book "The Idea of the World". [0]: https://m.youtube.com/watch?v=MQuMzo
24.
by ggpsv 2y ago
The problem here is that this creates negative externalities on the housing market unless regulation is in place. Otherwise, it creates an incentive for short-term housing over long-term housing, which affects the people who do live there.
25.
by ggpsv 2y ago
Oh, I did not know about this essay! Thank you for sharing. To others reading this, this short essay [0] by Julian Jaynes is a good introduction to his idea of the Bicameral Mind. He later developed the idea further in his book "The Or
26.
by ggpsv 2y ago
I have read it, hence my confusion regarding how you've described stoicism.
27.
by ggpsv 2y ago
I reckon you're misunderstanding stoicism if you think of it as mental gymnastics. You're implying it is a practice of self-deceit or indulging in irrationality. Stoicism is largely about accepting things as they are and letting g
28.
by ggpsv 2y ago
How much I've learned by self-hosting the software that I use on a daily basis is what has made the experience compelling. As you point out, it is knowledge that compounds and I've reaped the benefits on my professional endeavors.
29.
by ggpsv 2y ago
I believe the parent was hinting at the other possibility: not use an image at all. When I see these AI-generated cover images in posts I'm left with a bad taste in my mouth. They look "ok" when glanced but pay more than a se
30.
by ggpsv 2y ago
I've done this in the past to assign a different exit node in Mullvad to a given Firefox container. 1. You click the Multi-Account Containers extension icon 2. Select "Manage Containers" 3. Select the container that you want

More ›