TCB13

TCB13 OP , 9 months ago to selfhosted in Debian: ISO Downloads and Offline Archives

Because you’re missing the point: if you want to build offline archives you can’t use something that is online by definition.

It really baffles me how careless people are with depending on internet 24h7 these days and how it completely goes through your head that maybe, if you’ve to deploy dozen of machines a day (automated or manually) you might not want to be redownloading the same stuff every single time and maybe a few packages aren’t even available on the provided ISOs at debian.org. Additionally some people are required to work on airgapped networks and systems that can’t have Internet access to download packages…

Since you didn’t care to actually read most of the article I’ll just say this:

Larger images, such as Blu-ray, aren’t available for HTTP download however the Debian project provides Jigdo template files that can be used to build those images from the repositories. Jigdo makes it possible and easy to create offline images containing with all packages the repository has to offer.

This is just perfect, a community about self-hosting that can’t even self host the basic software they require lol

TCB13 , 9 months ago to selfhosted in Moving Proxmox server from one SSD to another.

Suggestion: spare your future self right now and move to a bare metal Debian install with LXD/LXC (from the repository) for containers/VMs. You can probably do just fine with using containers for everything. LXD is easy, fast, reliable and all of those are way more reliable / reasonable / open-source / less bullshit filled than Proxmox.

TCB13 , 9 months ago to piracy in is there a way to watch pirated shows/movies together?

What about you all torrent the same file, hit play at the same time and use some audio / video chat for the rest? Discord, MS Teams (lol), Zoom, Skype, FaceTime, whatever is available…

TCB13 , 9 months ago to linux in I know I know, another "help me choose a distro" thread

This excludes Debian where the package manager is too complex and packages deviate from upstream too much

This isn’t even remotely true.

Also going with Debian + GNOME Software + Flatpak isn’t a bad ideia at all. Unlike Snaps, Flatpaks are fast you won’t notice delays and waste 10GB of RAM for each application you want to use. And at the end of the day you get rock solid Debian + the latest and greatest software as Flatpaks without “deviation from upstream” and you also keep a clean system.

TCB13 , 9 months ago (edited 9 months ago) to selfhosted in I’ve just released Gatekeeper 1.6.0. It’s a single executable that turns any Linux machine into a home gateway. Now with realtime traffic graphs, LAN autoconfiguration, full cone NAT and better looks.

My questions exactly. Furthermore ISP router typically also have wifi, so wifi clients on that won’t be even visible to this… please clarify is this is supposed to be yet another openwrt / router solution or what you’re doing here… BUT I fucking love the UI :)

TCB13 OP , 9 months ago to linux in Debian: ISO Downloads and Offline Archives

Ahahaha just an average decent datacenter.

TCB13 , 9 months ago to linux in The Flaws of Flatpak - What do you think about Flatpak Security?

Hmm I kind of tried that route before but haven’t gone so far. I’ll check it asap. Thanks!

TCB13 , 9 months ago to selfhosted in Server Hardware?

I was just trying to share a bit of my experience, I too have datacenter / server hardware experience and have dealt with a ton of mini computers and those ARMs and Chinese brands aren’t what one usually expects at the most fundamental details.

TCB13 , 9 months ago (edited 5 months ago) to selfhosted in Server Hardware?

Yes but ARM is great but compared to server hardware it is shit when it comes to performance and reliability. If you come from server hardware and you really max it out you’re going to have a poor experience.

Also I personally like to avoid the Raspberry Pi and their stuff as much as possible. They’ve done good things for the community however they’ve some predatory tactics and shenanigans that aren’t cool. Here a few examples of what people usually fail to see:

• Requires a special tool to flash. In the past it was all about getting a image and using etcher, dd or wtv to flash it into a card, now they’re pushing people to use Raspberry Pi Imager. Without it you won’t be able to easily disable telemetry and/or login via network out of the box;
• Includes telemetry;
• No alternative open Debian based OS such as Armbian (only the Ubuntu variant);
• Raspberry Pi 5 finally has PCI. But instead of doing what was right they decided to include some proprietary bullshit connector that requires yet another board made by them. For those who are unware other SBC manufacturers simply include a standard PCI slot OR a standard NVME M2 slot. Both great option as hardware for them is common and cheap;
• It is overpriced and behind times.

For what’s worth the NanoPi M4 released in 2018 with a RK3399 already had a PCI interface, 4GB of RAM and whatnot and was cheaper than the Raspberry Pi 3 Model B+ from the same year that had Ethernet shared with the USB bus.

If you don’t want those big brands (I only suggested them because they’re cheap second hand) build something yourself on consumer hardware or pick a Chinese brand.

Those big brands are cheap though, for 100€ you can get an HP Mini with an i5 8th gen + 16GB of ram + 256GB NVME that obviously has a case, a LOT of I/O, PCI (m2) comes with a power adapter and more importantly it outperforms a RPi5 in all possible ways. Note that the RPi5 8GB of ram will cost you 80€ + case + power adapter + bullshit pci adapter + sd card + whatever else money grab.

Side not on alternative brands, HP mini units are reliable the BIOS is good and things work. Now the trendy MINISFORUM is cool however their BIOS come out of the factory with wired bugs and the hardware isn’t as reliable - missing ESD protection on USB in some models and whatnot.

TCB13 , 9 months ago to linux in Cross platform terminal emulator?

SSH config is versatile, what I do is keep a simple .ssh/config file like this in every machine that isn’t synced:

<span style="color:#323232;">Host *
</span><span style="color:#323232;">  IdentitiesOnly no
</span><span style="color:#323232;">  AddKeysToAgent yes
</span><span style="color:#323232;">  IdentityFile "machinexyz-key-file"
</span><span style="color:#323232;">
</span><span style="color:#323232;">Include "~/Preferences/ssh/config"
</span>

This file will simply configure it to use the IdentityFile of this machine and import another file that has the actual host definitions at ~/Preferences/ssh/config - that is the one I sync with Syncthing. This gives a nice way to customize settings for each machine (key path and whatnot) while keeping a global file with in sync between all of them.

For reference here is ~/Preferences/ssh/config:

<span style="color:#323232;">Host *
</span><span style="color:#323232;">  IdentitiesOnly no
</span><span style="color:#323232;">  AddKeysToAgent yes
</span><span style="color:#323232;">
</span><span style="color:#323232;">host server1
</span><span style="color:#323232;">  hostname x.x.x.x
</span><span style="color:#323232;">  user xxxxx
</span><span style="color:#323232;">  port 1111
</span><span style="color:#323232;">
</span><span style="color:#323232;">host server2
</span><span style="color:#323232;">  hostname x.x.x.x
</span><span style="color:#323232;">  user xxxxx
</span><span style="color:#323232;">  port 2222
</span>

TCB13 , 9 months ago to selfhosted in Server Hardware?

Just out today, but probably overpriced: cnx-software.com/…/mixtile-cluster-box-supports-f…

Why not get a few HP / Dell mini computers and cluster them? Small, nice and power efficient (because there are models with “mobile” CPUs).

TCB13 , 9 months ago to selfhosted in Self Hosted Automatic Bookmark Backup and Synchronization

To sync with Floccus you don’t need that webserver, that thing is very customized to deal with Nextcloud bullshit.

A simple nginx setup with this will get the job done:

<span style="color:#323232;">    root /mnt/SSD1/web/root;
</span><span style="color:#323232;">    location /dav/bookmarks {
</span><span style="color:#323232;">        alias /mnt/SSD1/web/dav/bookmarks;
</span><span style="color:#323232;">        auth_basic              realm_name;
</span><span style="color:#323232;">        auth_basic_user_file    /etc/nginx/.credentials-dav.list;
</span><span style="color:#323232;">        dav_methods     PUT DELETE MKCOL COPY MOVE;
</span><span style="color:#323232;">        dav_ext_methods PROPFIND OPTIONS;
</span><span style="color:#323232;">        dav_access      user:rw;
</span><span style="color:#323232;">        client_max_body_size    0;
</span><span style="color:#323232;">        create_full_put_path    on;
</span><span style="color:#323232;">    }
</span>

The file /etc/nginx/.credentials-dav.list stores authentication data. You can create users with the following command:

<span style="color:#323232;">htpasswd -c /etc/nginx/.credentials-dav.list yourusername
</span>

Then point Floccus at your server: 10.0.0.1/dav/bookmarks

Enjoy.

TCB13 , 9 months ago to selfhosted in Server Hardware?

Don’t get server hardware, use regular desktop/laptop machines as they’ll be more than enough for you. Server hardware is way more expensive and won’t be of any advantage. If you’re looking to buy you can even get very good 9-10th gen Intel CPUs and motherboards that are perfect to run servers (very high performance) but that people don’t want because they aren’t good to play the latest games. This hardware is also way more power efficient and sometimes even more powerful than any server hardware that you might get for the same price. Get this hardware for cheap and enjoy.

TCB13 , 9 months ago to linux in Cross platform terminal emulator?

Why can’t you use native clients under Windows, Mac and Linux then? Use what your platform offers for the best experience. I do this and sync my ssh config file with Syncthing.

In iOS we can’t have Syncthing so I’ve to use panic.com/prompt/ and live with it.

TCB13 , 9 months ago to linux in The Flaws of Flatpak - What do you think about Flatpak Security?

Point away!