Just a stranger trying things.

  • 2 Posts
  • 20 Comments
Joined 1 year ago
cake
Cake day: July 16th, 2023

help-circle

  • There is a way to place the secret file (corresponding to the password) on a dedicated USB stick and have a script attempt to Mount it at boot to unlock the partition. If the USB stick is not found, it will revert to the password prompt. Perhaps this is the best of both?

    Make sure not to leave the USB stick plugged in, but rather only take it and and plug it in to boot then safely store it once booted, otherwise you are probably defeating the purpose of having an encrypted partition to begin with.

    I’ll add a link to read more about it shortly.

    Edit: here is one example to set it up (including to auto-decrypt ZFS) https://www.youtube.com/watch?v=7xOLxCwdi-I


  • Well yes, but also no.

    Whenever you search for a solution to your problem, it stems from the realization that something is a problem. But sometimes, you have a thing which has been done for a longtime, it was a problem with no solution and you’ve had to accept that. How would you determine one day that things can be done differently and better without constantly reevaluating everything? It’s not realistic.

    In my view, it is a perfectly reasonable question to ask “what problem does waydroid solve?” To figure out if you have that issue and you didn’t know of this solution.

    Sorry, just my 2 cents.








  • You are right and I would add that this is even a privacy and security measure, to make use of wildcard certificates. The reason is, those subdomains will be public because of websites like crt.sh which show all subdomains which have their dedicated certificate. Obfuscation can be helpful in not disclosing which are some services or naming schemes you use for yourself even if it is only meant to be for internal use.


  • I don’t know what GPU you have, whether it is AMD, Nvidia or Intel, but if you use Nvidia, the standard tool is nvidia-smi (if you install the proprietary drivers from here with the optional cuda package, you can access the command) . You will need to combine it with the watch tool for real time info.

    Otherwise, the one I prefer is nvitop.

    I’ve seen Intel specific tools too, but don’t recall them. And I’m not familiar with AMD tools.



  • I tried truenas and was at first enamored but felt quite limited when it came to using docker compose. There are no official ways for using it. Additionally because it uses kubernetes under the hood it’s not as easy to go under the hood to make it work, as it requires knowledge of that in addition to docker. There is an unofficial docker compose package but there is almost no documentation that I could find and it seems to be largely unmaintained nowadays.

    The other OS are good candidates, though through my research, if you are after reliability, people seem to prefer Debian with its more robust validation of updates.

    I’m here mostly because I’m setting up my own homelab and I’m preparing for making use of Alpine Linux, which has no desktop environment which makes it particularly fast to boot. Additionally it is very robust, has decent documentation and allows for quite some customization but requires to learn a bit about how to make it work. With its barebone structure, it is more secure as it has a smaller attack surface and you only install what you need. Perhaps an alternative for you to consider?

    Edit: to keep some sanity while needing to manage your homelab, make sure to put some weight on an os you are familiar with. I have juggled for months between OSs to find what does what I want but it has been a long battle of learning everything from scratch every time. Having tried proxmox, truenas, xcpng, and now hopefully settling with Alpine and zfs. Go the more sane way, any of those first three will work just fine.


  • I think there’s some truth to it. But I imagine it will be more AOSP than what android is with google services. AOSP is really a great operating system with very good security and built in features. And with neural engines and high bandwidth emmc, it is mostly just lacking a large amount of storage to make it all complete, but the latest SOCs are most probably powerful enough. Is there something like docker for android? :)

    Edit: I do recognize what someone else said, which is that one big challenge would be software updates. We are not that limited by hardware when we consider servers, they can easily run for years with regular software updates.