asap

joined 1 year ago
[–] asap 6 points 22 hours ago

If it's chunky as hella, you got stew there fella.

[–] asap 2 points 5 days ago (1 children)

The "minimal" part is incorrect; it is a super complicated container. The number of moving parts don't leave me with any confidence that I could keep it running or fix any issues going forwards.

[–] asap 2 points 5 days ago* (last edited 5 days ago)

Mainly for security. I was originally looking at CoreOS but I liked the additional improvements by the UBlue team. Since I only want it to run containers, it is a huge security benefit to be immutable and designed specifically for that workflow.

The Ignition file is super easy to do, even for just one server (substitute docker for podman depending which you have):

Take a copy of the UCore butane file:

https://github.com/ublue-os/ucore/blob/main/examples/ucore-autorebase.butane

Update it with your SSH public key and a password hash by using this command:

# Get a password hash
podman run -ti --rm quay.io/coreos/mkpasswd --method=yescrypt

Then host the butane file in a temporary local webserver:

# Convert Butane file to Ignition file
podman run -i --rm quay.io/coreos/butane:release --pretty --strict < ucore-autorebase.butane > ignition.ign

# Serve the Igition file using a temp webserver
podman run -p 5080:80 -v "$PWD":/var/www/html php:7.2-apache

During UCore setup, type in the address of the hosted file, e.g. http://your_ip_addr:5080/ignition.ign

That's it - UCore configures everything else during setup.___

[–] asap 8 points 6 days ago* (last edited 6 days ago) (2 children)

Rootless Podman :) It requires you to learn a little bit of new syntax, for example, the way you mount volumes and pass environment variables can be slightly different, but there's nothing that hasn't worked for me.

I'm using this on uBlue uCore, which I would also strongly recommend for security reasons.

[–] asap 9 points 6 days ago* (last edited 6 days ago)

Wonderful response, and I agree completely. It echoes the thoughts I've tried to convey to friends in their 20s, but much more eloquently than I have managed.

[–] asap 11 points 6 days ago (4 children)

I switched and was very glad to do so. You increase your security and so far I haven't seen any downside. Every container I've tried has worked without issues, even complex ones.

[–] asap 14 points 1 week ago

That wouldn't stop page views from being counted.

[–] asap 10 points 1 week ago

I think the issue was not so much that she was worse than other Olympic competitors, it's that she was clearly not the best from Australia. That was the part that was and should be criticized. She took a spot from people who deserved it much more.

[–] asap 2 points 2 weeks ago
[–] asap 2 points 2 weeks ago* (last edited 2 weeks ago)

I can confirm that Bazzite works flawlessly on a Razer Blade 14 without any additional configuration. Just installed from ISO and it was perfect.

view more: next ›