DietPi (debian) on all my ARM servers, Fedora-CoreOS on all the x86-64 servers, a pi400 as my desktop running fedora, SteamOS on the steam deck.

Are you running them from your user session? If so, when you log out it will stop your processes, unless you have enabled ‘linger’ mode.

proficient at some point in the last 20 years:

• C
• ladder logic (for PLCs - dont take this from me)
• Verilog
• VHDL
• C#
• C++
• PHP
• Go (this is my daily driver)

I would hate to count JavaScript and friends.

Not cross country but northeast corridor is fantastic - DC to Boston, ezpz. Faster than flight with the BS you need to do on both sides. Also the stations are in the hearts of the city of DC, Philly, NYC, and Boston - get off the train and walk to your hotel or whatever - it’s just the best.

You could write a script that just restarts your container, make sure unprivileged users cannot edit it, and do one of two things:

1. make a sudoers entry for your unprivileged account to call just that script as a user in the docker group with sudo
2. use setuid on the script to have it execute from the docker group even when executed by users

American Pie by Don McLean

I would listen to it on repeat for what seems like an entire era of my life. Could sing the whole thing at some point!

beautifully done buddy

K8s has a mild solution to chicken and egg situations for nodes - the nodes support ‘static manifests’ which can be pods they know how to bring up before ever connecting to the API server. So you could have your wireguard peer be brought up this way. Downside is while those static manifests show up in k8s APIs, they aren’t fully manageable since they are defined by files on disk.

Wave soldering machine - they basically suspend the whole board above a vat of solder, it bonds anywhere it can. So if they don’t need that chip on this model, it’s getting solder anyway.

Sometimes I wonder if in 75 years people will look back on our caffeine use in this generation like we currently look back at cocaine use in products in the 19th century. Until then, I continue to slurp down coffee like that is my actual job.

Yea it’s very easy to learn enough to run, it has built-in service discovery and secrets now, and writing parameterized jobs feels so much nicer than a helm chart in k8s.

10/10, would orchestrate again

I use k8s at work a lot - I choose to use Nomad at home, you may want to add that to your shortlist.

I am nearly complete migrating my ceph cluster and nomad compute cluster to arm :shrug:

Can confirm, will destroy the rubber/plastic bits in your toilet.

That being said, I still use them all the time and replace the toilet innerds after a few years. I just would rather clean the toilet every few months and replace toilet parts every few years than clean the toilet all the damn time and have old working toilet parts :shrug:

My day job is a lot of kube/openshift so nomad is refreshing. Having the template blocks are amazing and makes it so that much of what helm gave me is not required. Parameterized jobs are the best once you find a good use case for them!

• 33 nomad jobs, most being containers
• 12 physical nomad clients
  • 3 amd64 poweredge
  • 2 pi4
  • 6 Nano Pi r5c
  • 1 odroid M1
• Ceph: (nomad orchestrated)
  • 8 OSD
  • 50TB total raw disk

Make. An. Affordable. Car.

Why does every new ev for the US have to be mega deluxe luxury SUV? No one in the US is buying your affordable EV because you only sell them in Europe!

A year or two ago (whenever docker changed the business license of docker for Mac) I changed to podman and aliased docker=podman. It behaves the same, you would just about never know rootful podman vs docker.

Rootless podman is super cool and a much better security ideal - but comparing more apples to apples would be podman running as root vs docker.

Buildah lacks any sort of caching … what? assuming you are using a Containerfile… what? It’s… the same as docker on layer caching. The --cache-to and --cache-from flags are particularly sweet.

Well you are not in danger of staying at that hotel now - it’s closed.

And if you were wondering, it was amazing.