• 1 Post
  • 157 Comments
Joined 2 years ago
cake
Cake day: July 11th, 2023

help-circle








  • you and perhaps @[email protected], may I ask if you use samba with portable devices, like laptops?

    I do and my experience is that programs that try to access it when I don’t have network access tend to freeze, including my desktop environment, but any file managers too if I click the wrong place by accident. but it occurs enough without user action too.
    oh and it breaks all machines at once if the server or network is down. which is rare but very annoying.

    did you experience this too? do you have some advice? is SMB just unsuitable for this?

    honestly I would prefer if the cifs driver would keep track of last successful communication, and if it was long ago instantly fail all accesses. without unmounting so that open directories and file handles keep being valid.
    and if all software on this world wouldn’t behave as if they were doing IO on the main thread. honestly this went smoother with windows clients but I’m not going back.



  • docker in a vm in proxmox!

    no but really. I don’t like that the vm host’s kernel is shared with all the containers.
    then maybe have 2 or 3 VMs, one of which hosts essential services (not like your nextcloud, but services that are necessary to make the (internal or whole home) network work like DNS and DHCP, maybe monitoring, and another that hosts your convenience services (jellyfin, nextcloud). the first is easier to fix if it breaks, the second is not the end if the world if it does. maybe also have a third for services that would be painful to have offline (nextcloud), but try to limit it to few tasks because the goal is simplicity. this setup can help with distro upgrade difficulties, and vm custom configuration issues when you have set up something that seems to work but will prevent VM startup sometime in the future.

    podman could be a good idea too.







  • that’s not that same security. an observer will still know that you are connecting over HTTPS to a particular doman/IP, maybe they can also deduce that you are using mTLS, and all your other traffic is not protected by it at all. all the while with wireguard, they can see that it’s wireguard traffic, and where it goes, but anything inside is secret, plus if an app uses unencrypted traffic for some reason (smb, dns, custom and special protocols), wireguard will hide and protect that too.



  • I don’t think it needs a tutorial, it’s automatic. but some advice:

    • don’t delete any partitions, shrink them if you need space. who knows if windows needs it to boot
    • either have 2 ESP partitions (requires motherboard support), or use a different disk for linux. if windows and linux share an ESP, windows updates can somehow fuck up the linux boot chain, which is wonderful because everything is placed in per-OS directories. you don’t have to order from amazon
    • disable fast startup in windows (control panel, energy settings, what does the power button do menu), because it’s hibernation every time
    • disable hibernation, or handle with care. you shouldn’t boot linux while windows is hibernated: changes the ESP and windows filesystems might haven’t been written completely, also windows will do unpredictable things if these get changed while it’s hibernated. linux kernel updates and efibootmgr changes could also make windows to drop its hibernated state and not load it
    • if you use multiple disks, consider creating a linux filesystem there. ext4, btrfs, whatever, former is fine if you don’t know the difference. ntfs filesystems can be accessed well (except symbolic links?), but it’s slow, cpu-heavy because of an implementation detail that makes it maintainable