protonprivacy Proton Proton CEO comments about proton drive client for linux
Jump
  • Illecors Illecors 1 week ago 100%

    Ship an appimage or something, use basic fs abstraction to create an encrypted blob, do whatever you want within said blob.

    Look at virtualbox or something for inspiration.

    Look at xdg desktop portals for transfering files.

    7
  • technology Technology YouTube on TVs is cramming ads down your throat even when pausing videos
    Jump
  • Illecors Illecors 1 week ago 100%

    A bit of a PSA for LG owners running webOS:

    https://www.webosbrew.org/

    I rooted my tv and now have adless youtube, but apparently root is not a prerequisite - there also installation using dev mode. Admitedly, haven't tried it and it's probably less convenient to get it set up, but then it should be a one time thing.

    14
  • technology Technology YouTube on TVs is cramming ads down your throat even when pausing videos
    Jump
  • Illecors Illecors 1 week ago 100%

    How do you control it? Any fancy integration or just good old mouse?

    2
  • linuxmemes linuxmemes Linux: I'm not asking
    Jump
  • Illecors Illecors 2 weeks ago 100%

    I did not know that! Thank you!

    What do you mean by implementations? Is this closer debian vs rhel or more like linux vs bsd?

    2
  • gentoo Gentoo Linux KDE Plasma 6 upgrade for stable Gentoo Linux
    Jump
  • Illecors Illecors 3 weeks ago 100%

    OpenRC is daemon supervisor (probably not the right name).

    OpenRC-init is the init.

    By default, on OpenRC installations, the init will be SysV.

    I have switched a few boxen to openrc-init and have to report that it works fine.

    2
  • linuxmemes linuxmemes Linux: I'm not asking
    Jump
  • Illecors Illecors 3 weeks ago 100%

    killall -9 processname works well when you can't be asked to get the pid.

    kill -9 $$ is my favourite way to save face when I enter something into shell that shouldn't be in its history. Usual situation - switching panes and forgetting a recently used sudo session. Switching to root and getting there without a password prompt, but still typing it in. Wouldn't be helpful in situations where shell history is monitored remotely, but hey ho.

    5
  • selfhosted Selfhosted Any non-tech-background self-hosters?
    Jump
  • Illecors Illecors 3 weeks ago 100%

    I'm a syaadmin now, but self hosting nextcloud is what got me my first IT job. I now host a bunch of stuff (even email!), lemmy included.

    how did you decide that you would like to self-host? I wanted my friends to play a cs1.6 map I had created.

    4
  • science_memes Science Memes Stained Glass
    Jump
  • Illecors Illecors 3 weeks ago 100%

    That voice acting! Marvelous!

    2
  • truecomics Everett True Comics Get that boge out of my face (November 2, 1922)
    Jump
  • Illecors Illecors 3 weeks ago 100%

    It's been alright. Bank holiday Monday, wfh tomorrow and Friday. I'll survive :)

    4
  • selfhosted Selfhosted How to avoid "things going wrong"? (Immutable distros?)
    Jump
  • Illecors Illecors 3 weeks ago 100%

    dire problems, including those that accumulate over time

    That's not a thing. You create problems over time by experimening in what is, effectively, production load. If all you ever did was install any distro and kept it up to date - not much can break. Granted - shit happens, but it's incredibly rare.

    As an example - I've set up my mail server in May 2019. Chose archlinux, because I never wanted to go through a big upgrade. The only exta software installed there is mail-server related. Direct from the repos. I've become confident enough that now there's a nightly cronjob to update the system with a hook to reboot if kernel or init gets updated.

    In all those 5 a bit years I've had one issue where I hqd to revert a kernel update.

    Another example is tang on an ubuntu server. This was at a previous workplace, but essentially it's a piece of software from the repos. Originally installed on 16.04, has gone without reprovisioning all the way to 22.04. I've now left the company, but I hear it's still running.

    Upgrading an ubuntu desktop fleet with a myriad of custom software, on the other hand... let's just not talk about it.

    7
  • fuckcars Fuck Cars How long it takes 200 people to reach the front of the line with 5 modes of transport
    Jump
  • Illecors Illecors 3 weeks ago 87%

    Agree with everything you're saying.

    I think current tech just doesn't permit trains to be a viable car replacement - they cannot make turns. There's DLR in London that has a few insane curves, but that ability costs it greatly in terms of top speed. As such it's only viable in very population dense areas.

    Which also leads to a common problem when building public infra - some people just won't let go of their home, no matter what. Current laws (in a few countries I keep an eye on, at least) do not enable forced buyouts, and I don't really have a straightforward answer. Part of me says such projects should have the ability for it, but then I'm not sure I'd agree if I myself were in such a position.

    There's also a less tangible benefit of a car that I'm subconciously avoiding to mention because I don't know how to fully express myself appropriately - freedom. It's freedom to go anywhere, which could be almost fully be covered by perfect public transit; but it's also freedom from big orgs such as governments and corporations. It is possible to go across the whole Europe on a couple of tanks of an average car and 4-5 tanks if it's something thirstier. That little fuel can be easily stocked up by an individual. If rail gets shut down - you're stuffed. No policy can stop me from moving in a car.

    The context of this is russia invading Ukraine and movement restrictions put in place during covid. While I don't argue too much about covid - something had to be done; implementation and enforcement in some countries outright sucked, though - russia is an actual threat that would affect my family if it invaded further west. And if that happened - nothing beats a car in that case. Rail gets shut, roads and borders closed.

    I'm probably expanding a bit too much.

    6
  • fuckcars Fuck Cars How long it takes 200 people to reach the front of the line with 5 modes of transport
    Jump
  • Illecors Illecors 3 weeks ago 67%

    I get the idea, but comparing straight lines is not at all a representative visual.

    As a Londoner, on my 10 mile commute on a bike I easily beat the underground; and that includes the shower. During peak times I also beat cars. But when it comes to any other time - cars are just faster.

    I'm also not going to cycle 60 miles to my favourite sea town. Nobody's laying tracks all over the place to actually make cars obsolete - that would be an insane waste of space, resources and time. That also frees my up from any worries about whether whatever union will threaten to strike this month trying to protect their drunk/high/incompetent colleague from taking responsibility.

    Trains should connect towns, but most of the time when people say that they don't really think about it. What ends up happening is a spiderweb sort of layout, where one can reach the regional centre from all surrounding towns, but going north to north-east requires taking north - regional centre - north-east route. Which is simply obnoxious.

    Bike lanes should be separate. Certain mayors should not, during covid, promise to spend 2 billion on cycling infra, then force councils to immediately make it a reality, only to undo it all a few weeks later when it turns out that giving 2 of the 4 lanes of the road to cyclists it just fucking stupid. And then tearing all the separation columns/paint/etc down. 2 bil well spent.

    Bikes and cars should not share the same lights. Bike lights should not delay car lights from turning green to create an impression that cyclists are cared after. All that does is make drivers annoyed and create useless delays for everyone. Either cars or bikes should get under/overpasses, depending on the environment.

    In general - it's never the mode of transportation.

    Driver's licence should be considered a privilege that is only granted to those who can actually attentively, assertively and safely. Notice I haven't said slowly - speed has very little to do with problems on the road. It's always alcohol, drugs, phone or some other stupid thing that ruins it.

    I will never support requiring a licence/insurance/bollocks for cyclists, but something has to be done. The amount of obnoxious daydreamers is astounding. I'm not asking you to race to the next lights, Karen; all I'm saying is you should put your phone in your pocket and start paying attention to your surroundings. People have to start giving a damn.

    Public transit. It's great, until it isn't. It just so happens, that moving six 60 ton cars (that's mass loaded with people) creates excessive amounts of heat with no easy way to get rid of it. Love me a good sweaty armpit first thing in the morning. Buses. The only somewhat efficient setup I had ever seen was in Westminster. Everywhere else - garbage. They run too infrequently, they're too slow, the routes are barely tolerable - you always have to keep changing the bus. Throw in the dumbass Arriva contract bullshit where it's cheaper for them to cancel the route and hold the bus for half an hour that to be late a few minutes to every stop till end of route and you've got yourself a perfect shitshow.

    Taxis are probably a great thing, but something's wrong with their drivers - they're always trying to crash into me. It's annoying while driving, but life-threatening while cycling. I guess this one wounds back at "driving should be a privilege".

    Thanks for coming to my TED talk.

    14
  • unpopularopinion Unpopular Opinion dictatorship(in good hands) > democracy > dictatorship(in bad hands)
    Jump
  • Illecors Illecors 3 weeks ago 100%

    Democracy does seem to cater people just below average. Good monarchs can easily beat that, but then the new problem presents itself very quickly - good monarchs are far and few between.

    1
  • ancientinternet The Internet in Ancient Times I'm not big on this new 'pants' trend.
    Jump
  • Illecors Illecors 4 weeks ago 100%

    Are we talking US or UK pants here?

    12
  • linuxmemes linuxmemes How to quit VIM?
    Jump
  • Illecors Illecors 4 weeks ago 100%
  • lemmyshitpost Lemmy Shitpost It is what it is
    Jump
  • Illecors Illecors 4 weeks ago 100%

    The most traumatic event of your life so far...

    7
  • funny Funny You won't learn this in driver's ed
    Jump
  • Illecors Illecors 1 month ago 100%

    Thank you!

    2
  • funny Funny You won't learn this in driver's ed
    Jump
  • Illecors Illecors 1 month ago 100%

    Cheers!

    1
  • funny Funny You won't learn this in driver's ed
    Jump
  • Illecors Illecors 1 month ago 75%

    When is this?

    2
  • memes memes You should be able to see your reflection in it!
    Jump
  • Illecors Illecors 1 month ago 100%

    and the fish tasted great.

    It's them critters, I'm telling you!

    16
  • news News US Considers a Rare Antitrust Move: Breaking Up Google
    Jump
  • Illecors Illecors 1 month ago 100%

    The split up should happen, but don't wear the pink glasses. Transitional period will be ripe with scams of all kind.

    4
  • selfhosting Self-hosting am i an idiot: selfhosting a Signal Proxy and/or a Tor Relay
    Jump
  • Illecors Illecors 1 month ago 100%

    I've skimmed over the blog post briefly - the post itself has nothing, but the link in it to the git repo has a (what appears to me) very straightforward set of instructions.

    Text is difficult, I don't mean to be an ass; I don't want to spell it out for anyone, either. Part of magic dies that way :)

    Let me know if there's any step you need a hand with.

    4
  • selfhosted Selfhosted [Request] Automatic backups when PC comes online
    Jump
  • Illecors Illecors 2 months ago 100%

    I'm not the best person to query about backups, but in your situation I would do the following, assuming both server and desktop run on BTRFS:

    Have a script on the desktop that starts btrfs-receive and then notifies the server that it should start btrfs-send.

    You can also do rsync if BTRFS is not a thing you use, but It would either be expensive storage wise, or you would only ever have 1 backup - latest.

    4
  • Illecors Illecors 2 months ago 100%

    I've had more playing with those angles than I dare admitting. Thank you!

    7
  • atheism Atheism Mods Needed
    Jump
  • Illecors Illecors 2 months ago 100%

    I can check in whenever I've got a minute

    4
  • map_enthusiasts Map Enthusiasts Many seas, one ocean
    Jump
  • Illecors Illecors 2 months ago 100%

    I run my own instance. Lemmy UI and Jerboa (screenshot) exposes the votes to admins. If I were a developer I'd probably patch it to show to everyone.

    6
  • map_enthusiasts Map Enthusiasts Many seas, one ocean
    Jump
  • Illecors Illecors 2 months ago 100%

    The who bit is simple :)

    The why... Maybe accidental misclick?

    10
  • asklemmy Ask Lemmy What os do you use on your pc?
    Jump
  • Illecors Illecors 2 months ago 100%

    Personal desktop, a couple laptops, work desktop, work laptop, a few servers and a firewall.

    2
  • asklemmy Ask Lemmy What os do you use on your pc?
    Jump
  • Illecors Illecors 2 months ago 100%

    I use 9 systems currently:

    • 5 Gentoo
    • 2 Arch
    • 1 FreeBSD (OpnSense)
    • 1 w11

    And the w11 is a work laptop that is getting Gentoo whenever I get a minute, leaving w11 on as small a partition as I can get away with for a once a month check in to intune.

    1
  • programming Programming Scaling One Million Checkboxes to 650,000,000 checks
    Jump
  • Illecors Illecors 2 months ago 100%

    Same as the other commentor. Good read!

    2
  • asklemmy Ask Lemmy What's that song you adore but you're too embarrassed to make anyone else listen to?
    Jump
  • Illecors Illecors 2 months ago 100%
  • inhabitedbeauty Inhabited Beauty Winding street in Calvi dell'Umbria, Italy
    Jump
  • Illecors Illecors 2 months ago 83%

    This has reminded me of cs_italy! Thank you!

    4
  • main Blind Main Sighted people, what’s the most interesting thing you’ve learned about the blind community?
    Jump
  • Illecors Illecors 2 months ago 100%

    That linux boot process is not accessible. Would've never thought should or shouldn't be in the first place.

    2
  • pics pics I modded a scanner to be a camera, this is 'Waterdance' [OC]
    Jump
  • Illecors Illecors 2 months ago 100%

    Thank you! I like the engineering feel it all.

    5
  • linux_gaming Linux Gaming NVIDIA Transitions Fully Towards Open-Source GPU Kernel Modules | NVIDIA Technical Blog
    Jump
  • Illecors Illecors 2 months ago 100%

    As comment in another post said - this is for modules only. There's still a ton of binary fluff that is the main cause of issues and that is not getting open sourced.

    14
  • android Android Google Confirms Play Store App Deletion—Now Just 6 Weeks Away
    Jump
  • Illecors Illecors 2 months ago 100%

    I'm running Graphene on a pixel - google camera works as it would normally. The only issue is the preview-click-to-open-gallery bit not working. It needs the Photos app which I have not installed on purpose.

    2
  • pics pics I modded a scanner to be a camera, this is 'Waterdance' [OC]
    Jump
  • Illecors Illecors 2 months ago 100%

    Could elaborate a bit on the scanner-becoming-camera thing? I've never heard of that before.

    Absolutely cool picture!

    3
  • world World News Two large oil tankers collide and catch fire near Singapore
    Jump
  • Illecors Illecors 2 months ago 100%

    Is this from Tokyo Vice?

    3
  • world World News Two large oil tankers collide and catch fire near Singapore
    Jump
  • Illecors Illecors 2 months ago 100%

    No, cardboard is out of the question. Same for paper.

    2
  • Illecors Illecors 2 months ago 100%

    It looks so cute!

    2
  • graybeard
    graybeard Illecors 4 months ago 100%
    Writing a Unix clone in about a month https://drewdevault.com/2024/05/24/2024-05-24-Bunnix.html

    He also links a [Mastodon thread](https://fosstodon.org/@drewdevault/112319697309218275) where he had documented the first few days with pictures. I genuinely cannot fathom the talent and drive combo some people possess.

    1
    0
    mildlyinfuriating
    Mildly Infuriating Illecors 7 months ago 86%
    People using 'less' when they should be using 'fewer'

    EDIT: you guys have dug up some truly horrible pisstakes :D Thank you for those. To the serious folk - relax a little. This is `Mildly Infuriating`, not `I'm dying if this doesn't stop`. As a non-native speaker I was taught a certain way to use the language. The rules were not written down by me, nor the teachers - it was done by the native folk. Peace!

    162
    126
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearFO
    Folderol Illecors 7 months ago 94%
    OpenAI researcher Andrej Karpathy departs firm www.reuters.com

    [Archive link](https://archive.ph/J3wan) Maybe those board and ceo shenanigans did leave a bad taste internally, afterall.

    34
    3
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSP
    Spacetime Illecors 7 months ago 100%
    [APOD] Rosette Deep Field https://apod.nasa.gov/apod/image/2402/RosetteCone_Bernard_5398.jpg

    [nasa.gov](https://apod.nasa.gov/apod/ap240214.html)

    72
    1
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebear11
    11foot8 Illecors 8 months ago 100%
    But should you?

    cross-posted from: https://lemmy.world/post/11608344 > Credit: https://mas.to/@markarayner

    2
    0
    general
    General Lemmy.Cafe Illecors 8 months ago 97%
    Lemmy Cafe has had the database upgraded to PostgreSQL 16

    The upgrade has gone through smoothly and everything seems to be running smoothly. The performance looks to be better on the backend, time will tell if the memory leak issue is actually solved. So far, though - so good!

    32
    3
    general
    General Lemmy.Cafe Illecors 8 months ago 100%
    [Maintenance] 2 February 10AM UTC www.timeanddate.com

    ### Lemmy Cafe will be having its database upgraded. #### Reasons - Pict-rs is expecting PostgreSQL 16. It's running fine now, but it might not be at some future point. - PostgreSQL 15 has a bug that requires `jit` to be turned off - otherwise DB keeps consuming all the memory available on the system and then some. In the end it gets culled by the kernel. This has performance as well as reliability issues. While turning `jit` off has remedied the constant failure, it has also made the database a bit slower. I prefer squeezing out as much performance as possible :) #### Plan - Point `nginx` to the maintenance page - Shut down PostgreSQL 15 - Run the upgrade tool - Start up PostgreSQL 16 - Point `nginx` to lemmy #### Expected downtime About an hour, if things go well. More if not so. Will try to keep the maintenance page updated. Here's the [timezone converter](https://www.timeanddate.com/worldclock/converter.html?iso=20240202T100000&p1=1440&p2=tz_et&p3=tz_pt&p4=236)

    27
    1
    blender
    Blender Illecors 8 months ago 97%
    Celebrating 30 years of Blender — blender.org www.blender.org

    Amazing milestone! Also testing federation

    32
    1
    graybeard
    graybeard Illecors 8 months ago 100%
    [SOLVED] Lemmy "server error" when pict-rs is not running

    There are a few reasons why pict-rs might not be running, upgrades being one of them. At the moment the whole of lemmy UI will crash and burn if it cannot load a site icon. Yes, that little thing. Here's the [github issue](https://github.com/LemmyNet/lemmy-ui/issues/2211). To work around this I have set the icon and banner (might as well since we're working on this) to be loaded from a local file rather than nginx. Here's a snippet of `nginx` config from the `server` block: ``` location /static-img/ { alias /srv/lemmy/lemmy.cafe/static-img/; # Rate limit limit_req zone=lemmy.cafe_ratelimit burst=30 nodelay; # Asset cache defined in /etc/nginx/conf.d/static-asset-cache.conf proxy_cache lemmy_cache; } ``` I have also included the rate limitting and cache config, but it is not, strictly speaking, necessary. The somewhat important bit here is the `location` - I've tried using `static`, but that is already used by lemmy itself, and as such breaks the UI. Hence the `static-img`. I have downloaded the icon and banner from the URLs saved in the database (assuming your instance id in `site` is, in fact, 1): ``` SELECT id, icon, banner FROM site WHERE id = 1; id | icon | banner ----+----------------------------------------------+------------------------------------------------ 1 | https://lemmy.cafe/pictrs/image/43256175-2cc1-4598-a4b8-2575430ab253.webp | https://lemmy.cafe/pictrs/image/c982358f-6a51-4eb6-bf0e-7a07a756e600.webp (1 row) ``` I have then saved those files in `/srv/lemmy/lemmy.cafe/static-img/` as `site-icon.webp` and `site-banner.webp`. Changed the ownership to that of nginx (`www-data` in debian universe, `http` and `httpd` in others. I have then updated the site table to point to the new location for `icon` and `banner`: ``` UPDATE site SET icon = 'https://lemmy.cafe/static-img/site-icon.webp' WHERE id = 1; UPDATE site SET banner = 'https://lemmy.cafe/static-img/site-banner.webp' WHERE id = 1; ``` Confirm it got applied: ``` SELECT id, icon, banner FROM site WHERE id = 1; id | icon | banner ----+----------------------------------------------+------------------------------------------------ 1 | https://lemmy.cafe/static-img/site-icon.webp | https://lemmy.cafe/static-img/site-banner.webp (1 row) ``` That's it! You can now reload your nginx server (`nginx -s reload`) to apply the new path!

    35
    3
    graybeard
    graybeard Illecors 8 months ago 100%
    Lemmy server setup on lemmy.cafe

    #### docker compose ___ I'm using a `v2` - notice the lack of a dash between `docker` and `compose`. I've recently learnt of the default filenames `docker compose` is trying to source upon invocation and decided to give it a try. The files are: - compose.yml - compose.override.yml I have split the default `docker-compose.yml` that `lemmy` comes with into 2 parts - `compose.yml` holds `pict-rs`, `postfix` and, in my case, `gatus`. `compose.override.yml` is responsible for lemmy services only. This is what the files contain: ::: spoiler compose.yml ``` x-logging: &default-logging driver: "json-file" options: max-size: "20m" max-file: "4" services: pictrs: image: asonix/pictrs:0.5.0 user: 991:991 ports: - "127.0.0.1:28394:8080" volumes: - ./volumes/pictrs:/mnt restart: always logging: *default-logging entrypoint: /sbin/tini -- /usr/local/bin/pict-rs run environment: - PICTRS__OLD_REPO__PATH=/mnt/sled-repo - PICTRS__REPO__TYPE=postgres - PICTRS__REPO__URL=postgres://pictrs:<redacted>@psql:5432/pictrs - RUST_LOG=warn - PICTRS__MEDIA__MAX_FILE_SIZE=1 - PICTRS__MEDIA__IMAGE__FORMAT=webp deploy: resources: limits: memory: 512m postfix: image: mwader/postfix-relay environment: - POSTFIX_myhostname=lemmy.cafe volumes: - ./volumes/postfix:/etc/postfix restart: "always" logging: *default-logging gatus: image: twinproduction/gatus ports: - "8080:8080" volumes: - ./volumes/gatus:/config restart: always logging: *default-logging deploy: resources: limits: memory: 128M ``` ::: ___ `compose.override.yml` is actually a hardlink to the currently active deployment. I have two separate files - `compose-green.yml` and `compose-blue.yml`. This allows me to prepare and deploy an upgrade to lemmy while the old version is still running. ::: spoiler compose-green.yml ``` services: lemmy-green: image: dessalines/lemmy:0.19.2 hostname: lemmy-green ports: - "127.0.1.1:14422:8536" restart: always logging: *default-logging environment: - RUST_LOG="warn" volumes: - ./lemmy.hjson:/config/config.hjson # depends_on: # - pictrs deploy: resources: limits: # cpus: "0.1" memory: 128m entrypoint: lemmy_server --disable-activity-sending --disable-scheduled-tasks lemmy-federation-green: image: dessalines/lemmy:0.19.2 hostname: lemmy-federation-green ports: - "127.0.1.1:14423:8536" restart: always logging: *default-logging environment: - RUST_LOG="warn,activitypub_federation=info" volumes: - ./lemmy-federation.hjson:/config/config.hjson # depends_on: # - pictrs deploy: resources: limits: cpus: "0.2" memory: 512m entrypoint: lemmy_server --disable-http-server --disable-scheduled-tasks lemmy-tasks-green: image: dessalines/lemmy:0.19.2 hostname: lemmy-tasks ports: - "127.0.1.1:14424:8536" restart: always logging: *default-logging environment: - RUST_LOG="info" volumes: - ./lemmy-tasks.hjson:/config/config.hjson # depends_on: # - pictrs deploy: resources: limits: cpus: "0.1" memory: 128m entrypoint: lemmy_server --disable-http-server --disable-activity-sending ############################################################################# lemmy-ui-green: image: dessalines/lemmy-ui:0.19.2 ports: - "127.0.1.1:17862:1234" restart: always logging: *default-logging environment: - LEMMY_UI_LEMMY_INTERNAL_HOST=lemmy-green:8536 - LEMMY_UI_LEMMY_EXTERNAL_HOST=lemmy.cafe - LEMMY_UI_HTTPS=true volumes: - ./volumes/lemmy-ui/extra_themes:/app/extra_themes depends_on: - lemmy-green deploy: resources: limits: memory: 256m ``` ::: ::: spoiler compose-blue.yml ``` services: lemmy-blue: image: dessalines/lemmy:0.19.2-rc.5 hostname: lemmy-blue ports: - "127.0.2.1:14422:8536" restart: always logging: *default-logging environment: - RUST_LOG="warn" volumes: - ./lemmy.hjson:/config/config.hjson # depends_on: # - pictrs deploy: resources: limits: # cpus: "0.1" memory: 128m entrypoint: lemmy_server --disable-activity-sending --disable-scheduled-tasks lemmy-federation-blue: image: dessalines/lemmy:0.19.2-rc.5 hostname: lemmy-federation-blue ports: - "127.0.2.1:14423:8536" restart: always logging: *default-logging environment: - RUST_LOG="warn,activitypub_federation=info" volumes: - ./lemmy-federation.hjson:/config/config.hjson # depends_on: # - pictrs deploy: resources: limits: cpus: "0.2" memory: 512m entrypoint: lemmy_server --disable-http-server --disable-scheduled-tasks lemmy-tasks-blue: image: dessalines/lemmy:0.19.2-rc.5 hostname: lemmy-tasks-blue ports: - "127.0.2.1:14424:8536" restart: always logging: *default-logging environment: - RUST_LOG="info" volumes: - ./lemmy-tasks.hjson:/config/config.hjson # depends_on: # - pictrs deploy: resources: limits: cpus: "0.1" memory: 128m entrypoint: lemmy_server --disable-http-server --disable-activity-sending ############################################################################# lemmy-ui-blue: image: dessalines/lemmy-ui:0.19.2-rc.5 ports: - "127.0.2.1:17862:1234" restart: always logging: *default-logging environment: - LEMMY_UI_LEMMY_INTERNAL_HOST=lemmy-blue:8536 - LEMMY_UI_LEMMY_EXTERNAL_HOST=lemmy.cafe - LEMMY_UI_HTTPS=true volumes: - ./volumes/lemmy-ui/extra_themes:/app/extra_themes depends_on: - lemmy-blue deploy: resources: limits: memory: 256m ``` ::: ___ The only constant different between the two is the IP address I use to expose them to the host. I've tried using ports, but found that it's much easier to follow it in my mind by sticking to the ports and changing the bound IP. I also have two `nginx` configs to reflect the different IP for `green`/`blue` deployments, but pasting the whole config here would be a tad too much. #### No-downtime upgrade ___ Let's say `green` is the currently active deployment. In that case - edit the `compose-blue.yml` file to change the version of lemmy on all 4 components - lemmy, federation, tasks and ui. Then bring down the `tasks` container from the active deployment, activate the whole of `blue` deployment and link it to be the `compose.override.yml`. Once the `tasks` container is done with whatever tasks it's supposed to do - switch over the `nginx` config. Et voilà - no downtime upgrade is live! Now all that's left to do is tear down the `green` containers. ``` docker compose down lemmy-tasks-green docker compose -f compose-blue.yml up -d ln -f compose-blue.yml compose.override.yml # Wait for tasks to finish ln -sf /etc/nginx/sites-available/lemmy.cafe-blue.conf /etc/sites-enabled/lemmy.cafe.conf nginx -t && nginx -s reload docker compose -f compose-green.yml down lemmy-green lemmy-federation-green lemmy-tasks-green lemmy-ui-green ``` #### lemmy.hjson ___ I have also multiplied `lemmy.hjson` to provide a bit more control. ::: spoiler lemmy.hjson ``` { database: { host: "psql" port: 5432 user: "lemmy" password: "<redacted>" pool_size: 3 } hostname: "lemmy.cafe" pictrs: { url: "http://pictrs:8080/" api_key: "<redacted>" } email: { smtp_server: "postfix:25" smtp_from_address: "lemmy@lemmy.cafe" tls_type: "none" } } ``` ::: ::: spoiler lemmy-federation.hjson ``` { database: { host: "psql" port: 5432 user: "lemmy_federation" password: "<redacted>" pool_size: 10 } hostname: "lemmy.cafe" pictrs: { url: "http://pictrs:8080/" api_key: "<redacted>" } email: { smtp_server: "postfix:25" smtp_from_address: "lemmy@lemmy.cafe" tls_type: "none" } worker_count: 10 retry_count: 2 } ``` ::: ::: spoiler lemmy-tasks.hjson ``` { database: { host: "10.20.0.2" port: 5432 user: "lemmy_tasks" password: "<redacted>" pool_size: 3 } hostname: "lemmy.cafe" pictrs: { url: "http://pictrs:8080/" api_key: "<redacted>" } email: { smtp_server: "postfix:25" smtp_from_address: "lemmy@lemmy.cafe" tls_type: "none" } } ``` ::: ___ I suspect it might be possible to remove `pict-rs` and/or `email` config from some of them, but honestly it's not a big deal and I haven't had enough time, yet, to look at it. #### Future steps I'd like to script the actual switch-over - it's really trivial, especially since most of the parts are there already. All I'd really like is apply strict failure mode on the script and see how it behaves; do a few actual upgrades. Once that happens - I'll post it here. So long and thanks for all the fish!

    28
    2
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSP
    Spacetime Illecors 8 months ago 100%
    [APOD] Quadrantids of the North

    [NASA.gov](https://apod.nasa.gov/apod/ap240111.html)

    25
    1
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearST
    Statecraft Illecors 8 months ago 100%
    [LIVE] Post Office scandal live: Ex-Post Office investigator to face questions as inquiry resumes - BBC News www.bbc.co.uk

    Proper cocked up cover up. Now live!

    40
    1
    general
    General Lemmy.Cafe Illecors 8 months ago 97%
    Lemmy Cafe upgraded to 0.19.2

    The process went through smoothly. I have also used the opportunity to split up a singular lemmy container into individual tasks - this has enabled a seemless upgrade process with no downtime, bar a few process quirks I need to work out. There have been some federation fixes merged into this release, so the situation should definitely be improving overall! I will make a more detailed write up of the whole setup later on, other admins might find it useful. Or not.

    32
    4
    graybeard
    graybeard Illecors 8 months ago 96%
    Wi-Fi Alliance starts certifying hardware for Wi-Fi 7 www.theregister.com

    > Using optimization techniques, the wireless spec can support a theoretical top speed of more than 40Gbps, though vendors like Qualcomm suggest 5.8Gbps is a more realistic expectation That is insane! Not that I would, but this could utilise the full pipe of my home connection on wifi only!

    57
    18
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSP
    Spacetime Illecors 8 months ago 99%
    [APOD] Thor's Helmet

    [apod.nasa.gov](https://apod.nasa.gov/apod/ap240109.html)

    106
    1
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearST
    Statecraft Illecors 8 months ago 95%
    The EU’s carbon border tax and the fragmentation of global trade https://www.ft.com/content/ca51ebf5-fbb8-4c88-a93d-ded3d6d3bcdd

    [Archive link](https://archive.ph/MJpzu) This feels sensible. There will always be naysayers, there will always be exports to poorer countries, but arguing against such a policy makes it sound like protecting the status quo for the sake of it.

    22
    0
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearST
    Statecraft Illecors 8 months ago 100%
    ­­Ukraine Has a Pathway to Victory https://foreignpolicy.com/2024/01/08/ukraine-russia-war-victory-stalemate-strategy-weapons-congress-aid/

    [Archive link](https://archive.ph/T5ciR) It's a theoretical pathway, but it's a nice read overall for someone who's not into warring all that much. I've found the explanations understandable.

    53
    9
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearFO
    Folderol Illecors 8 months ago 95%
    Town celebrates return of the sun after 30 nights www.bbc.co.uk

    Some really beautiful shots in the video.

    64
    6
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearFO
    Folderol Illecors 8 months ago 91%
    I’m a Supercommuter. Here’s What It’s Really Like. www.wsj.com

    [Archive link](https://archive.ph/kdB4f) In a surprise to absolutely nobody - it sucks.

    40
    14
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSP
    Spacetime Illecors 9 months ago 100%
    NASA science bound for Moon aboard Vulcan Centaur rocket www.theregister.com

    The launch has been successful!

    53
    2
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearFO
    Folderol Illecors 9 months ago 100%
    Four things that turn 100 in 2024 www.bbc.co.uk

    Winter Olympics, radio pips, MGM and TV images.

    21
    0
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSP
    Spacetime Illecors 9 months ago 100%
    [APOD] Zeta Oph: Runaway Star
    54
    1
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearFO
    Folderol Illecors 9 months ago 98%
    Crypto hedge fund CEO may not exist; probe finds no record of identity arstechnica.com

    Now **that** is how you run a proper scam. Take notes, kids!

    146
    14
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearFO
    Folderol Illecors 9 months ago 90%
    Google Is Finally Killing Cookies. Advertisers Still Aren’t Ready. www.wsj.com

    [Archive link](https://ghostarchive.org/archive/5aHJz) The ad companies are complaining. This is either a farce or Google is doing something actually useful this time.

    61
    14
    graybeard
    graybeard Illecors 9 months ago 100%
    research!rsc: Running the “Reflections on Trusting Trust” Compiler https://research.swtch.com/nih

    Saw this posted somewhere on Lemmy already, but lost it. This is a *great* write-up of the famous Ken Thompson's lecture "*Reflections on Trusting Trust*". The author implements a bad compiler and explains what bits do what. I've found this an easy-yet-informative read. Would highly recommend!

    25
    0
    general
    General Lemmy.Cafe Illecors 9 months ago 87%
    Merry Christmas, folks!

    May your families grow strong and your presents plentiful!

    23
    2
    general
    General Lemmy.Cafe Illecors 9 months ago 100%
    Lemmy Cafe has been upgraded to 0.19

    The upgrade has reset the JWT, so you'll have to login again on your device as well as set up 2FA again. Enjoy the [new features](/post/1847683)!

    30
    12
    general
    General Lemmy.Cafe Illecors 9 months ago 95%
    This is a thread-safe instance

    Pun intended 😁 Just wanted to reiterate, my stance hasn't changed since [last declaration](https://lemmy.cafe/post/112513). If facebook starts funny business with extra domains - those will be added asap.

    45
    1
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearSP
    Spacetime Illecors 10 months ago 100%
    Vega and Comet 12P/Pons-Brooks

    [Nasa.gov](https://apod.nasa.gov/apod/ap231208.html)

    49
    0
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearST
    Statecraft Illecors 10 months ago 98%
    The UN secretary-general invoked 'Article 99' to push for a Gaza cease-fire. What exactly is it? apnews.com

    [Archive link](https://archive.ph/jIxHh) Most likely nothing is going to come out of this, but I guess it's still a nice political gesture.

    65
    3
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearST
    Statecraft Illecors 10 months ago 100%
    Europe signs off on €1.2B for homegrown cloud project www.theregister.com

    [Archive link](https://archive.ph/ya1Bi) I do wish EC pulls this off. It would great having an actual home-grown competitor to cloud providers. EU does data protection better than anyone else, this would very much be a symbiotic relationship.

    54
    1
    graybeard
    graybeard Illecors 10 months ago 96%
    AWS exec: Our understanding of open source is changing www.theregister.com

    Doesn't happen very often, but I agree with AWS. Open source has very much become a vendor-sponsored affair and there are fewer and fewer actual community-driven projects.

    69
    8
    graybeard
    graybeard Illecors 10 months ago 100%
    [PSA] Linode Archlinux kernel 6.5.13-hardened breaks system

    Just spent a few hours trying to figure out why the VM was impossible to access via SSH *and* Linode's recovery console. Very difficult to say what the cause is, but for a few seconds I did see BPF errors in the console about not being able to find something. Booting rescue image, chrooting and installing 6.5.12-hardened fixed it.

    24
    1
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearST
    Statecraft Illecors 10 months ago 98%
    Chinese Hospitals Are Housing Another Deadly Outbreak https://foreignpolicy.com/2023/11/28/chinese-hospitals-pandemic-outbreak-pneumonia/

    Regular archivers are sad today, I've upload the PDF of the article page [here](https://ufile.io/wrvj78lg). ___ A fairly strongly worded opinion article by a clinician and associate professor. Let's hope she's wrong, but the argument she provides sounds plausible.

    65
    6
    graybeard
    graybeard Illecors 10 months ago 100%
    Reading Borough Council apologizes for dodgy infosec advice www.theregister.com

    Facepalm. That's all I can say. > The local authority declined to provide an answer on how the original advice to disable HTTPS was approved internally.

    50
    5
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearFO
    Folderol Illecors 10 months ago 94%
    A plane fueled by fat and sugar has crossed the Atlantic Ocean https://www.washingtonpost.com/climate-solutions/2023/11/28/virgin-atlantic-sustainable-flight-lands-saf/

    [Archive link](https://ghostarchive.org/archive/cpx8n) A step in the right direction. Unfortunately, the method itself is not currently sustainable as jet engines are not adapted to run on such fuel all the time as well as the fuel supply is limited.

    53
    9