I have a Server with ~16 podman services, each their own user, network namespace and uids. This is managed using NixOS and Home manager (which supports quadlets) but I am changing my setup to a single node k3s cluster with user namespaces because that seems simpler to manage. Here a snippet for how the subuids/subuids are defined:

users.users.<username> = {
        subUidRanges = [{
            startUid = 100000+65536*( config.users.users.<username>.uid - 999);
            count = 65536;
        }];
        subGidRanges = [{
            startGid = 100000+65536*( config.users.users.<username>.uid - 999);
            count = 65536;
        }];
        home = "[...]";
        isNormalUser = true;
        linger = true;
        group = "users";
        openssh.authorizedKeys.keys = config.users.users.root.openssh.authorizedKeys.keys;
    };

This is the year of the OpenAI bankruptcy.

The fix is upstream commit 3bfdc63936dd, landed in April, and distributions are rolling it out now.

Just found a recording of the last meeting he attended: https://youtu.be/I08EpZU8z8M

https://youtu.be/tU48ouWNr8E

Now is the time to move fast and break things, do it!

Fair enough, I meant consumer demand as in not ai and data centers

Ram demand expected to drop another 40-50% in Q3?

How are you running podman? As a rootful systemd service or as a rootless user systemd services?

If you have an openwrt compatible router then you can use that as the tang server.

Also you can tell clevis to use both tpm and tang and require both to work.

All things are solved by lowering your standards far enough.

Oh, cry me an ocean

Tbf, he said no one should go in there for a few hours, can he really be blamed for their actions?

…where do you think the salt goes when the water evaporates?

You sure it wasn’t cat?

I know you can use a root shell with cat image.ISO > /dev/[...] for disk images/ISO in disk image Format (so most ISO that aren’t Windows) but using the cp command would be news for me.

https://youtu.be/FZ4qeJly1g0

Straight to jail

See also “The human condition” and “It’s a canon event!”