• 1 Post
  • 147 Comments
Joined 3 months ago
cake
Cake day: June 9th, 2024

help-circle
  • I’ve never liked web UIs that have that level of permissions to screw around with the OS it’s hosted on.

    Maybe that’s just some grumpy greybeard thing, but I’d really rather not have a single management plane that has full access to EVERYTHING, since that just feels like you’re one configuration oopsie away from some guy in Albania (<3 you, Albania) uploading all his hentai to your server and then trying to hack the FBI or some shit. (Or, you know, the much more boring oops-i’m-a-zombie-now outcome.)


  • Yeah I ran ethernet everywhere when I bought my house and it’s fantastic. Multi-gig everywhere!

    I’m also never fucking doing that again because the builder of my house must have gotten a fantastic fucking deal 120 years ago on 2x4s, because they decided to do a narrow cross-bracing between studs on every damn wall, so I had fucking rock-hard old growth 2x4s to drill through every 14 inches or so in every damn wall I was running cables on.

    Killed several hundred dollars in drill bits and other tools (broke a few fish tapes!) getting this shit done, AND it took like a month to get finished and then the walls patched where I had to cut into it to see what in the fuck the drill was hitting.

    But yeah, ethernet everywhere is great!



  • Yeah, I’ve never seen a multi-bay enclosure that doesn’t just randomly decide it’s done with this bullshit and have random dropouts or just plain fucking off entirely.

    I don’t know WHY they’re so bad, but they are :/

    I just converted part of a closet to a network closet and added some shelves and stuffed everything in there, though I know that’s not an option everyone has.


  • Should ask what platform here, IMO: virt-manager is Linux-only. (Or, I suppose, doing remote X stuff to run it elsewhere but that’s probably not what OP is after.)

    There’s some command line stuff you can run on Windows, but then at that point, you can just use virsh on the host itself.

    I’m of the opinion that virsh to manage and then a spice or vnc client to access the VMs is the “best” way to go so you’re not tied down to having to have a specific OS running a specific tool in order to do any admin stuff, since I mean, after you deploy how often are you screwing with the VM settings?


  • IME, they’re all the same chipset/set of chipsets and are all pretty awful.

    That said, the most reliable ones I’ve found actually come from drives that have been shucked. Western Digital or whomever aren’t going to do the absolute lowest price piece of shit enclosure for something they’re going to warranty for 3 or 5 years, so those have been what I try to find and have had reasonable luck with them in terms of reliability and not-catching-shit-on-fire.

    Usually cheap as shit on eBay or whatever, since they’re basically the packaging trash around something that was purchased for the gooey insides.




  • Depends on your threat model and actual realistic concerns.

    Ultimately, if it comes down to it, there’s very little you can do that’s failsafe and 100% guaranteed: the provider has access to your disk, all data in your instances RAM (including encryption keys), and can watch your processes execute in real time and see even the specific instructions your vCPU is executing.

    Don’t put illegal shit on hardware you do not physically own and have physical control over, and encrypt everything else but like, if the value of your shit is high enough, you’re fucked if you’re using someone else’s computer.


  • Either is fine: the question is what happens when something breaks and if you care about issues and such.

    If your docker host depends on the pihole it’s running, there can be some weirditry if it’s not available during boot and whatnot (or if it crashes, etc.).

    …I ended up with a docker container of pihole and an actual pi as the secondary so that it’s nice and redundant.




  • I know you’ve mentioned it, but Navidrome is probably the best choice, but it won’t be exactly what you want since you need to interact with a proprietary service.

    But, that said, I’ve gone through basically every single music server I’ve found and ended up landing on none of them.

    They’re all broken or missing features that another one has, and there’s no One True Music Streaming Server, just a bunch of mostly-kinda-sorta-almosts.

    At this point, I just use a network mapped directory and/or a synced copy on the sd card of my phone and local players and don’t bother with anything more complex anymore.

    The local players that can play media seem to have a much better, richer feature set than ANY streaming one does.





  • It’s still a quality-at-a-given-bitrate deficient.

    If you’re doing temporary encoding for like, streaming, or something where real-time encoding performance matters it’s still probably the way to go, but if you’re wanting to create high-quality archival stuff it’s still not quite as good as your other options.

    Granted, x265 on the cpu is probably still the way to go (excepting maybe if you’re doing AV1 on an ARC gpu), but nvenc and qsv still outclass AMF.

    Wish AMD would get a little more serious and bring that up to par, but they seem to be waffling on what they even want to do for consumer gpus so I’m not really holding my breath here.


  • I’ll second that: every single issue I’ve had with any of the Pis that are around here have all been bad sd cards.

    They’re useful if you’re using an OS that doesn’t ever write to them, but as soon as you’re using a full Linux distro or running software that is writing logs or data, they’re going to fail and probably sooner than later and, of course, at the most annoying time possible because it’s a computer and that’s their thing.


  • Assuming you mean commercial DVDs, handbrake+libdvdcss.

    It’s pretty much ‘insert disk, hit button, wait some amount of time, video file!’

    Would recommend, however, that you do not use AMF (AMD) for encoding, and just stick to QSV/NVENC/x264/x256 because AMD’s quality is uh, less than stellar and you probably want the best possible quality for archiving your DVDs.


  • Don’t do that, please: there’s less than no reason to make your entire password vault accessible on the public internet.

    Vaultwarden is probably secure, and the vault data is probably encrypted in a way that’s not vulnerable, but I mean, why add the attack surface?

    Yeah yeah, exceptions, but if you legitimately have an exception you already know it and I’d bet that the vast majority of people don’t, or would be much better served by a VPN tunnel than just rawdogging an argo tunnel.