If it’s bootloader unlockable, at least we’ll be able to flash a rom like Lineage.

I could go for one of these at $200, so maybe as a second-hand device in a couple years, if I can flash Lineage.

7zip is an archive format - creating an iso requires the raw files (unless you have 7zip installed in the VM to extract the zip file).

All that is unnecessary though, just enable a shared folder via the VM software (I assume they all do it now, VMware has had this feature forever). This isn’t a network share, it’s a virtual network share that only exists within VMware for that specific VM, and by default it’s read only.

Or put the files on a thumb drive, and connect that thumb drive to the VM.

Or enable networking on the VM, copy the files in, then disable the network card in the VM.

Getting the files in doesn’t require any special security, it’s when you’re executing the files that the VM needs to be isolated.

VMware’s shared folders is secure - by default it’s read-only, and it’s only visible to the specific VM on which it’s configured.

The client OS doesn’t even need a network card, VMware emulates the network just for the shared folder.

I assume other virtualization tools have a similar feature.

Ah, unbound has the root DNS servers hard coded. That’s a significant point.

Any reason you couldn’t do the same with any other DNS server such as PiHole?

I’m really trying to understand why I’d run two DNS servers in serial, instead of one. All this sounds like it’s just a different config that (in the case of unbound) has been built in - is there something else I’m missing that unbound does differently?

Why couldn’t you just config the TLD’s as your upstream DNS in whatever local DNS server? Isn’t that what enterprises do?

Thanks for the clarification.

How is that different than unbound? Isn’t it also forwarding requests?

Oh, you’re using Sandbox - yea, I could see certain checks failing as the app will be intentionally prevented from accessing certain things to be sandboxed.

Sandbox isn’t the same as a VM.

You can run VirtualBox, but it’s performance is notably less than VMware, and the latest version of VMware Workstation is free once again.

https://www.techspot.com/downloads/189-vmware-workstation-for-windows.html

I don’t recall if it was in a VM or not, it doesn’t really matter. A VM is just a logical system, the OS runs the same as it would on bare hardware (for things like this).

I suspect what I see in Windows is a result of devs designing for an prior version of Windows, and some system call returns differently enough in a newer version. The times I’ve seen it, the apps work fine, which makes me thing it’s a validation that fails.

No reason it shouldn’t work.

Whats your VM software, what’s the host and (especially) the guest OS?

I’ve seen this error with an app in Windows, while running it in an admin account, haha. No idea what these app devs are doing to cause these messages.

Keep in mind under Linux, distros today often don’t setup the first user as root, but as a limited account (there’s a separate root account with it’s own password).

Tailscale has the Funnel feature too, which puts the endpoint on Tailscale’s servers.

You could do both - Funnel for people who you don’t want to walk through setting up a client, and use the client for those who you’re willing to put the effort into.

Meh, I won’t expose ports anymore - last time I did I had someone hammering on it hard enough to slow my consumer router.

I closed the port and would still have someone hammer it occasionally for months, hoping the port was still open.

Cool, thanks for the clarification. This is good info to have in here in general.

So unbound by default discovers other DNS servers, if I’m understanding that correctly. I’ve never used it, does it not use your ISP’s DNS by default, or does that depend on user config?

What if your PiHole is configured to use other than your ISP’s DNS?

Guess I’m not following, both still have to request from other (upstream) DNS servers, so what does unbound add?

Thanks!

What’s the use-case for pihole and unbound together?

Aren’t they both DNS servers?

What backup on Google cloud?

Graphene add nothing of substance to the privacy or security landscape

Hahahahaha, your whole comment is laughable, it’s the very definition of hubris (that is the combination of being arrogant and incorrect).

I,for one, haven’t used Google as a backup since 2010. Anyone with any awareness of privacy doesn’t use it.

I run Lineage, with no Google services, no Google connectivity. I actively block connections to known-untrustworthy domains and IP addresses.

Graphene is the high-water mark in privacy and security on Android.

You should probably actually understand what’s going on before prognosticating in ignorance.

Use a router setup to combine network connections for throughput, setup in a box with solar in motel central, and tada, you’re risking someone else’s connection.

External failure rates are hit and miss because frankly, they often get abused.

I’ve had some last for 10 years, other for 2, and I’m not kind to mine.

I’d say they have 2 issues to deal with: temp and being dropped. The cases have no cooling, and larger drives need greater cooling than smaller drives.

I currently have 2 external drives (4 TB each) I use for local redundancy. When sync happens, they get quite warm, so I keep an old 80mm case fan on them. These are 5 year old drives that have been running this way for 3 years. SMART doesn’t report any errors or high temps, but without the fan I’m sure it would.

It won’t make streaming slower unless you have multiple clients streaming, as in several.

I find the network to be the bottleneck - my gigabit network connection saturates with 3 streams, and I’m using a conventional hard drive for my media (OS is on an M2 drive). This doesn’t seem to affect the video quality though.

Frankly SSD is overrated for common stuff, there are other bottlenecks that usually hit us first, such as network or processing.

As you build out, make sure you consider backup in your costs, don’t spend your money just on storage.

Also, since you have a mini there may only be room for one drive internally and almost no cooling. Larger drives will have issues with heat.

The shade tree mechanic’s version is a long screwdriver, press the end of the handle just in front of your ear (to the little fleshy protrusion).

You’ll hear it loud n clear.

My server currently doesn’t have a video card (just the crappy on-board), it transcodes fine for one user (which is all I ever have). I don’t even notice an uptick in cpu when it’s transcoding (I’m sure it does, it just doesn’t seem to impact performance).

This is a 5 year old Dell SFF, running Windows, with 3 Windows VMs in VMware. It has no trouble transcoding, while converting videos using Handbrake. It’s maxed, but it does it.

I do plan to get a video card, it’s just not urgent.

Edit: Just did a test and with 2 simultaneous transcodes, Jellyfin will jump the cpu about 5% on video start, but settle back down to less than 1%.

Disk usage skyrockets with the second transcode, bouncing between 50% and 90%, and the network connection has some hard spikes at video start (with a gigabit connection).

Hell, I’ve found ripping a DVD to MKV results in a 3-5gb file.

Then converting that MKV using handbrake, I can bring the size down as much as 75%. When you’re talking about a thousand videos, that adds up.

TV series (especially older stuff) I can consistently reduce 80%+. This makes a real difference for shows that were on for 10 years.

And these all look fine on a 65" TV from 6’ away. Why store more if I don’t have to?