SSH enabled and the SSH port of the container accessible and it’s set for password auth.

It’s always Debian.

And I’m OK with that.

Upgrading one of my powerhouse Dell R410 proxmox nodes to 128GB of smoking hot PC10500 DDR3 ECC Ram from 64.

Now it’s cutting edge.

Last week I had to update everything to make sure that it didn’t fall back on DST because the fucking idjits in my backwoods province decided that they needed to create a new time zone.

What I appreciate about this is the acknowledgement of something called “nuance” that AI can now write viable code and be a tool that improves software, reduces bugs and security issues, and increases the speed with which it is written and fixed. Just because there’s an AGENTS.md doesn’t make code slop. And the more we refine this method, the cheaper it gets in terms of tokens/energy.

I’m not happy about what it means for juniors coming into the field, but we might have to change what we teach in order to build good software, as has been done dozens of times before.

We’ll still have the kneejerk reactionaries that are locking in the KV pair of AI=Slop but i guess that’s a constant of the human condition. Conservatives never change their minds.

I attach both as bridge networks from the host, as normal, I just make sure they’re exactly the same on both nodes.

and

and then set up the hardware for the VM as

Set the boot order in PVE. You can also group HA targets to shift as a group. I have a physical nic on WAN and LAN, and the LAN nic is VLANned for DMZ, guest, IOT, etc. As long as you keep them consistent from node to node, I’ve never had an issue.

I have been thinking about a failover LTE modem, and that one has me a bit stumped about how to deal with HA moves. Maybe a GLiNet LTE router that I can VLAN on the WAN nic. Or maybe I just hook it into the LAN network and have failover scripts for my critical devices

It’s been amazing. The thing I like the most is being able to live-motion it to another node to upgrade the host then migrate back. Doesn’t drop a ping.

I’m using some ancient Dell rackmount servers for nodes, and a couple times the prime server dropped off entirely because of power issues, and I didn’t notice for a couple weeks that it had jumped hosts. I’ve also had to restore it from backup because of a borked upgrade, and it took maybe 5 minutes.

I thought that it would be a bad idea but I tried it with the original baremetal router that I lift and shifted to a VM then put the source on standby, and 5 years later, I would not go back.

I run my OPNsense as a proxmox VM, so I get high availability, replication, live backup and restore via PBS and update-time snapshots.

I couldn’t recommend this method more, it’s saved my ass repeatedly.

I have my ops agent constantly checking SBOMs against current CVEs and if something triggers, I get a report with severity and repair options researched. I can then decide how I want it to proceed. I’m much less concerned about internal only services. SBOMs are refreshed after updates for future checks.

They have a poet in their press release crew.

That was beautiful.

One I know about that’s not on your list and is very likely to be an exposed service is Mailcow. Looks like the PHP filter isn’t triggering for it, but it’s definitely PHP based.

Nextcloud.

Mailcow.

This is well done. Integrates Sanoid/Syncoid, gives a pile of information about what’s happening on the filesystem, some of which I had to research to figure out what it’s telling me.

Haven’t seen anything to set up alarms but maybe I haven’t delved far enough into it yet.

A Tesla V100 is fairly affordable but older and won’t run newer quants like FP8 or attention kernel routines. But it will run a pile of models, even most new models are compatible or usable.

I did this back in the 00s, got the /24 immediately. Wish I’d kept it going today.

AI bad. Bugs never occurred when human built code. We had to come up with a completely new term, unknown in programming before, called “race condition”.

Might pay to wait a minor or two before repinning your compose file, Forgejo has had issues on the first release of a major.

So how is Google planning on fucking us now?

I have an old .com domain, and a new .farm domain, amongst a bunch of other I registered because they seemed interesting for projects I work on.

Both via Porkbun these days, with DNS via Cloudflare. I always split DNS from the domain registrar so if one goes dark, I can recover via the other.

deleted by creator