Jesus Christ… take your upvote

How difficult is it for an adversary to get in the middle of the TPM releasing the keys to LUKS? That’s why I would want attestation of some sort, but that makes it more complicated and thinking about how that would work in practice makes my head spin…

Is clevis using an attestation server or is it all on a single machine? I’m interested in getting this set up but the noted lack of batteries included for this in the common distros makes it a somewhat tall order.

please share the script?

Gotta start somewhere, and it won’t ever improve if we don’t start improving it. So many on Lemmy assume the tech will never be good enough so why even bother, but that’s why we do things, to make the world that much better… eventually. Why else would we plant literal trees? For those that come after us.

Are there any studies done (or benchmarks) that show accuracy on recommendations for treatments given a medical history and condition requiring treatment?

Bridging the gap is something sorely needed and LLMs are damn close to achieving.

I’m really not sure. I’ve heard of people using Ceph across datacenters. Presumably that’s with a fast-ish connection, and it’s like joining separate clusters, so you’d likely need local ceph cluster at each site then replicate between datacenters. Probably not what you’re looking for.

I’ve heard good things about Garbage S3 and that it’s usable across the internet on slow-ish connections. Combined with JuiceFS is what I was looking at using before I landed on Ceph.

I know Ceph would work for this use case, but it’s not a lighthearted choice, kind of an investment and a steep learning curve (at least it was, and still is, for me).

I went and edited my hosts file and added all of my devices, but I only have a handful. Tailscale on macOS has a lot of bugs, this being one of many.

Even just providing specifications and some documentation about the devices, someone might write a new driver. Reverse engineering is hard, having something to go off of means they can probably extend support from an existing driver fairly easily.

Maybe they will band together to support a common base system that is more open? Wishful thinking I know…

It depends on the container I suppose. There are some that are very difficult to rebuild depending on what’s in it and what it does. Some very complex software can be ran in containers.

I’ve been wanting to tinker with NixOS. I’ve stuck in the stone ages automating VM deployments on my Proxmox cluster using ansible. One line and about 30 minutes (cuda install is a beast) to build a reproducible VM running llama.cpp with llama-swap.

Typically, the container image maintainer will provide environment variables which can override the database connection. This isn’t always the case but usually it’s as simple as updating those and ensuring network access between your containers.

A lot of times it is necessary to build the container oneself, e.g., to fix a bug, satisfy a security requirement, or because the container as-built just isn’t compatible with the environment. So in that case would you contract an expert to rebuild it, host it on a VM, look for a different solution, or something else?

reproducing those installs from scratch + restoring backups would be a single command plus waiting 5 minutes.

Is that with Ansible or your own tooling or something else?

Sec. 4.  Using National Security Assets for Law and Order.  (a)  Within 90 days of the date of this order, the Attorney General and the Secretary of Defense, in consultation with the Secretary of Homeland Security and the heads of agencies as appropriate, shall increase the provision of excess military and national security assets in local jurisdictions to assist State and local law enforcement.
(b)  Within 90 days of the date of this order, the Secretary of Defense, in coordination with the Attorney General, shall determine how military and national security assets, training, non-lethal capabilities, and personnel can most effectively be utilized to prevent crime.

Following ones will surely be lethal capabilities. We’re cooked.

on my devices

See that’s where we’re fucking up. If a company can install things on ”your” devices, it’s really their devices.

This is a feature that Jellyfin natively has already. So now Jellyfin exceeds Plex in some areas.