I have a Server with ~16 podman services, each their own user, network namespace and uids. This is managed using NixOS and Home manager (which supports quadlets) but I am changing my setup to a single node k3s cluster with user namespaces because that seems simpler to manage. Here a snippet for how the subuids/subuids are defined:

users.users.<username> = {
        subUidRanges = [{
            startUid = 100000+65536*( config.users.users.<username>.uid - 999);
            count = 65536;
        }];
        subGidRanges = [{
            startGid = 100000+65536*( config.users.users.<username>.uid - 999);
            count = 65536;
        }];
        home = "[...]";
        isNormalUser = true;
        linger = true;
        group = "users";
        openssh.authorizedKeys.keys = config.users.users.root.openssh.authorizedKeys.keys;
    };

This is the year of the OpenAI bankruptcy.

Fair enough, I meant consumer demand as in not ai and data centers

Ram demand expected to drop another 40-50% in Q3?

How are you running podman? As a rootful systemd service or as a rootless user systemd services?

If you have an openwrt compatible router then you can use that as the tang server.

Also you can tell clevis to use both tpm and tang and require both to work.

All things are solved by lowering your standards far enough.

Straight to jail

See also “The human condition” and “It’s a canon event!”

Using a lot of words to say “It won’t affect this quarter”

I use bitwarden send, all my devices already have access to my password database and i can save and download files or text though it. You can also use the URL to let other devices access it if you want.

How about a dislike button? Maybe even a rating system where you can vote how good a video was on a range?

Ai scrapers are making it kinda suck to run anything on the internet to be honest.

SaaS (Shit as a Service)

It’s an addon that you enable/install inside Technitium, you only need to configure it in the Admin ui.

.ICANNT

I used dawarich but switched to geopulse because dawarich broke too often on updates. I only rarely use it but it works well enough.

So now you have three options that you can compare, good luck?

https://xkcd.com/1200/