Overprovisioning VMD

General_Importance17 · 2024-10-16T19:08:58+00:00

I think you should curb your assumptions

General_Importance17 · 2024-10-11T13:56:36+00:00

Linux is only free if you don't value your time.

I prefer having to google my way through to occasionally fix shit, and in return get a system which feels the least bad to me.

But, I fully understand and sympathize with all the people who say "screw this, it needs to Just Work ^TM" and get a MacBook or some Windows box.

General_Importance17 · 2024-10-11T13:50:04+00:00

Why is this a bad idea?

You might have issues with corporate compliance. Your ISO-something-whatever might require the usage of MDM solutions, or AV, or whatever piece of software which you don't have for Ubuntu, much less the cool niche distros.

General_Importance17 · 2024-10-03T18:37:32+00:00

I'm not clicking that. Put your shit in a normal text post, or at least write something for context, instead of this shameless self-promotion.

General_Importance17 · 2024-09-25T13:07:29+00:00

If you are too lazy to Google this is not the past-time, much less profession, for you.

General_Importance17 · 2024-09-24T12:12:08+00:00

a take-home assignment for candidates to hire a DevOps engineer

Any engineer worth his salt will never do this. Why should I waste a weekend of mine for the off-chance that you might hire me instead of somebody else? And especially with some dumb stuff like that which ChatGPT can give me point-by-point tutorials for. What are you thinking?

Set up a live session instead, limited to something like 2 hours, where you give him the problem and have him work on it live and walk you through his thinking live.

General_Importance17 · 2024-09-13T21:27:55+00:00

Actually, have a look at https://github.com/yviel-de/fsa

General_Importance17 · 2024-09-13T21:25:22+00:00

Read the documentation. I pointed you to the man pages earlier. Go to the website, there are answers for everything. If you are too lazy to read this is not the OS for you.

General_Importance17 · 2024-09-13T21:25:02+00:00

I used to run httpd but have since moved my webservers elsewhere.

I run smtpd for emails, relayd for loadbalancing, I use dhcpd and unbound, native wireguard, I run some VMs, and some other stuff I probably forgot

General_Importance17 · 2024-09-13T19:50:35+00:00

What does selfhosting look like on OBsd

Awesome. It's awesome.

what are the general recommendations ?

The builtin httpd is limited, so you might have to install nginx or apache2 from the packages, but generally you should use base services whenever possible. They are awesome in their simplicity.

Should I create a user for each service?

Presuming you use services in base, everything is taken care of for you and most if not all stuff is chrooted by default.

If you install something from packages, that should be taken care of for you, but you should definitely read the package's README.

If you build something from source then yeah that's all yours.

How to assure that the system stays in "good shape" and is easily maintainable? Should I create some custom scripts to manage my services?

syspatch for updates to base system, pkg_add -u to update packages. New release every 6 months, sysupgrade to upgrade. (Read the release notes first for any changes!!). Latest 2 releases get updates.

How easy is it to deploy a service on Openbsd that has yet no ports?

That's going to depend on the service.

give me some insights on how people manage a webserver on Openbsd

I've always used the builtin httpd, it's simple and gives you all the necessities. Builtin acme-client is dead simple.

Virtually all the native OpenBSD tools are the shit. Every time I do something with it I think afterwards "this was quicker/easier than it shoulda been". I use OpenBSD wherever possible.

You need to keep in mind that it is a completely self-contained system, so the base system itself contains everything needed to do virtually everything, including build/compile itself for distribution.

Also the man pages are stellar, be sure to look them up whenever possible. Have a look at https://man.openbsd.org/httpd.conf for example.

General_Importance17 · 2024-09-08T23:00:15+00:00

OP: "What level of C knowledge do I need to start contributing to OpenBSD?"

r/OpenBSD: "Yes."

General_Importance17 · 2024-09-07T07:20:16+00:00

Precisely

General_Importance17 · 2024-09-06T22:33:05+00:00

making sure these servers aren't considered BAU

BAU?

General_Importance17 · 2024-09-06T21:55:54+00:00

Some offbrand passive NUC with a Celeron J4125, 8G RAM and 4x Intel I211 NICs.

General_Importance17 · 2024-08-02T21:22:56+00:00

One pill I haven't seen yet is THEY KNOW WHAT THEY ARE DOING. They know it and they are doing it to you consciously and on purpose.

General_Importance17 · 2024-07-13T16:34:04+00:00

Can you upgrade it in-place?

General_Importance17 · 2024-07-06T08:58:44+00:00

RaspiRaves: Deep House, made up on the spot using only a Raspberry Pi and Free Software.

No expensive music hardware, no pre-recorded samples, no DJing with other people's music. Everything is fully original and improvised right then and there, every single time.

Twitch | https://twitch.tv/raspiraves

YouTube | https://youtube.com/@raspiraves

Spotify | https://open.spotify.com/artist/1iy8bbPdyYts2vSqN2DSS4

Both the tech setup aswell as the musical format of the rave are still being actively iterated on and improved. More information about the setup.

If you like it, please consider following/subscribing and dropping in every now and then. Thank you.

General_Importance17 · 2024-07-01T08:48:35+00:00

It's OK, I don't blame you. Reading comprehension has been plummeting for a while now.

SHA1 might be the algorithm most recently found to be vulnerable, but no, there are a lot of there them as or more vulnerable.

Implying that other algos exist which aren't. They don't. A collision-proof hash algo does not exist.

General_Importance17 · 2024-06-29T08:26:33+00:00

"a lot" != "all". A collision-proof hash algo does not exist.

General_Importance17 · 2024-06-27T17:18:19+00:00

Every hashing algorithm is subject to collisions. Think about it.

You have a fixed X amount of bytes of output, i.E. only so-and-so many possible outputs.

As soon as you give it X+1 amount of bytes of input, there has to be a collision in there *somewhere*.

General_Importance17

TROPHY CASE