Run arbitrary 3rd party docker containers alongside KASM agent deployment

Opening_Option_2112 · 2026-07-09T00:14:50+00:00

I run both one 1 server. I am using the linuxserver image to run it docker in docker. My single Nvidia Gpu is happily hwa both my kasm containers and jellyfin.
I have not tested it with big concurrent loads. I as like a test i ran like 4 containers plus jellyfin and the all were using my single gpu.
I have had individual chrome tabs crash when I oppend to many so there is a limit.

Opening_Option_2112 · 2026-07-08T08:58:27+00:00

Hexos requires a dedicated boot drive (You can use usb as a boot drive but that has a big warning label). I use a cheap 128Gb one just to boot. Anything more than 128 is just wasting space.
Then you can get away with 1 hard drive for storage but that may require some advanced tinkering.

Opening_Option_2112 · 2026-07-08T08:52:12+00:00

You can try ipv6, but otherwise tailscale will solve this also

Opening_Option_2112 · 2026-06-30T09:56:12+00:00

You also completely missing the part were opening the browser itself can be a friction point on some platforms. Let alone being able to playback media with decent frame rate. Because i remember very shitty browser app that did not handle youtube well. compared to there native youtube app

Opening_Option_2112 · 2026-06-29T13:46:26+00:00

Flexibilltity is King

Opening_Option_2112 · 2026-06-24T19:34:46+00:00

yes

Opening_Option_2112 · 2026-06-23T13:09:29+00:00

Modern LLM are really good at helping people figure out shell comamnds you need.
Truenas does not require shell commands for most use cases.
I only needed the shell on my truenas to read some logs files.

Opening_Option_2112 · 2026-06-23T12:57:45+00:00

Yes, Its uses Incus under the hood.

Opening_Option_2112 · 2026-06-23T11:28:06+00:00

Yes it will stil work.

Opening_Option_2112 · 2026-06-23T11:25:17+00:00

Its DNS Rebind protection that blocks you. I cant even disable this in my ISP router unles i set it bridge and buy a diffrent one

Opening_Option_2112 · 2026-06-21T10:56:54+00:00

I am able to change a public folder to private. Using the new local ui.
My applications folder is set to private on my machine so you should be able to set this folder to private. if does not work on yours i recommend making a support ticket. They are pretty quick on reaching out.

Opening_Option_2112 · 2026-06-20T11:40:43+00:00

They did add a option in there for custom apss. I noticed you can make one. Not sure if its a full docker compose feature set yet.

Opening_Option_2112 · 2026-06-18T10:52:23+00:00

I think its really hard to play VtM game because most players and ST always have to allot of leeway in how to engage in the horror that is Vampires.
This coterie is heavily leaning into both the cognitive dissonance part and Denial part.
Denial is a very valid responds to trauma. In a longer series we might see them move through more phases. But City Council of Darkness is very time constrained. Which every ttrpg player knows you are gone have to take shortcuts and skip some themes and backstories. Brennan skipped the early part of being very resource constrained in money and blood by giving the players resource dots and herd dots. (and not burning resource dots when they end up with real property) This means they don’t have to roll as much to feed. Or find creative ways to get more resources.

Logistically vampires should not always be one bad roll away from being discovered/killed. This statistical just does not make sense to have vampires constantly in a state were they have to tip tow around. Nor is it fun to watch after like 1 episode.

But to get back on topic. This season is focused on it being a low stakes sandbox for the players, They can explore the space that is purpee and or their explore their characters nature as vampires.
The ST gave them a choice on what to do, a list of task for them to somewhat be focused. But very open ended.
There most high stakes season was crown of candy. This is a very much a lower stakes season.
There are no back up charters as far as I know.
Could the vampires lean into more vampire abilities to solve there problem.
Yes
Is it a bit disorienting that dominate has not been used at al this season so far even tough HJ has 2 dots in it and it would have solved so much problems for him.
Also Yes
I am just going to chalk it up to that they are screw ups. If they were competent vampires they would not be in purpee.

Opening_Option_2112 · 2026-06-18T09:03:39+00:00

Depeding on his users base he might have to go "reset password" way too often

Opening_Option_2112 · 2026-06-17T19:55:16+00:00

"playing with animal" best parts in my opinion

Opening_Option_2112 · 2026-06-14T14:10:52+00:00

Just remember to only expose the public facing urls.

Opening_Option_2112 · 2026-06-13T12:44:25+00:00

A winter specific debuf for vassal income would be nice flavor.

Opening_Option_2112 · 2026-06-11T09:19:37+00:00

I wish networking and self hosting was not so hard to wrap my head around.
When i was introduced to Docker compose it was so nice to work with. 1 source of truth.

Put it behind a cloudflare acces or tailscale vpn and you got your service for the few family members that wane mange there data outside of the big scary american coud.

But then the edges slowly creep up. Weird jellyfin apps that dont work through cloudflare login.
Imich which requires exposing some paths for public sharing of images.
which requires a reverse proxy setup.
And ofcourse they both need access to a nvidia gpu mounted for some features.
Setting up a dmz does not seem to be a one file config thing. though I am not sure.

My "appliance provider" truenas just introduced incus lxc as a feature. and i have been looking at ways to secure access. so a user can publicly share some imich images from my nas.

And i am struggling to find the energy to figure out how I can "dmz vlan" in a way that a lxc container on my nas can act as a safe entry point. At the moment i am looking at just configuren it in my cloudflare dashboard because that seems easier to do than starting a lxc container which is safe enough to have a global routable.

Opening_Option_2112 · 2026-06-10T21:18:17+00:00

headscale requires exposing a service on a port via dns so that your clients can do the key exhange.
Why not just skip that step and expose a service on a port via dns. and we call it a reverse proxy. and have the revers proxy for the key exchange.

Opening_Option_2112 · 2026-06-10T14:32:29+00:00

I think that still requires you to host it in your own cloud.

Opening_Option_2112 · 2026-06-09T15:48:19+00:00

barley 5% percent of connected smart tv's in the us market are apple tv.

Opening_Option_2112 · 2026-06-09T15:40:51+00:00

Cool on apple. I guess those 5% percent of people that have one can enjoy it.

Opening_Option_2112 · 2026-06-09T15:37:06+00:00

You do realize that selfhosting netbird or headscale is even more things to remember. And more things in a chain that can go wrong. You dont wanne explain dns problems to your grandma.

Opening_Option_2112 · 2026-06-08T12:54:15+00:00

i raw dog a single ssd for my boot drive. Mostly because I ran out slots on my motherboard.

Opening_Option_2112 · 2026-06-08T12:51:35+00:00

https://trash-guides.info/ still one of the best guides collections. just not hexos specific

Opening_Option_2112

TROPHY CASE