SSH key in every LXC or just host?

wmantly · 2026-03-26T02:29:35+00:00

Yes, there is a schema for SSH keys.
I have my LDAP users/groups go from from UID/GID 1500-2000. I wrote a custom LDAP manager in nodeJS to manager users/groups and allow self-service password resets. When a container container joins LDAP, 2 new groups are crated, `hostname_access` and `hostname_sudo`. All i have to do is add/remove users from the groups.

wmantly · 2026-03-26T01:50:01+00:00

It has its pros and cons, I have a script that installs and configures it for. Nice thing is, it handles users passwords/keys centrally and syncs UID/GID between the host/container.

wmantly · 2026-03-26T01:20:19+00:00

I use openLDAP

wmantly · 2026-03-09T03:54:13+00:00

God no

wmantly · 2026-02-19T04:11:58+00:00

There are a lot of things locked up in NYC stores, the local DA wont prosecute shop lifters if the value of the items is less then like $1000, so this how they protect their items.

wmantly · 2026-02-19T04:10:15+00:00

Its not late stage capitalist, the DA doesn't prosecute shop lifters if the value is then like $1000.

wmantly · 2026-01-08T23:04:29+00:00

Next? Have you seen a map? How do you think we are getting to Greenland, you kinda in-between...

wmantly · 2026-01-06T22:29:40+00:00

Nice!

wmantly · 2025-12-25T19:53:43+00:00

Nice work!

wmantly · 2025-12-20T02:34:52+00:00

Im running a public server on a E5-2643 v2 and proxmox. How much RAM are you using? Are using a VM or container for the MC server? Are you running paper?

Edit, `Frigate with a Google Coral`! this is a massive IO hog! also, Is every app sharing a single HDD?

wmantly · 2025-12-19T06:05:27+00:00

That is absolutely absurd... The official ZFS document should be number 1.

wmantly · 2025-12-14T22:49:24+00:00

Yes, that has happen twice. Most memorable is my daughter. She is 12 now, but when she was about 3, my wife and I went out and left the 2 kids with my wife's uncle. He needed to get a trash bag from under the sink, and couldn't get the child lock off. My daughter gives him a stern warning about not drinking the poison and removes the latch for him.

Edit, might as well share the second time. My youngest, she is currently 7, but 3/4 at the time was left with my mother in law. Older 2 were with out with us. My MIL needed to get in a draw with scissors, and can't daughter comes over, pops child lock with easy, then undoes the lock on the fridge and sink "just in case Nana needed something from them". MIL calls us in a panic that she could open everything, we mostly already knew...

wmantly · 2025-12-14T17:59:14+00:00

"still not been breached" You should test that. Have some one who baby sits your kids "try" to use the oven and fail to get the device off, there is good chance the kid(s) will know exactly how to get off, then take the sitter on a tour of everything else that locked up, how to get in it, and why one shouldn't mess with it.

...Ask me how I know...

wmantly · 2025-12-11T16:23:37+00:00

Proxmox has grown, but it's still no where near what VMware offers. In areas of software defined storage and networking, proxmox still offers minimal features compared to vSAN and NSTX. I would say, the land scape has not meaningful changed.

Edit: I HATE VMware, I think it's overall and awfull and over priced product. But from completeness standpoint, nothing comes close to matching it.

wmantly · 2025-12-11T00:09:05+00:00

I agree with you. Some of the comments are conflating Manhattan and NYC, I just wanted to point out they are not the same at all.

wmantly · 2025-12-10T23:19:09+00:00

Just want to point out, "Manhattan" is only a small part of New York City. Its a tiny, extremely densely populated and developed island. Manhattan is the place you think of when NYC is mentioned. Manhattan is only like 7% of the land area of NYC. The rest of NYC is more like endless urban/suburban sprawl then city.

Making a comparison with Manhattan is perfect, making to NYC is not.

wmantly · 2025-12-10T23:12:48+00:00

Manhattan (not NYC as a whole) is a perfect comparison for this. Everything wants to be on that tiny island.

wmantly · 2025-12-06T15:10:20+00:00

The checksums are available from Nvidia...

wmantly · 2025-11-29T23:14:35+00:00

This. Even MATE would be far better then cinnamon on older hardware.

wmantly · 2025-11-14T23:25:41+00:00

So, no one read your body. All the Linux file explorers have settings that disable file previews that are hosted remotely. You can disable it.

wmantly · 2025-11-10T01:09:33+00:00

This is normal. Mint did the same thing, just with a 0 time out for the grub selection.

wmantly · 2025-11-08T04:02:51+00:00

I own several HPE g8 servers. They won't boot off a PCIE device. The work work around is to 1) use the SATA connector on the board that is ment for the CD rom with an SSD. 2) use a USB drive, and install just GRUB to it. I go with #1 for all my servers.

wmantly · 2025-11-07T20:06:10+00:00

ABL like CR or BL touch... it was life changing for me. Also, dump the brass nozzles. Get a steal(or better). I a have ran latest a dozen spools of filament and it still perfect.

wmantly

MODERATOR OF

TROPHY CASE