There’s literally El-Sayed’s DNC AIPAC opponent shooting herself in the face with 30 million dollars of Israeli funds but you’re really gonna be out here about to post a 4 paragraph long copypasta about the success of Mao Zedong’s superior socialist China, even though it was really Deng Xiaoping that created the success that is modern day China.

This is why people stop taking ml users seriously.

vLLM to host and openwebui for a frontend that I really only use to demo models to friends.

harness

Opencode running with full access inside a rootless podman container with only the directories I want mounted (usually a single project, sometimes read only).

So far though, I’ve only used it to document and report on project repos because Qwen is not that good at actually coding (although it can give pretty decent conf file examples, but not always optimal).

Also useful for parsing pita data dump type files that I’m too lazy to construct multiline awk commands for.

Also I use Jellyfin btw.

You shouldn’t be talking with the amount of hilarious CVEs jellyfin has also had lmao

EDIT:

Literally a critical RCE a couple of months ago lol: https://nvd.nist.gov/vuln/detail/cve-2026-35031

Your downvotes are meaningless, please don’t run Jellyfin publicly exposed without at least some form of secondary ACL whether it be a full blown VPN or just a lazy reverse proxy login like authentik.

And please run inside a non privliged container. Either use uidmap or go rootless.

I’m pretty sure there are multiple hackthebox machines based around jellyfin because of how notorious it used to be with bugs.

Uh no, most if not all of the paid indexers are not worth it compared to just waiting for an open invite from a quality one.

Not even the gold tier quality ones allow paid entry AFAIK. They only allow people who are long time seeders and uploaders with reputation.

The one thing you might have to pay for is a VPN in case you want to torrent on public indexers, which is often worth it because not everything will end up on private indexers, and you usually have to wait a couple of months before you can join a solid private indexer.

I can trip the measly 15 amp breaker by drawing 1.5kW on two servers + turning on an amplifier that is somehow on the same circuit despite being in a different room quite far from where my servers are lol.

On average though I only draw like 350W. The huge spike only happens if I run a miner/llm on both of my servers or the during the startup spike.

The 1kW chunk comes from some RTX Quadro 6000s which each eat 250W each when maxxed out.

EDIT: Want to mention that most machines report their power draw (from mobo) without IPMI, so you can use your favorite stats collector use it to form a rough estimate of kWh total in case you don’t have a proper meter that records usage.

“You can change the logo bruh”

I actually just did this recently with a BTRFS subvolume using a swap file and LUKS encryption.

The old Fedora magazine article has the overall steps required and someone also made a guide for secure boot on I think the spiceworks framework forum.

The catch is that secure boot will only allow signed images to be loaded which includes the hibernation swap image, meaning you have to use a customized kernel that allows unsigned hibernation images to load.

I’ll share both links when I get a chance.

EDIT:

Fedora Magazine guide: https://fedoramagazine.org/hibernation-in-fedora-36-workstation/

This is slightly outdated as Fedora now uses a proper zram.swap definition with systemd, so you can also do a systemctl edit to disable and enable zram0 with post/pre start on the hibernate service directly instead of using swapon/swapoff. I’ll make a second edit with my example I’ll have to dig out of some poorly documented notes lol.

https://community.frame.work/t/guide-fedora-36-hibernation-with-enabled-secure-boot-and-full-disk-encryption-fde-decrypting-over-tpm2/25474

This is the full forum post guide for FDE + TPM + secure boot. I’m not entirely sure of the kernel patch specific but it seems that the hibernate swap image is technicallly signed because if the bootloader process, but the kernel lockdown mode rejects it regardless by default because there’s no guarantee that the swap image was configured with FDE and not tampered with, which would be a vulnerability.

Quick glance at the kernel patch makes it seem like it’s just a flag check to allow hibernate in lockdown mode, so I assume the secure boot signature check is still completed.

lockdown_hibernate [HIBERNATION] Enable hibernation even if lockdown is enabled. Enable this only if your swap is encrypted and secured properly, as an attacker can modify the kernel offline during hibernation.

He actually offered to return to the US if they accepted that he would be given a public trial and not a military trial.

Obama’s administration rejected the idea and said that their only guarantee they would give was that they wouldn’t torture him.

Just to add my 2 cents: the list of countries that the US can’t extradite is not that long, especially when you exposed government corruption of the highest degree and you are considered a traitor.

EDIT:

Just to add my 2 cents: the list of countries that the US can’t extradite is not that long, especially when you exposed government corruption of the highest degree and you are considered a traitor.

Just to add, Snowden also indirectly exposed the US’s leverage in several countries that you would otherwise assume would not cooperate with the US in any capacity.

The fact that he ended up in Russia was because he couldn’t proceed to Ecuador which was his original planned location of asylum after leaving to Hong Kong.

There are really very few countries the US can’t realistically coerce or run a black ops mission to go after him. China didn’t want the political baggage for no gain and Iran can’t even protect its own leaders from strategic bombing.

That leaves basically Russia and its less than ideal former soviet allies.

I read the OP which is why I asked the question, not the entire thread just to figure out that you don’t want to use containers.

What about podman quadlets?

Dunno about immich, but photoprism also has a bunch of CUDA libs that would otherwise be a pain to maintain specific version sets on the host.

I don’t want to run a separate database or anything complex, so things like Immich or Photoprism are not an option.

Why not just use podman and let it handle itself? Unless you’re planning on hosting like maybe several million photos, I doubt you would ever need to manually set up a DB.

Just download the compose file, add your photo directory paths to it, and let it start and never think about it again until you feel like updating for some new feature months later.

I’m sure someone already made a tier list, but American media belongs at the bottom.

I mean, I’m pretty sure this excuse for a distro shipped with multiple critical bugs lol.

It really should not be receiving funding when compared to the handful of other arch packs thst actually have a functioning security model.

Saw the title and I already knew IPv6 was still gonna be “not enough adoption” lol.

The overly aggressive lockdown from NAT is not entirely misplaced though. Windows is already notorious for default hosting an atrocious level of protocols that are anywhere between “I can get your NetNTLMv2 hash for free” to “gg ez RCE as SYSTEM user”.

Linux and Unix were also not magically protected either, like every FTP server implementation has had several RCE vulns and it was so bad that Linus himself pointed out how easy it was to abuse buffer overflow vulns even after the addition of NX mem protection with return to libc, several years before ASLR finally landed in Linux and Windows.

Seriously, the early 2000s was the wild west of vulns because everything was still written in C++ so you could just waltz into any binary, find some stack/heap overflow, and you’re on your way to an RCE.

NAT (and firewall) most definitely did prevent millions of users from getting rekt by a metric ton of malware that operated on the ability to connect to those services.

Try Micro which is apparently based off of MicroEmacs lol

Netanyahu literally showed up in congress and then berated the US government for not shoving more money into his genocide.

If that isn’t a sign of a compromised government, I don’t know what is lol.

Imagine if Xi Jinping suddenly pulled up to the senate as if he has any position in the US government.

20 years of hoarding CVEs down the drain.

Now they’ll never be able to gg ez their way into any country and will have to actually use their bribery budget to get more implants lol.

I’m too lazy to find my years old comment on this but they didn’t vote on it because they pocketed it to use as a rider base or ticket.

There is literally no opposition, they wanted to use it to pass other bills or measures at the same time because it has complete bipartisan support.

Congress sucks ass.

Sometimes I forget one of Trump’s first agendas was nuking research funding and using a keyword filter against grant submissions that had words like “trans” without conntext.

Seems like so long ago compared to an active war with Iran.