this post was submitted on 05 Feb 2025
177 points (99.4% liked)
memes
22998 readers
400 users here now
dank memes
Rules:
-
All posts must be memes and follow a general meme setup.
-
No unedited webcomics.
-
Someone saying something funny or cringe on twitter/tumblr/reddit/etc. is not a meme. Post that stuff in /c/slop
-
Va*sh posting is haram and will be removed.
-
Follow the code of conduct.
-
Tag OC at the end of your title and we'll probably pin it for a while if we see it.
-
Recent reposts might be removed.
-
No anti-natalism memes. See: Eco-fascism Primer
founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Unix grognards running every service uncontainerized on one server keep winning.
Me :3
I simply install my OS's packages and use the inbuilt privsep without needing to install like 20 different versions of Linux on my machine for every different service cuz no one can figure out dynamic linking (we should send ld.so to /dev/null imo)
"Yeah, I use containers. They're called user accounts
Cgroups? You mean rlimits?"
Containers? You mean systemd hardening?
This used to be me but I've become a container demon
docker-compose has made it too easy to take all the random shit I had running on my home server and make it reproducible-ish.
containers get bad rep because docker and all the mess it causes, but every process, or at least most, in the system should use containers in one way or another. it's a shame this is nowhere close to normalized and doing it is messy
Legit who has the free time for anything else? Admittedly, I hate IoT stuff, so I don't have to run my entire house from my phone/computer, but when I need something for personal projects it's the most minimal garbage setup imaginable. Been working so far so I don't touch it.
My self-hosting setup is like this. But one of the things I originally got into self-hosting for was to get an RSS aggregator for, and I never found one with non-containerized setup instructions, so I ended up not having one.