I’ve run OPNsense as a VM for a few years now. I have it set up on HA and have gone into PVE and noticed that it failed over and failed back without me noticing at all a week earlier. I like being able to snapshot it before updates, though updates are always flawless.

I have the 2 ethernet ports on each node named the same and that seems to work fine. I can also live migrate it without it dropping a ping in order to update the host node’s OS, then migrate back.

I wouldn’t do it any other way, but it might take some time to figure out how to set up so it fails over properly.

I’ll just use Tailscale until they fuck it up, which I’m sure they will, eventually. It’s not very hard to rebuild using something else for the 40 or 50 nodes I’m likely to have. I’ve done it before and I’m sure I’ll do it again.

True. I’ve done that command for so long that I’ve kinda gotten gzip hardwired into my fingers.

Throw a distro like Nobara or Bazzite on and see what you get. You might have it optimized quite well, but chances are that the kernel version is far enough behind that many of the graphics tweaks aren’t compatible. nVidia open drivers have come a long way in a very short time, and they rely on newer kernels.

You should just be able to shrink a partition and dual boot between distros, or put another drive in and use that.

I’ve hosted NC for a decade, and the AIO was the first method that doesn’t make me dread updates. And I’ve used pretty much every method of installing it over the years, everything sucked.

I snapshotted every time before and update because I knew it was a crapshoot whether the update was going to crater the system, and I’d roll back and wait for a working update to come out. Before snapshotting, I had to fix borked updates about every second time.

Fair enough. I’m not far behind you on that front. Too many rugpulls and enshittification experiences to trust cloud services very far.

If you have a sub to HA Cloud, you should be able to use their Cloud Voice service. I find that’s less than a second of latency on any commands I give my Voice assist.

My point was just that I guess I trust NC with that, but I wouldn’t do the same with the other two. But I’m still moving to local when I get sufficient hardware to equal that latency.

That’s awesome, it’s fixed. I have no idea why that isn’t the default, because it does nothing otherwise (though if you dbl-middle click, it brings up tab configuration).

TYVM

Awesome Open Source youtube channel isn’t bad. He’s fairly good at explaining a lot of the concepts. I wouldn’t say I’d use everything he recommends but he gives you enough info to make some judgement calls.

I’d also highly recommend the Selfhosted podcast from Jupiter Broadcasting. Alex, the main host is with Tailscale these days, but don’t let that put you off, he’s been doing the podcast (and recommending Tailscale) since long before he started working with them. I imagine there’s a YT channel for the show, but I’ve only ever listened to the podcast.

Also, 2.5 Admins from Late Night Linux group of podcasts has Jim Salter and Alan Jude, both long time sysadmins and developers that have a lot to talk about that’s of interest to self-hosters and professionals alike.

I’d also highly recommend getting boned up on basic Docker usage, and would point you towards starting right from the beginning to use docker compose with local bind mounts, and ignore these one-line docker commands to start containers. There are helper apps like Lazydocker to assist using Docker from the command line. While you can use GUI apps like Portainer, honestly you’ll just end up more confused than pasting stuff into a compose file and watching it with Lazydocker.

And feel free to ping me if you get confused, I’ve helped a few people sort out what they want to accomplish and point them the least-effort direction, or at least what I consider such.

In the end, I guess I trust Nabu Casa infinitely more than Google/Amazon. I’ll do without if it means having their wiretaps in my house. At least HA is trying to give us local voice assist. That was never going to happen with the others.

Try to stay away from exposing applications via proxy or port forwarding. Learn how to use Tailscale and use applications via VPN instead. It installs on any pretty much any device, so it’s not difficult to keep everyone behind the walls and not leave any backdoors for the barbarians.

hmm, I’m on 24.12.0 on Fedora so I guess I’ll see if it works when it upgrades next.

I’d probably dd it straight on to the drive, but I’m sure you could get it to go to New Orleans and play the Macarana before it came back if you used enough pipes.

dd if=/dev/sda0 conv=sync,noerror bs=128K status=progress | gzip -c file.gz

You can add an additional pipe in there if you need to ssh it to another machine if you don’t have room on the original.

It would be interesting to decompile their APK and see how much of OPs code is in it.

Also, in Shortcuts, remove Ctrl-Alt-T from “Launch” and put it on “Open in New Tab”.

And it annoys me that you can’t close tabs in Konsole with middle click. Just sayin’.

AwesomeWM

This is the way.

Chances are you couldn’t use CGNAT for self-hosting, so you’d be out to an actual IP address that’s forwarding the traffic via something like Cloudflared, but your point stands.

I don’t mind flatpaks, but overall I don’t enjoy how software installs on immutable distros if it’s not flatpacked. It’s quite a kludge.