apigban

hypervisor: proxmox

vms: rhel 9.2

deleted by creator

what kind of thumbnails are you seeing?

I see a good lookin guy pointing at a Black box.

hey yeah, no stress!

just lemme know if you’d want someone to brainstorm with.

lemme know if you need some tshooting remotely, if schedules permit, we can do screenshares

I had this issue when I used kubernetes, sata SSDs cant keep up, not sure what Evo 980 is and what it is rated for but I would suggest shutting down all container IO and do a benchmark using fio.

my current setup is using proxmox, rusts configured in raid5 on a NAS, jellyfin container.

all jf container transcoding and cache is dumped on a wd750 nvme, while all media are store on the NAS (max. BW is 150MBps)

you can monitor the IO using IOstat once you’ve done a benchmark.

I’d check high I/O wait, specially if your all of the vms are on HDDs.

one of the solution I had for this issue was to have multiple DNS servers. solved it by buying a raspberry pi zero w and running a 2nd small instance of pihole there. I made sure that the piZeroW is plugged on a separate circuit in my home.

the person you are replying to either lacks comprehension or maybe just wants to be argumentative and doesn’t want to comprehend.

i didnt have a problem with network ports (I use a switch) what I shouldve considered during purchasing was the number of drives (sata ports), pcie features (bifurcation, version, number of nvme slots)

I need to do high IOPs for my research now and I am stuck with raid0 commodity SSDs in 3 ports.

ex-IT? what do you do now?

I heard so many stories about school IT, I’ve never been on one though. the most baffling thing I heard from coworkers that came from usual office IT and moved to school IT was that there was no respect for the profession and the amount of entitlement from users are really un imaginable.

The job security.

Fiber. Yum.

Hello! I’m a hobbyist in this space (scripting/coding), does anyone here have a:

• gold standard of what commit messages should look like?
• common practice/etiquette for commit message?

I never had a team or guide or mentor and when I saw this i felt that my commits are like smoke signals describing that there’s a fire. which isnt really helpful.

I tried to contribute to a python module that I use daily, my PR was so over engineered (iirc i added just 3 lines, but with tests, screenshots, CI/CD) i think to compensate for my lack of experience that I got called out (“wow this is pretty extreme just for that feature”).

Depends on what kind of service the malicious requests are hitting.

Fail2ban can be used for a wide range of services.

I don’t have a public facing service (except for a honeypot), but I’ve used fail2ban before on public ssh/webauth/openvpn endpoint.

For a blog, you might be well served by a WAF, I’ve used modsec before, not sure if there’s anything that’s newer.

I’d make my own nas.

I got this step, defederating essentially says to them that I dont consent to them getting my data.

But I’m really missing something here, since any instance that zucc controls that is federated to the large instances just exposes my data to zucc.

Defederating is one step, the instance owners have taken that step now, so far so good, well then zucc will just create a lemmy/kbin instance that they own, they join the fed and not even announce meta’s affiliation with it, my data is still zucc’ed.

I should’ve been more clear about my question, how would I, as a lemmy user, know if an instance has gone rogue (taken over by another entity, meta/fb/ig).

My actual worry is about an instance stealthily created by meat/fb/ig that is not identified as a threads instance/service. Say you have deferedated the fuck out of all known identified Meta created instance so they cant push trash content, then as an example:

an instance owner gets bribed and creates another instance to federate with established instances and gives control of it to FB. At this point fb/ig/meta know they’d just be kicked out again if they even peeped that they now own the inatance.

What is the trust model between instances, where/when does it break?

if the instance that meta now owns doesn’t push out threads-content, they still have access to our data and I’ll just be unaware of it and next thing we know we getting profiled from what we post in our private instances.

Thanks for this visual. I’d extend the question to:

Will facebook be able to create dummy instances that would federate with the large/established instances and take our information?

I know fuck all about this.

As for me this is what I can’t follow too, i understand that fackbook cant be trusted, and the federation is based on trust between instance admins to not do something fuckey.

So our data and rights (my country was victim of CA) are unsafe when federated with threads, these are what people are saying.

what is stopping facebook from creating a dummy instance, not disclose it is theirs, and federate with the instances that rejected the known threads instances?

I agree with this, what I suggested is not a best practice, I should preface my post with that.

And I feel your pain! I get calls that are extremes, like people putting too much security where the ticket is “P1 everything is down, fly every engineer here” for an nACL/SG they created.

The other extreme is that deliberate exposure of services to the public internet (other service providers send us an email and ask us to do something about it, but not our monkeys, shared responsibility, etc).