I have set up an lts kernel in addition to the zen I use by default. See:

https://wiki.archlinux.org/title/Kernel

Disclaimer: this only works when something with image creation goes wrong with an update. Which didn’t happen to me ever - unless I did a mistake or tested some kernel stuff. I only had bootloader errors when I screwed up pacman though. The fallback kernel in that case is on a USB stick…

Hehe true. And even that happened to me after a couple of tired “Syu enter”. But then again I learned something new with nearly every repair!

Oh agreed! That’s why I’m with OP actually that arch might not be the right distro to go for.

The person I replied to basically said “that’s what you deserve for not doing it properly” if I understood it correctly - that’s what I’m confused about as well.

What precaution would you expect OP to would’ve done though? A fallback kernel would be my guess - that’s something many casual oriented distro do out of the box basically. . I read your post as “you’re right, don’t use arch” - something btw which I tend to agree with although I wouldn’t say that’s because of the precautions.

I use arch because there’s no black box magic. For an end user who expects or wants that… Yes, arch might not be the right choice.

Just curious, what distro do you use that systemd is not the default? (I at least you didn’t change it after the fact if you don’t have any feelings (towards unit systems ;) ) )

In case you don’t actively check back in the thread: there’s a white in depth answer now what gear the is and why the person answering “yes” is very likely wrong.

Worth a read!

And France has a shitload of jobs!

I bet that even your ass is still on your backside so three of three wrong.

The first link goes into amazing detail on that. In short: all your information concerning location as well as current IP and some other metadata gets send to a basically unknown company with no transparency on how that data is handled.

I highly recommend reading the first, linked post though!

It’s the server doing the meddling, don’t forget that! Email servers have two things to base an analysis off of: the trustworthyness of the senders header data and the content.

Header analysis will quickly kill messages from the fake servers but only after a certain amount of spam is identified - the computer doesn’t “read” the alphabet, it just sees valid encoded symbols. It’s the humans job to find the traffic lights, so to say.

And content analysis is a cold war of attrition: building better filters leads to better tricks leads to better filters, etc.

The only way I have found to stay spam free is customizing my address for each potential sender (i.e. scipilemmy@mydomain.net).that was a lot of work to set up though…

You have several long and comprehensive answers so please allow me to add an emotional one:

Fucking compile error in hour six of what you estimated to be a four hour compile job because of a mistake you made that you found within 5 seconds after the error!!

Fucking why doesn’t this compilation start I can’t find my mistake for hours?!

Where does this module come from?! What do you mean “root kit”? Learning was fun!

It all was fun! :)

Yeah I had a brainfart, meant namespace…

And thanks a lot for this writeup I think with your help I figured out where I went wrong in my train of thought and I’ll give it another try next week when I have a bit downtime.

The time you took to write this is highly appreciated! ♥

Do you have a link at hand on how start a process within a specific veth by chance? Own name spaces are easy enough and a lot of tutorials but I don’t want my programs to ever be not in the vpn space, not at startup not as fail over etc.

That’s the reason why I stuck with the container setup, only for gluetun plus vpned services.

Is there anything to support this? I couldn’t find anything that really has this intend documented and Intel weren’t the only on pushing for usb as the most simple protocol possible ( I recall a lot of excitement about the “u” part… How naive at least I was back then!).

I’m not knowledgeable enough to really argue against it, looking simply from an Okham point of view as “they wanted everything to connect” - the printer in the same way as that PDA… Plus Intels de facto (IT) world domination at the time it just seems unlikely.

Edit: some sentences didn’t make even less sense, fixed.

Cups

linux printing server - if you want to share a printer over network or just use one locally on a linux machine.

(not OP but same boat) Doesn’t really matter to me because google knows my servers external IP which is a non-issue: I don’t expect google to try to attack me individually but crawl data about me. There is no automatic link between my server and my personal browsing habits.

In terms of attack vector vs ease of use , self hosting searxng is a nobrainer for me - but I do have an external server available for things like that anyway so no additional overhead needed.

Two more things to add: you get downvoted not for the content but for the tone. People tend to not respond well to abuse, even if verbal - and at least I read a “make this shit work for me” in between your lines.

And more important: what you are asking is not easy. Wouldn’t be on windows, wouldn’t be on macos (disclaimer: I’ve never set up the arr stack on either but docker runtimes) . You are diving into server software no matter if you’re the only user or not. Either you accept this and the learning curve ahead of you or you give up on it.

♥! :)

I have to make this nitpick:

“you” are the one keeping you on windows. You decide that those features are more important than any disadvantages.

Which I think is absolutely OK - that’s your choice. Many many people took this choice for a myriad of reasons and are the sum of “windows majority” - and no “I would change if” will perpetuate either feature development on Linux programs nor pressure on Microsoft.

Especially because the thread was dead your answer is highly appreciated!

A Dockerfile itself is the instruction set. There is a certain minimum requirement expected from a server admin that differs from end-user requirements.

The ease of docker obfuscates that quite a bit but if you want to go full bare metal (or full AWS or GCS, etc etc) then you need to manage the full admin part as well - including custom deployments.