• 0 Posts
  • 114 Comments
Joined 11 months ago
cake
Cake day: August 8th, 2023

help-circle

  • I don’t think it’s “kinda dumb” to point out the issue all, unless you’re an insufferable twatwaffle like 90% of the fucking STEM community in 2024, who can never be wrong or challenged.

    Like, I’d consider myself pretty progressive, maybe even “woke” if that still has any meaning left, and even I might have just used male pronouns because I myself am male;’not for malicious reasons but just because I wasn’t thinking in that moment.

    But if I was like “oh yeah, that makes sense, and cool you even did the work of fixing it for me! Merged.” and went about my day, no one would have brigaded me, no one would have posted it all over socials, there wouldn’t be blogs and articles, and I’d probably have a leg to stand on if anyone still wanted to make a big deal.

    The way this dude reacted was a self-report. The community was right to push back, even if some people ended up taking it too far.









  • It’s UID/GID 10000 on the host because you are using an unprivileged LXC container. Unprivileged means that “root” inside the container (which is just a user space of the host with access restrictions) is user 10000 on the host - this is so that files and processes inside the container don’t run with the real UID zero, where they could plant a malicious file, or run a malicious program that escapes containment that ends up with root access on the host.

    Quickest way to make this work over samba is to force user 10000 and force group 10000. That way everything connecting to Samba would see the files as their own.

    Honestly the better solution is to make your software inside the containers run with a local non-root user (which would be something like 10001) and then force samba to use that. Then nothing is running as root in or out of the containers. Samba will still limit access to shares based on the samba login, but for file access purposes it will still use the read/write levels of your non-root user (because of the force- directives)




  • 4am@lemm.eetoSelfhosted@lemmy.worldVLAN question
    link
    fedilink
    English
    arrow-up
    3
    ·
    1 month ago

    If Proxmox is already installed on the machine, how are you running OPNSense? If it’s not bare metal, it’s a VM, and if it’s a VM it needs Proxmox’s virtual NICs to be VLAN aware, unless you are doing PCI pass through of the entire network card.




  • 4am@lemm.eetoMildly Infuriating@lemmy.worldThere is no genocide in China
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    2
    ·
    edit-2
    2 months ago

    This is the kind of shit that gets actually useful leftist ideals thrown in the trash by normies

    “Oh THOSE people? Yeah they’re all crazy China-Stan’s, who the fuck knows why”

    Bro 2% of your paycheck is not more than you pay now in premiums I’m begging you for universal healthcare

    “Why so I can’t *chose* my own doctor? So I can wait in line like in CANADA?”

    Ugh it’s fucking infuriating