• 0 Posts
  • 113 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle




  • asap@lemmy.worldtoSelfhosted@lemmy.worldPodman or rootless docker?
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    28 days ago

    Mainly for security. I was originally looking at CoreOS but I liked the additional improvements by the UBlue team. Since I only want it to run containers, it is a huge security benefit to be immutable and designed specifically for that workflow.

    The Ignition file is super easy to do, even for just one server (substitute docker for podman depending which you have):

    Take a copy of the UCore butane file:

    https://github.com/ublue-os/ucore/blob/main/examples/ucore-autorebase.butane

    Update it with your SSH public key and a password hash by using this command:

    # Get a password hash
    podman run -ti --rm quay.io/coreos/mkpasswd --method=yescrypt
    

    Then host the butane file in a temporary local webserver:

    # Convert Butane file to Ignition file
    podman run -i --rm quay.io/coreos/butane:release --pretty --strict < ucore-autorebase.butane > ignition.ign
    
    # Serve the Igition file using a temp webserver
    podman run -p 5080:80 -v "$PWD":/var/www/html php:7.2-apache
    

    During UCore setup, type in the address of the hosted file, e.g. http://your_ip_addr:5080/ignition.ign

    That’s it - UCore configures everything else during setup.___










  • As a counterpoint, I installed Bazzite on a Blade 14 for a heavy gaming friend who was leaving Windows, and they have had no issues whatsoever.

    I personally use Bluefun, and again, no issues at all. Incredibly good experiences on both.

    I can’t imagine what you mean by needing more work to configure, they both worked out of the box with no configuration.







  • Sorry that’s my mistake - I should have said “source available”, rather than “open source”. IMO, being source available is the critical component of a password manager like Bitwarden, and is what I meant when I referred to their main competitive advantage.

    They might also choose to be open source and fix this specific issue and return to GPL-compatibility, but remaining source available would seem to be the more critical factor.