she/they ⚧︎. https://dblsaiko.net/
Very good post :)
I just about lost it at everything in this paragraph
The door creaked open. Guido van Rossum looked like the typical output of GNU Autotools. He introduced me to the only other survivor: Special DevOps Mikhail Molotov. “We lost Travis. We lost Jenkins…” Molotov lamented.
Yeah! To add to this:
Poob has it for you.
Bought music from iTunes (not Apple Music, the streaming service!) is DRM-free just as Bandcamp, and I’ve lost music from my Bandcamp profile as well because the artist deleted their account (which I luckily downloaded most of beforehand).
The effectively only difference is Bandcamp offers lossless downloads.
Yeah. I use it with systemd, but I don’t want to miss /etc/portage/patches for example. It’s so nice.
waow. based
(Made in Krita!)
Yeah, on a desktop I don’t really mind whatever*. On a server however, I think systemd is great and I wouldn’t want to miss it anymore.
* except Debian’s frankenstein systemd + sysvinit combination. Burn it
Gentoo with OpenRC
Oh really? Nice, that’s news to me. Last I checked (admittedly not recently) it needed a bunch of 32-bit libraries installed to even start the client.
Since we’re talking about Steam here for example, Valve have not even bothered to release a 64-bit x86 client, let alone Arm client, except for Mac.
Well you don’t have to. I would, I would choose it over Firefox on Linux too.
They should bring back Mountain Lion or whatever. I heard it was peak
Gentoo can do this with Portage sets. They’re essentially a more simple way of creating a meta package which just installs other packages. And you can also write config packages which installs configuration for other packages.
Hm, okay, that does sound like the real client IP will get lost and every connection will appear to come from the proxy then. It would be good if that were passed somehow. My current setup adds the X-Forwarded-For header for example.
Oh interesting, I’ll have to look into that. Is this with that “proxy protocol” I’ve seen mentioned? If not, does this preserve it pass through the client socket address?
Tbf, technically data is still decrypted at the reverse proxy and then re-encrypted. So if someone manages to reconfigure the proxy or read its memory somehow they could read traffic in plain text.
However then since they have to control the VPS, they could also get a new cert for that domain (at least the way I’ve configured it) even if it was passed as is to the real host via a tunnel and read the plaintext data that way, so I don’t think a tunnel protects against anything.
Oh my god more work on the Dark Engine multiplayer. I really hope they finally release the source code for the engine like they promised ages ago with this remaster. Maybe they’re also the ones behind the new mysterious NewDark update?
If someone manages to get root (!) access on this VPS it’s over either way.
Yes, you can just use a reverse proxy for IPv4 only and point it to the IPv6 upstream. That is what I do, with a separate DNS record which then combines the two. See the DNS records for id.knifepoint.net (CNAME), http.vineta.knifepoint.net (AAAA, A) and vineta.knifepoint.net (AAAA).
The reverse proxy config and certificate management is set up with NixOS, if it helps: https://git.dblsaiko.net/systems/tree/nixos/defaults/v4proxy.nix https://git.dblsaiko.net/systems/tree/nixos/modules/sys2x/v4proxy.nix
It’s a thing in Bavaria as well. I’m trying to erase it from my vocabulary because I hate it too.