Off-and-on trying out an account over at @tal@oleo.cafe due to scraping bots bogging down lemmy.today to the point of near-unusability.

  • 20 Posts
  • 1.16K Comments
Joined 3 years ago
cake
Cake day: October 4th, 2023

help-circle
  • so I figured that using pipewire to co-ordinate this would be the easiest way forward, except it turns out that it’s a (GUI) user space process, which doesn’t make sense on a server with no GUI users.

    I’m not entirely sure what you mean by “(GUI) user space process”, but if it’s that it’s a systemd user process (e.g. it shows up when you run $ systemctl --user status pipewire rather than $ systemctl status pipewire, which appears to be the case on my system, where there’s one instance running per user session), then you probably can run it as a systemwide process, where there’s just one always-running process for the whole system. IIRC, PulseAudio could run in both modes. I don’t know if you have concerns about security on access to your mic or something, but that could be something to look into.

    searches

    Sounds like it’s doable. Not endorsing this particular project, which I’ve never seen before, but it looks like it’s possible:

    https://github.com/iddo/pipewire-system

    PipeWire System-wide Daemon Package (Arch Linux)

    This package configures PipeWire, WirePlumber, and PipeWire-Pulse to run as a single system-wide daemon as the root user. This setup is optimized for headless media servers, HTPCs, or multi-user audio environments.






  • You’re not wrong that you’re not safe posting on Reddit, but if this case is any indication you’re not any less safe posting in Reddit than any other site, including Lemmy.

    You can choose the location (and thus legal jurisdiction) of your home instance, but yeah, in general, I think that people need to be aware that server operators on the Threadiverse are probably not going to fight legal battles on your behalf.

    We had someone ask about turning over IP addresses to law enforcement a while back on lemmy.today. The lemmy.today server admin gave what I’d call probably a pretty accurate answer.

    https://lemmy.today/post/7255213

    How will Lemmy Today handle IP subpoenas?

    Lemmy instances are run by volunteers who wants to see a social media network without big tech.

    I dont think you can trust any of those volunteers, including this one, to not comply with law enforcement. Thats not why we are running instances. Its about providing a platform without tracking, ads and algorithms for talking to other people and having a good time.

    Hope that makes sense.

    Use a VPN if you have a reason to. :)

    It linked to a similar question for lemmy.dbzer0.com:

    How will dbzer0 handle IP subpoenas?

    Don’t know man. I’m not making enough in donations to pay for the server costs, never mind hiring lawyers. I’ll deal with this when I have to 😅

    There are platforms more-aimed at providing harder pseudonymity. I’d put Hyphanet fairly high on the list of “a pain in the ass to track a poster down due to technical barriers” list (though that comes with very real performance and latency and suchlike costs).





  • tal@lemmy.todaytoSelfhosted@lemmy.worldHow do you use VPN?
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    3 days ago

    I have not used such a configuration, but I believe that it’s fine to have multiple WireGuard VPNs concurrently up, at least from a Linux client standpoint. I have no idea whether your phone’s client permits that — it could well be that it can’t do it.

    Your routing table would have the default route go to a host on one of them (and your Internet-bound traffic would go there), but you should be able to have it be either. Or neither — I’ve set up a WireGuard configuration with a Linux client where the default route wasn’t over the WireGuard VPN, and only traffic destined for the LAN at the other end of the WireGuard VPN traversed the WireGuard VPN.

    From Linux’s standpoint, a WireGuard VPN is just like another NIC on the host. You say “all traffic destined for this address range heads out this NIC”. Just that the NIC happens to be virtual and to be software that tunnels the traffic.

    EDIT:

    It sounds like this is an Android OS-level limitation:

    https://android.stackexchange.com/questions/261526/are-there-technical-limitation-to-multiple-vpns

    In the Android VPN development documentation you can find a clear statement regarding the possibility to have multiple VPNs active at the same time:

    There can be only one VPN connection running at the same time. The existing interface is deactivated when a new one is created.

    That same page does mention that you can have apps running in different profiles using different VPNs at the same time. That might be an acceptable workaround for you.







  • I just ran my routine update script. For the fourth time today. And I’m hit with 2029 updated packages.

    I mean, that’s kinda what you sign up for if you’re using a rolling release Linux distro, and I’m assuming, given the name, that tumbleweed is a rolling release?

    searches

    Yes:

    https://en.opensuse.org/Portal:Tumbleweed

    The Tumbleweed distribution is a pure rolling release version of openSUSE containing the latest “stable” versions of all software instead of relying on rigid periodic release cycles. The project does this for users who want the newest stable software.

    https://en.wikipedia.org/wiki/OpenSUSE

    openSUSE[5] ( /ˌoʊpənˈsuːzə/) is a free and open-source Linux distribution developed by the openSUSE Project. It is offered in two main variations: Tumbleweed, an upstream rolling release distribution, and Leap, a stable release distribution which is sourced from SUSE Linux Enterprise.[6]

    I mean, sounds like they’ve got a non-rolling-release distro too, and that won’t hit you with all the updates.

    EDIT:

    https://en.wikipedia.org/wiki/Rolling_release

    Rolling release, also known as rolling update or continuous delivery, is a concept in software development of frequently delivering updates to applications.[1][2][3] This is in contrast to a standard or point release development model which uses software versions which replace the previous version.

    A rolling release model is different from a staged or “staggered” rollout, in which an update is gradually made available to an increasing percentage of users for testing or bandwidth reasons.[4][5]

    An example of a rolling release would be Arch Linux, where new packages and updates roll in constantly, and significant changes to the distribution may occur at any time by the developers. This is in contrast to Ubuntu Linux, which has biannual releases, with the only major changes after a release being security updates or significant bug fixes.




  • I’m still not using one. The problem is that you’ve got two classes of devices that haven’t quite converged to what I want.

    UPS

    Traditionally, the purpose of UPSes isn’t to keep systems running (other than through very short outages). It’s to do one of the following:

    • Provide a small amount of buffer until a backup power system, like a generator, has time to come online.

    • Give the systems time to shut down cleanly. If the user is right there, they have time to save their work. This was particularly an issue before journaled filesystems became the norm, since an unclean shutdown in the era when Windows was using FAT, Linux was using ext2, and MacOS was using HFS had at least the possibility to corrupt your filesystem. They have the ability to report their charge level to an attached computer so that it knows when the battery level is critical and then software on it can start it shutting down. On Linux, the most-common software package to do this is Network UPS Tools, or NUT.

    These things don’t need a lot of capacity. They rarely get drained, so they usually use lead-acid batteries, which are heavy and don’t have many full charge-discharge cycles in them (but are pretty happy staying fully charged all the time). You can still get these. The lead-acid batteries are replaceable, though, so an old UPS can keep going for a very long time.

    Powerstation

    These are designed to keep attached devices running for a longer period of time. Unfortunately, they have a couple of important limitations for powering computer systems.

    • They do not normally have the ability to report their charge level. Irritatingly, they do nearly always have a voltmeter rigged up to some software to map voltage to charge remaining to drive a ‘charge remaining’ display on the device, and there are USB HID device classes for reporting charge levels to a host OS, but for some reason, powerstation manufacturers don’t seem to have an interest in making a powerstation that has the latter functionality. NUT does have a USB HID backend, which means that it can monitor and shut down a system if they’d expose it. I’d really prefer the ability to treat one of these as a laptop-style battery, as Linux (as well as other OSes) have the ability to hibernate on low battery. On Linux, these show up as /sys/class/power_supply/BAT*, and there’s lots of software to display charge information and act based on low levels…but AFAICT from looking around the kernel, there is no way to get the kernel to deal with a USB HID device reporting remaining charge like this as a BAT device.

    • Computer power supplies can only smooth out so much of an interruption in their power. Computers rely on something on the order of a 10 millisecond transfer time after AC goes out until the UPS needs to be running full-tilt. searches ATX PSUs apparently are only required to operate for 16 milliseconds without power. Other hardware attached may or may not actually deal well with interruptions, but obviously the shorter the transfer time, the better. It looks like line-interactive UPSes tend to do something like 3-6 milliseconds. The problem is that a lot of powerstations have a transfer time in excess of this.

    There are some LFP UPSes now, but these have their own disadvantages. They tend to be fairly pricey, and the batteries are often not replaceable, which means that unlike the old lead-acid UPSes, when the battery dies (which will take longer than with a lead-acid battery), the whole device is also going to the landfill.

    And lastly, you have the problem that while lead-acid batteries are pretty mature and prices are pretty stable, LFP battery prices are coming down (and sodium-ion might start competing with them for fixed batteries). If batteries are cheaper in the future, waiting means a better deal.

    I don’t currently run a UPS on my systems (though I have in the past). I kind of decided that if I’m going to run a UPS, I’m probably going to just bite the bullet and use the combination of a traditional lead-acid UPS and an LFP powerstation, with the UPS plugged into the powerstation. In that configuration, the powerstation provides provides the longer-running power, and the UPS deals with short transfer time and warning computer systems that power is about to go out. This isn’t perfect, because (a) your computing devices can’t see the remaining charge on the powerstation in an outage (b) at some point, one still has to toss the LFP powerstation, and (c) there’s a little extra hardware involved. However, it also has a number of benefits:

    • Lead-acid UPSes pretty much always have replaceable batteries. One can keep the UPS around, though the batteries will have to be periodically replaced.

    • The UPS will provide time for the system to shut down.

    • UPSes are designed specifically for this, and have short transfer times. You don’t need to worry the way one might about a powerstation having marginal transfer time.

    • You can get a lot of AC-related functionality in UPSes, like online capability (which will clean up the power, if you want), which isn’t generally available in powerstations.

    • You can upgrade the “powerstation”, even (if you want) doing a build-your-own thing with separate cells and an inverter and charge controller (which is generally more cost-effective for larger systems) down the line. These discrete-component systems are also a lot easier to provide human monitoring of remaining charge, since you can pick the components (and worst case, all you need to do is connect a voltage sensor that can talk to a computer to it), though they don’t integrate as nicely off-the-shelf with something like NUT as do traditional UPSes.

    I’m not saying that this UPS+separate-battery-system is the only route to take, but I spent some time banging my head on it, and wanted to share if anyone else is similarly thinking about the same thing – that there may be a good argument to have a traditional UPS and some kind of separate battery system.