• 1 Post
  • 16 Comments
Joined 2 years ago
cake
Cake day: March 21st, 2022

help-circle









  • Pantherina@feddit.deOPtoSelfhosted@lemmy.worldDo you run an image-based Server?
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    2
    ·
    4 months ago

    Yep, and thats all cloud-first I suppose. It sounds cool but you need to create an ignition file (which sounds very possible) but then you need to get that to a server that doesnt yet have a user account.

    I dont understand anything of that. I dont think mounting a drive with that file is possible everywhere, and how do you setup LUKS?

    Just no. I see if IOT is actually atomic but normal.

    Like, just use a cli installer that can load a file to automate it. Or have a backup user password. There is an issue that addressed this, its old and closed, yeah.








  • Podman runs without a daemon which for some reason makes podman compose an a bit tricky replacement for docker compose.

    But for a single purpose, why not just install nextcloud as a system package via layering? I think that should be pretty secure through SELinux and would be the easiest choice.

    Other problems with coreOS:

    • ignite file make monkey brain confusion
    • updates always require a reboot unlike on Debian, where only kernel updates need that (downtime is minimal and can be automated using a systemd service)
    its not that hard
    pkexec cat /etc/systemd/system/nightly-reboot.service <<EOF
    [Unit]
    Description=Update rpm-ostree and reboot
    After=network.target
    
    [Service]
    Type=oneshot
    ExecStart=/usr/bin/rpm-ostree --reboot update
    
    [Timer]
    OnCalendar=daily
    AccuracySec=1h
    Persistent=true
    Unit=rpm-ostree-update.service
    
    [Install]
    WantedBy=multi-user.target
    EOF
    

    But I would honestly try it. Maybe give secureblue server a try, should be more similar to your desktop than coreOS (which seems to be made for wide deployments)