I was getting more at stacks on a host talking, ie: you have a postgres stack with PG and Pgadmin, but want to use it with other stacks or k8s swarm, without exposing the pg port outside the machine. You are controlling other containers from interacting except on the allowed ports, and keeping those port from being available off the host.
I assume #2 is just to keep containers/stacks able to talk to each other without piercing the firewall for ports that aren’t to be exposed to the outside? It wouldn’t prevent anything if one of the containers on that host were compromised, afaik.
“All your containers are belong to us.”
Yah, but when you look a phone with a good case, it’s probably not much thicker. And they’ve put a monster battery in them, which is a large part of the thickness.
I can fit thick in my shirt pocket, I can’t fit long. And putting a phone in my pants pocket is a good way to break it IME.
You might want to look at Ulefone for actual compact phones. I’m waiting for the Flir ones to come down in price some, they’re a little too new for that yet. But if you’re less of a cheap bastard than me, they look pretty good.
I’ve tried nothing and I’m all out of ideas.
You might consider using something like Cloudflared or Tailscale’s Funnels to proxy the connections through to prevent DDOSing and apply ACLs. You can still use your domains with those.
I mean, it sucks, but the stupid shit people will do with company laptops…
Nobara is a great option if you don’t want to deal with the weirdness of installing stuff on an immutable distro. Nobara also has a bunch of tweaks for video editing software like OBS and Blender.
Domain authentication and group policy analogs. Honestly, I think it’s the major reason it isn’t used as a workstation OS when it’s inherently more suited for it than Windows in most office/gov environments. But if IT can’t centrally managed it like you can with Windows, it’s not going to gain traction.
Linux in server farms is a different beast to IT. They don’t have to deal with users on that side, just admins.
Been using this for years, runs like a top.
I might watch videos in Youtube, but I keep my subscriptions on Piped because it doesn’t shit algo stuff down my throat constantly. And I can enable deArrow to get rid of the clickbait thumbnails.
I haven’t lasted long enough after the Search piss-off to notice the tomfoolery of that. Well, you probably shouldn’t be creating new folders from there, don’t you understand how the workflow-as-handed-down-by-Jehosaphat is supposed to be used?
Honestly, that defaulting to the Search field in the Save dialog when I’m trying to save something just gets me wild. It beggars the imagination why the developers think that’s a reasonable thing to do and it colors my whole perception of the DE.
Plasma for the last decade. Then probably XFCE, then Cinnamon.
I try Gnome every year or so, but every time I get pissed off with it within a few minutes and wipe it off my machine.
Well, I know you can define volumes for other filesystem drivers, but with bind mounts, you don’t need to define the bind mount as you do, you can just specify the path directly in the container volumes and it will bind mount it. I was just wondering if there was any actual benefit to defining the volume manually over the simple way.
Is there any advantage to bind mounting that way? I’ve only ever done it by specifying the path directly in the container, usually ./data:data or some such. Never had a problem with it.
Absolutely. Even if your ISP is firewalling, never trust they will maintain it, and some of these cheapshit routers they use are awful. Use your own router and put it on the ISP routers DMZ.
OK, yah, that’s what I was getting at.