User avatar
φ @fiore@brain.worm.pink
1y
ok infra thread to plan out the new gngr.fail server setup
1
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
its gonna be fedora server . i have decided
2
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
itll be 2 physical servers , one actually running the services and the other for bulk data and backups
1
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
backups will be done thru borg , the backups server will only be exposed to the internal network
1
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
itll all be rootless podman+systemd . the only thing running as root will be the caddy reverse proxy
2
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
every service will have its own user , lingering enabled , and data stored in the home dir
2
0
1
0
User avatar
Two Hollywood Phonies @autumn@cafe.autumn.town
1y
@fiore all sounds very good actually, why fedora server though? you'll have to upgrade it every 6 months (although there's probably a very nice system upgrade util)
1
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
@autumn yea system upgrades are very comfy in fedora . also since im containerizing everything , the servjces themselves will be fine

also , fedora just has the normal way of handling things as the default . its basically Normal Linux nowadays , and i dont wanna have ti deal with outdated packages (debian) , snaps (ubuntu) , or manual setup of everything (arch)
1
0
1
0
User avatar
Two Hollywood Phonies @autumn@cafe.autumn.town
1y
@fiore how i did things before was via Debian, and since everything would be containerised then outdated packages aren't really an issue, like unless you need the latest version of like. Htop or smth 😭 and that gives you the benefit of not needing to upgrade for 5 years (or until next release)

not trying to convince you or anything, just something to consider!!
2
0
1
0
User avatar
φ @fiore@brain.worm.pink
1y
@autumn im running in debian rn . i do not want to use nvim 0.6 anymore . sorry
1
0
1
0
User avatar
Two Hollywood Phonies @autumn@cafe.autumn.town
1y
@fiore hahahaha fair enough
1
0
1
0
User avatar
mia (developer mode) @mia@shrimptest.0x0.st
1y
@autumn @fiore i’ve been running tumbleweed for as long as it existed and in my experience it doesn’t really care whether it upgrade weekly, monthly, or every 3 years, or only a few packages at a time. it’s pretty well maintained
1
0
2
0
User avatar
mia (developer mode) @mia@shrimptest.0x0.st
1y
@fiore @autumn not using containers with it either, just the usual systemd-managed namespace isolation
1
0
2
0
User avatar
φ @fiore@brain.worm.pink
1y
@mia @autumn how much less overhead does that have compared to podman ? is it worth it ?
1
0
0
0
User avatar
mia (developer mode) @mia@shrimptest.0x0.st
1y
@fiore @autumn idk about podman. but docker has insane syscall overhead so i/o in docker containers tends to be a lot slower than in a bare lxc container or on a KVM guest
2
0
1
0
User avatar
Two Hollywood Phonies @autumn@cafe.autumn.town
1y
@mia @fiore idk if i would need to worry about overhead though, I've used docker running several services on a raspberry pi and didn't notice any storage slowdown, all of it was CPU limited

even now as i run this instance on a rpi, the limitation is storage speed (which is solved by just using an ssd instead of sd card) and cpu which i can't really do anything about lol
1
0
1
0
User avatar
mia (developer mode) @mia@shrimptest.0x0.st
1y
@autumn @fiore yes, the syscall overhead is mostly CPU. it’s spending a lot of time doing bpf shenanigans (you can see it with perf top)
1
0
2
0
User avatar
Two Hollywood Phonies @autumn@cafe.autumn.town
1y
@mia @fiore well i mean that everything would run but sometimes i tried doing things that would well exceed the CPU capabilities like a minecraft server, or being boosted by a large account on my single user instance 😭 im sure that docker contributes to that slightly but not enough to where it'd fix any of this. the cpu is just slowww
0
0
1
0