The heck are you talking about? The baseline security config in Debian is far better than most distros out there, and QubesOS is really only realistic for folks with the threat models of those in C-suites or targets of nation state hackers. Seriously what makes your threat model so severe that you need better isolation and security than what Debian provides (which is already far above average) yet you’ll still post about it on forums?
- 1 Post
- 339 Comments
One could argue that reduced maintenance costs are a value from the cloud providers. E.g. when my AWS VM dies I can get a new one back in <10m (faster with automation). When my self-hosted server dies I need to have planned for that with a warm spare and someone needs to physically be connecting new hardware
Yes this is absolutely a value proposition that CTOs/CIOs/IT Dept Heads need to be considering. You’re not just paying for the VMs and storage, you’re also paying to outsource all of the hardware and some of the configuration work, however you still need admins to manage all of the VMs and configs. If that labor savings is actually enough to cover the immensely increased cost of cloud resources over local/colocated resources that you own (the infrastructure costs are pretty minimal in comparison) than awesome, more power to you.
I really think the biggest value is putting all of your baseline compute in hardware that you own, whether on-prem or colocated, them if you need bursts of resources place that in the cloud. With hardware you own you can spin up temporary VMs, you can keep legacy VMs around, you can fling data around with impunity. These are all tasks that have real costs in the cloud that they will happily bill you for.
But your owned hardware is a set quantity, so if you are rapidly hiring a thousand people or bringing in a new organization or have publicly facing services seeing immeense growth or anything like that and need more capacity immediately, you can’t. It can easily take weeks to bring more servers online even in a rush job, meanwhile the cloud can hand you capacity immediately. That’s the value of the cloud that’s being missed
At the scale of one of the top websites by daily active users, owning your own infrastructure is absolutely cheaper than just throwing it on AWS. At a more realistic smaller scale where you might exceed the bandwidth available for your own hardware, there’s also the option of a hybrid setup where your content is mainly hosted on hardware that you control and then it automatically scales out to AWS or similar when demand spikes.
There’s really tons of ways to make web apps and server infrastructure cheaper than just renting it from a cloud provider, but many orgs lack the vision and drive to do so and just fork money over to [insert hyperscaler here] and watch their app go down when that hyperscaler goes down. I really question this mentality especially when the same organization has constant discussions about not liking how large their cloud provider bills are
Trainguyrom@reddthat.comto
Asklemmy@lemmy.ml•What's the oldest video game you still find yourself playing?English
3·2 days agoA couple of years ago I got my wife to finally play Portal and Portal 2 for the first time. Its been long enough she was entirely unaware of any of the memes about the game so she immediately fell in love with the companion cube and cried when she realized she had no choice but to incinerate it, even going so far as trying to find a bug to exploit to bring it with her
Trainguyrom@reddthat.comto
Asklemmy@lemmy.ml•What's the oldest video game you still find yourself playing?English
21·2 days agoWhen they do you can still play 2009scape! Has up to 5x XP modes in case you want a less grindy experience, a single player mode and a brilliant community
Worth noting that OSRS is really just a fork of RuneScape from around the mid RS2 days, (if I remember correctly it’s based on a full backup someone found of their codebase, so it started as “hey look we found this old version of the game in a box in one of our offices, wanna play?”) and now it contains more new content than original content. Heck way back in the day the idea of a sailing skill was always a silly joke that nobody took seriously, and I’m talking back when Hunter and slayer were being added. Yet here we are.
I’ve never tried the Proxmox over Debian method, I just know it is an officially supported install method. Good on you for getting that far though!
A hale storm earlier this year and the power outage it caused created some bizarre issue with my home server I have yet to diagnose. All of my containers and VMs corrupted in some way, so I had to restore from backup, but my file server container has some sort of permissions issue on top of that.
Honestly the brownout before the outage is almost definitely what did it, but the cost of a UPS that also protects against brownouts is well outside of my usual hobby budget so it’s hard to justify on ewaste hardware that I got a pallet of for less than what the UPS would cost used
Realistically, comfort comes from experience. The more you use it the more you’ll feel comfortable.
If you want to get a lot of exposure without dedicating too much time to it and limit the risk, I would say, spin up a Debian VM and try to configure it into the server you want the old school way. Setup ssh keys, raid pool and samba share all via ssh. Try to do it like you’re actually deploying it. This will give you real world exposure to the command line and the commands you’d run. Next maintain that server like it’s production, ssh in every couple of weeks to run updates and reboot. Just that muscle memory of logging in and reviewing updates will help you feel more comfortable. Do it again with another service (a VPN server would be an easy choice, a Minecraft server is also a fun one but requires a lot more memory. DNS would be good if you’re feeling brave, but that’s really just because DNS architecture is more complex than most realize) and maintain those servers too
Once you’ve setup a couple of servers and spent a couple of months monitoring and updating them your comfort level should be much higher and you might feel ready to setup some actually home production servers on Debian or the like.
You mentioned running Trunas and wanting to learn Debian and other FLOSS software, the easy button answer is to run Proxmox. Its free and open source with paid enterprise support plans available and has been rapidly improving just in the handful of years I’ve been running it. Proxmox is really just a modified version of Debian. They have some tweaks and custom kernels over stock Debian but impressively actually have a supported install method of installing overtop of an existing Debian install and apparently some Proxmox employees actually run it as their workstation operating system
With an uptime of greater than 5 years I’m going to be concerned about the system potentially not coming back up after a reboot/power outage, especially for physical hardware
At a bank I worked at, we had an old IBM Power server which was at that point purely used for historical data. It had multiple years of uptime and was of course a good 10+ years old. When we went to take it offline, we actually just disabled the nic on the switch so we could reduce the number of powercycles it would see in fear that it would not power on anymore. Theoretically the data on it is purely historical, backed up and not needed, but there was enough question marks on each of those fronts we just played it safe
Trainguyrom@reddthat.comto
Ask Lemmy@lemmy.world•If you automated 95% of your job, but still had to report to an office/cubicle, what would you do with your (40hrs)time?English
9·4 days agoI see lots of people suggesting non-work things, but that gets old fast and depending on your work environment can be stressful as you might get caught “not working”
I’d be trying to take on new projects. Start by getting to know your coworkers. If you have other people in your department, talk to them about what they’re working on, things they’d like to see done. If you’re the lone person in your area of work you could alternatively walk the floor and start talking to anyone who could be the stakeholder for a future project. Learn what their pain points are, where the current practices have blindspots.
You mentioned being a safety admin, I’m guessing that’s industrial safety right? Start looking into whatever the current buzzwords are in the industrial safety field and make it a project you take to your boss and try to get funding. Find ways to improve the current processes and data tracking. If you don’t already use a fancy incident tracking system outside of Excel, start doing some research and getting some numbers from vendors and have a chat with your boss about how using an actual purpose built database can improve compliance (that’s about 70% of my duties right now is managing and configuring my organization’s SAAS risk management database, but we also have ~10k workers in the field so it’s highlighting useful data points in the data we’ve already collected primarily)
Unless your position is stuck below a manager with zero flexibility for process improvement, there’s always new projects to be discovered and started to improve existing processes
Trainguyrom@reddthat.comto
Ask Lemmy@lemmy.world•If you automated 95% of your job, but still had to report to an office/cubicle, what would you do with your (40hrs)time?English
1·4 days agoI know there’s already too much content on the Web
No such thing!
Trainguyrom@reddthat.comto
Ask Lemmy@lemmy.world•If you automated 95% of your job, but still had to report to an office/cubicle, what would you do with your (40hrs)time?English
2·4 days agoI’ve had good luck sharing my own interests instead. A few years ago I got super into watching SpaceX’s rocket launches because it’s honestly spectacular and they know how to do a really good livestream, plus watching the booster come back from orbit and softly touchdown is pretty incredible (I’ve had a hard time enjoying the live streams since Musk’s involvement with Trump of course)
But popping over to a coworker and going “hey there’s a rocket launch in 2 minutes, wanna take 8 minutes and watch it with me?” is a brilliant ice breaker
Trainguyrom@reddthat.comto
Ask Lemmy@lemmy.world•What YouTube channel to you has degraded in time?English
2·4 days agoWhen my wife and I first moved in together she was an avid Markiplier watcher, and we watched all of his first? 24 hour stream. At like 3am he opened up probably way more than he wanted to and talked about how he struggles with interpersonal relationships, and how he always ends up pushing people away, as well as his incredibly unhealthy work ethic and I honestly can’t remember the rest but he basically described how he always tries to portray himself very differently from how he is in reality, even in private with friends. Ever since then I can see it where he really does seem to always be playing a character of some sort (and the character definitely does change at times), plus people he’s collabed with and referred to as friends seem to eventually disappear (except for Ethan, he seems to be the one who’s always stuck through it all)
Basically he’s got some demons that I really hope he’s been able to find healthier ways to cope with
Trainguyrom@reddthat.comto
Ask Lemmy@lemmy.world•What YouTube channel to you has degraded in time?English
3·4 days agoBig Clive might fill that gap for you. He does teardowns of dodgey electronics, and remains extremely down to earth, making good commentary about cost effectiveness and energy efficiency. For a while recently he was on a kick of trying to reverse engineer every single LED light bulb design and show how to modify them to run the LEDs less hard making them last much longer and run more efficiently (with reduced light output of course)
He also uploaded a video without warning describing his experience caring for his mother as she passed from Alzheimers. That video with his down to earth way of describing things really helped me to better understand dementia not long before I had family members start declining from dementia
Trainguyrom@reddthat.comto
Ask Lemmy@lemmy.world•What YouTube channel to you has degraded in time?English
2·4 days agoI still don’t understand why he closed his AirBNB mountain bike retreat.
He described in his move out video feeling it was morally dubious to have perfectly good housing stock as an AirBnB when someone could be living there.
Like I get it, I’m at the point where I’m starting to look at long term investments and long term financial planning and having a small ADU or second home starts looking real smart really quick especially if you can cover the costs by renting it out or putting it on AirBnB, but you also have to consider the moral aspects.
Trainguyrom@reddthat.comto
Ask Lemmy@lemmy.world•What YouTube channel to you has degraded in time?English
1·4 days agoDude when they first launched Channel Super Fun it was like frat bro style activities they were engaging in that you’d be hard pressed to get HR to sign off on. I remember they basically kept dogging on one of their first work permit holders who was working on immigrating. I think his name was Dennis? Like yeah he clearly was straight out of college and lacked life skills but holy shit they took it way past playful teasing, and that’s just what happened on camera that they felt fine to post.
Trainguyrom@reddthat.comto
cats@lemmy.world•Meet Pumpkin 1 of the 4 new strays under my careEnglish
2·4 days agoYou actually got a photo of a kitten where it was standing still?!
Trainguyrom@reddthat.comto
cats@lemmy.world•Meet Pumpkin 1 of the 4 new strays under my careEnglish
1·4 days agoMy parents got a young bonded pair of cats from the shelter. One died suddenly of an undiagnosed heart issue, the other refused to accept the next new cat they took in. Right now the plan is that my grandmother’s cats will go live with my parents if they survive until she enters full time nursing care (which at this point the cats are looking like they’ll outlast her despite being an older bonded pair when she adopted them) I’m concerned for what the social hierarchy will look like if/when that happens
Trainguyrom@reddthat.comto
Linux@programming.dev•Linux traffic has grown 22.4% in PH this yearEnglish
2·4 days agoSo honest question, what is everyone’s hopes with the increase in Linux desktop use?
Like when I think about it the only thing I really care about is that I have decent hardware/driver support and holdouts for anti-cheat give up on requiring other operating systems (mostly so that my wife and eldest child stop complaining that I can’t play Fortnite with them) as well as other random stuff that flat-out blocks use with Linux and requires either extra configuration or to keep a spare computer around with Windows.
Basically I hope that Linux can be where MacOS was about a decade ago, a second platform that vendors are aware of and will put in some amount of effort in to support (and will be clear about limitations/lack of support otherwise) and it won’t be as weird to employers or schools if you have a preference for the platform



When I started my career in IT I consciously started keeping a variety of backup careers in mind, and I intentionally keep my expenses where I could simply swap careers and make it all work financially.
Probably my most viable backup plan is to move into banking or finance. Decent money available there, still tickles the part of my brain that loves understanding numbers and processes while also working my brain entirely differently than troubleshooting network problems. Data science, HIT and HRIT are also options in considering if I want to stay in the realm of IT, but that depends on how burnt out I get really
In my personal life I’ve been picking up more off-screen hobbies to help stave off burnout among other reasons. I’m hoping career-wise I can promote myself into management before I get too burnt out, but you never know