131
An Immich LXC came up on community script (community-scripts.github.io)
submitted 1 year ago by to c/selfhosted@lemmy.world
24 comments fedilink hide all child comments
 

Hi all,

For all people awaiting for an LXC to self host Immich the time has come. The LXC came up a month ago, sorry if it's a repost.

all 24 comments

sorted by: hot top controversial new old
[–] 36 points 1 year ago (5 children)

For those like me still learning.

Linux Containers (LXC) is an operating system-level virtualization method for running multiple isolated Linux systems (containers) on a control host using a single Linux kernel.

https://en.m.wikipedia.org/wiki/LXC

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
  • [–] 11 points 1 year ago (1 child)

    They're super useful when running Proxmox. You can create an LXC container and have it booted to a shell in under a minute

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago*

    You can create an LXC container and have it booted to a shell in under a minute

    Rhel5 on a VM booted in under a minute easily. Rhel6 on a VM booted in around a minute. Rhel7 on a VM booted in almost a minute, and the trend accelerated from there. Wow, is RhelX a piece for its frail-boat booting.

    The key is the monolith.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 34 points 1 year ago (6 children)

    Know what you're running when you pipe to a bash script. Curl-bash pipes are a security mess.

  • permalink
  • fedilink
  • source
  • hideshow 6 child comments
    •
  • [–] 6 points 1 year ago (3 children)

    Good advice but ime these helper scripts are legit.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 9 points 1 year ago

    I'm pretty familiar with TTech's legacy, I just mention it because if the repos ever got compromised, it could be a shitshow. IDK what security measures the new maintainers use to secure their access or check PRs, but I get nervous when it's as popular as it is and such a good vector for complicated installations that are hard to check out. I also don't know the new maintainers from Adam.

    Personally, I'd use the scripts as a guide for DIY.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 4 points 1 year ago (1 child)

    ime these helper scripts are legit.

    Let's consider a moment the risk you're subjecting people to, just with a recommendation based on the value of the things you secure without considering what they need to secure.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 1 year ago

    I'm not subjecting anyone to anything. I acknowledged that this practice is risky, however these scripts are maintained by a community of other nerds just like every other open source project you enjoy. If you're going to use these proceed with the same caution you would anything else on the internet, but in my experience they are safe.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 6 points 1 year ago

    New to me, thank you!

  • permalink
  • fedilink
  • source
    •
    [–] 5 points 1 year ago (2 children)

    What’s the licensing situation with Immich? Is it still “unlimited trial period”?

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 7 points 1 year ago

    Its 100% free with a totally optional donation. Appreciate there's been a lot of concern about their partnering with FUTO, but I checked heavily into it and I'm comfortable there won't be a rug pull.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 5 points 1 year ago (4 children)

    This looks great! Is there an easy way to migrate from a docker setup to this lxc?

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 2 points 1 year ago (2 children)

    Why? Unless you need specific kernel features, Docker is superior because of containerization (runs on host kernel with no overhead), uses less space (layered image), and is easy to set up a complicated network (you want certain apps to run behind WireGuard with reverse proxy? Few lines in yaml).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 1 year ago

    Currently I'm nesting docker in an LXC. I also believe that the LXC updater would take care of the breaking changes that happen with the complex docker compose changes (hasn't in several releases but it happens)

  • permalink
  • fedilink
  • source
  • parent
    • [–] 2 points 1 year ago

    Great to hear, thank you!

  • permalink
  • fedilink
  • source
    •
    [–] 1 point 1 year ago

    I read a lot of good things about LXC and how it was better for such things when I was starting my selfhosting journey an year or so ago. Immich was my need of the hour but I could not find any tutorials to get it done back then and now I know why. Being good and being accessible for noobs are two different things.

  • permalink
  • fedilink
  • source
    •