4

feliz martes, encontré esto en la micro de la mañana, lo encontré bonito :)

pero jugaste el mejor de todos? POTTERGAME

if its detected from liveusb I'd recommend backing up ur important data and reinstalling, maybe something from GRUB got fucked up or maybe the partition is not marked as bootable, if u dont wanna debug just reinstall, and if u do wanna debug, be prepared to reinstall.

So basically do make a backup of the stuff u really care about, and fix.

Feel free to reply with any updates :)

tysm, thats not what I was imagining lol. Smart way of cooking, sounds like a delicious end result :)

looks amazing!!! never thought of steaming noodles before, my guess is you can only do so with fresh noodles??? like you always see used on the cool noodle recipes lol

this is incredible thank you very much, I will read through this once I have more energy lmao, this looks like okay dense content, very interesting

So far I've circumvented networking with different users by mapping everything through localhost, without stuff going outside the network, how would you connect say; a service running on user A, on network A, to a service running on user B, on network B?

So far I can't imagine how to connect both, unless im doing some disgusting nftables hackery, which is an option I COULD take, just one I dont want to take.

Never delved into SELinux, honestly afraid (lazy) of navigating getting into yet another rabbit hole, but from the rest of the answers here, letting podman deal with isolation sounds like a better solution. tysm for ur input :)

its my larp an I get to decide how hellish I want my server to be!!! 😡

I had no idea you could just use the subids from their respective etc files, I just followed what the podman documentation recommends, I like that the containermapping ids like this is def much simpler than creating users per process, and probably less resource intensive. thanks for sharing ur input :)

I'm also afraid of SELinux, def the way of having a more secure system, but I reaaaaaaally dont wanna get to more docs on linux hahaha.

excellent solution, just have root container to --user and use the auto userns, had no idea about that, sounds super convenient. Much more self contained, just let the program do its thing, I had no idea about userns=auto with root, tysm for ur input!! :)