[–] 2 points 5 months ago

My dude, check this out (or don't, whatever), but the NSA has a Blue Team (defense) as well as a Red Team (the one you're irrationally angry at). The NSA Blue team is responsible for securing US computer systems. Look that up on DDG.

SELinix is a MAC layer built to supplement the DAC later (traditional UNIX permissions) intended to secure things the DAC doesn't.

With it, Apache can't read /etc/password or random locations like /opt/something/somewhere. Without it, we get the Equifax data breach of 2017.

Everyone saying "I can't stand up a simple web server with SELinux running" glosses over (or ignores) the fact that if they just put their files in the default location, which has the default contexts, it works. They just get pissed that they can't serve up /some/random/location/ without fixing the context so Apache is allowed to read the files.

  • source
  • parent
  • context
  • [–] 1 point 10 months ago

    If personal anecdote is good for anything, I've been using LVM on top of software RAID on Linux for close to 20 years now without ever losing a volume. The last time I lost data was on ReiserFS 3. Like I said, LVM does not protect against drive failure itself. That's why I use RAID underneath. I've got my OS disk to protect against failures like that. Also frequent and verified backups of my data files to make sure that is protected.

    And yes, modern (still supported) distros can scan LVM PVs on boot without issue.

    LVM Physical Volumes (PV) can be moved between Linux machines without issue (I've done that several times), it's not like hardware RAID where you have to have the same controller on both machines. Nothing I've done has ever required LVM metatata export/import.

  • source
  • parent
  • context
  • [–] 3 points 10 months ago (4 children)

    LVM itself does not provide redundancy, that's RAID. LVM is often used on top of a RAID device. If your boot drive fails, LVM itself won't save you, RAID (software RAID 1 is really common for a boot drive) can.

    LVM can be used to seamlessly move data between physical volumes. You can add a new PV to the VG and move extents between LVs. I've used it to love-migrate to a larger drive that way. Once the physical extents have been moved to the new PV, you can reduce the old PV and then remove the old disk.

  • source
  • [–] 3 points 10 months ago (1 child)

    Yes, it can see them because their parent directories are readable, but it can't see anything inside /media/velummortis because the Other permissions are empty. If you run chmod 755 /media/velummortis then Jellyfin should be able to see those files

  • source
  • parent
  • context
  • [–] 11 points 1 year ago

    I'm not aware of an SFTP client that works like the cloud drive connectors. Do you know of one that monitors local files/dirs for changes and automatically sends them? Or polls the server for changes and downloads then (if they're on the allow list)? Keeps versions?

    If literally all you're doing is occasional file transfers, sure, SFTP is easy. That's not how most people use cloud drive clients.

    For me and my group, Nextcloud works fine and fast. We do more than file sync and share.

  • source
  • parent
  • context
  • [–] 7 points 1 year ago

    If you've optimized your BIOS settings (balanced mode or power saving wherever possible), the only other option is removing extraneous hardware. All hardware power use (disks, HBAs, other adapters and controllers) adds up. I managed to get idle power consumption of an HP DL-380 G9 down to about 60w (started at 210w) by removing the disks, RAID controller and battery, fiber channel adapters, and extra Ethernet adapter. Each SAS disk I removed saved me 10w. I used one M.2 drive in a PCI adapter instead.

    Like you mentioned, these aren't designed to save power. That Opteron (and the chip set) hales from a time before "performance per watt" was a thing.

  • source
  • [–] 6 points 1 year ago

    No. I upgrade my Ubuntus before they go EOL so I don't need ESM.

    Most places that want ESM do so because they can't get away from EOL versions. I refuse to get stuck in that swamp myself, so I run LTS and migrate/rebuild them when necessary.

  • source