FOSS advocate in a Windows world...
TL;DR : github.com/PriceChild/terraform-incus-oci-image-updating will update docker/oci images when applying. I deploy to Incus containers and take advantage of it's support for OCI (Docker) images to avoid running Docker as well. I deploy using tofu/terraform and the incus provider which seems to have a small drawback around keeping images updated.
Restic 0.15.0 quietly merged #2398 which finally allows native support of keys without delete permissions. After updating the binary on relevant systems, reversing the two changes from my earlier post (i.e. swapping rclone:b2:bucketname/foldername back to b2:bucketname:foldername & removing the extra rclone args) leaves a simple restic solution working with defaults. Awesome! I had updated…
Use ARM templates enough and eventually you'll wish to use one of the list*() functions or reference() in your variables. For example, you have multiple app services which require near identical appsettings. You'd like to define this object/array once, then reuse multiple times elsewhere in the template. Who likes repeating themselves? Unfortunately one of those settings includes e.g. a storage…
Reading hackernews, I came across Issue 2070: Github: Widespread injection vulnerabilities in Actions . While I've yet to use github actions seriously, I recognised the feature described as near idential to Azure DevOps' " Logging Commands " and decided to look at whether they were vulnerable to the same issue. They are: Azure DevOps suffers from the same vulnerability. The problem was reported…
Update 2023-03-28: Restic now supports limited keys by default, and also recommends the B2 S3 api instead. See here Original Post: Since setting up restic to back up to b2 I had embarassingly missunderstood the following UI wording around lifecycle settings: I had assumed that this meant that all versions of the file would be maintained, no matter what clients did. The B2 docs are much clearer,…
I have never worked in a monorepo professionally.
You might want to consider enabling tmpfs...
My last post omitted the real reason I hadn't swapped to OnlyOffice was that I was too lazy to look further into apparmor. Allowing dash to inherit the php permissions with /bin/dash ix, is one solution but for other reasons, I wanted to write a more contained profile to spawn dash within. Searching the internet & reading my favourite apparmor docs didn't enlighten.
I'm a huge fan of Nextcloud and version 18 brought great integration with ONLYOFFICE . I'm not using it though because it ships with binaries that aren't always straightforward to execute.
After switching energy supplier, I discovered I couldn't connect to their website. This is an explanation with notes of how I've attempted to diagnose the issue so far.
Nextcloud and others recently reported on CVE-2019-11043 which looks like a particularly nasty RCE affecting only nginx+php-fpm with certain configurations. Unfortunately, the configuration the Nextcloud documentation recommended was one of those vulnerable configurations.
In a previous post I mentioned swapping my backups to restic . Since then, I've found my B2 storage costs increased substantially and wanted to figure out why.
I often join Azure DevOps projects some time after they were started and can almost guarantee I'll find... questionable... permissions have been applied. If you search for e.g. "azure devops permissions" you'll get pages like this which only tell half the story, so here's a quick primer...
I have used Duplicati uneasily for some time to back up my personal server which hosts Nextcloud and other bits.
Zola is a static site generator in Rust. Wanting to blog a bit more and having a passing interest in Rust, I figured I might as well rebuild my blog rather than actually write anything...
tldr: Invoke-ASCmd caches xmla files somewhere. Always provide the absolute path to Invoke-ASCmd -InputFile .
While logging in to online banking...
.uk transfers are a little different: You instruct your old registrar to change the "IPS tag" to point the domain to your new registrar. You tell your new registrar that the domain just assigned to them is yours. The new registrar then dutifully updates all of Nominet's records. Even if the name... email... address... you provided them with bears no relation to the existing (private?) registration…
My Chromecast has regularly been refusing to play Netflix streams recently with error ui-200.
freenode will be upgrading their services very soon. One of the major new features that this upgrade will bring is the ability to identify using ssl certificates. Here's a very quick guide on how to get started.