pkgbase has proven to be nicer to use on the one system, where I was trialing it, so it’s now getting rolled out on all systems

After some screwing around with HAProxy and Varnish Cache, I can now add an arbitrary amounts of domains to cache to my caching CDN.

It’s 2 right now, but I should use this for more stuff. :neobot_think:

I think I figured out most settings I want to set, but I am very confused on what to do with shared_buffers because of double buffering.

I’ve seen statements ranging from the 25% rule to “set small and rely on ARC cache, because it caches compressed pages”.
Problem is: All argumentations make sense :neobot_woozy:

Spending the morning looking into PostgreSQL on ZFS optimizations and thinking about how to restructure my database setup :neobot_floof_mug_tea:

Oh and on OpenBSD one can just delete the certificate from /etc/ssl/cert.pem

So if anyone on FreeBSD is wondering how to untrust the leaked CAs now:

1. Go to /usr/share/certs/untrusted
2. Create a new file for each root, with the cert info (Can be found here: https://emudhra.we-have-a-problem.com/roots.json)
3. Run certctl rehash

Same for jails, I copied the files into my Jail base release and ran a quick rehash in all of the,m.

How many more times will I forget that my BGP routers are in the DFZ and that if I down bgp, they will no longer be reachable?

Though thinking about it I should just make use of my other routing table also for SSH, so that I can’t accidentally screw up SSH :neobot_woozy:

It appears as if it’s OpenBSD sysupgrade day.
My systems are starting their participation now :neobot:

How about an Uptime Kuma alternative and call it Downtime Puma

...

I will see myself out now

What is everyones way of dealing with SSH keys on many machines?

I currently just have one private key that I effectively have on every device.
I would like to change that, but then I will have to start managing authorized_keys everywhere somehow.
Anyone got any good methods to deal with key distribution? :neobot_think:

So apparently I have to download the MeinMagenta app to be able to add certain things to my contract…
Like I can add a PlusKarte in the webinterface, but they hide MultiSIM in their app.
Same goes for the option that enables 5G Standalone.

Whyyyyyyyy???

2 guides I found online for this exact model mention that `fastboot flashing unlock` should work.

For me it returns 'unknown cmd.’

I just wanted to unlock the bootloader on a Lenovo android tablet.

One enables OEM unlocking in the dev settings and fastboot is still like "sorry, but that failed”

This is now my most promising lead: https://github.com/TomKing062/CVE-2022-38694_unlock_bootloader

Thanks Lenovo /s

Oh and 3 doesn't show up in my online account!

At this point I'd prefer to have all of the cancelled and just do it online again like in 1, except that this time the old provider knows to release my number.

Had 2 calls with a Telekom hotline today and instead of the order that I want, I now have 3 orders in various states of fucked.

1st order is what I wanted, but it failed the phone number migration, so it was already cancelled internally in their system, just not shown to me.

2nd order as a re-creation of 1, except they forgot the phone number migration.

3rd order to replace 2, now with the migration, but not yet the addon that I want, which was promised to me to be added next week.

Because I didn't trust this shit, I filled out a cancellation form for 1 and 2.
But now 2 got apparently shipped before they processed the cancellation.
Also 2 didn't require a new ID verification, which the person doing 3 expected.
But 3 does require another one and I was told to do it today.

Because of this fucked up general state I will now not do anything until 1 & 2 are properly cancelled.

How in the world can it be so difficult to create a damn phone contract with a phone number migration. That "becoming my own ISP" thing is becoming more tempting by the day………

I am now tunneling my home internet over WireGuard over 5G. :neobot_woozy:

Right, I forgot the most important part:
Have fun digging through the repository to find all of the env variables that are supported to configure basic stuff we didn't mention in the docs.

Every container install instructions, ever:
Start the container, map a path, forward a port and your done!

Every container I start:
You're running read only, here's your tmpfs'es, have your capabilities dropped, no you don’t get to elevate any privileges, these are your UIDs and oh they are also mapped to unprivileged IDs. Yes those IPs are directly routable and don't you dare not work with IPv6!

:aneobot_explode:
https://mastodon.ie/@ciaranmak/117220844081546351

I always said a password manager is the one thing I don't want to self-host, so I don't create a circular dependency.

I guess I'm finally gonna change that.