aleph-

I'm mildly curious what client side hacks you're talking about?

Nifty, reminds me of https://github.com/backtrace-labs/verneuil or possibly https://litestream.io/

Oh this can definitely happen, had it occur on my system till I started using nofail as a mount option.

I am curious what type of data they're sending to sentry?

Could be some leakage there, don't think sentry does PII scrubbing of any kind either iirc.

Hahaha.

So I have been actually looking at the code under pkg/wg and tracing stuff back into the wireguard-go pkg and so on for a bit. (Which is some very nice and clean code haha, so you definitely got what you paid for. :P)

I guess the conceptual hurdle I'm stuck on now is, great I've got this wg tunnel open in my code go. How do I actually force packets over it? Say I've got a sshd listening on the other end of the tunnel with netfilter rules that say only allow access over this tunnel.

Can I just do normal ssh calls and use the wg tunnel remote addr to do stuff?

Is it that simple and I'm vastly over thinking things, or is it more complicated then I thought?

Incidentally, fly.io is awesome!

Might have to see about getting our workloads running on it for any customers who might want to run them.

It's definitely given me some fun ideas custom wg and sshd impls running over micro-vm's for at home haha.

True, yeah!

Just thought it'd be fun to futz with network code for once given the most I do is http usually.

Been checking out gliberlabs/ssh the past few hours which is neat. And which I can think of fun ways to pair with a micro-vm and step ca.

So I'm curious are there any good documentation available for using wireguard-go as a lib? Or is it just read the source and also read through flyctl source?

Curious about fiddling with something similar with firecracker at home.

Think it'd be neat to spin up bespoke micro-vm's with wireguard enabled.

Yeah weird. Pop_OS 20.10 with a 1070ti and the nvidia-455 driver doesn't get me past the initial launcher. That's annoying alright.

Righteous. It'd probably help if I was using the 455 driver too heh.

Where as I can't get it to run at all with proton 13.4 and nvidia-450

Where's proton experimental?

Look into Gravitational Teleport.

They have a cloud offering in beta where they'll manage the proxy/bastion.

I can definitely recommend Salt. Has its bugs/warts like any other config management system. But it works fairly well/is extensible for the most part.

For 3, how are you adding the disks to the pool? Not as /dev/sdX right?

There are some easy symlinks under /dev/disk/ you can use.

I ten to use either by-uuid/ or by-label/ myself.

How so, it's a method for dealing with spammers/marketers and the like who would post low effort or off topic content regularly.

No, they do/will not.

Check the jellyfin-roku GitHub repo.

A VM

So restic has at least gotten somewhat better with several upstream PRs getting us past 100TB usability.

As far as I'm aware from the IRC channel the primary maintainer is mainly busy moving.

I do concede it is annoying having to fold in upstream PRs to my own build of it.

Is it hard to dig yourself out though?

Are we talking about internet archive or archive team?

Different groups/orgs.

Same for Salt Stack I'd say. Just a yaml wrapper around execution modules which themselves are either wrappers around cli's or pure python versions of them.

I'd love a copy of the notes if you have them.

Yeah but overall it's existed for 8~ years.

So I'm genuinely curious, how would a Tor/Meshnet like solution helo in this situation? Because I'm not seeing it.

So piggybacking on this, I have a similar story to tell. We had a nice young startup, infra entirely built out on Google Cloud. Nicely, resiliently built, good solid stuff. Because of a keyword monitor picked up by their auto-moderation bot our entire project was shut down immediately, wasn't able to bring it up for several hours, thank god we hadn't gone live yet as we were then told by support that because of the grey area of our tech, they couldn't guarantee this wouldn't keep happening. And in fact told us straight out that it would and we should move.

So maybe think about which hosting provider to go with, don't get me wrong I like their tech. But their moderation does need a more human element, to be frank all their products do. Simply ceding control to algorithmic judgement just won't work in the short term if ever at all.

Any links on their anti scrape strategy? Been developing a distributed scraper with baked in proxy per process ability to harvest data for a data project I'm working on. So this would be good to know.

Have you really? Building a base container to base all further images off of takes about a half hour with our build system. Fuether app builds are down to 10 minutes at a max and can honestly still be optimized. How exactly are you losing all the speed advantages?