kosikond

There _is_ Podman Desktop extension for Apple Containers, however its socktainer version is ancient.

OTOH couldn't it be done with Cloudflare Zero Trust ?

Have the GH Pages (sub)domain proxied with CF, protect the URL with Zero Trust, for SSO itself there are several IdP available [0]. First 50 users are not billed.

[0]https://developers.cloudflare.com/cloudflare-one/identity/id...

IMHO that depends on couple of factors and use case, and I am happily running either on two different NASes.

OMV: -- has Docker plugin with Compose support (no need for sep. Docker GUI like Portainer) -- SMB shares are (somehow) more reliable on Win clients -- has more beginner friendly GUI and attitude, easier to share with other users -- batteries-included features like fail2ban + Wireguard

Cockpit: -- first class citizen on EL / Fedora distros -- Podman yes, Docker no - no Compose/Quadlet support -- killer features like VM managements and Terminal -- bugs with Samba

I have both T480 and M1Pro 14", and let me tell you once you go Mac, you don't want to go back. I am keeping the T480 for some Linux/Windows workloads, but that is it. MBP is just better in every regard. And even though I have maxed out batteries (plural) with 98% health on '480, MBP has twice the battery life.

Londoner here. On daily basis I don't _feel_ restricted on broadband, besides some thepiratebay and some other good old thorns in copyright industrial complex... But I know GCHQ is watching. So nextdns.io is my trusty friend, VPN is no problemo.

On phone I have EE MVNO and without VPN I get blocked pr0n, but not much else. Yes they wanted proof of ID despite having my Direct Debit details.

Personal note: But if you were to migrate to UK, probably not a good time this decade, the cost of living is hitting here hard, post-Brexit shambles are annoying and the compensation is not worth it anymore IMHO. Just the music scene is unbeatable, hence staying.

Out of curiosity, would any Tailscaler please answer why the exisiting $tailnet.beta.tailscale.net weren't just shortened to $tailnet.ts.net ?

(Some of us have had luck on beatiful DNS notations early)

I'd personnally expect in RHEL 8.7, as 8.6 already been shipping podman v4.0

Going forward instead of "Netflix & Chill" I'm going to have "Jellyfin & No Worries"

I migrated off ZT because of weird instability of traffic with file ops on Samba shares and the MagicDNS.

MagicDNS is such a killer feature, all nodes are really hands off and I don't need to worry about IP addresses anymore

Just last quarter I migrated my home tiny poor stack (9 nodes) from Zerotier to Tailscale and this blog confirms it was a good call.

Performance and stability especially on SMB shares and ARM based SBCs is so far way better than on zt

I tried to migrate from Docker to Podman 3.4 recently, but just gave up. It just have still weird quirks, containers were exiting without any clear cause, fighting with SELinux... I could not manage portainer.io to get working... the docs are somewhat incomplete...Lack of support in Debian [1] means I can't easily migrate my SBCs either.

I have Podman on my radar, will give it a shot next year, so far it still feels still quite bleeding edge. But kudos to red hatters for another major release!

[1] Fully knowing there is v3.0.0 in repos for Stable, but switching to Testing just because podman?

thanks Alex for all your work in k8s ecosystem!

i have 3 cheapish VPS with public IPs and no VPC . Am but struggling to find a way to get k3s HA working with MetalLB, I dont have EIP /NodeBalancer resource, and dont want to resort to mere 1master+2agents cluster. Any tips or links are appreciated