nosebear

>It's technically incorrect, but it's used for emphasis and hence politeness, and that's probably where your feeling comes from.

That's wrong, it's not technically incorrect. In fact before 2006 the only correct way to address someone personally in written form was to capitalize the Du / Sie / Ihr. Since then you are allowed to write it either way. I still use the capitalized form because I'm old and that's what I learned back in school.

I agree - I always wonder should I go overkill and put everything in its own VM for separation? Is it ok to just use containers?

If using Podman, should I use rootless containers (which IMO suck because you can't do macvlan so the container won't easily get its own IP on my home network)? Is it ok to just use rootful Podman with an idmapped user running without root privileges inside the container and drop all unneccessary capabilities? Should I set up another POSIX user before, such that breaking out of the container would in the end just yield access to an otherwise unused UID on the host?

If using systemd-nspawn, do all the above concerns about rootful / rootless hold? Is it a problem that one needs to run systemd-nspawn itself with root? The manpage itself mentions "Like all other systemd-nspawn features, this is not a security feature and provides protection against accidental destructive operations only.", so should I trust nspawn in general?

Or am I just being paranoid and everything should just be running YOLO-style with UID 1000 without any separation?

All of this makes me quite wary about running my paperless-ngx instance with all my important data next to my Vaultwarden with all of my passwords next to any Torrent clients or anything else with unencrypted open ports on the internet. Also keeping everything updated seems to be a full time job by itself.

Yes, I agree. It will probably be a 3000$ unit.

And AMD already said there is not a 9070XT 32GB coming. Which I understand as "we're building a 32GB card with this chip, but it's not coming before christmas and will cost you a kidney".

I really would like to upgrade from my 2070 Super but I'm not getting a 16GB card now just to buy another one with 32GB later on.

I'm really intrigued to get one, but where is the 32GB version for all the LLM goodness?

This thing would be great for a low-power NAS, but no mainline kernel support, no buy :/

>They need to know if you can write a custom k8s controller in Clojure to generate cronjobs that run k8s jobs that call AWS lambada to ingest data from elastic cakehole and inject it into substandard-IA random availability zone iceberg storage while a Annoying Notification is triggered via ANS to a Rickety Queue Storage sent to someone via Shaky Email Service that eventually ends up in someone's Junk Mail folder in O365 but contains a link to the insecure bucket with the entire company's payroll data in it.

:D LOL

As someone getting paid for exactly that, 1000 internets to you!

Thanks. Doesn't work with Vivaldi, but on Chromium it does!

Personally, I couldn't care less about Reddit itself, but what's really annoying is that half of my Google searches end up in temporarily closed subreddits.

Reddit has become some sort of a Stack Overflow lately - I hope all that knowledge will be moved somewhere else.

>I use 4 Lenovo M910x's as a kubernetes cluster and home lab.

Just asking out of curiosity: Why not a Ryzen 16-Core CPU + 128GB RAM and then VMs / containers everywhere? To me that seems much less hassle than having to pet four machines, as I am way too lazy to write automation stuff for myself. Also such a setup setup needs less space and probably less power.

I'm hearing from four different friends from four different companies in Germany that they can't really work right now.

I updated my BIOS, and I'd rather have security fixes than AVX-512 that I don't really need because all I do with this machine is surfing the internet and watching movies. Thanks for the tip nevertheless!

I was just referring to OP who said that Intel probably didn't verify AVX-512 thoroughly, because it seems they did.

I bought my i5-12500 (that has no Gracemont cores) just when it came out. Linux reported all kinds of AVX-512 extensions and I could transcode video with Handbrake using AVX-512 without any problems.

Later on Intel pushed a microcode update, and now my CPU doesn't have AVX-512 enabled anymore.