Discussion
Loading...

#Tag

  • About
  • Code of conduct
  • Privacy
  • Users
  • Instances
  • About Bonfire
wetdry.world boosted
memo 馃搸
memo 馃搸
@memoria@wetdry.world  路  activity timestamp 9 hours ago

"Capabilities are鈥攁t least in theory鈥攁 nice idea: divide the privileges of root into small pieces so that a process can be granted just enough power to perform specific privileged tasks. "

"The key point from the beginning of this article is small pieces, and it's here that the Linux capabilities implementation has gone astray."

#blogshare

https://lwn.net/Articles/486306/

LWN.net

CAP_SYS_ADMIN: the new root

Capabilities are鈥攁t least in theory鈥攁 nice idea: divide the privileges of root (use [...]
  • Copy link
  • Flag this post
  • Block
memo 馃搸
memo 馃搸
@memoria@wetdry.world  路  activity timestamp 9 hours ago

"Capabilities are鈥攁t least in theory鈥攁 nice idea: divide the privileges of root into small pieces so that a process can be granted just enough power to perform specific privileged tasks. "

"The key point from the beginning of this article is small pieces, and it's here that the Linux capabilities implementation has gone astray."

#blogshare

https://lwn.net/Articles/486306/

LWN.net

CAP_SYS_ADMIN: the new root

Capabilities are鈥攁t least in theory鈥攁 nice idea: divide the privileges of root (use [...]
  • Copy link
  • Flag this post
  • Block
wetdry.world boosted
memo 馃搸
memo 馃搸
@memoria@wetdry.world  路  activity timestamp 3 days ago

"All that hard work paid off. With the help of a video, the album went like hotcakes! They sold a quarter million copies!"

"Here is the math that will explain just how fucked they are:"

#blogshare

https://thebaffler.com/salvos/the-problem-with-music

The Baffler

The Problem with Music

How record labels use A&R flaks and impenetrable contracts to screw artists while raking in millions
  • Copy link
  • Flag this post
  • Block
memo 馃搸
memo 馃搸
@memoria@wetdry.world  路  activity timestamp 3 days ago

"All that hard work paid off. With the help of a video, the album went like hotcakes! They sold a quarter million copies!"

"Here is the math that will explain just how fucked they are:"

#blogshare

https://thebaffler.com/salvos/the-problem-with-music

The Baffler

The Problem with Music

How record labels use A&R flaks and impenetrable contracts to screw artists while raking in millions
  • Copy link
  • Flag this post
  • Block
wetdry.world boosted
memo 馃搸
memo 馃搸
@memoria@wetdry.world  路  activity timestamp 4 days ago

i found a good blog post explaining how to use systemd socket units and systemd socket proxy to automatically start a podman quadlet container on the first connection and stop it after some idle period

#blogshare #podman #quadlet #quadlets #systemd #homelab #selfhost

https://web.archive.org/web/20250726014034/https://thinkaboutit.tech/posts/2025-07-20-adhoc-containers-with-systemd-and-quadlet

Think About IT

Casual Containers With Systemd and Quadlet

In this post, I explain how a Podman Quadlet can be used with systemd socket activation.
  • Copy link
  • Flag this post
  • Block
memo 馃搸
memo 馃搸
@memoria@wetdry.world  路  activity timestamp 5 days ago

systemd has a socket proxy neocat_notice

systemd-socket-proxyd(8) - Linux manual page

memo 馃搸
memo 馃搸
@memoria@wetdry.world replied  路  activity timestamp 4 days ago

i found a good blog post explaining how to use systemd socket units and systemd socket proxy to automatically start a podman quadlet container on the first connection and stop it after some idle period

#blogshare #podman #quadlet #quadlets #systemd #homelab #selfhost

https://web.archive.org/web/20250726014034/https://thinkaboutit.tech/posts/2025-07-20-adhoc-containers-with-systemd-and-quadlet

Think About IT

Casual Containers With Systemd and Quadlet

In this post, I explain how a Podman Quadlet can be used with systemd socket activation.
  • Copy link
  • Flag this comment
  • Block
wetdry.world boosted
memo 馃搸
memo 馃搸
@memoria@wetdry.world  路  activity timestamp 4 days ago

found a good blog post explaining how to use systemd socket units and systemd socket proxy to start a podman quadlet container on first connection and stop after some idle period

#blogshare

https://web.archive.org/web/20250726014034/https://thinkaboutit.tech/posts/2025-07-20-adhoc-containers-with-systemd-and-quadlet

Think About IT

Casual Containers With Systemd and Quadlet

In this post, I explain how a Podman Quadlet can be used with systemd socket activation.
  • Copy link
  • Flag this post
  • Block
memo 馃搸
memo 馃搸
@memoria@wetdry.world  路  activity timestamp 4 days ago

found a good blog post explaining how to use systemd socket units and systemd socket proxy to start a podman quadlet container on first connection and stop after some idle period

#blogshare

https://web.archive.org/web/20250726014034/https://thinkaboutit.tech/posts/2025-07-20-adhoc-containers-with-systemd-and-quadlet

Think About IT

Casual Containers With Systemd and Quadlet

In this post, I explain how a Podman Quadlet can be used with systemd socket activation.
  • Copy link
  • Flag this post
  • Block

Kakapo Social

Kakapo Social: About 路 Code of conduct 路 Privacy 路 Users 路 Instances
Bonfire social 路 1.0.1-alpha.23 no JS en
Automatic federation enabled
Log in
  • Explore
  • About
  • Members
  • Code of Conduct
Home
Login