Also, sometimes: it is scary BECAUSE it is familiar.
Also, sometimes: it is scary BECAUSE it is familiar.
Tailscale/headscale/wire guard is different from a normal vpn setup.
VPN: you tunnel into a remote network and all your connections flow through as if you’re on that remote network.
Tailscale: your devices each run the daemon and basically create a separate, encrypted, dedicated overlay network between them no matter where they are or what network they are on. You can make an exit node where network traffic can exit the overlay network to the local network for a specific cidr, but without that, you’re only devices on the network are the devices connected to the overlay. I can setup a set of severs to be on the Tailscale overlay and only on that network, and it will only serve data with the devices also on the overlay network, and they can be distributed anywhere without any crazy router configuration or port forwarding or NAT or whatever.
Honestly, that sounds like a keepalived replacement or equivalent. I went with keepalived because I’m also using the IP for the proxmox cluster itself so it had to be outside kube, but the idea is the same. If all you’re using the IP for is kube, go with kube-vip! But let us know how it works!
You’ll want to look into “keepalived” to setup a shared IP across all worker nodes in the cluster and either directly forward, or setup haproxy on each to do the forwarding from that keepalived IP to the ingresses.
I’m running 6 kube nodes (running Talos) running in a 3node proxmox cluster. Both haproxy and keepalived run on the 3 nodes to manage the IP and route traffic to the appropriate backend. Haproxy just allows me to migrate nodes and still have traffic hit an ingress kube node.
Keepalived manages which node is the active node and therefore listens to the IP based on backend communication and a simple local script to catch when nodes can’t serve traffic.
On one hand, I absolutely abhor governmental blanket data collection and the storage of this data. Both from a personal privacy, independence and freedom point of view, and from a “you know they’ll just leak the data and then everyone will have it” standpoint.
On the flip side:
In March, President Trump signed an executive order calling for the federal government to share data across agencies
Any sane company or government would have already done this… not sharing data between agencies/silos is leads to inaccuracies, duplication of data and work (wasted time/money), additional complexity in data storage and gathering, plus it provides multiple attack surfaces for data breaches.
Also, I read that as “if one agency needs something they can ask the other one for it” which has likely been happening for centuries at this point and this is just another “Trump said we need to do what’s already happening so he can look smart and like he’s doing something besides golfing and accepting foreign bribes”.
My wife’s parents recently passed. It took months to slog through their stuff and my wife was over it only weeks in. She dumped so much but constantly fights with herself for both taking more than she wanted/needed to and yet less that what she feels she should have. We’ve told our daughter multiple times “our stuff May mean a lot to us, it doesn’t have to mean anything at all to you. If you don’t want it, never feel bad dumping/selling/letting it go.” Out of all the stuff we all collect in life just by living, barely anything has any sentimental value.
On one hand I’ve got a huge collection of photos and albums I’ve taken and collected. I’m trying to clear some out as I go… but I’m not looking forward to that process when my parents go. My dad’s an avid photographer and I know he has a few hundred thousand photos, most of which are near duplicates and he rarely cleans them up.
He doesn’t actually know what the team ”racist” means, he just knows energizes his base to hear things called that. Whatever shocks his voters into action and belief is good publicity for him and his cronies.
To be fair, the traditional web models were falling apart prior to AI as well. We’ve gone so far past “ad driven” that Everything has to be full of ads and clickbait to drive revenue just to run the infrastructure, let alone pay for the pages creation and upkeep. Journalists and developers, services and goods are all using adword soup to try to get anything close to a useful revenue stream and it’ll just keep getting worse until we figure out a better business model. We’re going to increasingly see paywalls to try to make up for that, but a large part of people on the internet won’t want to spend money on quality sources when they use to be able to get it for free. It’s been a race to the bottom for a while and it’s at a point that isn’t sustainable long term. AI just accelerates that to the next level.
It’s okay, we’ll just get rid of the regulations on everything else so this one fits the norm.
Have it sync the backup files from the -2- part. You can then copy them out of the syncthing folder to a local one with a cron to rotate them. That way you get the sync offsite and you can keep them out of the rotation as long as you want.
That would be awesome, and I regularly do so on vacations, but let’s be real here: I like having a job so I can have a house and food and pay for goods and services when necessary. Being constantly connected is a basic requirement and responsibility for employment, so I’m going to choose the connection with the least impact on my daily life.
Ironically, owning a smart watch is what helps me keep focused. I can put my phone down and not be tempted to look at things on it. The watch will alert me if I get a call and only certain notifications go to it while my phone stays parked somewhere else in the house.
Honestly, I’ve been tempted to get an LTE one and stop owning a smart phone… the only thing holding me back is my job requiring one.
On one hand, having been forced to use Skype, I’m happy to see it gone. On the other hand, they somehow made it worse and called it Teams.
Thus far, they’d basically be right. Any fines are simply chocked up to “cost of doing business” expenses and since no one wants to either make solid laws against this stuff OR hold them accountable for current ones, they’ll just keep at it.
I’ve read about this phenomenon in the past. Generally it’s found that due to audio processing cost and the sheer amount of other data easily gathered, there’s no reason for them to snoop with your microphone because other data is so readily available, much easier to process, store and ship.
No company will stop attempting to achieve mega corp status in a capitalist environment. Gotta make that line go up and to the right!
Or we could, you know, NOT do that. That’d be the better option.
It’s actually pretty depressing how little money it takes to buy a senator. We’re talking hundreds to single digit thousands of dollars. Not really going to set that off, sadly.
That’s just what a scammer would say!
Reading the Docs, it seems like PodMan is the replacement for docker. You could try containerd/nerdctl, but podman is likely the best way for you. RHEL10 docs even say it supports the older docker config options