You can slam semicolons at the ends of lines in Python, interpreter doesn’t care

P sure you can do multiple lines in one line by slamming semicolons too, though idr for sure and I can’t be arsed to check

I highly recommend holding it within 3 feet of your body for 5 to 10 minutes; absolutely nothing can go wrong from holding a Cobalt-60 source with 3540 Curies in 1963 within 3 feet of your body for 5 to 10 minutes!

Holy shot never thought to test used cast iron of unknown provenance.

You can def strip it, the lead contamination is in the seasoning but it’s not gonna get into the iron. Buuuut sanding that down will be a hazmat zone. I’d bunny suit/sealed goggles/P100/sand on plastic sheet cause that’s gonna be the worst case for lead dust. Idk if it’s worth it.

Check flurospec if you have some extra disposable cash for better lead tests https://www.detectlead.com/, I wonder if the types of tests you used turned red due to interacting with iron or something (unlikely but possible, they incorrectly react sometimes and it’s red so monk brain wonders…)

Temps up -> hydrate with lukewarm water -> fill back up -> infinite gaming, infinite hydration

King, all you must do is set up root ssh access with a short password and port forward port 22 to it. Super easy, super quick!

For extra spice, I’d recommend also hitting your hard drives with a hammer once or twice a day. They just don’t like vibrations; you’ve gotta weed out the weak ones. Only the strong data will survive.

With the shitshow of the worl rn I bet the majority of people won’t notice a repost beyond a year, maybe even 6 months. So blast us with new-old shitposts

Reading that is wild

Why are you doing Arch on a server? You want to tinker forever and read the update notes like a hawk lest the server implode forever?

Arch isn’t gonna be noticeably leaner than Debian.

Get Debian, install docker and/or podman, set unattended upgrades, and then install Incus if you need VMs or containers down the line. You can stick on ZFS and it’ll be fine, you already have BTRFS for basic mirrors. Install Cockpit and you’ll have a nice GUI. Try not to think you have to fiddle with settings, the maintainers for each package/service have set it so it works for most people (and we’re most people!); you’ll only need to intervene on an handful of package configs. All set and it’s not proprietary.

Clearly disinfo, where’s the thicc pancakes??

That’s just winter with extra steps

If you’ve got Debian already installed, I cannot resist advocating for Incus (stable branch from Zabbly repo with web ui https://blog.simos.info/...) in lieu of proxmox. Does the same thing but you don’t have to rip out the kernel Debian uses.

With Debian 13 you have access to podman quadlets, use that for any non-vm needs. The ease of docker compose files easily removes reason for programs in LXC containers, and podman removes reason for docker in an LXC. LXC is left only for programs that aren’t containerized. VMs for security DMZ. Podman for bulk of stuff you want.

Good luck!

For context this is referencing this post https://piefed.blahaj.zone/post/232347/ which apparently started beef I did not know about and was blissfully unawares until sad detective man told me several months later that it started beef and then I felt bad until he fashioned this accord and now I can sleep soundly at night again

Now is a bad time to buy hard drives price-wise. Massive price gouging going on with all storage pre-sold based on IOUs to “AI” companies.

If you must…

Buy used enterprise drives with a ~5 year warranty. In US there is serverpartdeals and goharddrives. I am not sure of the Europe equivalents but I am sure they exist. The enterprise drives should be cheaper than new drives and will last longer; they’ve been used out of their early failure bathtub curve but they’re young enough to be given a 5 year warranty. Make sure to get ones with SATA connectors not SAS, you’ll need a PCIe card to talk to the SAS ones, and maybe something for power idk.

They should be cheaper - I am not sure if price uncertainty has upended that.

Enterprise drives are louder, I have them in a quiet case with sound dampening padding (fractal define) and I do not hear them 5 feet away.

I have heard bad things about consumer drives longevity. I used several 1 TB barracudas for years with no issues in a server setting, I used 3 TB barracudas in a server setting and one failed early. I used a 4 TB Toshiba that failed early and I used an 8 TB blue that is fine in a personal computing setting. I have bought enterprise drives and none have an issue yet.

It seems luck of the draw, so the thing to maximize is cheapest per GB.

Peak Star Trek cannon whenever he’s on screen

I use Authentik - works well - but I’m prepping to switch to Authelia for the config-based setup.

I updated Authentik across 2 versions (they did 2 month-long supported tags, missed one; now they do 3 month-long supported tags) and it destroyed itself. Had to recover the DB from a backup (and then step through the version I tried to skip), and while I was doing that I was like “wait why does this have only a DB? Should just be a config file cause that’s all the depth I do with it” and lo that’s what Authelia is.

Authentik is audited and Authelia has not been. Initially while I chose Authentik. But config-file robustness in the face of Authentik’s GUI-setup DB imploding swayed me not to care, it’d take so long and be so tedious to redo all my proxies and auths through the GUI. Plus I always forget what to click in the GUI when I come back to add some new program in 4 months.

The only thing that can get hacked is something that responds on the World Wide Web.

So you limit the scope of what talks to the WWW:

Wireguard VPN will not respond unless the magic keys are correct, it’s ideal security and obscurity. Put everything you can behind it.

For things I want on the WWW without a VPN, I split out two options otherwise.

1. Caddy checking mTLS certificates that basically allows a device access without extra steps - relying on Caddy to be strong and mTLS to be strong.

2. Authentik’s proxy check, I think Authelia has this too, but to access a site you hit an Authentik login first.

For both of those, you rely on those services not having 0-day hacks. More likely for these services to stay ahead of the game and/or fix quick than something that doesn’t exist just to do authentication. I run them in containers that are run by independent users and are read-only with capabilities limited, in a VM.

I’d say the Caddy route is more secure than Authentik, but it needs more effort to setup the certificate stuff. Authentik route needs a web browser to log in with. Obviously the WG VPN is primo.

Edit: also tailscale is just managed wireguard, so it has the same benefits as a wireguard vpn with the catch a company has access to your network also now. But really simplifies setup…..

They do not have experience manufacturing chips and I do not think they are going to make a chip fab. The timeline is too short. Idk on the RAM is easier to make than CPU claim - it feels like it’s a different goal than CPU so node size comparison is less apt - but for a company that has no experience they’re not gonna shit out a fab in Q2 2026. The fab pros take years to build them.

They do have the manufacturing ability to make DDR5 sticks, people can make them themselves right now - just get a PCB and the chips and put the BGA chips on! So Q2 2026 is fast but doable for their expertise there.

Buuuut we come back to, they’ll need to get RAM chips from the remaining consumer suppliers - which you can’t right now cause some AI bro future bought all the chips with his future money he will surely get in the future.

And so they won’t get any more than someone already in the market could get (Corsair, GSKILL, etc.). Thus, no change for the supply limit. TBH stupid to get into a market while it’s high; I don’t think they’ll be able to profit in time on the scalping prices before RAM prices crash when the AI money evaporates

TLDR: rip gamerz

I have a USB drive with the key on it. The primary purpose for LUKS for me is so that drives I replace don’t need to be wiped, so I just leave the USB drive in all the time. Makes it so it boots automatically.

If I lived in a place I owned, I’d stash a rpi somewhere deep and have it do network dropbear automatic unlock to protect the data if the server is nicked. Till then it’s yolo

I’d def pref the mods to nuke a few extra comments than let the tankies work their way in.

They thrive on being on the edge of acceptable until they can drive a “holdomir didn’t happen, Ukrainians just forgot how to eat” into a community

Edit: that edge of acceptability they skirt to get into communities makes it hard for people to discern if just close or it’s actually proto-tankie-posting