![](/static/253f0d9b/assets/icons/icon-96x96.png)
![](https://lemmy.world/pictrs/image/8286e071-7449-4413-a084-1eb5242e2cf4.png)
If you buy three of them you can set up a Ceph cluster I suppose ahah. That would solve part of your issue of having storage and compute on the same node.
If you buy three of them you can set up a Ceph cluster I suppose ahah. That would solve part of your issue of having storage and compute on the same node.
If you don’t need enterprise level hardware and support, I can suggest MinisForum. They released the MS01 fairly recently and I believe it fits your specs.
That’s the problem, if anyone somehow gets your root CA key, your encryption is pretty much gone and they can sign whatever they want with your CA.
It’s a lot of work to make sure it’s safe in a home setup.
I’m talking about home hosting and private keys. Not businesses with people whose full time job is to make sure everything runs fine.
I’m a nobody and I regularly have people/bots testing my router. I’m not monitoring my whole setup yet and if someone gets in I would probably not notice until it’s too late.
So hosting my own CA is a hassle and a security risk I’m not willing to put work into.
The domain certificate is public and its key is private? That’s basically it, if anyone gets access to your key, they can sign with your name and generate certificates without your knowledge. That’s my opinion and the main reason why I wouldn’t have a self hosted CA, maybe I’m wrong or misled, but it’s a lot of work to ensure everything is safe, only for a self hosted setup.
For self hosting at least, having your own CA is a pain in the ass to make sure everything is safe and that nobody except you has access to your CA root key.
I’m not saying it’s not doable, but it’s definitely a lot of work and potentially a big security risk if you’re not 100% certain of what you’re doing.
That sounds like a bad idea, you would need your CA and your root certs to be completely air gapped for it to be even remotely safe.
Oh shit, I was miserable back when I installed Arch. Dang, you might be onto something there!
That’s strange, apart from installing it, Arch is pretty painless to run if you’re not careless
What I mean is that these kinds of people usually look at the financial cost per year for a given solution that’s already in place and always look for something cheaper (usually only on paper).
Usually they look at the cost of a licence without giving a single thought about, let’s say, the processing power that’ll be needed for the new thing, the expertise to set it up and run it, and all the migration work that will be needed to make the switch.
Also, when these things happen, most of the time you have to fire/hire/train people to adapt, which means you lose some of your internal knowledge and experience. That’s something that can’t be really quantified and can really hurt an IT system.
In the end, with all the cumulative costs, it’s often far more expensive to switch solutions, and not financially speaking, but that doesn’t necessarily appear on the bottom line they will see from their desks.
The worst thing in that is the amount of money and human time it must take just to migrate everything. People only looking at the bottom line is the bane of IT…
Germany and ping ponging between proprietary and free software every 2 years, name a better duo
You can read about SELinux here or ACLs here. SELinux can be pretty complex if you’ve never used it, so make sure you understand it well. I believe it should be able to do what you want to achieve.
I guess you can use ACLs depending on your filesystem, or SELinux user contexts.
Say what you want about tiktok but damn if it isn’t extremely effective at sending information out of reach from governments, I don’t know what it is. You can see they fear it hard.
Nope, tar
doesn’t handle compression on AIX. So it would be something like gzip -cd filename.tar.gz | tar xvf -
The bomb runs AIX. I’m sorry, you’re dead
Maybe it’s badly implemented where I work, but I feel it’s clunky and messy
He’s not wrong but he sounds like a jackass. A minimal version sounds better than removing features that are present and used by people.
Git and GitHub are not the same thing