I want a centralized way to manage keys and secrets. And some service users with little privileges over a subset of the secrets. Ideally, a service user only should be able to read its own subset of secrets. So, let's say, if a container gets pwned it will only read its secrets and no more. It should be FOSS and self-hostable.

And a beautiful nice-to-have feature would be access log, to know who read what and when.

My only experience with something similar is Hashicorp Vault, but I don't want to be near any Hashicorp stuff ever again.

Do you know a FOSS alternative to Vault?

Sauce: https://fedidb.org/popular-fediverse-accounts?page=1

My laptop is working just fine. It's from 2018 and it has an NVME drive.

It has an EFI boot partition and other partition with LUKS and LVM on top of that.

Since this week I see these logs from time to time:

Mar 07 17:31:14 almendra kernel: pcieport 0000:00:1d.6: PCIe Bus Error: severity=Corrected, type=Physical Layer, (Receiver ID)
Mar 07 17:31:14 almendra kernel: pcieport 0000:00:1d.6:   device [8086:34b6] error status/mask=00000001/00002000
Mar 07 17:31:14 almendra kernel: pcieport 0000:00:1d.6:    [ 0] RxErr                  (First)
Mar 07 17:31:14 almendra kernel: pcieport 0000:00:1d.6: AER:   Error of this Agent is reported first
Mar 07 17:31:14 almendra kernel: nvme 0000:02:00.0: PCIe Bus Error: severity=Corrected, type=Physical Layer, (Receiver ID)
Mar 07 17:31:14 almendra kernel: nvme 0000:02:00.0:   device [8086:0975] error status/mask=00000001/00002000
Mar 07 17:31:14 almendra kernel: nvme 0000:02:00.0:    [ 0] RxErr                  (First)

The devices are:

$ lspci -vv | grep 1d.6
00:1d.6 PCI bridge: Intel Corporation Device 34b6 (rev 30) (prog-if 00 [Normal decode])

$ lspci -vv | grep 02:00.0
02:00.0 Non-Volatile memory controller: Intel Corporation Optane NVME SSD H10 with Solid State Storage [Teton Glacier] (prog-if 02 [NVM Express])

The laptop works like always, but I have the impression that the NVME drive is telling me something bad.

It happens from time to time:

$ journalctl --since yesterday | grep -c "nvme 0000:02:00.0: PCIe Bus Error: severity=Corrected, type=Physical"
9

Do you know what does it mean?

Hello. Let's say I want to selfhost an email server (smtp + imap) that only will be used to receive email.

I only will send email internally (from my domain to my domain) and receive from 3rd parties.

Should I setup DKIM, DMARC, SPF and reverse IP lookup?

To be honest, I'm having a bit of hard time understanding the madness of email authentication. So I can't figure it out by myself if those mechanisms are needed in my case.

I haven't deployed anything, but probably will use Stalwart. It looks like it's easy to deploy. Is there any other beginner-friendly email service I should read about?

Thanks!

So this year I grew some tomatoes for the first time. They were small but tasty.

In November they began to die, so I cut all dry/dead parts and they got better. But they still look very unhealthy.

Do tomatoes survive the winter? Does it make sense to keep watering them? Like once a week, when it doesn't rain.

Or maybe I should let them die and seed again next spring?

(Ignore the dog. She refuses to let me alone in the balcony lol)

cross-posted from: https://feddit.cl/post/1035436

cross-posted from: https://feddit.cl/post/807710

tl;dr: It has been two weeks using the Pi 400 as my personal computer. It's good enough for what I do, but when I need performance y connect it to my old laptop.

So, last year I bought a Raspberry Pi 400 and I did what I always do: absolutely nothing. It was kept inside its box getting covered by dust.

About two weeks ago I decided to clean the mess out of my desk. This desk is very small and I've got my work laptop, my personal laptop, a monitor and a lot of cables and stuff. So I put my personal laptop below the router connected by ethernet and put the Pi 400 on the desk.

It is way slower than my laptop, obviously. So when I need performance I make an ssh tunnel for vnc and pipewire, and got my laptop DE back.

I used fscrypt for the /home partition, because I'm too paranoid to go unencrypted and it doesn't support full disk encryption. Also added a USB stick for more local storage, ciphered with the same tool.

I don't play video games any more :sad-pepe: so I don't miss a graphics card in the Pi.

I bought it with the official Raspberry mouse included. But I have no idea where it ended lost.

So now this is my "setup" lol.

edit: Don't do this. Embrace modernity and don't pollute the soil.

cross-posted from: https://feddit.cl/post/366747

I was reading this issue from LibreWolf project when I read that some of new GitLab users were asking to give credit card information.

I had no idea this was a thing. According to the forum it's a measure to avoid bots to use free CI workers time to mine shitcoins.

I was reading this issue from LibreWolf project when I read that some of new GitLab users were asking to give credit card information.

I had no idea this was a thing. According to the forum it's a measure to avoid bots to use free CI workers time to mine shitcoins.

cross-posted from: https://feddit.cl/post/246636

Un artesano toledano trabajando en una joya damasquinada.