@tko@tkohhh.social avatar

tko

@[email protected]

This profile is from a federated server and may be incomplete. View on remote instance

tko ,
@tko@tkohhh.social avatar

Freedom of the press is explicitly called out in the first ammendment:

"Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances."

https://constitution.congress.gov/browse/essay/amdt1-9-1/ALDE_00000395/

tko ,
@tko@tkohhh.social avatar

My instance runs great... I've got it on NVME drives and a system with 64GB of RAM. When I was hosting it on Digital Ocean, I often ran into performance issues with RAM (I think I just had 2GB). Since the switch it's been rock solid.

tko ,
@tko@tkohhh.social avatar

Nice to see progress.

tko ,
@tko@tkohhh.social avatar

They just keep making it better!

tko ,
@tko@tkohhh.social avatar

Raw in a salad. I find cooked spinach to be very unappealing, but raw is delicious.

tko ,
@tko@tkohhh.social avatar

How is it "destroying the town" when the measure explicitly returns redistricting control to the independent commission in 2031? It's temporary by design to address the moment we are in.

tko ,
@tko@tkohhh.social avatar

YES to Reaper. No surprise that the original developer of Winamp makes an amazing DAW.

tko ,
@tko@tkohhh.social avatar

musicbrainz

tko ,
@tko@tkohhh.social avatar

Maybe you don't like his music, but there's plenty of us that do. "United Health", for example, was the best piece of art on that subject, bar none.

Setting up a server for a research team. What should be in my checklist?

I've been asked to set up a server for a research team at my university. I've already had the practice of setting a server at home, so I have a rough idea of how things should be done. Still, I wish to follow best practices when setting up a server for this use case. Plus I would prefer to avoid too much tinkering for the setup ...

tko ,
@tko@tkohhh.social avatar

Have you personally asked the IT department about this? I would be concerned that they were told "no" by IT, so they are asking you to do it behind their back.

tko ,
@tko@tkohhh.social avatar

I'm pretty sure the answer is no. Somebody can correct me if I'm wrong.

how are my fellow peeps hosting your music collection these days?

right now I'm trying a dedicated Jellyfin instance for audio only (bought the lifetime emby subscription before i learned about jellyfin, so video is elsewhere) but having trouble finding a good client that could run on the guts of an old autonomic MMS2A. That device has an analog and digital output, which with the normal OS ...

tko ,
@tko@tkohhh.social avatar

It's unpopular around here, but Plexamp is fantastic.

tko ,
@tko@tkohhh.social avatar

These people wouldn't be eligible to vote until they achieved citizenship, so maybe they are figuring that the optics of following through might be mobilizing for the existing voter base.

Schadenfreude is now banned. And many other political posts of similar nature are banned too. Low quality and fake news is also banned.

It has been 15 days since the post about future of politics in this community was made, and results are somewhat clear - 35 (39 - 4) in favor of no poltics vs 4 (7 - 3) in favor of poltical natured posts. ...

tko ,
@tko@tkohhh.social avatar

It's 100% about being on topic. It's especially important when most people see the content in the context of a mixed feed where they might upvote a news story that they like without noticing which community it was posted in.

tko ,
@tko@tkohhh.social avatar

This comment from yesterday's thread was perfect, I think: https://tkohhh.social/post/289633/1295767

To quote: "War is not uplifting. Fascism is not uplifting. Pollution is not uplifting. Murder is not uplifting. Famine is not uplifting. Bigotry is not uplifting. Genocide in particular is not uplifting."

Any of those things ENDING is uplifting news, but celebrating because a despot stubbed his toe is not uplifting.

Also, I don't think "catharsis" and "schadenfreude" are interchangeable. When people talk about schadenfreude they are specifically talking about feeling good because something bad happened. Catharsis is a much broader term that would likely be too restrictive for this type of community.

tko ,
@tko@tkohhh.social avatar

I think the restrictions are just for publishing containers on Docker Hub. If you aren't doing that, you aren't impacted.

tko ,
@tko@tkohhh.social avatar

That's like insult to injury... Docker Desktop is already way worse than running on linux!

tko OP ,
@tko@tkohhh.social avatar

I love the idea of a "Migration Museum"... we need more of that in the world!

tko OP ,
@tko@tkohhh.social avatar

It loads fine for me, and apparently for 72 other people. If there are rules about what domains are acceptable, that information should be posted on the sidebar. Until then, votes will have to be a sufficient measure of what the community thinks about it.

Verifying & Validating a Docker Container

So, this has always bugged me. How do you validate a Docker container? No one wants to pull a laced up container, so there has to be a way one can check. Of course, sticking to original docker containers from Docker Hub would be one method I suppose. Is there some kind of scan one can do? I do this on my Windows computer; scan ...

tko ,
@tko@tkohhh.social avatar

I'm far from an expert, but it seems to me that if you're setting up your containers according to best practice you would only be mapping the specific ports needed for the service, which renders a wayward "open port" useless. If there's some kind of UI exploit, that's a different story. Perhaps this is why most people suggest not exposing your containerized services to the WAN. If we're talking about a virus that might affect files, it can only see the files that are mapped to the container which limits the damage that can be done. If you are exposing sensitive files to your container, it might be worth it to vet the container more thoroughly (and make sure you have good backups).

tko ,
@tko@tkohhh.social avatar

Can you clarify what your concern is with "heavy" logging solutions that require database/elasticsearch? If you're worried about system resources that's one thing, but if it's just that it seems "complicated," I have a docker compose file that handles Graylog, Opensearch, and Mongodb. Just give it a couple of persistent storage volumes, and it's good to go. You can send logs directly to it with syslog or gelf, or set up a filebeat container to ingest file logs.

There's a LOT you can do with it once you've got your logs into the system, but you don't NEED to do anything else. Just something to consider!

tko ,
@tko@tkohhh.social avatar

Here you go. I commented out what is not necessary. There are some passwords noted that you'll want to set to your own values. Also, pay attention to the volume mappings... I left my values in there, but you'll almost certainly need to change those to make sense for your host system. Hopefully this is helpful!

services:
  mongodb:
    image: "mongo:6.0"
    volumes:
      - "/mnt/user/appdata/mongo-graylog:/data/db"
#      - "/mnt/user/backup/mongodb:/backup"
    restart: "on-failure"
#    logging:
#      driver: "gelf"
#      options:
#        gelf-address: "udp://10.9.8.7:12201"
#        tag: "mongodb"

  opensearch:
    image: "opensearchproject/opensearch:2.13.0"
    environment:
      - "OPENSEARCH_JAVA_OPTS=-Xms1g -Xmx1g"
      - "bootstrap.memory_lock=true"
      - "discovery.type=single-node"
      - "action.auto_create_index=false"
      - "plugins.security.ssl.http.enabled=false"
      - "plugins.security.disabled=true"
      - "OPENSEARCH_INITIAL_ADMIN_PASSWORD=[yourpasswordhere]"
    ulimits:
      nofile: 64000
      memlock:
        hard: -1
        soft: -1
    volumes:
      - "/mnt/user/appdata/opensearch-graylog:/usr/share/opensearch/data"
    restart: "on-failure"
#    logging:
#      driver: "gelf"
#      options:
#        gelf-address: "udp://10.9.8.7:12201"
#        tag: "opensearch"

  graylog:
    image: "graylog/graylog:6.2.0"
    depends_on:
      opensearch:
        condition: "service_started"
      mongodb:
        condition: "service_started"
    entrypoint: "/usr/bin/tini -- wait-for-it opensearch:9200 --  /docker-entrypoint.sh"
    environment:
      GRAYLOG_TIMEZONE: "America/Los_Angeles"
      TZ: "America/Los_Angeles"
      GRAYLOG_ROOT_TIMEZONE: "America/Los_Angeles"
      GRAYLOG_NODE_ID_FILE: "/usr/share/graylog/data/config/node-id"
      GRAYLOG_PASSWORD_SECRET: "[anotherpasswordhere]"
      GRAYLOG_ROOT_PASSWORD_SHA2: "[aSHA2passwordhash]"
      GRAYLOG_HTTP_BIND_ADDRESS: "0.0.0.0:9000"
      GRAYLOG_HTTP_EXTERNAL_URI: "http://localhost:9000/"
      GRAYLOG_ELASTICSEARCH_HOSTS: "http://opensearch:9200/"
      GRAYLOG_MONGODB_URI: "mongodb://mongodb:27017/graylog"

    ports:
    - "5044:5044/tcp"   # Beats
    - "5140:5140/udp"   # Syslog
    - "5140:5140/tcp"   # Syslog
    - "5141:5141/udp"   # Syslog - dd-wrt
    - "5555:5555/tcp"   # RAW TCP
    - "5555:5555/udp"   # RAW UDP
    - "9000:9000/tcp"   # Server API
    - "12201:12201/tcp" # GELF TCP
    - "12201:12201/udp" # GELF UDP
    - "10000:10000/tcp" # Custom TCP port
    - "10000:10000/udp" # Custom UDP port
    - "13301:13301/tcp" # Forwarder data
    - "13302:13302/tcp" # Forwarder config
    volumes:
      - "/mnt/user/appdata/graylog/data:/usr/share/graylog/data/data"
      - "/mnt/user/appdata/graylog/journal:/usr/share/graylog/data/journal"
      - "/mnt/user/appdata/graylog/etc:/etc/graylog"
    restart: "on-failure"

volumes:
  mongodb_data:
  os_data:
  graylog_data:
  graylog_journal:
tko ,
@tko@tkohhh.social avatar

My pleasure! Getting this stuff together can be a pain, so I'm always trying to pay it forward. Good luck and let me know if you have any questions!

tko ,
@tko@tkohhh.social avatar

Missed the point on that one...

Is Lemmy a tool for censorship or quite the opposite? ( szmer.info )

Hi! You probably haven't noticed, but Poland currently only has 4 or 5 Lemmy instances. The oldest one is in fact controlled by a group of communist trolls that propagate breaking and entering, substance abuse, fetal murders and other crimes. With this being their own problem really, the community's issue is that whenever an ...

tko ,
@tko@tkohhh.social avatar

Federation is a tool to connect instances together. If one instance isn't being run in a way that you like, you can and should create an account on a different instance that better aligns with your ideals. Or, if you can't find any such instance, then you can create your own instance. This is the beauty of federation!

tko ,
@tko@tkohhh.social avatar

Even if that's true, it doesn't diminish the very real good that the foundation has accomplished, like Polio eradication or HIV/AIDS research. You can feel about Bill Gates whatever you want, but you cannot deny that his money has done very good things for humanity.

tko ,
@tko@tkohhh.social avatar
tko ,
@tko@tkohhh.social avatar

I always use a version tag, but I don't spend any time reading release notes for 95% of my containers. I'll go through and update versions a couple times a year. If something breaks, at least I know that it broke because I updated it and I can troubleshoot then. The main consideration for me is to not accidentally update and then having a surprise problem to deal with.

tko ,
@tko@tkohhh.social avatar

The discord is active. There is some problem with the hosting, I don't remember the details, but they are recommending people use the internet archive to find information posted on the forum for the time being.

tko ,
@tko@tkohhh.social avatar

I think the main page has been untouched for a few years now. I think JDM went all in on the forum and Discord and stopped focusing on the static webpage.

tko ,
@tko@tkohhh.social avatar

These are good! On my instance, my sidebar says "You can stay as long as you’re not being a jerk."

tko ,
@tko@tkohhh.social avatar

If I have a $10 bill in my wallet, I would give it to literally anybody who asked me.

tko ,
@tko@tkohhh.social avatar

Sure... stop by, I'll give it to you!

tko ,
@tko@tkohhh.social avatar

Honest question... just about everything I've read regarding why HFCS is bad is really just about the dangers of consuming sugar in general. Is there something that shows it's worse than sugar?

I totally agree that we eat way too much sugar in America, and I'm all for reducing. I just wonder if any efforts to this end should be focused on ALL sources of sugar, not just HFCS.

tko ,
@tko@tkohhh.social avatar

To be fair, Addons are just other containers. If you're using a Docker install for Home Assistant, I think the idea is you already have a handle on your docker host, and you're capable of adding whatever other containers you might need.

tko ,
@tko@tkohhh.social avatar

I think this is just a terminology difference. The documentation says that "Add Ons" are not supported in Container and Core, but "Add Ons" means the easy button you press to install those services. All of those Add On services are just containers that HAOS manages for you. Every single one of them can be set up as a container manually and function the same as the official "Add Ons."

I don't know for sure, but I wonder if the reason for this is that it's not technically possible for a container to manage other external containers. Does anybody know about this?

tko ,
@tko@tkohhh.social avatar

"On Her Majesty's Secret Service" by Propellerheads has an amazing bass drop in the middle of the song.

I'm also partial to "Empire Ants" by Gorillaz.

tko , (edited )
@tko@tkohhh.social avatar

House. I feel bad for anybody who's not seen it with the original intro music.

tko ,
@tko@tkohhh.social avatar

Yes! It sets the tone for the show so perfectly. Just to satisfy my curiosity, I pulled up the first episode on Hulu... the new music gives a completely different tone. It's terrible!

tko ,
@tko@tkohhh.social avatar

What makes you think the "loud minority" wasn't the people who voted for Trump in the first place?

tko ,
@tko@tkohhh.social avatar

Is this true?? I always assumed that electric ranges simply had a variable duty cycle controlled by the knob. That would mean that if you want to get a pot up to a specific temperature, the fastest way is to set the knob to high until you reach the temperature, then reduce the knob to the desired temperature.

This is different from how an HVAC works, where you set an actual temperature and the HVAC runs until that temperature is reached.

But I could be totally wrong about
how electric ranges work.

tko ,
@tko@tkohhh.social avatar

Interesting... if that's true, then you can know what temperature each setting on the knob is.

I wonder if this is true for all electric ranges?

tko ,
@tko@tkohhh.social avatar

Parker, specifically the Jotter. I still have and use a stainless steel one that I bought in 1999 because I kept losing pens, and I thought that if I spent a little more on one I might take better care of it. It's my favorite by far.

tko ,
@tko@tkohhh.social avatar

Gotcha... as you can see, it probably depends on who you ask!
"Echo chamber" definitely has a negative connotation, which is why I don't think the specific-purpose group is acting as an echo chamber at least not insofar as they are keeping the group on-topic.