How difficult is it for an adversary to get in the middle of the TPM releasing the keys to LUKS? That’s why I would want attestation of some sort, but that makes it more complicated and thinking about how that would work in practice makes my head spin…

Is clevis using an attestation server or is it all on a single machine? I’m interested in getting this set up but the noted lack of batteries included for this in the common distros makes it a somewhat tall order.

please share the script?

I’m really not sure. I’ve heard of people using Ceph across datacenters. Presumably that’s with a fast-ish connection, and it’s like joining separate clusters, so you’d likely need local ceph cluster at each site then replicate between datacenters. Probably not what you’re looking for.

I’ve heard good things about Garbage S3 and that it’s usable across the internet on slow-ish connections. Combined with JuiceFS is what I was looking at using before I landed on Ceph.

I know Ceph would work for this use case, but it’s not a lighthearted choice, kind of an investment and a steep learning curve (at least it was, and still is, for me).

I went and edited my hosts file and added all of my devices, but I only have a handful. Tailscale on macOS has a lot of bugs, this being one of many.

It depends on the container I suppose. There are some that are very difficult to rebuild depending on what’s in it and what it does. Some very complex software can be ran in containers.

I’ve been wanting to tinker with NixOS. I’ve stuck in the stone ages automating VM deployments on my Proxmox cluster using ansible. One line and about 30 minutes (cuda install is a beast) to build a reproducible VM running llama.cpp with llama-swap.

Typically, the container image maintainer will provide environment variables which can override the database connection. This isn’t always the case but usually it’s as simple as updating those and ensuring network access between your containers.

A lot of times it is necessary to build the container oneself, e.g., to fix a bug, satisfy a security requirement, or because the container as-built just isn’t compatible with the environment. So in that case would you contract an expert to rebuild it, host it on a VM, look for a different solution, or something else?

reproducing those installs from scratch + restoring backups would be a single command plus waiting 5 minutes.

Is that with Ansible or your own tooling or something else?

Thanks for posting, I haven’t seen this project yet. Looks pretty neat and will have to give it a try

This is a feature that Jellyfin natively has already. So now Jellyfin exceeds Plex in some areas.

Which client are you seeing the issue on and can you provide more info on the type of embedded subtitle (run mediainfo on the file if on Linux)?

I was replying to maybe share the wrapper script I wrote, but if you’re going to be a jerk about it…

What are the issues you’re having with Jellyfin’s subtitles? Do you know if there is an open bug report or feature request that is tracking the same?

Jellyfin is a fork of Emby which was written in .NET. The server backend and web page are all (or mostly) .NET is my understanding. It makes use of external programs like ffmpeg on the server or VLC on the apps.

Can you describe the subtitles issue you’re having? Do you know if there is an open bug report or feature request open on github or Jellyfin’s website?

• I’ll have to check but I haven’t had an issue with the transcoded files filling up.
• Subtitles work as expected for me but all of my file names are in English, are the ones you’re having problems with file names in another language perchance?
• That last one I fixed myself by wrapping ffmpeg around a script I wrote that forces 5.1 to transcode to AC3 so it goes to my speakers properly.