I’m don’t know how to link properly but this happened a couple weeks ago.

https://lemmy.ml/post/45529149

How is the hosting changed when needed (e.g., a different IPFS address)? What happens in a coordinated attack by someone with 51% of the seeds, can they overwrite all of the content? Is there any cryptographic way to ensure the content hasn’t been maliciously altered?

Each Lemmy server contains a user database, explicit federations with other Lemmy servers, and communities. Plebbit sounds like each instance is a self contained community instead of being hosted on an overarching server with other communities. And the Plebbit communities are hosted via BitTorrent style decentralized seeding.

“You pay for how many streaming services??? You could start building a decent DVD/BRD collection that you own forever.”

“Yea but I hate swapping disks and I watch on my phone.”

“Gather around, let me tell you the story of a fin made of jelly.”

I’m running Proxmox and hate it. I still recommend it for what you are trying to do. I think it would work quite nicely. Three of my four nodes have llama.cpp VMs hosting OpenAI-compatible LLM endpoints (llama-server) and I run Claude Code against that using a simple translation proxy.

Proxmox is very opinionated on certain aspects and I much prefer bare metal k8s for my needs.

This is pretty rad! Thanks for sharing. I went down the same road with learning k3s on about 7 Raspberry Pis and pivoted over to Proxmox/Ceph on a few old gaming PCs / Ethereum miners. Now I am trying to optimize the space and looking at how to rack mount my ATX machines with GPUs lol… I was able to get a RTX 3070 to fit in a 2U rack mount enclosure but having some heat issues… going to look at 4U cases with better airflow for the RTX 3090 and various RX480s.

I am planning to set up Talos VMs (one per Proxmox host) and bootstrap k8s with Traefik and others. If you’re learning, you might want to start with a batteries-included k8s distro like k3s.

I followed the wiki tutorials for that. Make sure iommu is working, blacklist drivers on host, etc.

It’s on my lift of projects. I build a Proxmox+Ceph cluster and I have GPU passthrough working for LLM inference. I was planning to get docker headless Steam going and try to steam via Steam In Home Streaming as my first attempt then pivot to a full VM with Sunshine as a last resort.

How difficult is it for an adversary to get in the middle of the TPM releasing the keys to LUKS? That’s why I would want attestation of some sort, but that makes it more complicated and thinking about how that would work in practice makes my head spin…

Is clevis using an attestation server or is it all on a single machine? I’m interested in getting this set up but the noted lack of batteries included for this in the common distros makes it a somewhat tall order.

please share the script?

I’m really not sure. I’ve heard of people using Ceph across datacenters. Presumably that’s with a fast-ish connection, and it’s like joining separate clusters, so you’d likely need local ceph cluster at each site then replicate between datacenters. Probably not what you’re looking for.

I’ve heard good things about Garbage S3 and that it’s usable across the internet on slow-ish connections. Combined with JuiceFS is what I was looking at using before I landed on Ceph.

I know Ceph would work for this use case, but it’s not a lighthearted choice, kind of an investment and a steep learning curve (at least it was, and still is, for me).

I went and edited my hosts file and added all of my devices, but I only have a handful. Tailscale on macOS has a lot of bugs, this being one of many.

It depends on the container I suppose. There are some that are very difficult to rebuild depending on what’s in it and what it does. Some very complex software can be ran in containers.

I’ve been wanting to tinker with NixOS. I’ve stuck in the stone ages automating VM deployments on my Proxmox cluster using ansible. One line and about 30 minutes (cuda install is a beast) to build a reproducible VM running llama.cpp with llama-swap.

Typically, the container image maintainer will provide environment variables which can override the database connection. This isn’t always the case but usually it’s as simple as updating those and ensuring network access between your containers.

A lot of times it is necessary to build the container oneself, e.g., to fix a bug, satisfy a security requirement, or because the container as-built just isn’t compatible with the environment. So in that case would you contract an expert to rebuild it, host it on a VM, look for a different solution, or something else?

reproducing those installs from scratch + restoring backups would be a single command plus waiting 5 minutes.

Is that with Ansible or your own tooling or something else?

Thanks for posting, I haven’t seen this project yet. Looks pretty neat and will have to give it a try