Akatsuki Levi

Absolutely will :3

Daaamn… I’ve been open sourced

OneShot is literally the main inspiration for my game :3

I’m making a game taking place in a fake operating system and…

This gives me ideas

I personally actually use Forgejo with Forgejo Runner It gives me a fully self-hosted experience that feels just like Github, and Forgejo Actions is nearly 1:1 with Github Actions

About CI Rental thought, never touched there, but maybe not that hard? Probably Jenkins or Drone CI has support for it

And LFS, AFAIK both Gitea and Forgejo have support for it(just need to enable on the app.ini)

Can’t have supply chain issues if 90% of your stuff isn’t just a bunch of Docker containers running inside a Kubernetes mess

Not saying that it doesn’t happen on bare metal stuff, but damm, is it a lot more prominent on sources like npm, pip and docker

And if there’s other users in the machine, it doesn’t fuck things up for others Or if it ends up messing something up, it is user-scoped, so its a lot easier to fix than a bricked system

Me, packaging company software to Alpine Packages so that I can just apk add stuff

At that point I’d poke around what’s in there, cuz there’s absolutely a mess in there

I use ~/.local/bin since by linux standard, ~/.local is a user-level /usr/local, which is a override level of /usr

~/bin ends up cluttering the home folder

Ubuntu… Then Slackware… Then Fedora… Then Arch I still dont know why tf I went to Slackware… It was painful, but worth it

I have switched production to Caddy before V2 and haven’t looked back ever since. During my Apache era, always had to keep a eye on stuff and deal when things decided to break With caddy? I just throw the config and it just works without complaining at all

Disable password authentication on SSH

Enable firewall and block all ports you’re not using(most firewalls do this by default)

Switch to a LTS kernel(not security related, but it keeps things going smooth… Technically it is safer since it gets updated less often so it is a bit more battle tested? Never investigated whenever a LTS kernel is safer than a standard one)

Use Caddy to proxy to services instead of directly exposing them out

HTTPS for web stuff(Caddy does it automatically)

You just need to look at the problem from a different angle