Is the CI/CD still a faithful clone of github’s worst-in-show setup? Because if I had a plan for ditching GL, the CI keeps forgejo from being a contender.

There is a community edition but serious users will run into its limitations

No true Scot, then?

I’m running gitlab implementations at a few sites. I’ve not seen or heard of any performance limiter with a self-managed community edition that removes a tool the others still provide.

and it does not integrate neatly with external solutions.

Again, this sounds FUDdy. Which ‘external solutions’ are you using that a git-push fails on? Some spaghetti of saas tendrils seems to be already a risk, but I can’t think of any other external thing that it could mess up with.

made due

made do?

everytime

Not a word yet. It may never be a word.

I wrapped the trade-offs here https://cxgo.ai/l/pti2J6s

The link goes to some wall of articles, none of them obviously about immich. Is there a better link?

Doood. npm in production is a bad pattern in this age of supply-chain sploits. Best vendor that into the artifact when ya ship … Nevermind.

(See: iso27002, SLSA.dev)

Container-free yet? #slsa.dev

OP’s post does not indicate that they’re violating the principle of least privilege in any way.

If I wasn’t sure whether that was a risk, I would have asked whether that’s what was going on. Oh, wait: I did, right? I used a question mark and everything.

Are you connecting to the victim to push a backup into storage? If so, there’s SO much you should improve on that.

a software

‘Software’ is not a word that get an ‘a’ article. So

I was hoping there exists software that

or

I was hoping there exists a software package that

Having said that, you can install UltraVNC and have it ‘call home’; and it works very well.

Edit: Wow. So many people hate UVNC.

Your comment isn’t popular, but we all know the rule: “the best thing needs to be the easy thing”, since people will often choose what’s easy and fast vs what’s ultimately better. We see this in security all the time (hello-oo NPM).

Check if you’re using cloud-init

Nice. I’m struggling hard to keep cloud-init out of my pve setup.

seems unfinished

setup

set up. “Setup” is a noun that lost its hyphen.

everytime

every time. Otherwise it’s not a word at all.

Do the sysctl fix and you’re fine to wait for a patch.

Oof. There’s an entire fdroid ecosystem you’ve cut yourself off from.