And yes, stories like “oh no, I have a loan, and I can’t pay it off, and nobody will hire me, even though all I know how to do is study, and I have a piece of paper” are very funny to me. If you want to make money, you will. By whatever means necessary. Just accept that the world isn’t as you dreamed.
UPD: and just admit yourself bankrupt. You won’t get a loan anymore, but on the other hand, if you can’t pay it back, that’s not so bad either.
How many people in your family have committed suicide? My cousin committed suicide in my family. I know exactly what I’m talking about. When you have nothing to eat, you don’t think about how bad it is that there are few cinemas around. You look for food. For a long time. For hours. You just don’t have time for anything else. This is real experience, not beautiful stories from social networks.
Most likely this will just drive up inflation
People kill themselves for various reasons. Mostly because of a mismatch between expectations and reality.
No Jesus will help you survive in the snow town at -30 degrees Celsius. These stories are good in the south, but not in the north.
Uprising because of lack of games? Seriously? Most people won’t overthrow the power of capitalists because no one has provided a working theory without capitalists. And changing some for others just doesn’t make sense. And this is not about games at all. Moreover, you are not even close to the bottom of Maslow’s pyramid. In my 18 years I couldn’t have something to eat. That is bottom, not live with parents.
As if a person swinging a sledgehammer at work for 10 hours and then going into their favorite shooter for an hour will immediately go to protests if they don’t have a shooter. Of course not.
If you’re installing an HBA at home, it’s better to immediately install something like a Noctua NF-A4x10 on it. You should also immediately check the type of hardware initialization. If the system boots into EFI and the HBA is old and only supports BIOS, there may be problems. Otherwise, everything works perfectly with almost every device.
I’ve been running all my servers and my work computer on Arch since around 2018, ever since Ubuntu started shoving snaps everywhere. Even the instance I’m writing this from is running Arch. Overall, everything is great. The instance has 98-99% uptime. No issues with the work PC either.
UPD: While rereading the post, I remembered that rabbitmq was recently broken in the repositories. But everything was solved with a two-minute rollback and blocking of the version in pacman.
UPD2: I build packages with my hands periodically. It’s not like I haven’t done the same thing on Ubuntu or CentOS. On Arch make PKGBUILD really more easy then spec file for CentOS or deb structure for ubuntu. On Ubuntu this is really awful.
Because of the Wayland architecture, you simply cannot do it differently. Because Wayland is not a window manager, but a subsystem for working directly with video. This is not a new X11 server, it’s a different architecture. Therefore, by default, no matter where you choose, the render will be output to tty0 of your main server. You have only 2 options - use Wolf as is or manually assemble https://github.com/games-on-whales/gst-wayland-display and limit it to one video card via systemd. gst-wayland-display literally forcibly transfers the render not to tty0, but immediately to the stream for Moonlight.
So it’s not that Wolf is too complicated, it’s just that what you want is a rather complicated case.
UPD: although it is possible that you will be able to do this using wlheadless-run, but this will most likely be worse in terms of performance compared to gst-wayland-display. Although for a simple KDE session, I think there is no difference.
UPD2: I checked and, as I thought, regular applications will get along fine if you run them through wlheadless-run, but everything that requires vulkan may break. it’s the same with video cards. Simply specifying primary will not guarantee the use of a fixed card. But just for office work, I think it will be fine. however, as soon as the case starts to go beyond the standard, everything will start to break down if you have more than one GPU.
Just use wolf: https://games-on-whales.gitbook.io/wolf/stable/en/user/quickstart.md. Everything is ready out of the box. However, for a KDE session, you’ll have to rebuild KDE in the container instead of wolf-ui.
Never mind what’s ideal, in reality, one of my servers is running on a Core 2 Duo T7600 and when I installed ubuntu on it, it took 24 minutes to boot due to the unzipping of the base snap image in ubuntu server. Older hardware does not become faster just because os requirements change. And yes, I left ubuntu as soon as snap came out, i think that was 2018.
UPD: and of course I’m not going to change one of the local servers just because Canonical decided to release another system. Thanks. For 20 years the processor has been routing packets and will do so for another 20 without any problems. Just switched to another OS.
SNAP in the recommended packages of the ubuntu-server metapackage. Ubuntu installs all recommended packages by default. So SNAP is in the server installation, moreover, it can’t even be simply removed without completely blocking in apt policy.
SNAP also doesn’t work well with old hardware because of compression. It’s ironic to recommend system riddled with incompatible compression to someone who explicitly wrote in a post that they would be using outdated hardware.
If you’re planning to use old hardware for hosting, don’t use Ubuntu. SNAP will kill performance.
So your choice is Debian.
P.S. VPS is already a Virtual Private Server and you can’t install ProxMox or any virtualization on it. If you want experiments, look into containers.
In any program, you still have to execute a challenge somewhere. No program will issue certificates without that. In the case of certbot, you can simply write a small post hook that will transfer the certificates to cloudflare.
Just don’t expose SSH to internet. It’s a complex protocol with many CVEs. And you realyy don’t need access to SSH from anywhere. Replace access from ineternet to a WireGuard tunnel that has almost zero attack surface area and properly configured iptables rules. And that’s it.
I think the problem has been slightly exaggerated. If you’re not hosting several dozen services, you can reduce your attack surface down to one Nginx server. For an even stricter setup, just enable mTLS.
My provider doesn’t provide IPv6, but I rented a server in a data center, bought a subnet, and tunneled it home via WireGuard. So the scheme is roughly: VPS (fd00:1::/64) <-> (fd00:1::/64) Home router (realv6/64) <-> Home network
Router configuration:
/etc/sysctl.d/10-ipv6-privacy.conf
net.ipv6.conf.all.use_tempaddr = 0
net.ipv6.conf.default.use_tempaddr = 0
net.ipv6.conf.all.forwarding = 1
net.ipv6.conf.default.forwarding = 1
/etc/radvd.conf
interface br0 {
AdvSendAdvert on;
MinRtrAdvInterval 3;
MaxRtrAdvInterval 30;
AdvManagedFlag on; # M=1 → Address via DHCPv6
AdvOtherConfigFlag on; # O=1 → Additional options via DHCPv6
# SLAAC is still possible for Android
prefix realv6::/64 {
AdvOnLink on;
AdvAutonomous on; # Allow SLAAC
};
RDNSS realv6::1 {
AdvRDNSSLifetime 1800;
};
DNSSL home.lan {
AdvDNSSLLifetime 1800;
};
};
/etc/kea/kea-dhcp6.conf
{
"Dhcp6": {
"interfaces-config": {
"interfaces": [ "br0" ]
},
"lease-database": {
"type": "memfile",
"persist": true,
"lfc-interval": 86400,
"name": "/var/lib/kea/dhcp6.leases"
},
"renew-timer": 21600,
"rebind-timer": 43200,
"preferred-lifetime": 43200,
"valid-lifetime": 86400,
"subnet6": [
{
"id": 1,
"subnet": "realv6::/64",
"interface": "br0",
"pools": [
{ "pool": "realv6::1000 - realv6::ffff" }
],
"option-data": [
{ "name": "dns-servers", "data": "realv6::1" },
{ "name": "domain-search", "data": "home.lan" }
]
}
],
"loggers": [
{
"name": "kea-dhcp6",
"output-options": [
{ "output": "stdout" }
],
"severity": "WARN"
}
]
}
}
And of course, iptables is necessary. Something like: /etc/iptables/ip6tables.rules
# Generated by ip6tables-save v1.6.0 on Thu Sep 8 13:29:11 2016
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
#BASE INPUT
-A INPUT -i eno1 -j DROP
-A OUTPUT -o eno1 -j DROP
-A INPUT -i lo -j ACCEPT
-A INPUT -i br0 -j ACCEPT
-A INPUT -p ipv6-icmp -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eno1 -j DROP
-A FORWARD -i br0 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -p ipv6-icmp -j ACCEPT
COMMIT
If the seller doesn’t have a WiFi bundle, then yes. If they do, you’ll just need to pay extra.
I also recommend looking for a mini PC with Intel N100, N200, etc.
Just looking for “minipc pfsense”
I don’t argue that she was criticized. I just say that the problem described in the post—protests about games and comparisons with other countries—is irrelevant. In addition, for some reason, the topic starter included “evil capitalists” in the post. Maybe I didn’t describe it very well because I’m using a translator. Personally, I see this literally as a problem of the golden billion. Maslow’s pyramid is just an example.
Let me explain in more detail. Surely everyone was told as a child what successful future awaits them. How everything will be wonderful. Boundless horizons. Hardly any parent wouldn’t want this for their child. But reality isn’t like that. It doesn’t guarantee not only earnings but even life. Harsh truth. Therefore, all these sufferings in the spirit of: “cursed capitalists are profiting from us, let’s protest more. If something happens, will we protest even more?” seem very funny to me.
Especially for the USA, because the post was clearly written by someone from there. Guys, capitalists in 1996, if I’m not mistaken, provided your country with a lot of jobs at chicken factories just by giving one country free chicken under monopoly conditions. But luck doesn’t always turn its face.
So as it was sung in one Russian song:
We galloped merrily on wooden horses, We marched in war against the foolish adult world. We led an army of songs and toys together, We were very brave children.
But one day, in every child’s heart, it suddenly became empty, The fairy‑tale thread was torn. We got there, and it turned out there was simply no one to defeat. There are no adults here except us.
Time ran out, the veil fell, and everything that had so drawn us, that has always been inside us.
UPD: That’s why I wrote that suicide is almost always the result of unrealistic expectations.