Hacker News: ggpsv

Podman rootless containers and the Copy Fail exploit

ggpsv — Fri, 08 May 2026 13:22:33 +0000

Article URL: https://garrido.io/notes/podman-rootless-containers-copy-fail/

Comments URL: https://news.ycombinator.com/item?id=48062745

Points: 141

# Comments: 25

New comment by ggpsv in "WireGuard topologies for self-hosting at home"

ggpsv — Sat, 04 Oct 2025 00:19:12 +0000

Author here! Indeed, it is mostly HTTPS terminated by Caddy in the server at home. Otherwise, it is SSH.

New comment by ggpsv in "Replacing Kubernetes with systemd (2024)"

ggpsv — Tue, 06 May 2025 16:16:26 +0000

This is a good intro [0], courtesy of Redhat.

This is a good example [1], cited elsewhere in this post.

Documentation for quadlet systemd units [2].

[0]: https://www.redhat.com/en/blog/quadlet-podman

[1]: https://mo8it.com/blog/quadlet/

[2]: https://docs.podman.io/en/latest/markdown/podman-systemd.uni...

New comment by ggpsv in "Replacing Kubernetes with systemd (2024)"

ggpsv — Tue, 06 May 2025 16:14:48 +0000

Oh yes, correct!

New comment by ggpsv in "Replacing Kubernetes with systemd (2024)"

ggpsv — Tue, 06 May 2025 00:11:31 +0000

This is no longer true as of Podman 5 and Quadlet?

You can define rootless containers to run under systemd services as unprivileged users. You can use machinectl to login as said user and interact with systemctl.

New comment by ggpsv in "I maintain a 17 year old ThinkPad"

ggpsv — Thu, 03 Apr 2025 16:56:38 +0000

To add a data point here, my Framework laptop is 3 years old and I have no plans to change the mainboard anytime soon.

Also, you don't change its motherboard, you change the mainboard (for my laptop, it's the CPU/integrated GPU + memory sockets); this is unlike changing the entire computer. Then, you can reuse the replaced mainboard as a server if you wish to.

This pales with my experience using a Macbook Air whose motherboard failed. I did have to replace the entire computer.

New comment by ggpsv in "Ask HN: What intelligent forums exist outside of HN?"

ggpsv — Tue, 11 Feb 2025 13:48:06 +0000

Care to share a link to the fermentation forum?

New comment by ggpsv in "Rewilding the Self"

ggpsv — Mon, 13 Jan 2025 13:49:48 +0000

Is it really brutal? Can you single out "nature" and its characteristics?

Brutal sounds like a value judgement, one that I suspect explains nothing about the fact.

Can we accept that it just is, and we're part of that, for all our vices and virtues?

New comment by ggpsv in "Link Blog in a Static Site"

ggpsv — Sun, 12 Jan 2025 22:31:31 +0000

A bit like PESOS (Publish elsewhere, syndicate own site). I do this when archiving my Mastodon posts in my own static site [0].

[0]: https://garrido.io/notes/archiving-and-syndicating-mastodon-...

New comment by ggpsv in "WireGuard: Beyond the most basic configuration"

ggpsv — Sun, 01 Dec 2024 16:16:02 +0000

That is what I ended up doing, I wrote a blog post about it some months ago [0].

The gist of it is using private dns and exposing services only on the private network. Implementation details can vary, you decide whether to use tailscale or bare wireguard, and any reverse proxy and dns server will do. In my case, I use Tailscale, NextDNS, and Caddy.

[0]: https://garrido.io/notes/tailscale-nextdns-custom-domains/

New comment by ggpsv in "Thunderbird Turns 20 Years Old"

ggpsv — Fri, 08 Nov 2024 18:14:24 +0000

If you don't, can you expand on how you're doing this? Is it simply backing up the Thunderbird profile?

Hetzner Considered Hostile: A PSA

ggpsv — Wed, 30 Oct 2024 18:12:35 +0000

Article URL: https://tenforward.blog/hetzner-considered-hostile-a-psa/

Comments URL: https://news.ycombinator.com/item?id=41998420

Points: 6

# Comments: 5

New comment by ggpsv in "Running an open source app: Usage, costs and community donations"

ggpsv — Sat, 19 Oct 2024 07:19:47 +0000

Every case is different but as a baseline, you could use Ubuntu or Debian for automatic security upgrades via unattended-upgrades[0], harden ssh by allowing only pubkey authentication, disallow all public incoming connections in the firewall except for https traffic if you're serving a public service, everything else (ssh, etc) can go over wireguard (tailscale makes this easy). Use a webserver like nginx or caddy for tls termination, serving static assets, and proxying requests to an application listening on localhost or wireguard.

[0]: https://wiki.debian.org/UnattendedUpgrades

What self-hosting teaches

ggpsv — Thu, 17 Oct 2024 11:57:27 +0000

Article URL: https://garrido.io/posts/2024/10/17/what-self-hosting-teaches/

Comments URL: https://news.ycombinator.com/item?id=41868793

Points: 2

# Comments: 0

We Should Teach Students Unix, or the Power of Pipes

ggpsv — Mon, 14 Oct 2024 22:28:23 +0000

Article URL: https://atthis.link/blog/2023/21667.html

Comments URL: https://news.ycombinator.com/item?id=41842805

Points: 7

# Comments: 1

The Open Collective Platform is moving to a community governed non-profit

ggpsv — Sat, 12 Oct 2024 13:22:16 +0000

Article URL: https://blog.opencollective.com/the-open-collective-platform-is-moving-to-a-community-governed-non-profit/

Comments URL: https://news.ycombinator.com/item?id=41818872

Points: 1

# Comments: 0

New comment by ggpsv in "Installing Arch Linux on a Laptop"

ggpsv — Sat, 14 Sep 2024 20:57:29 +0000

Fedora has worked flawlessly for me.

New comment by ggpsv in "Age is a simple, modern and secure file encryption tool, format, and Go library"

ggpsv — Mon, 05 Aug 2024 07:49:10 +0000

Can you elaborate on how age (and the downstream packages) has made a difference in your workflows?

New comment by ggpsv in "Squatting in Spain: Understanding Spain's "okupas" problem"

ggpsv — Wed, 05 Jun 2024 16:56:55 +0000

You'll understand the inevitable tension on policing this issue considering that a couple of years ago Spain passed a law that made access to adequate and dignified housing a constitutional right.

New comment by ggpsv in "Squatting in Spain: Understanding Spain's "okupas" problem"

ggpsv — Wed, 05 Jun 2024 16:47:00 +0000

As mentioned in other comments by Spaniards weighing in, it's not really a big problem as in that's happening all the time. It is a multi-faceted issue, and for some, a philosophical standpoint stemming from the economic crisis, gentrification and speculation, and related problems.

Take in mind that the post shared here is written by a company that provides listing services.

Housing is more of a right in Spain than in other countries, and at least in Catalonia, there is precedent that it supersedes property rights.