<<<<<<< Updated upstream computing-infrastructure ======= computing-infrastructure >>>>>>> Stashed changes

computing-infrastructure

Table of Contents

<<<<<<< Updated upstream

1. devices

=======

1. devices

>>>>>>> Stashed changes
<<<<<<< Updated upstream

1.1. Hardware

<<<<<<< Updated upstream

2. Software management solutions

=======

2. Software management solutions

>>>>>>> Stashed changes
  • bare-metal linux + wireguard + SSH
  • device base/OS managed with ansible
  • docker-swarm
  • k0s
  • some k3s/rancher/k8s (not suitable for my use case)
<<<<<<< Updated upstream

3. desired setup

home grown/hacked together: self-hosting

connected via wireguard VPN =======

3. desired setup

home grown/hacked together: [BROKEN LINK: d785462b-7521-4355-9452-d09711bb9cf3]

connected via [BROKEN LINK: c265e6f5-6a7c-49bc-85a7-0b2c12d3353a] VPN >>>>>>> Stashed changes

<<<<<<< Updated upstream

4. OSes

=======

4. OSes

>>>>>>> Stashed changes

my personal experience and preferences:

  • GNU/Debian stable: decent experience, already some scripts at my hands
  • Arch Linux: on desktop, relatively productive, still lacking yay/pacman skills
    • dotfiles somewhat adapted.
  • GNUGuix or NixOS
<<<<<<< Updated upstream

4.1. Differences between Guix and NixOS

=======

4.1. Differences between Guix and NixOS

>>>>>>> Stashed changes

Guix aims to be a pure free-software, just like Debian. As a default, the GUIX repositories only contain pure free software. I.e. Mozilla Firefox is replaced by the liberalized version called Icedove.1

<<<<<<< Updated upstream

5. SSH

5.1. security pitfalls using ssh-agent

=======

5. SSH

5.1. security pitfalls using ssh-agent

>>>>>>> Stashed changes

https://rabexc.org/posts/pitfalls-of-ssh-agents?tag=Technology

  • never run ssh-agent on a machine with other root users
  • dont just put eval ssh-agent into your .bashrc, that would start a new agent in every new shell process
  • all in all: probably use ssh-agent manually
<<<<<<< Updated upstream

Author: fschl

Created: 2023-04-04 Tue 23:50

=======

Created: 2023-04-19 Wed 13:47

>>>>>>> Stashed changes

Validate