The Importance of Rootless Containers

Alex goes all in on Rootless Podman, Chris is saving his Nextcloud install from disaster, and a special guest joins us.

Special Guest: Alex Ellis.

Sponsored By:

• Linode: Receive a $100 60-day credit towards your new account. Promo Code: linode.com/ssh
• Tailscale: Tailscale is a Zero config VPN. It installs on any device in minutes, manages firewall rules for you, and works from anywhere. Get 3 users and 100 devices for free.

Support Self-Hosted

Links:

• Secret Management with Ansible Vault and docker-compose - YouTube — Secret management with docker-compose doesn't have to be an enigma. This video shows how I use Ansible and Ansible Vault in conjunction with docker-compose to keep my secrets safe and encrypted whilst still being able to push my repos to Github publicly.
• KTZ Systems — We specialize in professional cloud infrastructure management and business network services.
• Gitea 1.19.0 is released — We are proud to present the release of Gitea version 1.19.0.
• Linode Green Light Beta Program — Get early access and test new Linode products before they hit the market, provide valuable feedback to influence product direction, and become part of a community of developers helping us build the cloud that works for you.
• Docker is deleting Open Source organisations — Yesterday, Docker sent an email to any Docker Hub user who had created an "organisation", telling them their account will be deleted including all images, if they do not upgrade to a paid team plan. The email contained a link to a tersely written PDF (since, silently edited) which was missing many important details which caused significant anxiety and additional work for open source maintainers.
• Alex Ellis' Web Site
• Podman issue pulling from local registry
• /etc/subuid and /etc/subgid configuration — Rootless Podman requires the user running it to have a range of UIDs listed in the files /etc/subuid and /etc/subgid.
• Using volumes with Podman — If your container runs with the root user, then root in the container is actually your user on the host. UID/GID 1 is the first UID/GID specified in your user's mapping in /etc/subuid and /etc/subgid, etc. If you mount a directory from the host into a container as a rootless user, and create a file in that directory as root in the container, you'll see it's actually owned by your user on the host.
• Hub 4 pioneers ethical AI integration for a more productive and collaborative future — Today, we are excited to announce a major step forward with Hub 4 – the very first on-premises collaboration platform to integrate intelligent features across its applications.
• Remove not supported column comments for SQLite - Nextcloud — Some times column comments are used, e.g. to make clear an integer is used as a timestamp. For SQLite column comments are not supported and migration that use column comments will not work (see linked comment above for an example). Somehow it works when you have a clean install, then all migrations pass, but when executing single migrations they will fail.
• Updating to 3.2.0 fails on SQLite installations · Nextcloud
• Command Line Shell For SQLite — Like the ".dump" command, ".recover" attempts to convert the entire contents of a database file to text.
• Converting Nextcloud database typw — You can convert a SQLite database to a better performing MySQL, MariaDB or PostgreSQL database with the Nextcloud command line tool. SQLite is good for testing and simple single-user Nextcloud servers, but it does not scale for multiple-user production servers.
• Belkin (Wemo) takes “big step back” from Matter — Belkin says Wemo devices will support Matter once the company can "find a way to differentiate them,"
• Alby — Lightning for your Browser! — Alby brings Boosts to the web.
• Self-Hosted on the Podcastindex.org — Send a Boost into the show via the web. First, top-up Alby, then head over to our entry on the Podcast Index.