Ourgon
Joined 4 years ago
Joined 4 years ago
- Proxmox to run all mentioned services
- Software router to bind them all together (OpenWRT in a container)
- Database services (Postgresql, Mysql, Redis) used for many of the mentioned services
- Backup services (rsnapshot, custom backup scripts)
- mail services (Exim, Dovecot, Spamassassin, greylistd, dovecot-managesieve)
- web-related things (first Apache, then lighttpd, then nginx) running:
- "Cloud" (first Owncloud, then Nextcloud) with functional equivalents of e.g. Google Docs (Nextcloud Office), Google Reader (Nextcloud News), Google Meet (Nextcloud Talk, Jitsi Meet), Gmail (Rainloop app in Nextcloud, Roundcube), Google Maps (OSM app in Nextcloud), Calendar etc.
- Wiki (first Twiki, then Mediawiki, now Bookstack)
- Media (mpd, Airsonic, Jellyfin, Peertube, Pixelfed)
- version control (first CVS, then Subversion, then Gogs, then Gitea)
- Search (Searx and Recoll)
- big-tech proxies (Invidious, Nitter, libreddit, Spodcast, searx (see Search))
- Video surveillance (Zoneminder)
- Remote application/desktop service (X2go, NoVNC, now experimenting with Kasm)
- P2P services (Transmission, IPFS, MLDonkey (when needed))
- "Chat" services (first Prosody, then ejabberd, then back to Prosody)
- Timelimit service + app on my daughter's phone to keep her screen time in check, I can remotely give her more time when required
- a "stable" and "development" build server (Debian running in containers)
- ...and a lot more
Basic services are divided over a few containers - base, mail, auth. Most services run on a single container - serve. Some get their own container because they are only started irregularly (bookcook, the bookkeeping service) or they should be separated from the rest - p2p, session (remote application/desktop services). I tend to shun docker, preferring to tailor services to my own needs. Currently the only services using docker are Kasm Workspaces [1] and some linuxserver.io instances which I'm experimenting with.
[1] ...with the database (postgresql) and cache (redis) services being redirected to the 'base' container which runs all database services
00:00.0 Host bridge: NVIDIA Corporation MCP79 Host Bridge (rev b1)
00:00.1 RAM memory: NVIDIA Corporation MCP79 Memory Controller (rev b1)
00:03.0 ISA bridge: NVIDIA Corporation MCP79 LPC Bridge (rev b3)
00:03.1 RAM memory: NVIDIA Corporation MCP79 Memory Controller (rev b1)
00:03.2 SMBus: NVIDIA Corporation MCP79 SMBus (rev b1)
00:03.3 RAM memory: NVIDIA Corporation MCP79 Memory Controller (rev b1)
00:03.4 RAM memory: NVIDIA Corporation MCP79 Memory Controller (rev b1)
00:03.5 Co-processor: NVIDIA Corporation MCP79 Co-processor (rev b1)
00:04.0 USB controller: NVIDIA Corporation MCP79 OHCI USB 1.1 Controller (rev b1)
00:04.1 USB controller: NVIDIA Corporation MCP79 EHCI USB 2.0 Controller (rev b1)
00:06.0 USB controller: NVIDIA Corporation MCP79 OHCI USB 1.1 Controller (rev b1)
00:06.1 USB controller: NVIDIA Corporation MCP79 EHCI USB 2.0 Controller (rev b1)
00:08.0 Audio device: NVIDIA Corporation MCP79 High Definition Audio (rev b1)
00:09.0 PCI bridge: NVIDIA Corporation MCP79 PCI Bridge (rev b1)
00:0a.0 Ethernet controller: NVIDIA Corporation MCP79 Ethernet (rev b1)
00:0b.0 SATA controller: NVIDIA Corporation MCP79 AHCI Controller (rev b1)
00:0c.0 PCI bridge: NVIDIA Corporation MCP79 PCI Express Bridge (rev b1)
00:15.0 PCI bridge: NVIDIA Corporation MCP79 PCI Express Bridge (rev b1)
00:16.0 PCI bridge: NVIDIA Corporation MCP79 PCI Express Bridge (rev b1)
02:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] RV730/M96-XT [Mobility Radeon HD 4670]
02:00.1 Audio device: Advanced Micro Devices, Inc. [AMD/ATI] RV710/730 HDMI Audio [Radeon HD 4000 series]
03:00.0 Network controller: Qualcomm Atheros AR928X Wireless Network Adapter (PCI-Express) (rev 01)
04:00.0 PCI bridge: Texas Instruments XIO2213A/B/XIO2221 PCI Express to PCI Bridge [Cheetah Express] (rev 01)
05:00.0 FireWire (IEEE 1394): Texas Instruments XIO2213A/B/XIO2221 IEEE-1394b OHCI Controller [Cheetah Express] (rev 01)
There is some Broadcom as well - the Bluetooth controller, which works fine - as well as some Qualcomm - the wifi controller which, again, works fine.This is a 'Late 2009 27" iMac', running the internal display as well as an external 1920*1200 24" monitor through a DP->HDMI cable. Everything works, including the silly IR remote control thingy (tested using the IR blaster on my phone).
Any of the personal cloud things - Nexcloud, Owncloud, Seafile, Syncthing and others - can be used to sync files - and with that photos and videos - from mobile devices to some server somewhere. This can be the server-under-the-stairs, your NAS at home, a wall-wart with a Raspberry Pi and a drive taped together, a VPS or a commercial entity offering these as SaaS. You can keep using your phones with or without Google, that is up to you. If you run the stuff yourself you'll need to install and configure the parts which make it work, if you use a commercial instance you just have to install the relevant app and tell it to sync your data. You can do this in parallel to using Google Photos, just to make sure you have a backup in case Google wants just that one extra piece of personal data to allow you to access your photos which makes you give up on them. Just one more piece... and one more please...
Have a look at the history of politics and pay special notion to those strands which centre around grouping people, whether that be "proletarians versus capitalists", "those_who_belong_to_my_religion versus those_who_do_not", "those of our nation versus those from elsewhere" and now this "those who belong to my identity group versus those who do not".
Also have a look what most of these group-centred ideologies have in common, namely the identification of a specific scapegoat group which is blamed for all the woes - including those caused by the application of the group-centred ideology - which beset the in-group. In Bolshevist Russia is was the Kulaks [1], in Nazi Germany it was the Jews, in theocratic Iran it is "the great Satan" (i.e. the USA and its allies) while in this new "woke" cult it is the "cis-gender heterosexual white man".
The problem with all these group-centred ideologies is that groups do not have a voice, only individuals posing as the group do. Those individuals can gain a lot of power and as such either tend to get corrupted or are drawn to the role of spokesperson because they already are corrupt. Group-centred thinking works well on a small scale - family, small neighbourhood, etc - but it often fails when the members of the group no longer personally can know each other since that makes it possible for the corrupt spokespeople to make their play.
I'm glad my "Linux laptops" are very much not like those macbooks with their glue and solder and "no user-serviceable parts inside (and we really mean it)"
> This isn't a rant from an Apple fan, this is a rant from a laptop fan. ThinkPad's aren't good laptops despite what the guy with the pocket protector says. They are flimsy and feel cheap. They still have 20th century tech (eraser mouse, c'mon!). They are my grandfather's laptop.
The good thing with those machines is that you'll be able to keep on using your grandfather's laptop while those whose grandfathers opted for macbooks are left wanting. I'm using a T42p from 2005, apart from putting in an SSD I have not changed the thing. It was, and still is, a perfectly useable tool.
- the climate has always been changing and it always will but humans and most other species survived. It takes an extinction level event to make a big dent in the biosphere
- social inequality is far less now than it has been in earlier times when people often lived or died at the whim of some aristocrat
- there is no shortage of workers, only a shortage of people who want to do a given job for a given reward
- there have always been 'billionaires' and there will always be since having a lot of resources makes it easier to gain more resources. Some billionaires do interesting things with their resources, others lie on them like Smaug. As long as there are enough resources left for the non-billionaires I don't care about them other than doing my best to not feed them if I can
- the media is rubbish. Don't criticise the media, be the media. Corporate media doesn't bite the hand that feeds it so just avoid them (see above).
- corruption is everywhere and has always been, it is not for nothing that Utopia was named so - it does not exist. Just like I try not to feed the billionaires I try not to feed corrupt institutions, occasionally breaking a law or two instead of giving in to their demands. That means they have a stick to hit me with if and when they want but knowing that they always will be able to find that stick means it doesn't make any difference to me
In other words keep your EULA, I don't want it.
The gray old lady would never have published this. The current incarnation of the NYT is related to its predecessor in name only.
* HP ProCurve 2910al-24G J9145A 24 port Gigabit switch (managed switch, €47)
* HP DL380G7 with 2xX5675 @3.07GHz, 128GB (ECC) RAM and 8x147GB SAS drives (€450)
* NetApp DS4243 (24x3.5” SAS array, currently populated with 24x650GB 15K SAS drives (4 as inactive spares), €400)
* the mentioned airflow divider
* 8 drying frames
It is managed through Proxmox on Debian and runs a host of services including a virtual router (OpenWRT), serving us here on the farm and the extended family spread over 2 countries. The server-mounted array is used as a boot drive and to host some container and VM images, the DS4243 array is configured as a JBOD running a mixture of LVM/mdadm managed arrays and stripe sets used as VM/container image and data storage. I chose mdadm over ZFS because of the greater flexibility it offers. The array in the DL380 is managed by the P410i array controller (i.e. hardware raid), I have 4 spare drives in storage to be used as replacements for failed drives.
The rack is about 1.65m high, it looks like this (here with the old D-Link switch (now deceased) and minus the DS4243 array which now sits just above the air flow divider):
In the not-too-distant future I’ll replace the 15K SAS drives with larger albeit slower (7.2K) SAS or SATA drives to get more space and (especially) less heat - those 15K drives run hot. After a warm summer I added an extra air intake + filter on the front side (not visible on the photos), facing the equipment. This is made possible by the fact that cooling air is pulled through the contraption from the underside instead of being blown in through the filter(s).
I chose this specific hardware - a fairly loaded DL380G7, the DS4243 - because these offered the best price/performance ratio when I got them (in 2018). Spare parts for these devices are cheap and easily available, I made sure to get a full complement of power supplies for both devices (2 for the DL380G7, 4 for the DS4243) although I’m only using half of these. I recently had to replace a power supply in the DL380 (€20) and two drives in the DS4243 (€20/piece), for the rest everything has been working fine for close to 4 years now.
On the question whether this much hardware is needed, well, that depends on what you want to do. If you just want to serve media files and have a shell host to log in to the answer is probably ‘no’, depending on the size of the library. Instead of using ‘enterprise class’ equipment you could try to build a system tailored to the home environment which prioritizes a reduction in power consumption and noise levels over redundancy and performance. You’ll probably end up spending about the same amount of money for hardware, a bit more in time and get a substantially lower performing system but you’d be rewarded by the lower noise levels and reduced power consumption. The latter can be offset by adding a few solar panels, the former by moving the rack to a less noise-sensitive location - the basement, the barn, etc.
As to having 19" rack equipment in the home I'd say this is feasible as long as you don't have to sit right next to the things. Even with the totally enclosed, forced-draft rack I made the thing does produce enough noise to make it hard to forget it is there.