Proud Gentoo user for the past 12ish years and this is the first I’ve heard of “stage 1” and “stage 2”. This explains the number for stage 3 I guess lol. Even with stage 3, and having dealt with gentoo (still my daily driver to date), I think I’ve learned more than I would have with many other distros.
Mikelius
Old Profile: https://beehaw.org/u/Mikelius
- 0 Posts
- 9 Comments
Probably less reliable for me as a techie. Every time I opened Jami, my firewall alerts would go off about a device on the network calling to China, Russia, and Vietnam lol. Resulted in it almost never connecting for me since my network just blocked way to many connections on it for outbound traffic.
Gentoo lured me into OpenRC a long time ago and it’s just basically my go to now. It’s just so easy and “feels” less bloated to me.
Mikelius@lemmy.mlto
Selfhosted@lemmy.world•OPNsense 26.7 Open-Source Firewall Released, Powered by FreeBSD 15.1English
3·4 months agoDef wouldn’t. As much as I love opnsense and recommend them, their major updates tend to break something every time for me. Then again, my overall setup is a lot more complex than the average person, so maybe that’s on me lol.
Never heard of chatto until this one… Anyone here tested it vs fluxxer and have any opinions?
My front yard takes over an hour with a push mower and the terrain is too complex for a ride mower. I’d be curious if I’d be the exception, unless the robot mowers are terrible at landscape changes like a robot vacuum would be. Including some boulders… But maybe still cheaper to hire some kid if I get that far on the lazy scale.
This is exactly how my network is setup. All devices log to my syslog server which I feed into a database with a self made python app, and Grafana goes from there. It’s been running nonstop for like 5 years without any problems, so I’d say your in the right path!
It’s also helped me catch things like:
- finding out android leaked IPs outside VPN tunnels on connect (prior to headlines claiming this)
- finding out nslookup on termux ignores the phone’s DNS settings and tries to use Google instead
- finding other devices that ignore my DNS server settings
- noticing that my work Mac will turn itself on in some weird silent passive mode in the middle of the night to try and send data to apple (sleep or powered off don’t matter) - caught this from the logs sent by my router
Mikelius@lemmy.mlto
Selfhosted@lemmy.world•How to block unwanted outbound traffic from your containersEnglish
3·6 months agoI’ve just use iptables rules which default block all docker containers any network access. I assign static ranges to those I permit access, though. It does occasionally throw me off when adding new services and not understanding why sometimes they don’t work right away, but I prefer it that way.

I think my main issue for this one is the requirement for internet. I cannot seem to be able to start it up because bootstrap is trying to download files. I’ve already downloaded the respective Zim file into the data folder. I by default block internet access to all docket images, and leave those I don’t want external access for that way.
If you can update an offline installer, and maybe docker images for the entire project instead of requiring cloning it down, I think this project would be awesome