If every single dispenser is a self contained unit, which then is put together in groups of how many different kinds of drink you need? That seems cheaper than having each group of dispensers individually built because all displays have to be wired up to a single computer. This way a single dispenser can be replaced quickly without needing a technician to come or replacing the whole thing.
Bist du ich? Bei mir hat’s auch am Donnerstag angefangen… Soviel zu einem entspannten langen Wochenende, ach maaan
Auf jeden Fall gute Besserung dir
Ist das diese künstliche Intelligenz, von der alle reden?
I’m on Keycloak + lldap for user provisioning and services that don’t support OIDC or SAML. I have yet to find a OAuth or SAML feature it doesn’t have. It does have a steep learning curve tho, so Authentik is maybe a better solution to get started with.
I personally hit a wall with Authentik when I was trying to get different signature key algorithms for different services (some services have different supported set of key algorithms than others) and custom plugins for custom JWT fields and user attributes.
I believe Authentik has something for extensions as well, but Keycloak is just Java, which has a much better development and deployment experience than throwing a .py or .js file in some directory and hoping it works.
I recreated the Keycloak account from LDAP, and then manually patched the databases for all OIDC-based services to the new account UUID, so the existing accounts are linked to the new Keycloak account.
I have two Keycloak accounts, one in the master realm for administrative purposes, and one in the apps realm for all my services, so I didn’t break access to Keycloak
I already had Keycloak set up, but a few services don’t support OIDC or SAML (Jellyfin, Reposilite), so I’ve deployed lldap and connected those services and Keycloak to it. Now I really have a single user across all services
I’m using istio (in ambient mode, so it doesn’t put its sidecar into every pod I create), and Nextcloud behind it, works flawlessly. It does consume a bit of time to set up properly though.
TLS certificates are handled via cert-manager, which works with both Ingress and Gateway API, independent of which implementation you choose.
I’ve also tried envoy gateway (had issues with uploading larger files via Nextcloud Web UI and Gradle publish to maven repo).
Cilium (a CNI) also has an integrated Gateway and Ingress API implementation, works fine, but lacks some of the most recent stable features, and quite some experimental features. But if you just need a HTTPS gateway without much fuss, it’s rock-solid. Setup time is also minimal for the Ingress/Gateway controller part. Cilium CNI on the other hand takes a lot of time to understand and configure, if you’re unfamiliar with networking in general.
Traefik’s featureset is comparable with Cilium’s Gateway API implementation, also works, simple to setup, and might be better suited, if you’re already familiar with it using docker, as it’s the same concepts, just slightly different config (docker labels vs. Ingress/Gateway API with Traefik specific annotations).
Traefik also supports running on K8s, yes.
On that note, if you’re moving to K8s, I recommend looking into K8s Gateway API, it’s the successor to the old Ingress API. There are other, more complete, implementations of it than Traefik. See https://gateway-api.sigs.k8s.io/
Mayastor or Linstor, Ceph requires too much CPU for these nodes
Hier eine dicke (virtuelle) Umarmung
Definitiv empfehlenswert, hab auch mit manuell aufsetzen angefangen, und dann Stück für Stück über manuell Docker, dann Kubernetes von Hand aufsetzen und administrieren bis ich dann bei Terraform etc. angekommen bin. So lernt man nämlich, wie das ganze unter der Haube funktioniert, und schiebt nicht direkt Panik, sobald mal was nicht läuft
Die finale Evolution davon ist, sein gesamtes Homelab per Terraform, Kubernetes und GitOps zu verwalten, hat man nicht mal mehr den Aufwand, manuell Skripte ausführen zu müssen. Ich kann mittlerweile mein gesamtes Heimlabor innerhalb von 1 Stunde von null inklusive aller Anwendungsdaten wiederherstellen.
P.S.: ich habe Disaster-Wiederherstellung ganz vorbildlich bereits zweimal getestet, daher weiß ich das
Wenn du systemd verwendest, ist das recht einfach: https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system#LUKS_on_a_partition_with_TPM2_and_Secure_Boot (für andere Distros als Arch müssen Schritte wie Initramfs anpassen abgewandelt werden). Ich hab’s nach der Anleitung schon mehrfach so aufgesetzt und eigentlich nur beim ersten Mal länger als ne Stunde für alles gebraucht.
There aren’t any software problems if you don’t have any software
Müsste ja “LAL” sein (Lache aus laut), jedenfalls in Zangendeutsch
Ne, hör mir auf damit, Mathe wurde nur schlimmer, als Buchstaben eingeführt wurden.
Gute Besserung, auf dass du bis Weihnachten wieder gesund bist.
Only mechanically. You could technically remove the small piece of plastic at the end of the slot, and still put a x16 card in a x1 or x4 slot, should work anyways. Some mainboards even have open-ended slots directly instead of closed ended. Haven’t done it and wouldn’t recommend it, but it would technically be possible.