• 1 Post
  • 544 Comments
Joined 3 years ago
cake
Cake day: July 11th, 2023

help-circle
  • But I still use reddit, too, because the community is there.

    federation is important not because it can be used as some kind of buzzword, but because without it, even here we would be much fewer. there would be more very small communities, which can’t interact, and overall with strictly distinct lemmy instances the whole user number would be much lower because of things people complain about a lot even this way, that there’s not enough content

















  • oh, LXC containers! I see. I never used them because I find LXC setup more complicated, once tried to use a turnkey samba container but couldn’t even figure out where to add the container image to LXC, or how to start if not that way.

    but also, I like that this way my random containerized services use a different kernel, not the main proxmox kernel, for isolation.

    Additionally, having them as CTs mean that I can run straight on the container itself instead of having to edit a Docker file which by design is meant to be ephemeral.

    I don’t understand this point. on docker, it’s rare that you need to touch the Dockerfile (which contains the container image build instructions). did you mean the docker compose file? or a script file that contains a docker run command?

    also, you can run commands or open a shell in any container with docker, except if the container image does not contain any shell binary (but even then, copying a busybox or something to a volume of the container would help), but that’s rare too.
    you do it like this: docker exec -it containername command. bit lengthy, but bash aliases help

    Also for the over committing thing, be aware that your issue you’ve stated there will happen with a Docker setup as well. Docker doesn’t care about the amount of RAM the system is allotted. And when you over-allocate the system, RAM-wise, it will start killing containers potentially leaving them in the same state.

    in docker I don’t allocate memory, and it’s not common to do so. it shares the system memory with all containers. docker has a rudimentary resource limit thingy, but what’s better is you can assign containers to a cgroup, and define resource limits or reservations that way. I manage cgroups with systemd “.slice” units, and it’s easier than it sounds