Daft dude!

It really is!

I do run wireguard on my router, but the main reason is ad blocking, not hiding services. Most services are publicly exposed.

Not sure if irregular booting is still an issue, but that sounds a lot like device names changing between boots. If I could hazard a guess - you’ve got something like /dev/sda in your fstab, where ideally you’d have UUID=1234-ABC. You can get the uuid by running

blkid | grep sda

Don’t. It’s a drug!

Once it clicks how much cruft you don’t even compile in - and as such how much cruft cannot be exploited - there’s no going back.

The only arch machine I have left is the one for steam - couldn’t be bothered to add multilib to my binhost. But even that seems to be on the path of deprecation as I’ve read this morning about wine releasing wow64 support. I think the day of 100% Gentoo infra in my household is actually getting close!

Ditto. I run OpenRC{,-init} on Gentoo and it’s really simple. Even managed to swap my system to systemd to prove intune can be run (that garbage links directly to systemd, unfortunately). Proved my point, it didn’t go anywhere, now back to openrc.

Save it in a file. It’s just text. You can even use a GUI text editor!

Portage allows that to some extent - you can make it install thr latest of everything. Depending on the ebuild, a lot of that will be straight from git. Master branch, not some random working one, mind you, but still.

Yes. In general - it’s called live cd. Some distros ship with that in their installed image. {K,X,}ubuntu come to mind. Mint might do as well. You can boot into it and look around, see if basic stuff - network, audio, etc - works.

I’m a living proof you’re the opposite of right 😁

Is this at a webserver level?

Huh, TIL that’s still possible. Wasn’t in my case at the time.

I run my email server, but not at home. Running it at home is not all all more difficult, but it will only work for internal traffic and inbound from the internet. Residential IPs are simply blacklisted by ISP and as such - nothing will reach external recipients. Still useful, but is limited.

To have your smtp reach everyone globally you need to run it on a business IP. I use Linode, has worked very well since the setup in 2019, although they did get acquired by Akamai, which might become an issue at some point.

This is such an incredible write up of something I’ve never even considered to exist. Thank you!

I’d love to have things like that in a form of a post at [email protected]

Thank you very much!

Wait, what? That’s so cool! Care to share somewhere I can start looking into this?

Network? That’s a small bit. DB is struggling with IO at times, but network usage is fairly low, at least on my end.

For those curious - it’s engine-x.

Used systemd for years; realistically my first init.

Switched to Gentoo.

Switched to OpenRC.

Lost logs at work on a server.

Some small inconveniences show up on systemd.

Yea, systemd is not that great.

There are people saying they don’t want to care about an init system, but it’s the same attitude as of those who don’t care about what car they drive. Yes, it gets the job done, but that’s not good enough for me.

I want the job done properly.

Gentoo/Arch guy checking in. It’s more about having fewer codepaths to go wrong after some update. At least in my case.