Hi all,
For all people awaiting for an LXC to self host Immich the time has come. The LXC came up a month ago, sorry if it’s a repost.
Know what you’re running when you pipe to a bash script. Curl-bash pipes are a security mess.
Curl-bash pipes are a security mess.
Security mess? Red flag. Avoid.
Good advice but ime these helper scripts are legit.
ime these helper scripts are legit.
Let’s consider a moment the risk you’re subjecting people to, just with a recommendation based on the value of the things you secure without considering what they need to secure.
I’m pretty familiar with TTech’s legacy, I just mention it because if the repos ever got compromised, it could be a shitshow. IDK what security measures the new maintainers use to secure their access or check PRs, but I get nervous when it’s as popular as it is and such a good vector for complicated installations that are hard to check out. I also don’t know the new maintainers from Adam.
Personally, I’d use the scripts as a guide for DIY.
For those like me still learning.
Linux Containers (LXC) is an operating system-level virtualization method for running multiple isolated Linux systems (containers) on a control host using a single Linux kernel.
So it’s Docker with extra steps?
Fewer steps actually, since it is built into the kernel
They’re super useful when running Proxmox. You can create an LXC container and have it booted to a shell in under a minute
You can create an LXC container and have it booted to a shell in under a minute
Rhel5 on a VM booted in under a minute easily. Rhel6 on a VM booted in around a minute. Rhel7 on a VM booted in almost a minute, and the trend accelerated from there. Wow, is RhelX a piece for its frail-boat booting.
The key is the monolith.
Thank you! A much needed info
This looks great! Is there an easy way to migrate from a docker setup to this lxc?
Docker is the better option IMO if you already have it set up, much easier to manage.
Why? Unless you need specific kernel features, Docker is superior because of containerization (runs on host kernel with no overhead), uses less space (layered image), and is easy to set up a complicated network (you want certain apps to run behind WireGuard with reverse proxy? Few lines in yaml).
Currently I’m nesting docker in an LXC. I also believe that the LXC updater would take care of the breaking changes that happen with the complex docker compose changes (hasn’t in several releases but it happens)
LXC is containerization. Both it and Docker are using the same kernel APIs.
New to me, thank you!
