It’s not an either-or scenario. Running services in Docker/Podman is great and makes a lot of sense, as you’ve found. But there’s no reason the OS running those Docker containers can’t be a VM on a hypervisor like Proxmox. Then you get the simplicity of Docker, in addition to the isolation and segmentation (network and process) provided by VMs, and snapshot-based incremental backups from PBS. It’s the best of both worlds. You wouldn’t have a VM per service like you ran before, instead you’d have a VM per group of related services with common networking and security requirements. For example, all of your publicly exposed services can run in Docker in their own isolated VM that’s walled off from the rest of your network, while your internal-only services also run in Docker, but on a separate VM on your internal network.

Should be, but it’s not. It’s discrimination, but discrimination is perfectly legal as long as it’s not done on the basis of one of the handful of protected classes (race, sex, religion, etc.)

deleted by creator

By that logic, all gambling is just prediction

Yes, you can buy and download CD quality or HD quality (up to 24-bit, 192 kHz) FLAC from their store. From their homepage, there should be a link to the download store in the header bar: https://www.qobuz.com/us-en/shop

And Qobuz

It’s financial obesity, and should be treated as such

It didn’t take long to go from “corporations are people” to “the only people that matter are corporations”

That’s why you put those devices in a separate VLAN with no routing access to the rest of your network

In general, you take the model size in billions of parameters (eg: 397B), divide it by 2 and add a bit for overhead, and that’s how much RAM/VRAM it takes to run it at a “normal” quantization level. For Qwen3.5-397B, that’s about 220 GB. Ideally that would be all VRAM for speed, but you can offload some or all of that to normal RAM on the CPU, you’ll just take a speed hit.

So for something like Qwen3.5-397B, it takes a pretty serious system, especially if you’re trying to do it all in VRAM.

1. Tesla is a car company
2. Tesla is a battery company
3. Tesla is a robot company <---- you are here
4. Tesla is a company

One can hope at least

On iOS, it uses your linked credit card to verify you’re over 18, and then passes a “this user is over 18” flag to any app or website that needs it. It’s arguably the least intrusive or insecure way to handle this push from the EU.

Agreed.

If you can do your work on a 13" laptop with no mouse or external monitor without your productivity dropping off a cliff, you were never productive to begin with.

Decades ago I ran an “rm -fr *” as root, I thought that I was ~/bin, but I was in /bin. That was a fun lesson.

But who writes bash scripts to do math?

A full script? Nobody. But you can just run it interactively on the command line, which a lot of AI clients have access to. bc works great for basic math in the shell.

Interestingly, AI is actually pretty good at making graphs, the trick is you don’t ask it to actually make the graph itself. Instead you have to ask it to write a python script to create a graph using matplotlib from whatever source file contains the data, then run that script. Same with math. Don’t ask it to do math directly, instead ask it to write a bash or python script to do some math, then run that. Still not perfect, but your success rate increases by about 1000%

While true, it still means you’re locked into only being able to log in from a browser that has the password manager extension installed and logged in. Sometimes I want to log in from another machine, or another OS, or another browser, or even an incognito window that doesn’t have access to my extensions.

Who cares if it’s exposed to the internet?

1. Encrypting your local traffic is still valuable to protect your systems from any bad actors on your local network (neighbor kid cracks your wifi password, some device on your network decides to start snooping on your local traffic, etc)

2. Many services require HTTPS with a valid cert to function correctly, eg: Bitwarden. Having a real cert for a real domain is much simpler and easier to maintain than setting up your own CA

Why are you having to update your DNS records when you add a new service? Just set up a wildcard A record to send *.myserver.com to the reverse proxy and you never have to touch it again. If your DNS doesn’t let you set wildcard A records, then switch to a better DNS.

I didn’t use to, but I do now. Debian on everything (except the Proxmox servers, but Proxmox is basically Debian too)