I've got a problem with my nextcloud and as tildes is my favourite nice place to ask for tech-support, maybe somebody here can help me with that.

I can start and run Nextcloud AIO without any problems. I can update the subcontainers without any problems. But the update of the Mastercontainer always fails and I don't kno why, only that it has to be something with docker.sock and permissions, but I could not resolve the issues, and google does not seem to be helpful (or I'm looking for the wrong stuff).

my update logs:

time="2023-06-14T12:47:59Z" level=debug msg="Sleeping for a second to ensure the docker api client has been properly initialized."
time="2023-06-14T12:48:00Z" level=debug msg="Making sure everything is sane before starting"
time="2023-06-14T12:48:00Z" level=info msg="Watchtower 1.5.3"
time="2023-06-14T12:48:00Z" level=info msg="Using no notifications"
time="2023-06-14T12:48:00Z" level=info msg="Only checking containers which name matches \"nextcloud-aio-mastercontainer\""
time="2023-06-14T12:48:00Z" level=info msg="Running a one time update."
time="2023-06-14T12:48:00Z" level=debug msg="Checking containers for updated images"
time="2023-06-14T12:48:00Z" level=debug msg="Retrieving running containers"
time="2023-06-14T12:48:00Z" level=debug msg="FIXME: Got an status-code for which error does not match any expected type!!!" error="Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?" module=api status_code=-1
time="2023-06-14T12:48:00Z" level=error msg="Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?"
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x30 pc=0x9f4a22]

goroutine 1 [running]:
github.com/containrrr/watchtower/pkg/metrics.NewMetric({0x0, 0x0})
	/home/runner/work/watchtower/watchtower/pkg/metrics/metrics.go:31 +0x22
github.com/containrrr/watchtower/cmd.runUpdatesWithNotifications(0xc0002fd830)
	/home/runner/work/watchtower/watchtower/cmd/root.go:375 +0x15e
github.com/containrrr/watchtower/cmd.Run(0xc00033c300?, {0xc000281300?, 0x4?, 0x4?})
	/home/runner/work/watchtower/watchtower/cmd/root.go:168 +0x570
github.com/spf13/cobra.(*Command).execute(0xc00033c300, {0xc0000300b0, 0x4, 0x4})
	/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.6.1/command.go:920 +0x847
github.com/spf13/cobra.(*Command).ExecuteC(0xc00033c300)
	/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.6.1/command.go:1044 +0x3bc
github.com/spf13/cobra.(*Command).Execute(...)
	/home/runner/go/pkg/mod/github.com/spf13/cobra@v1.6.1/command.go:968
github.com/containrrr/watchtower/cmd.Execute()
	/home/runner/work/watchtower/watchtower/cmd/root.go:71 +0x52
main.main()
	/home/runner/work/watchtower/watchtower/main.go:13 +0x17

my startup command

sudo docker run \
--sig-proxy=false \
--name nextcloud-aio-mastercontainer \
--restart unless-stopped \
--publish 8080:8080 \
-e APACHE_PORT=11000 \
-e APACHE_IP_BINDING=127.0.0.1 \
--volume nextcloud_aio_mastercontainer:/mnt/docker-aio-config \
--volume /var/run/docker.sock:/var/run/docker.sock:ro \
nextcloud/all-in-one:latest

output after start:

Trying to fix docker.sock permissions internally...
Creating docker group internally with id 998
WARNING: No swap limit support
Initial startup of Nextcloud All-in-One complete!
You should be able to open the Nextcloud AIO Interface now on port 8080 of this server!
E.g. https://internal.ip.of.this.server:8080

If your server has port 80 and 8443 open and you point a domain to your server, you can get a valid certificate automatically by opening the Nextcloud AIO Interface via:
https://your-domain-that-points-to-this-server.tld:8443
++ head -1 /mnt/docker-aio-config/data/daily_backup_time
+ BACKUP_TIME=04:00
+ export BACKUP_TIME
+ export DAILY_BACKUP=1
+ DAILY_BACKUP=1
++ sed -n 2p /mnt/docker-aio-config/data/daily_backup_time
+ '[' '' '!=' automaticUpdatesAreNotEnabled ']'
+ export AUTOMATIC_UPDATES=1
+ AUTOMATIC_UPDATES=1
+ set +x
{"level":"info","ts":1686746753.2700157,"msg":"using provided configuration","config_file":"/Caddyfile","config_adapter":""}
{"level":"info","ts":1686746753.2748601,"msg":"failed to sufficiently increase receive buffer size (was: 208 kiB, wanted: 2048 kiB, got: 416 kiB). See https://github.com/quic-go/quic-go/wiki/UDP-Receive-Buffer-Size for details."}
[14-Jun-2023 12:45:53] NOTICE: fpm is running, pid 106
[14-Jun-2023 12:45:53] NOTICE: ready to handle connections

I tried to change permissions on /var/run/docker.sock
I tried to change permissions on /lib/systemd/system/docker.sock

same but with restart of docker.sock
same but with restart of docker.sock and docker.service

nothing helped

does somebody know where I go wrong or can me point in the right direction to resolve this problem? It's not a game stopper as I can update the container manually, but it is annoying.

edit: it runs on a ubuntu server 20.04.6 LTS

In the DC canon, The Mobius Chair is a time-space/dimensional vehicle operated by the New God Metron. It allows him to travel and observe the universe, but the one I'm making is nowhere near as functional.

I've come into a recliner chair with a cupholder on each armrest, and I already had a split keyboard. My plan is to use the cupholders as a mount for both ends of the split keyboard, so that I could use the entire run of armrest and have my hands lay naturally on the keys. Goals are to minimize weird stretching and be able to comfortably type for long stretches of time, to put off stuff building this that I planned to work on this weekend, and to look super boss, though not necessarily in that order.

If I want ultimate angulation and the best range of motion, I was thinking about something like a cupholder with a phone or a tablet mount, like this one, but if anyone has recommendations for what would be best to work with, or have done something like this before, I'm all ears.

I'm trying to package Elmer for use with NixOS, and could use some help from any experienced Nix users. My current attempt is located here. There is some junk left around in that file from my experimenting, but it's at least a start. There are also a few lines of error included in the comment here.

Any help is appreciated!

I want to adopt these technologies b/c I'm moving to a home w/o WiFi: I'll only use mobile networks in order to save some money. But the general pipeline and setup are hard to digest, and I'm not sure if I really understand what are the implications for my privacy, except for the fact that DNS queries are encrypted so I don't leak domain names. This is especially important to me because Turkish internet law and the censorship mechanism is really intrusive, with DPI & DNS blocking. My current ISP does not fiddle with my HTTPS traffic, but I won't have that with my mobile network.

I'm also considering a VPN, but major VPNs are blocked here. To what extent do the purposes of VPNs and these DNS solutions overlap? Assuming most of my important traffic is over HTTPS+DoH/T, how safe am I, and most importantly how much can I penetrate the censorship mechanisms?

I have to do an assignment for university soon-ish, and it requires Angular. I'm not very fond of that framework specifically, but I would be interested in making it more interesting as a learning project. I've also recently discovered PureScript, which I have no experience with right now.

Searching online, I've purescript-angular, which hasn't been updated in years. I also couldn't find much else. Of course, I may be missing something simple (for instance, it's actually supported by default in Angular these days), so I wanted to ask if any of you know if this is possible, and if so, how?

(apologies if this isn't the correct place to ask, I'm just a bit out of ideas)
(content warning for abusive parents)

I have a friend who's abusive parents track her location using the stalkerware app life360.

she currently runs graphene os (android 13) on a pixel 7 pro.

in my past android experience there are plenty apps that can spoof your location via developer settings. however they all crash on android 13 (or at least on graphene..)

see below (none of these work, and they also crash on my android 13 phone, but they have worked for me in the past on like android 9):
https://github.com/mcastillof/FakeTraveler
https://github.com/wesaphzt/privatelocation
https://github.com/warren-bank/Android-Mock-Location
https://play.google.com/store/apps/details?id=com.lexa.fakegps&gl=US

if there are no functioning apps that will do this. do you know any other solutions? on other android roms or with root with magisk / xposed? obviously this is less secure than graphene os but the current problem is her parents more than anything else.

we r also considering a secondary phone just for the stalkerware which can be opportunistically left in innocent places. or just killing the life360 app on occasion when needed. or just letting the phone die when it needs to. But not sure how obvious this might be to the abusers. any insight is appreciated.

(suggestions like "leave her parents" are good but far easier said than done and while it will eventually happen its not feasible at the moment. That being said if you can provide detail suggestions are welcome)

Thanks :)

I've just used Tildes on my phone for the first time and FUCK! MY EYES! I know I can't change the color of Safari, so I looked in the app store but couldn't find anything. Can you reccomend me a good browser with a dark theme?

How does Mullvad removing port forwarding affect an Unraid setup using deluge-vpn container?

I don’t access my server from outside my network and just use a basic binhex deluge-vpn docker setup. Any issues I’ll have here?

Currently out of town and won’t be back until after this change happens tomorrow. Curious what to expect when I'm back home.

I finally decided to accepted that my interest in working and playing with computers and servers is worth to spend some money on. So I ditched my old box in the corner and with it all my fights with my ISP, their NAT, dynamic DNS and all that and got myself a VPS and 1 TB storage solution for less than I would have paid a static IP with my ISP.
Best decicion ever :-)

So I'm getting into Docker a bit, just because it's just so easy to get Nextcloud running. I used native Caddy as a reverse proxy, because if I got this "machine" there I will use it for other things as well, so make it right from the beginning. And I used native b.c I did not yet understand bridge/host mode and installing caddy native seems easier.
Then I fought for one day with CIFS and the nextcloud gui to get the semantics right to get my storage solution accepted as external storage.
Then I set up Jellyfin with Docker because why not. As well through caddy.
Then I fucked something up and was like, fuck it, lets start again this time for real :-P
I wiped my VPS clean (chose ubuntu again) set up and hardend ssh + sudo installed Docker, and then I found out about docker rootless and in the docker docs it's mentioned that it is/might be more secure, so I set up docker rootless and installed all the rest again.
And then I was like, hmm, do these Docker Images/Containers update themself? Like snap did?
It seems not, so I looked for a solution and found watchtower. And now I wasted another day trying to get watchtower to run, and I just can not.

I tried so many variations of the run command now most recently I tried:

docker run \
--name watchtower \
-v ${DOCKER_SOCKET_PATH}:/var/run/docker.sock \
containrrr/watchtower

time="2023-01-20T01:17:41Z" level=error msg="Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running?"
time="2023-01-20T01:17:41Z" level=info msg="Waiting for the notification goroutine to finish" notify=no

/run/user/1000/docker.sock exists, I own it, i tried connecting to it through docker -e and containrrr/watchtower --host "unix:///run/user/1000/docker.sock"
I dont now what to try more and I'm at my end with my ddg-fu as well.

And now while proofreading this, I read everything again and decided to try something again and it just worked...

docker run \
--name watchtower \
-v /run/user/1000/docker.sock:/var/run/docker.sock \
containrrr/watchtower

seems like the environment variable was not set. But I'm shure I tried that before and it did not work... ghost in a machine :-)

So thats where I'm at. I have to say it was a lot of fun and doing and learning all that tingled my brain in a funny way :-)

But now I have some questions for my much more experienced Tildes-friends:

• Do I even need watchtower? because I'm not actually interested to connect to my server regularly to do the updates/maintenance.
• Was switching to docker rootless even a good idea? it seemed so reading the docker installation docs, but just now I read the Archwiki and there it seems it has some heavy security implications, so I made the security situation acutally worse by thinking making it better.
• How do I get this watchtower thing to fucking work? (only if I actually need it)

I very much appreciate all further/other advise, tricks, recomendations, questions and discussion as well :-)

So, I'm a privacy advocate (or paranoiac, depending on your perspective). I run both uMatrix and NoScript plug-ins (among others) in my Firefox browser, so I can see when and where websites send calls out to other locations, and block the ones I want ... google analytics, google fonts, google-apis, google tag manager, and gstatic are all ubiquitous out there, probably 99% of websites use at least one of them (PS: Tildes is in the 1%; yeay, Deimos).

And note ... there may well be nothing at all wrong with any of those sites/services ... but Google has a global all-encompassing Terms and Conditions policy that says, you use anything of Theirs, and They are allowed to harvest your personal data and make money off of it.

And I do not accept those terms.

Okay, that's the prologue. The deal is, I have a small piece of documentation, just basic "how to use this" info, for a WordPress plug-in. It is in .html format, with bundled bootstrap and jquery and a few other assets.

Nothing, anywhere in the entire folder, references gstatic. And yet when I open this local, on-my-computer-only html file ... my browser tells me that it is trying to connect to gstatic.com.

Anyone happen to know why/how that is happening?

I have a CalDigit TS3+ dock that I switch between my M1 Macbook Pro and a System76 Galago Pro that's currently running Windows 10 (I'm sorry, FOSS gods). The M1 has no problem using the TS3+ when it's connected or disconnected and reconnected. But the Galago Pro will only connect to the dock if it was connected while booting up. Disconnecting and reconnecting leaves the dock in a state where only the pass-through thunderbolt port works. So my monitor that uses the pass-through for DisplayPort can operate after reconnecting the dock, but no other devices plugged into the dock will. My mouse/keyboard for example don't even receive power in this state.

Oddly when setting up the drivers for thunderbolt I found that the only drivers available are for Intel's NUCs. IIRC someone on reddit said that this is actually the software I need to install, so that's what I did.

Any help getting the dock to work better is appreciated! Currently I need to reboot the laptop every time I switch back from the M1 to the Galago Pro.

I have been running a DAKBoard on a Raspberry Pi 4 for almost 4 years now without any problems until recently following this guide IIRC.

About 2 weeks ago, DAKBoard started logging itself out and only shows a black screen with the time on it and the DAK logo in the lower right corner. If I go into the settings it will bring up the DAK page that shows I am not logged in. When I log in again it seems to work randomly for about 24-36 hours.

I'm running it in a kiosk mode browser on Raspberry Pi OS. I am using the free tier of DAKBoard.

Before I wipe the SD card and start over from scratch I was wondering if there were any suggestions? To be completely honest, it has been "set and forget" for the past number of years so I would like to make sure I'm not overlooking something pretty basic/easy.

On a side note: Has anyone had any experiense using the DAKBoard OS on a Pi? I don't remember it being an option when I set it up originally.

Thank you for any assistance and if you have any spare hardware laying around I'd highly recommend setting one up, my family finds it incredibly useful for the calendar function and a conversation piece when they notice different photos rotating in and out.

I currently have a Lenovo N42 Chromebook far past it's EoL, for which Google is no longer supporting it. I have put Chrome OS Flex on it by reflashing the bios, and it's pretty solid, but I have no internal audio. Bluetooth audio and HDMI works fine, but no headphones, and no speakers.

I found this solution for trying to hack in an Alsa configuration from an Ubuntu Live Disk (https://www.reddit.com/r/chromeos/comments/swzxsy/comment/irk5kqk/) and I was able to follow the instructions and enable development mode, but when I try to run the alsaconfig script, I get this.

crosh> shell
chronos@localhost / $ sudo alsarestore
No state is present for card chtrt5650
/usr/sbin/alsactl: sysfs_init:48: sysfs path '/sys' is invalid

Found hardware: "chtrt5650" "" "" "" ""
Hardware is initialized using a generic method
No state is present for card chtrt5650

It may have something to do with those instructions being for a different build computer, but I am outside my sphere of knowledge, and anything else I could troubleshoot would be appreciated. Internal audio isn't mission critical for me, but it would be appreciated.

Consider the following simple jquery event handler code I've been using since ages:

$("body").on("click", ".dome .btn", function() {
	console.log(".dome .btn onclick::");
	console.log($(this));
});

The this object here returns the button element in question which is the proper way. But today, I decided to use arrow function just to upgrade myself with the modern times:

$("body").on("click", ".dome .btn", () => {
	console.log(".dome .btn onclick::");
	console.log($(this));
});

But in this case, the this object won't return the button element. It will return the window object instead which is the parent of all parents! What kind of atrocious quirk is this? Few days ago, someone on the /r/webdev subreddit told me that arrow function is just a modern way of writing the old function(){} syntax.