[a / b / c / d / e / f / g / gif / h / hr / k / m / o / p / r / s / t / u / v / vg / vm / vmg / vr / vrpg / vst / w / wg] [i / ic] [r9k / s4s / vip] [cm / hm / lgbt / y] [3 / aco / adv / an / bant / biz / cgl / ck / co / diy / fa / fit / gd / hc / his / int / jp / lit / mlp / mu / n / news / out / po / pol / pw / qst / sci / soc / sp / tg / toy / trv / tv / vp / vt / wsg / wsr / x / xs] [Settings] [Search] [Mobile] [Home]
Board
Settings Mobile Home
/g/ - Technology

Name
Options
Comment
Verification
4chan Pass users can bypass this verification. [Learn More] [Login]
File
  • Please read the Rules and FAQ before posting.
  • You may highlight syntax and preserve whitespace by using [code] tags.

08/21/20New boards added: /vrpg/, /vmg/, /vst/ and /vm/
05/04/17New trial board added: /bant/ - International/Random
10/04/16New board for 4chan Pass users: /vip/ - Very Important Posts
[Hide] [Show All]


[Advertise on 4chan]


File: mikrotik.png (1.78 MB, 1280x1647)
1.78 MB PNG
Mikrotik edition

previous >>108610550

READ THE (temp)WIKI! & help by contributing:
https://igwiki.lyci.de/wiki/Home_server

/hsg/ is about learning and expanding your horizons. Know all about NAS? Learn virtualization. Spun up some VMs? Learn about networking by standing up a OPNsense/PFsense box and configuring some VLANs. There's always more to learn and chances to grow. Think you’re god-tier already? Setup OpenStack and report back.

>What software should I run?
Install Gentoo. Or whatever flavor of *nix is best for the job or most comfy for you. Jellyfin/Emby/Plex to replace Netflix, Nextcloud to replace Googlel, Ampache/Navidrome to replace Spotify, the list goes on. Look at the awesome self-hosted list and ask.

>Why should I have a home server?
De-botnet your life. Learn something new. Serving applications to yourself, your family, and your frens feels good. Put your tech skills to good use for yourself and those close to you. Store their data with proper availability redundancy and backups and serve it back to them with a /comfy/ easy to use interface.

>Links & resources
Cool stuff to host: https://github.com/awesome-selfhosted/awesome-selfhosted
https://reddit.com/r/datahoarder
https://www.reddit.com/r/homelab/wiki/index
https://wiki.debian.org/FreedomBox/Features
ARM-based SBCs: https://docs.google.com/spreadsheets/d/1PGaVu0sPBEy5GgLM8N-CvHB2FESdlfBOdQKqLziJLhQ
Low-power x86 systems: https://docs.google.com/spreadsheets/d/1LHvT2fRp7I6Hf18LcSzsNnjp10VI-odvwZpQZKv_NCI
SFF cases https://docs.google.com/spreadsheets/d/1AddRvGWJ_f4B6UC7_IftDiVudVc8CJ8sxLUqlxVsCz4/
Cheap disks: https://shucks.top/ https://diskprices.com/
PCIE info: https://files.catbox.moe/id6o0n.pdf
>i226-V NICs are bad for servers
>For more SATA ports, use PCIe SAS HBAs in IT mode
WiFi fixing: pastebin.com/raw/vXJ2PZxn
Cockpit is nice for remote administration

Remember:
RAID protects you from DOWNTIME
BACKUPS protect you from DATA LOSS
>>
>Using Argon2 (the winner of the Password Hashing Competition) to generate an IPv6 host identifier is like using a cruise missile to swat a fly
- Gemini
>>
>>108683832
>Nextcloud
I was looking into this, but why not "OwnCloud Infinite" a rewrite in Go which avoids all the legacy PHP crap.
>>
>>108685362
Sounds like a meme project.
Also depends on where you stand in the owncloud vs nextcloud debate
>>
>>108685406
>meme project
Hardly, https://owncloud.com/infinite-scale/. They're building a serious offering likely to take advantage of new European privacy laws and shifts to divest from American cloud systems.
>>
>>108685413
>They're building a serious offering likely to take advantage of new European privacy laws and shifts to divest from American cloud systems.
Sounds like meme marketing,
Is it just a rewrite, or did they start offering basic features that are freely available with nextcloud but locked behind licensing fees with vanilla owncloud?
Do they have collaboration features at all?
>>
>>108685426
Completely FOSS, the enterprise pricing is for management.
>Do they have collaboration features at all?
Of course.
https://cloud.owncloud.com/s/5B8IQfnHMl2o8TX

I'm planning to set it up over the weekend.
>>
>>108685413
>tfw you need age and id verification for accessing your closet Optiplex NAS otherwise you get locked out and v&

thank you EU
>>
>>108685460
>Completely FOSS, the enterprise pricing is for management.
So they now give SAML/SSO to everyone?
https://owncloud.com/features/single-sign-on/

>Of course.
I see, who needs online editing of files with multiple people when they do implement
>File Locking
>>
prices remain fooked
>>
Nextcloud is a monstrosity now, I don't get how people can still put up with it. Used to be alright but the enshitification is blatant.
>>
>>108685544
I need an 1TB+ SSD for torrenting, I will move finished torrents to an HDD for safekeeping. Can I somehow get decommissioned SSDs from somewhere?
>>
>>108686574
It was already bloated af when it was still called owncloud. I don't know how it could've been made worse.
>>
Should home servers be mandatory? Would it be better if we lived in a world where a server box was considered as much of a standard fixture of a living space as a refrigerator or toilet, or would it be better if it remained something of a personal project of choice?
>>
File: HGf04Crb0AAxiM6.jpg (190 KB, 1462x2048)
190 KB JPG
Any good Wifi 6E/7 routers with OpenWRT support? Need fast wifi for my Macbooks and at least 1 2.5g LAN port for my server, in addition to a 2.5g WAN port (at least)
>>
>>108686703
Separate wireless functions from routing if you want it to be fast. Then you can just buy whatever fancy access point you want.

Consumer slop AP -> Core managed switch -> Router/Gateway (possibly running OpenWRT, mine does)
>>
>>108683832
more like milkrotik
>>
How far is too far with vlans? I've put my server on an isolated vlan, and now I'm wondering if I should virtualize opnsense so that I can have my virtual machines isolated from the server and possibly each other. None of the services I run are exposed to the internet so I feel like this is largely security theatre
>>
Are APC and Eaton PDUs extremely overpriced or am I missing something? Why do they cost 8x the price of any other non-metered power strip?
>>
>>108688740
Commercial/enterprise tax
They have people willing to buy them at that price.
They might be built slightly better than any cheapo power strip but the reality is it's mostly to be able to shift blame when the rack catches on fire.
>>
>>108682839
>>108683030
>home hosted headscale
literally why, you'd still have to open a port. skip the bloat and just use wireguard at that point
>>
>>108686625
I don't think it's necessary for everyone to have one, and I think it's ridiculous to try and make them mandatory, but I do think it would b a positive if everyone had access to one ran by someone they personally know (or know as a friend of a friend).
>>
What do you guys like to use for LAN filesystem mounts?
I thought I was going to go with SSHFS because I already SSH into my server, but I've learned that the performance is quite bad, and because it's in maintenance mode it's unlikely to get any better.
Samba? NFS? Something else? I'm looking for something where I can drop files into a mounted filesystem and have it be like a big internal drive essentially for general file storage use.
I do have a Windows machine in the house, but I'm probably not going to use it with this that much.
>>
File: 1760134830797335.png (1.21 MB, 1024x1024)
1.21 MB PNG
Any docker/podman for running VMs with little hassle?
My homeserver has more powerful CPU, and better cooling, so I thought it would be better option to use it to emulate games from PS2/3DS consoles.
Or it there better way?
Also what are the options to run android apps/ OS?
>>
File: cat.gif (2.1 MB, 260x274)
2.1 MB GIF
>NFS doesn't even do checksumming on it's own
>only way to do data integrity is with krb5i or krb5p
>setup NFSv4+krb5i a long ago, permissions work for non-root users
>suddenly need root access, waste 3 hours trying to get it to work
>no_root_squash, static mapping in /etc/idmapd.conf, auth_to_local rule in /var/lib/krb5kdc/kdc.conf and it still doesn't fucking work
I gave up and just exported the dir with sec=sys,no_root_squash.
This is not my first rodeo with Kerberos either, some more "cool" Kerberos facts for you guys, free of charge:
>if your kernel doesn't have the required RPCSEC_GSS_KRB5_ENCTYPES options enabled, trying to mount kerberized NFS will block indefinitely due to bug with no logs either. Put it in /etc/fstab with auto mount and you soft-brick the system
>on musl system, big values in max_life will silently not work (while they work on glibc system), of course no logs either, you just somehow need to know it
>on TrueNAS Core, Kerberos never really fucking worked anyway, but docs don't mention it and waste your time instead
whoever came up with Kerberos and NFSv4+Kerberos must be sick and demented.
>>
>>108687427
>have my virtual machines isolated from the server and possibly each other
idk but in my case why the fuck would i do that when several machines constantly need files from and to other machines
>>
>>108690373
You could create a firewall rule allowing access between certain machines on certain ports
>>
>>108690282
I saw this in the last thread but didn't get a chance to reply to it.
Do you mean VMs, or emulators, or both? Are you basically just wanting to run PS2, 3DS, and Android software and you don't know the terms for that?
For PS2 and 3DS emulation, you could look into Games on Whales, which is a way of dynamically starting containers with various programs in them (including RetroArch and one or two other emulation platforms) and some associated streaming and controls stuff (a fork of Sunshine called Wolf and some udev layer for controllers that I haven't fully looked into).
It's on my list to set up. People say it works really well.
>>
File: F8447JMWUAAd1W8.png (336 KB, 467x467)
336 KB PNG
>>108690613
Well I guess I could try after I backup one of these days and update Proxmox 8 to 9 and hope all is fine and nothing gets broken
>>
>>108684861
Why are you trying to satisfy a language model?
>>
>>108690179
>Samba
if you do decide on SMB, then use ksmbd instead of Samba
>>
>>108692620
Why
>>
>>108690796
Whatever works?
I don't really care, as long as it's easy to set up.
I do have sunshine/moonlight installed, but that's more like desktop streaming thing.
I want to access the container from browser, and with webUI I can run different and multiple instant of this application if I want too.
If it's not possible, running a VM in container is fine too, as long as I can use it to run android applications.
>>
>>108692380
Because it told me the perfectly fine non-cryptographic hash I was using before wasn't cryptographic safe, as if that was something I needed for this purpose in the first place.

It's SECURE now!!!
>>
>>108692656
In-kernel implementation so it's faster.
>>
>>108690282
a shame she got ozempic'd and those tits are 4 feet long now she might as well tuck them down her pants

>>108690179
nfs is alright but sometimes Windows machines are shit when the server is down and explorer.exe occasionally freeze if you accidentally hover over a mapped drive that's offline. this happens since Windows7 era
but when it comes to transfers i found plain old sftp transfers the best there is. on a 1G network i hit 1G, on a 2.5G network i hit 2.5G, always.
>>
Is local storage actually dead for real? I'm not a hoarder or anything but I have two drives for backups that are almost full. I'm looking for some 3.5" low RPM HDDs, Local amazon doesn't even have stock for anything above 1TB and on other websites the prices are like 3 times what I paid 10 years ago.
Is it really THAT fucking over?
They're in RAID1 so maybe I'll get rid of the RAID and rawdog it for the next few years.
>>
>>108694123
Prices are high, availability is low. It'll pass. This situation is literally like only 7 or 8 months old.
>>
>>108694123
used SAS drives or bust
>>
>>108692620
>>108692803
Looks better. I probably will that one if I go with SMB. Thanks for the pointer.
>>108693873
Yeah, the more I think about it and the more I'm reading about NFS (>>108690309) and Samba, the more I'm starting to think I will just stick with something SSHFS / SFTP related. There seem to be a lot of caveats for other options, to the point where even if performance were a bit worse, I would probably choose something SSH adjacent anyway. Thanks for giving your thoughts on this.
>>
File: 2026-04-26_22-23.png (77 KB, 939x338)
77 KB PNG
I am now rewriting my rule34 -> Stash tool to use sqlite because I somehow wanted to use .json files as a database months ago
>>
>>108690309
>NFS doesn't even do checksumming on it's own
What, FCS in Ethernet frames, TCP and whatever checksums the underlying fs computes are not enough for you?
>>
File: cat;doom.png (1.02 MB, 941x1177)
1.02 MB PNG
>>108694861
application layer protocol cannot rely on transport protocol to ensure integrity, it should do it's own checks.
TCP checksum is laughably weak (16 bit one's complement) and cannot be really trusted.
Ethernet checksum is CRC32, which is much nicer, but it is not designed to protect the payload, the checksum (as is the whole header) it is stripped and recalculated at every network device it passes. So if an error occurs above the Ethernet level, it will not be detected.
On top of that, some network devices and network stack software implementations are simply faulty, for example there are known cases where they simply ignore checksum errors and carry on as if nothing has happened.

Sad this is, there was a proposal to include checksumming in NFS, but nothing came of it: https://datatracker.ietf.org/doc/html/draft-aggarwal-nfsv4-cksum-01
I don't know the details, maybe there's some mailing list archive with the discussion of said draft. I assume they've used Kerberos as an excuse to not implement it as can be used to achieve the same goal. Which is stupid, because Kerberos is much more overhead, krb5i does mean integrity, but not in data integrity sense, but in cryptographic signing and tamper protection sense.
If you run in trusted local network and only need data integrity (so protection from random bit-flips etc., but not from MiTM attackers), tough luck, you still have to run at least krb5i anyways. Not to mention the huge burden to setup and administer Kerberos when you only really use it to enable krb5i in NFS (like i do).
iSCSI for example was extended with optional CRC support, why couldn't they add it to NFS also?
>>
>>108685362
>>108685413
Hasn't this been obsoleted by OpenCloud?
>>
>>108686625
Yes BUT only if management could somehow be retard-proof. An average utterly tech illiterate normie should be able to use their local home NAS as if it were iCloud or something and not risk their family pictures getting deleted because they mistyped a command they didn't understand or an update went wrong or something.

It's not inconcievable. Billions of normies use mobile phones which auto-update in the background, almost never brick or corrupt on update, and store user data on separate partitions and almost never lose or corrupt it (except in the case of severe device failure). There is no reason that instead of a phone OS, this couldn't work for a server OS, with preinstalled standardised components for basic NAS and home network functionality plus a preconfigured method of secure remote access - like a proper wireguard solution a la tailscale but which doesn't depend on a company's proprietary technology (or a hobbyist reimplementation). Especially with IPv6 adoption you wouldn't even need a VPS or dynDNS, though dynDNS being configured as standard would also work.

All of this is technically completely feasible. We could absolutely have a world where it's normal for everyone to have their "home cloud" box, use it for storing their files, have it just werk with connecting over their phone with an app after they set up some local accounts/sign-on, have it auto-update by default, and even have an "app store" with prepackaged solutions for various servers and hosting that's as easy to use as a smartphone app store. ISPs and/or municipalities could provide you with a human domain name by default, with vanity names purchasable for a fee just like vanity car license plates. And if everyone has a home server, backups could be as simple as peering with a friend, or paying for a subscription if you really don't have any.

The only obstacle to this is the immense amount of time and money needed to develop it, and zero profit incentives to do so.
>>
>>108689743
One day. For now headscale is just too convenient. Every device accessible among each other from connecting to the headscale server.
>>
>>108695430
Oh, I see. Thanks for the effortpost. I've never cared much for data integrity but I don't self-host shit at the moment. Still, if I cared about data corruption in transit I would probably attach checksums to specific files like *.tar archives instead of doing it at a file system level just because there are so many file types that inherently support them.
>>
>>108695549
It would necessitate server management to become almost blue-collar work. A plumber to fix pipes, a server-tech to fix the home server.
>>
I regret only buying 96gb of dedotated wam now that prices are crazy
>>
>>108688740
just keep a price alert on eBay, they sometimes go for cheap
they hold their value pretty well because they don't really go bad
>>
why does komodo have to use shitgo db
>>
>>108696721
because mongodb is web scale
>>
>>108695485
In what way?
>>
>>108683832
You faggots have the most unnerving OP pics out of all the boards I visit.
>>
>>108696822
It's because OP stopped using normal pictures and is posting weird ass 3dpd shit now
>>
File: 1767123251208967.png (107 KB, 960x719)
107 KB PNG
>>108696326
I think I'll just buy pic rel. I doubt I'll ever find an APC as cheap as that. I also wish metered PDUs with RJ45 ports were not so ridiculously expensive to the point where they cost more than an NGFW lol
>>
>>108696822
the people here are wannabe sysadmins.
they want to be some of the most insufferable people on the earth.
please understand.
>>
>>108695549
>>108695815
That's about what I landed on for my answer, it would have to be something of a standardized service offered by a whole professional trade. The question is what's the way to get over the hump of profitability? Does the education of the trade come first, and the work will filter in through local tech support people, or do we need the killer hardware first and the professional knowledge will build up around it?
>>
>>108696753
does that mean it has to load the entire web into ram because thats how it feels
>>
File: 1757668539720401.png (477 KB, 1303x540)
477 KB PNG
What's the showstopper here?
SFF-8654 should be pretty universal if it's carrying PCIe right?
>>
I am too poor to own a home server, it's over
>>
>>108692380
Why don't you play with language models? Did Twitter artists tell you to be afraid of them?
>>
What is converged storage? Can I have diverged storage?
>>
>>108695430
TCP is on its way out. The future is UDP/QUIC!
It's gonna be a big mess, but hopefully worth it.
>>
>>108699873
>The future is UDP/QUIC
Google shill or delusional?
>>
>>108700028
Things are already moving in that direction. Unless you're autistic enough to actively block UDP, chances are you're already using HTTP3 over QUIC without even realising.
>>
>>108694725
sftp is neat because its configured ootb if you use ssh. literal 0 config
>>
>>108700301
>sftp is neat
gigantic cpu overhead tho
>>
>>108695643
which would also be true with wireguard, I fail to see the added value in this scenario
>>
>>108697732
The problem is that whatever you do, it will not be as profitable as locking down the hardware and software for vendor lock-in and then exfiltrating constant telemetry data for at minimum your own analytics but also probably for selling or whatever.

The ONLY way doing this becomes less advantageous than not doing is if the average retard normie consumer starts actually caring about digital privacy and sovereignty above convenience or price, and that's not happening any time soon. I've even seen tons of normies who claim they "care about privacy" and still use tons of shit like a normal stock smartphone (apple/google, no degoogled rom), gmail, spotify, cloud streaming for everything, icloud or dropbox for their files, etc. etc. because "well I need it/it works for me, yeah it'd be nice if there was privacy but I'm not changing all my habits from what works for me".

A truly botnet-less normie-friendly home server box could only be sold by some hipster small company targeting really dedicated privacy schizos, meanwhile you'd need a company the size of apple (or at least, a very large company) to get the UX working properly and truly achieve normie-friendliness.
So you'd need some kind of massive public consciousness paradigm shift where instead of going "yeah I like privacy but why would I pay $300 to put a box at home when I can just use icloud/google photos/dropbox" and instead flip that around and start thinking "yeah obviously I need my home server just like I need a fridge and TV, I mean I don't know much about privacy except that apparently it's important so obviously I'm not gonna use those weird 'cloud' services".
But that's not happening.

>>108695815
Honestly I don't think it'd be that different from phone repairs. When was the last time you heard of a phone OS getting broken? You almost need to care, repairs are only when hardware fails. Then you take your minipc or gabecube sized box and bring it to local Ahmed's Repairs or whatever.
>>
>>108700615
Main problem is that the services earn money from data harvesting, so they're able to get away with charging next to nothing for the actual service, which means there's no real opportunity for your local schizo to undercut them and still earn something. Best I could figure out was host some services and get my close friends and family to use them. Most of them still use various botnet services due to the network effect.
>>
>>108700850
The point of a home server would be to not rely on "services". There's no costs being incurred after the user buys his goycube, because the entire point would be the user hosting everything on it and connecting directly to it.

Of course the problem is not "costs of running a service", it's that companies love profit and so an ongoing service is always going to be what they prefer rather than a one-off purchase. They're trying to turn fridges and washing machines into subscriptions now, which is why there's no change anyone would turn online cloud subscriptions into a one-time applicance purchase.
But realistically there's nothing preventing this from happening other than the opportunity cost of a more profitable business model. Which is why it won't happen unless said service-based business model becomes unviable, either through a massive and sudden public consciousness shift, or regulation or something.
>>
>>108700884
There's nothing fundamentally wrong with "loving profit" or with the concept of subscription service. I don't think you realise just how profitable data harvesting is, it's not something you should ignore.

In theory, I'd pay for Schizo Joe's Cloud Storage in XMR on a monthly basis, as long as I'm getting value for my money and as long as the service isn't designed to fuck me over and leave me in shit, in case I decide to stop paying (which is standard industry practice). In practice, the fact someone cares about shit like this to begin with probably means they're more than capable of just hosting it themselves.

>regulation
Massie is currently trying to push a bill through, Godspeed to him but... seems unlikely.
>>
>>108688740
>>108696326
>>108696855
You can occasionally find the CyberPower PDU41001 on ebay for under $150 shipped
Those are networked and you can control them via HTTP, SSH or SNMP and you can set schedules to say, power cycle things and it has load monitoring. You can also set it to power cycle specific outlets on ping failure. I don't recall whether or not I got the API alerting to work with custom endpoints, its mostly designed for clickatell SMS API. Email alerts are functional and if you want custom event handling that badly you can run a service that pretends to be an SMTP server, handling the EHLO handshake and redirecting messages to a flask server or just handle events in bash.

If $150 is still too expensive or you don't have a 19in rack you might like the Kasa HS300 ($45 brand new). Thats what i used before getting the PDU and i never bothered with the home assistant capabilities, i just used python, but it is a networked PDU also capable of load monitoring
>>
>>108683832
thought it was kristi noem's husband from the thumbnail
>>
>>108701019
>There's nothing fundamentally wrong with "loving profit"
Fundamentally, no, but in specific cases where the profit mechanism comes at the cost of harm to a plurality of unedicated population, yes.
>inb4 just don't use it
Keyword uneducated population, which is the majority of people.

>or with the concept of subscription service
Privacy issues aside, I agree, except in this specific case where the existence of subscription services directly makes commodifying personal home servers unviable by its very existence. Maybe that's not a bad thing but it I was going off the thought experiment of "what if everyone had a home server just like they have a fridge" and subscription services would basically need to go for this to be possible.

>In theory, I'd pay for Schizo Joe's Cloud Storage in XMR on a monthly basis, as long as I'm getting value for my money and as long as the service isn't designed to fuck me over and leave me in shit, in case I decide to stop paying (which is standard industry practice)
This is all well and good on the condition that you're able to detect if he decides to screw you over. Which is almost impossible so it mostly means you have to basically protect everything to make it near impossible to extract any data, e.g. local encryption for anything using the remote storage, likely access over an anonymising network, etc.

>In practice, the fact someone cares about shit like this to begin with probably means they're more than capable of just hosting it themselves.
I agree but I don't think people who aren't experts should just be left hanging. There are lots of complicated things in the world, IMO society should not operate under the assumption that everyone should become an expert on everything and autistically homebrew their own solutions because the default commercial approach is allowed to be utter shit.
>>
File: 1775738369220836.png (560 KB, 888x941)
560 KB PNG
>>108683832
>>
File: .png (102 KB, 1055x449)
102 KB PNG
>>108701906
I present to you, my Where Data
(I had a desktop seagate before this with 70k hours with no bad sectors)
>>
File: 666.jpg (666 KB, 666x666)
666 KB JPG
>>108702036
>42 (Min/Max 20/58)
God almighty.



[Advertise on 4chan]

Delete Post: [File Only] Style:
[Disable Mobile View / Use Desktop Site]

[Enable Mobile View / Use Mobile Site]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.