Only if you unlocked the bootloader first which would wipe the device. Graphene relocks the bootloader after install.

Subscriptions feed is nice, but doesn’t show other similar channels so I never discover anyone new to watch.

Display Port ftw

It really is, most people could probably be using Display Port anyways, unless trying to hook up to a TV I suppose.

Yeah, but if left unlocked then they could replace the OS or part of it without it being very obvious.

Not a thing most people just wanting better privacy need to worry about.

Not the newer version of it, they’re stuck on the older one.

I’m confused now, I thought we were talking about the bit here “let you connect to Google/Microsoft/etc services”

But either way, you can also install another app that does let you connect to local AI if you want to use that kind of thing.

Couldn’t you just install whatever apps you want for the services you use?

Why is letting you connect to services bad? Choices are always good.

Everyone has email, and text is also a good option.

My local town alerts come through both, with more urgent alerts like if a fire starts nearby through an automated phone call.

In the case of these ones you just remove the LXC/VM it created.

Yeah that is bizarre, maybe malware or a malicious browser addon?

I use a single LXC for all my docker stuff. You can use a VM too, either way works. The VM is easier to set up as docker in LXC requires a few extra steps.

Definitely don’t do one docker image per instance, the overhead on that would be insane with managing configs and updates. I can’t imagine having over 100 LXC containers that I’d have to individually update and manage!

Install Debian as a server with no GUI, install docker on it and start playing around.

You can use Komodo or Portainer if you want a webUI to manage containers easily.

If you put any important data on it, set up backups first, follow the 3-2-1 rule by having at least 2 backups in place.

The problem with stuff like yunohost is when it breaks you have no idea how to fix it, because it hides everything in the background.

At least you can just snap a bigger battery into it, vs those crappy ones from Dyson or Samsung and whoever with the tiny little battery packs you can’t upgrade.

For local access you can use 127.0.0.1:80:80 and it won’t put a hole in your firewall.

Or if your database is access by another docker container, just put them on the same docker network and access via container name, and you don’t need any port mapping at all.

You can move files and continue seeding, just tell the torrent client where the new location is.

This only happens if you essentially tell docker “I want this app to listen on 0.0.0.0:80”

If you don’t do that, then it doesn’t punch a hole through UFW either.

How though? A database in Docker generally doesn’t need any exposed ports, which means no ports open in UFW either.