• 9 Posts
  • 14 Comments
Joined 2 years ago
cake
Cake day: June 23rd, 2023

help-circle










  • I too experimented with k3s, but then abandoned the idea of using it after I realized the proper way to run postgres on it was (IIUC) to use bitnami’s helm chart. I like to have some level of understanding of how my homelab and it’s config works, and that humongous amount of unreadable templates was not appealing in the least.

    As for containers, I am not really looking for service isolation (IIUC until ##368565 lands, all virtualisation.oci-containers basically run as root and I’m fine with that*)… I just want to be able to run different (usually more recent, but in nixos one also can’t easily “pin” an older version of a package if the need arises **) versions of services than those packaged is nixos. Also, not all services I want to run are available as nixos packages, and even less have modules.

    * I know what risk I’m running (more or less): nothing in my homelab is accessible from outside my lan and, even if the container host was somehow pwned, that machine can’t really do much harm (the important stuff is on a separate one).

    ** I guess I could import an older version of nixpkgs in my flake, but that requires way too much editing just to pin a package (time I’d rather spend solving the actual issue).