I use something like this:

#!/bin/bash

set -euo pipefail
URLS=(
    'https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/'
    'https://addons.mozilla.org/en-US/firefox/addon/privacy-badger17/'
    'https://addons.mozilla.org/en-US/firefox/addon/passff/'
    'https://addons.mozilla.org/en-US/firefox/addon/copy-plaintext/'
    'https://addons.mozilla.org/en-US/firefox/addon/duckduckgo-for-firefox/'
    'https://addons.mozilla.org/en-US/firefox/addon/user-agent-string-switcher/'
    'https://addons.mozilla.org/en-US/firefox/addon/clearurls/'
    'https://addons.mozilla.org/en-US/firefox/addon/temporary-containers/'
    'https://addons.mozilla.org/en-US/firefox/addon/consent-o-matic/'
)

DOWNLOAD_BASE_URL='https://addons.mozilla.org/firefox/downloads/latest'
_="${FIREFOX:=firefox}"
_="${DST:=/usr/lib/$FIREFOX/browser/extensions}"

if [ $UID -eq 0 ]; then
    SUDO=
else
    SUDO=sudo
fi


download_links=()
for url in "${URLS[@]}"; do
    package_name="$(sed 's_/$__' <<< "$url" | awk -F/ '{print $NF}')"
    download_links+=("$DOWNLOAD_BASE_URL/$package_name/addon-$package_name.xpi")
done

workdir="$(mktemp --directory)"
cd "$workdir"
for url in "${download_links[@]}"; do
    curl -OL "$url"
done

for ext in *.xpi; do
    ext_id="$(unzip -p "$ext" 'manifest.json' | jq -r '(if .browser_specific_settings then .browser_specific_settings else .applications end).gecko.id')"
    target="$DST/$ext_id.xpi"
    echo "$ext -> $target"
    $SUDO install -Dm644 "$ext" "$target"
done

That doesn’t handle the extension config though.

To check your system for those packages (assuming you are using bash):

comm -1 -2 <(pacman -Q | awk '{print $1}' | sort) <(sort vulnerable_packages.txt)

With vulnerable_packages.txt containing one package name per line.

I’m using a SBC and put LibreELEC on it. That boots to Kodi. I then installed the Jellyfin plugin and am mostly happy with it. Sync and subtitle selection is sometimes weird.

Good to know! I didn’t see a link in your about page.

Hi, nice project. Why would I use your project over similar (open-source) projects like sharry and lufi?

I personally would prefer to use those alternatives because their source is available and can be reviewed, I didn’t see any reference to your source code - which is fine, but a no-go for me personally.

I have a feeling for that to be effective they should be spread-out and not appear one after another though.

Hmm. The first section about cloud service providers is a bit weird to me. There are providers which “keep my best interests in mind” as part of their business model, backblaze would be one. Their whole idea is to provide a good backup services. Encrypting my data before transit also doesn’t make me worried that it will be accessed by them or any of their employees because they will only get some garbled mess.

Compare that to google, another cloud service provider. Their business model is to make money by selling me ads (foremost), they do that by gathering as much data as possible. Here all my answers would be negative.

This puts me in an awkward spot where I nearly every time answer with “Neither agree nor disagree”, because there is more to it and not because I don’t have an opinion.

The whole deployment is done via ansible, so the ansible source is my documentation.

I think I remember some weird power bugs in the 2700x, though I never encountered them myself. The best thing I could find was this reddit thread https://www.reddit.com/r/Amd/comments/apw8im/ryzen_freezes_in_linux_even_if_linux_is_in_vm/

Do you still have the live iso you used to install arch? Does it work? Do other distros work (just the live systems are enough)?

Edit:

Some more things: Did you try disconnecting the pc from mains, pressing the power button (to discharge all capacitors) and reconnecting. Reseat the button cell for the bios?

I’m using Concourse CI

There are good April’s fools and there is this. Some things you just don’t joke about.

I’m still of the opinion, that your GUI sucks if it needs documentation.

Docker container can’t read a bind mount. Permission issue? No, it’s SELinux, again. And I didn’t even install it explicitly, it just got pulled in by another package.

And to be clear, the issue isn’t SELinux really, but unexpected non standard behaviour which I never asked for (never explicitly installed it).

It’s really only downloading the executable and java, starting it and opening the required port. See the official documentation for instructions.

If you want to get more involved there are some convenient docker containers which automate some stuff:

• one for running the server
• a proxy

Ah got it, yes, that would be insanely useful.

You are talking about funkwhale. I never tried it, so I can’t speak to the part about integrating it with different clients, but that surely is possible, if it doesn’t already work.

Also, one big problem with this is copyright (however you might feel about it).

Edit:

It seems to support a subset of the subsonic API

Just don’t bring any device to a protest if you consider bringing a burner device.

Well, I was hoping they would take care of that themselves

Looks good, I use a lot of the stuff you plan to host.

Don’t forget about enabling infrastructure. Nearly everything needs a database, so get that figured out early on. An LDAP server is also helpful, even though you can just use the file backend of Authelia. Decide if you want to enable access from outside and choose a suitable reverse proxy with a solution for certificates, if you did not already do that.

Hosting Grafana on the same host as all other services will give you no benefit if the host goes offline. If you plan to monitor that too.

I’d get the LDAP server, the database and the reverse proxy running first. Afterwards configure Authelia and and try to implement authentication for the first project. Gitea/Forgejo is a good first one, you can setup OIDC or Remote-User authentication with it. If you’ve got this down, the other projects are a breeze to set up.

Best of luck with your migration.