2026-05-04T02:38:57Z https://yabu.me Johannes Kastl https://yabu.me/npub1ayt0pcv55hcgf5emehtntmfpaev8ulnksjts7ws2cr7q2d6kn0lskdh6nx https://digitalcourage.social/system/accounts/avatars/109/727/375/151/606/720/original/46fed778ec916aa4.jpg https://digitalcourage.social/system/accounts/avatars/109/727/375/151/606/720/original/46fed778ec916aa4.jpg https://yabu.me/nevent1qqs0yetl4aaqx6ka9j842tf303692zz0vv2uluycplhl3zwzuwfc2jqzyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7w9lmz0 Question for the haproxy users:<br/><br/>Does anyone have a working configuration for reverse-proxying HTTPS URLs<br/>- using &#34;mode tcp&#34; (no TLS certificates on the Haproxy) AND<br/>- using the &#34;use_backend&#34; configuration do decide which backend to use based on SNI?<br/><br/>So we have <a href="https://foo.example.org">https://foo.example.org</a> and <a href="https://bar.example.org">https://bar.example.org</a>, both DNS entries pointing to the haproxy. <br/><br/>use_backend foo if { FOO_CONDITION_GOES_HERE }<br/>use_backend bar if { BAR_CONDITION_GOES_HERE }<br/>default_backend foo<br/><br/>No matter which condition we try, we always fall back to the default backend.<br/>Removing the `default_backend` we get errors for all connection attempts. So clearly the conditions are wrong.<br/><br/>We tried `req_ssl_cni foo.example.org` as the condition inside the curly braces.<br/>We tried `ssl_fc_sni_end foo.example.org`.<br/>We tried `req.ssl_cni foo.example.org`.<br/>We tried with -i and with &#34;-m end&#34;.<br/>We tried the complete URL (some.service.foo.example.org) or only the domain.<br/><br/>Any ideas, anyone?<br/><br/>#Haproxy #TLS #Linux #Admin #homelab #DevOps #ReverseProxy 2026-03-15T12:16:38Z https://yabu.me/nevent1qqs2q6chxtlxmjptydr09v2stqx0t6hgnm7mjcc8yxghj5alrm6d56gzyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7wvapsg Liebes Fediverse,<br/><br/>was empfehle ich einer jungen Selbstständigen denn als einfaches, günstiges und datenschutzfreundliches Angebot (EU oder DE) für einen E-Mail-Newsletter?<br/>Eigene Domain ist vorhanden.<br/><br/>Kann #mailbox_org das vielleicht direkt?<br/><br/>Vielen Dank! <br/><br/>(Ich meine jetzt nicht Mailman o. ä. sondern einen Dienst, der das macht) <br/><br/>#Newsletter #Datenschutz #Privacy 2025-12-20T11:46:17Z https://yabu.me/nevent1qqsfkjmfwa77urpzfehd00a7h9t7pwhmu42n4rwn5gv7vecv2pjhn0czyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7h38lvy In reply to <a href='/nevent1qqsyqfmqm4u35ara4va3epkwmfua2a0c78j5hp6f69h0m35c8ct0grgqrr29l'>nevent1q…r29l</a><br/>_________________________<br/><br/>Try AlmaLinux. Stable, rock solid. Works like a charm.<br/>(Or go immutable with #Fedora #CoreOS or #openSUSE #MicroOS) 2025-05-21T16:05:18Z https://yabu.me/nevent1qqs0383w6sp9q4zjtwqg9cvmvvmksezs3r75mxezmwfz09n8295fp8qzyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7zpgw6c In reply to <a href='/nevent1qqsv5f8yt88z20vrx7dsjduv92py2kfqu02te3zxxct66a2f9y62y2sy79v2q'>nevent1q…9v2q</a><br/>_________________________<br/><br/>OK, this seems to be the python that Ansible is using. Being called directly without all the PATH mangling that the .ansible-wrapped script does. Which explains why it does not find the kubernetes module...<br/><br/>(Thanks @darix for the hint)<br/><br/>#NixOS #Ansible #Python #wtf 2025-03-31T16:49:28Z https://yabu.me/nevent1qqsv5f8yt88z20vrx7dsjduv92py2kfqu02te3zxxct66a2f9y62y2szyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl72h9jdn In reply to <a href='/nevent1qqsvnhjs4zwwdga9jgcd56vvmu4ug0jpx3jrevm3q34t3aveldtznus0amf6u'>nevent1q…mf6u</a><br/>_________________________<br/><br/>Running the playbook with -v shows me that it is using a completely different python3 from /nix/store/lhpwdis5hkyljz1d200bj1s6g51ljq9k-python3-3.12.8/bin/python3 which does not have the kubernetes module apparently.<br/><br/>No idea how it picks this up, where it takes that information from and how to fix this...<br/><br/>#NixOS #Ansible #python 2025-03-31T16:38:55Z https://yabu.me/nevent1qqsvnhjs4zwwdga9jgcd56vvmu4ug0jpx3jrevm3q34t3aveldtznuszyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7f2nuck In reply to <a href='/nevent1qqsw8vyhxy3xagha3r0cme8uqr3npfzeq4plcn5ft8umxxtcpdx5gpcytvtq4'>nevent1q…vtq4</a><br/>_________________________<br/><br/>Fourth and hopefully last round for the #NixOS #Ansible bubble:<br/><br/>Short recap: Having the kubernetes module in the ansible derivation/package is not enough, it needs to also be in the python3 or python312 derivation/package.<br/><br/>Fun fact:<br/>- `which python3` gives me /home/tux.penguin/.nix-profile/bin/python3<br/>- this links to /nix/store/ipwx571dlhxmdf1n1yd8vgqq5ndjnxba-python3-3.12.8-env/bin/python3<br/>- `which -a python3` only gives me this one python, no other binaries found in the PATH with that name<br/><br/>1. Using /nix/store/ipwx571dlhxmdf1n1yd8vgqq5ndjnxba-python3-3.12.8-env/bin/python3 as ansible_python_interpreter works, the kubernetes module is found<br/>2. Using /home/tux.penguin/.nix-profile/bin/python3 for ansible_python_interpreter works<br/>3. Using &#34;{{ lookup(&#39;env&#39;,&#39;HOME&#39;) }}/.nix-profile/bin/python3&#34; for ansible_python_interpreter works<br/>4. Using just python3 DOES NOT work?!?!? What the hell? Even if this is resolved (in the shell at least) to the same python3 binary/link in ~/.nix-profile/bin/python3? What the hell? 2025-03-31T16:14:18Z https://yabu.me/nevent1qqsw8vyhxy3xagha3r0cme8uqr3npfzeq4plcn5ft8umxxtcpdx5gpczyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7jrjt4a In reply to <a href='/nevent1qqszs5lf7tp42e49lmsus95j3k29hl4cffw3gzrcxazz4vdk0xz2fdcpfuh4f'>nevent1q…uh4f</a><br/>_________________________<br/><br/>Third round for the #NixOS #Ansible bubble:<br/><br/>I think I have a solution! At least I got some thing working.<br/><br/>Having the python312 nixpkg installed is not enough. It is also not enough to have python312, python312Packages.kubernetes and python312Packages.cryptography installed.<br/><br/>I had to install them &#34;in the same package&#34;:<br/><br/>```<br/> home.packages = with pkgs; [<br/> ansible<br/> ansible-lint<br/> (pkgs.python3.withPackages (python-pkgs: [<br/> python-pkgs.cryptography<br/> python-pkgs.kubernetes<br/> ]))<br/> ];<br/>```<br/><br/>Then I could set the ansible_python_interpreter to `python3` and could use the kubernetes python module for using things from the kubernetes.core Ansible collection.<br/><br/>This is in addition to having the modules also available in the ansible derivation, no idea if that is really necessary.<br/><br/>I&#39;ll do some more digging and testing, but at least something worked now! I call that a win!<br/><br/># NixOS #Ansible #Python #hellyeah 2025-03-30T17:16:58Z https://yabu.me/nevent1qqszs5lf7tp42e49lmsus95j3k29hl4cffw3gzrcxazz4vdk0xz2fdczyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7kpfskg In reply to <a href='/nevent1qqst5fs4kh4njmg8hq77vr8rejntsjl6eufj7nzs4t9q40gggv43f5gnmzpy3'>nevent1q…zpy3</a><br/>_________________________<br/><br/>Second round for the #NixOS #Ansible bubble:<br/><br/>With lots of help I now have a Ansible derivation that includes python modules for requirements from e.g. the kubernetes.core Ansible collection.<br/><br/>But things still do not work. Example: Creating something in a Kubernetes cluster using the kubernetes.core collection. No matter whether I target localhost in my playbook or the remote host with a delegate_to for localhost.<br/><br/>Ansible uses the installed python directly, but without all the module-including-voodoo that is done in the .ansible-wrapped file (that is being called when &#34;ansible&#34; is being invoked&#34;. And thus the kubernetes module is not found.<br/><br/>I also tried installing python3 and python3Packages.kubernetes in addition to ansible. I see the kubernetes in $HOME/.nix-profile/lib/python3.12/site-packages/, but it is still not found. I tried telling Ansible that localhost has a python interpreter, but no change.<br/><br/>Frustrating... 2025-03-30T13:41:05Z https://yabu.me/nevent1qqst5fs4kh4njmg8hq77vr8rejntsjl6eufj7nzs4t9q40gggv43f5gzyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7r88sgw Fun question for the #NixOS #Ansible bubble:<br/><br/>I noticed that Ansible on NixOS does not find python modules that have been installed from NixPkgs. This means, modules like the kubernetes module are not found and Ansible cannot do its work, when a task is executed on localhost (e.g. via delegate_to)<br/><br/>Is there a way to install those additional modules together with the Ansible package? <br/><br/>Or is this just some messup with autodetecting the python interpreter on localhost?<br/><br/>#python #Ansible #NixOS 2025-03-29T21:02:07Z https://yabu.me/nevent1qqsqt3actaw0z5t56wyvks5rv6jg7ghk43qd33dkjn2yz9t6lqat2mszyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7nvjxew In reply to <a href='/nevent1qqs02wluxhku4h0qu44x2g468z434sgz7tuu8kv393u4p5q7pwklrscw6hu9g'>nevent1q…hu9g</a><br/>_________________________<br/><br/>Hmmm. How are your monitors connected? Daisy chaining via DisplayPort? 2025-03-03T13:37:42Z https://yabu.me/nevent1qqsrxap84ll5442t7qcdcfs25wuwxsldz6vrjp4uqdn7f3vgkk97xdgzyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl77xgm6w Dear #kde #plasma users,<br/><br/>does anyone else notice that switching applications using Alt+TAB is behaving funnily? I think this might be since Plasma6, but I noticed it more prominently in the last couple of weeks.<br/><br/>Previously, Alt+TAB, then releasing, then Alt+TAB would switch between two applications. The current one and the last one. You could do so forever.<br/><br/>Now, the one before the current one is sometimes skipped and I get a third one selected. Of course, this does **NOT** happen reproducibly. I can rule out fat-fingering and also hardware issues like broken keys, as this happens on more than one laptop with more than one external keyboard.<br/><br/>#openSUSE #Tumbleweed with 6.3, #Fedora #Kinoite with 6.3, #NixOS 24.11 with 6.1 2025-03-03T07:34:27Z https://yabu.me/nevent1qqsq22y9tcu7clmddmkuw0qee67shd7w6zks0dxrner90nnulezhgngzyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7k2zwja #Darts world championship 2025 starts today! 2024-12-15T14:16:39Z https://yabu.me/nevent1qqst0lmh3qj0gurtranza9r5dzj9ylg4jxn9fyxgumz8z7x6vjesljgzyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7a9zwpw Is anyone using #ipv6 in #podman? Especially on a #Linux server or VM that gets a /64 #subnet delegated from the provider?<br/>If so, any good tutorials for Podman 5.x? 2024-11-18T18:04:41Z https://yabu.me/nevent1qqsywnsswt7uwtqq35rxkhqhn0clhsphjeduvvw0qk0rxyukv0af03gzyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7a8eyyz In reply to <a href='/nevent1qqs9l2t9nt7tymj6aur5htt598ayqy6rlkcmedfawss9e9k9sdu0c2c4wjhw6'>nevent1q…jhw6</a><br/>_________________________<br/><br/>Thanks for the explanation! 2024-11-07T21:20:26Z https://yabu.me/nevent1qqsqvj42j37k9q4l2xyh0q7qkt74jup2p0uprym24c44x9k3sj9xj8gzyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7nxr5e5 <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GrapheneOS</span> (<span class="italic">npub1kwa…e0nj</span>)</a></span> I just updated my pixel6 and noticed that there are two rounds of app optimizations. One before entering SIM pin and device pin, the other one after that. Is this intentional? 2024-11-07T20:05:54Z https://yabu.me/nevent1qqsqwqsyc4q0wyfh6paauvjweunsfv0czkthu6pvajf6a4n9l3aqvmqzyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7gz9gza I had some time to finally read #GregGraffin&#39;s memoir Punk Paradox.<br/>As Bad Religion has been a huge influence to me over the years and is one of the main reasons I had to quickly increase my English vocabulary it is really fascinating to read his side of the story and connect some dots.<br/><br/>Highly recommended.<br/> <img src="https://digitalcourage.social/system/media_attachments/files/113/193/558/747/532/258/original/8152957a93b01580.jpg"> <br/> 2024-09-24T16:55:05Z https://yabu.me/nevent1qqsrscrhcvvr726c3v24m9es2knsxrelsud4rhe7qcdf4j0q8452d9czyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7geplux Today I would like to thank the lovely people that build #openSUSE and the #OpenBuildService <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1fvxwps3k269urs6ha8hlaq884d825f4muder2gg48mzh56gsc5ss7dzgdk" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Open Build Service</span> (<span class="italic">npub1fvx…zgdk</span>)</a></span> and those that contribute to @opensuse by maintaining packages.<br/><br/>And of course all the maintainers of the projects and tools. There are too many to mention.<br/><br/>Have a nice weekend everyone.<br/><br/>#linux #thankyourmaintainers 2024-09-20T16:36:05Z https://yabu.me/nevent1qqs08vhvnz3jvha8efrcfsmfhk9sv62uhn4jxr4rh75lucz8y0nh8lczyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7uw2jwu In reply to <a href='/nevent1qqsw63vw3jth5ntm6vm25jrx5ca6jdjz8crdkxvzq79sdw960ddhteqg25jkd'>nevent1q…5jkd</a><br/>_________________________<br/><br/>Thanks for the insights! Unreliable restore is a no-go! 2024-08-19T15:18:46Z https://yabu.me/nevent1qqsrtxq84j2hluh030rpkd9eewc77rc82rxsu9u6nxc4x36av5fv8kczyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7j93k4v In reply to <a href='/nevent1qqsz2dvhe0v0jl3f7wsk39ttmnq8s4fcrngxsv7u537lk5ur7hl7xnc5054ag'>nevent1q…54ag</a><br/>_________________________<br/><br/>I have not used Seedvault, will take a look... 2024-08-18T05:50:38Z https://yabu.me/nevent1qqs0pkea9lqx3ps8fp632gxf45nmad57rdvgys47p5w92gvz85xnggczyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7m3r850 The year is 2024. You still can not #backup a #android device properly and completely without crude hacks.<br/><br/>Or can you? 2024-08-17T18:13:20Z https://yabu.me/nevent1qqswdssnjm8mhl9az73vt7nzazwqs8dvq2accpcx8y0q8jsg9rult9szyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl7t7rl8f I just finished reading the #EltonJohn autobiography &#34;Me&#34;. Very entertaining.<br/> <img src="https://digitalcourage.social/system/media_attachments/files/112/808/647/754/344/663/original/08ba514e82039754.jpg"> <br/> 2024-07-18T17:23:47Z https://yabu.me/nevent1qqs8aqth8qawr7fl5plhe9ddj9y82hrudfxtlaxgm7fuet45xc3550qzyr53du8pjjjlppxn80xawd0dy8h9sln7w6zfwre6ptq0cpfh26dl70qvnek &#34;Grokking continuous delivery&#34; by Christie Wilson<br/><br/>Wow, what an incredibly interesting and well written book. Not only usable for software development, but also a good read for #InfrastructureasCode or #GitOps approaches or similar.<br/><br/>And I am not even finished with it, still have part 4 to enjoy...<br/> <img src="https://digitalcourage.social/system/media_attachments/files/110/399/637/496/595/803/original/64bf40e05f0e628a.jpg"> <br/> 2023-05-20T06:43:44Z