In addition to the other replies, zsh gets unbearably slow once you start to actually use all it's features. Fish is much faster in my experience. Although a lot of the differences disappear once you start using an external prompt like Starship.
It can be run as root, but it doesn't have to, as it is only accessing the host network, not any user-specific network. Crossing the boundaries from host network to user-specific networks is left to the reverse proxies running as those specific users.
Port 80 and 443 can normally only be bound as root, but you can work around that with either firewall rules or by using something like this in your sysctl config:
You can use the per-user reverse proxies as a bridge between the host network and the user-specific internal network. So for a user coming from outside the path looks like this:
User -> main reverse proxy on main IP and port 80/443 -> user-specific proxy listening on main IP with port 8080 and proxying to user-specific internal network -> destination container listening on user-specific internal network.
And for a container running as a different user the path will be the same, but the user-specific reverse proxy will be listening on port 8081 and higher for example.
You would be safe in almost all places. There are some places I wouldn't go to alone when you're a woman but that's true in almost any country, and those aren't tourist places anyway.
The only place you would be required to cover your head is when visiting a mosque. I would advise you to dress somewhat modest when you're out and about, i.e. covered stomach, shoulders and upper legs. Not because it's mandatory but because the locals appreciate it when you adjust to their customs. Bikinis and such are fine on private beaches of hotels.
The solution to this can be multiple reverse proxies. Each user runs it's own reverse proxy (if you actually need one, otherwise you let the container bind directly to a port on the host system). Then you run one main reverse proxy on port 80/443 that proxies to those other ports based on hostname.
The upside of this construction is that containers running as different users can't directly access each others internal networks, which is much better for security, as those networks often contain barely protected services, which is why you're using a reverse proxy in the first place.
Edit: there are different options with custom networks and such, but they're even more complicated so I wouldn't advise them.
They're not on an even playing field, Oman has much less oil than other Arab nations. This means they have been thinking of alternate sources of income, such as tourism, for decades now, which had a big impact on the whole country.
What also helps is that the previous (now deceased) Sultan of Oman was schooled in the UK, and had some very modern notions of how the country should function. He basically guided it from a positively medieval country to a fairly modern one, striking a balance between progress and retaining the good things of their lifestyle.
There's still plenty of things that could be better in Oman, such as the massive quality of life differences between native Omanis and Indian foreign workers, but in my opinion it's one of the nicest countries in the world to visit. The people are wonderful (as long as you respect them, they are also proud), the nature is stunning, and their way of life is very laid back.
Source: have lived there a couple of years many decades ago and been back several times since.
Agreed. IMHO Nexus Mods has improved since the takeover, so hopefully the same will happen here. I'm not against a site owner making money off of it, as long as it's done well and you get enough value in return. That's something entirely different than enshittification.
Yeah that's completely normal, looks absolutely fine to me. For more info on how linux uses memory I suggest reading https://www.linuxatemyram.com/
To add: that link suggests looking if your swap usage is changing. Linux is quite happy to stuff some memory that isn't actually used in swap. If it was right about it not being used you should see the swap usage not changing much, so your SSD isn't really being used either apart from the initial swap-out. If your swap usage keeps fluctuating wildly there is more going on which might warrant further investigation.
Usenet is a bit like the fediverse, it has tons of different servers that all talk to each other, and the admins of each server decide which groups it carries. So it you use a server outside the jurisdiction of the police you're afraid of you're somewhat anonymous.
The problem for Russia is that that's only good news if someone is willing to take on more debt. But bond sales were suspended in July because nobody was buying them, so there's no real path to increasing that debt-to-GDP ratio.
Sexbots are a lot easier though, all they have to do is lie there, take it, and tell us what we want to hear. LLMs are already reasonably good at the last bit.
Yeah I was referring to the original nationalist government, and was under the impression that that position was never formally abandoned, even though it has nothing to do with what the people want now. But thanks for adding more detail, there was definitely stuff in there I didn't know!
Oh absolutely, China is clearly in the wrong here. I'm just saying the history is a lot more complicated than in the contrived XL Texas example from above.
The underlying problem was that the fibers had entered his body and were mobile, so almost impossible to remove, even in multiple operations. Any secondary problems they caused, such as those bacteria, kept getting worse.
So no, the fibers themselves were definitely a large part of the problem.
In addition to the other replies, zsh gets unbearably slow once you start to actually use all it's features. Fish is much faster in my experience. Although a lot of the differences disappear once you start using an external prompt like Starship.
I use Walker: https://github.com/abenz1267/walker
Still early days but it has a LOT of features while still being really fast.
It can be run as root, but it doesn't have to, as it is only accessing the host network, not any user-specific network. Crossing the boundaries from host network to user-specific networks is left to the reverse proxies running as those specific users.
Port 80 and 443 can normally only be bound as root, but you can work around that with either firewall rules or by using something like this in your sysctl config:
You can use the per-user reverse proxies as a bridge between the host network and the user-specific internal network. So for a user coming from outside the path looks like this:
User -> main reverse proxy on main IP and port 80/443 -> user-specific proxy listening on main IP with port 8080 and proxying to user-specific internal network -> destination container listening on user-specific internal network.
And for a container running as a different user the path will be the same, but the user-specific reverse proxy will be listening on port 8081 and higher for example.
You would be safe in almost all places. There are some places I wouldn't go to alone when you're a woman but that's true in almost any country, and those aren't tourist places anyway.
The only place you would be required to cover your head is when visiting a mosque. I would advise you to dress somewhat modest when you're out and about, i.e. covered stomach, shoulders and upper legs. Not because it's mandatory but because the locals appreciate it when you adjust to their customs. Bikinis and such are fine on private beaches of hotels.
The solution to this can be multiple reverse proxies. Each user runs it's own reverse proxy (if you actually need one, otherwise you let the container bind directly to a port on the host system). Then you run one main reverse proxy on port 80/443 that proxies to those other ports based on hostname.
The upside of this construction is that containers running as different users can't directly access each others internal networks, which is much better for security, as those networks often contain barely protected services, which is why you're using a reverse proxy in the first place.
Edit: there are different options with custom networks and such, but they're even more complicated so I wouldn't advise them.
They're not on an even playing field, Oman has much less oil than other Arab nations. This means they have been thinking of alternate sources of income, such as tourism, for decades now, which had a big impact on the whole country.
What also helps is that the previous (now deceased) Sultan of Oman was schooled in the UK, and had some very modern notions of how the country should function. He basically guided it from a positively medieval country to a fairly modern one, striking a balance between progress and retaining the good things of their lifestyle.
There's still plenty of things that could be better in Oman, such as the massive quality of life differences between native Omanis and Indian foreign workers, but in my opinion it's one of the nicest countries in the world to visit. The people are wonderful (as long as you respect them, they are also proud), the nature is stunning, and their way of life is very laid back.
Source: have lived there a couple of years many decades ago and been back several times since.
Agreed. IMHO Nexus Mods has improved since the takeover, so hopefully the same will happen here. I'm not against a site owner making money off of it, as long as it's done well and you get enough value in return. That's something entirely different than enshittification.
Also the hole is still there, but it's slowly healing now instead of getting worse.
That's an impressive amount of clichés in one trailer.
Yeah that's completely normal, looks absolutely fine to me. For more info on how linux uses memory I suggest reading https://www.linuxatemyram.com/
To add: that link suggests looking if your swap usage is changing. Linux is quite happy to stuff some memory that isn't actually used in swap. If it was right about it not being used you should see the swap usage not changing much, so your SSD isn't really being used either apart from the initial swap-out. If your swap usage keeps fluctuating wildly there is more going on which might warrant further investigation.
Usenet is a bit like the fediverse, it has tons of different servers that all talk to each other, and the admins of each server decide which groups it carries. So it you use a server outside the jurisdiction of the police you're afraid of you're somewhat anonymous.
The problem for Russia is that that's only good news if someone is willing to take on more debt. But bond sales were suspended in July because nobody was buying them, so there's no real path to increasing that debt-to-GDP ratio.
Anyone who can sleep through Bassnectar - Raw Charles deserves some kind of award.
Sexbots are a lot easier though, all they have to do is lie there, take it, and tell us what we want to hear. LLMs are already reasonably good at the last bit.
Yeah I was referring to the original nationalist government, and was under the impression that that position was never formally abandoned, even though it has nothing to do with what the people want now. But thanks for adding more detail, there was definitely stuff in there I didn't know!
Oh absolutely, China is clearly in the wrong here. I'm just saying the history is a lot more complicated than in the contrived XL Texas example from above.
IIRC Taiwan thinks there should only be one China too, except they should be in charge, which slightly complicates matters.
As a post-covid sufferer I'm definitely feeling this one.
The underlying problem was that the fibers had entered his body and were mobile, so almost impossible to remove, even in multiple operations. Any secondary problems they caused, such as those bacteria, kept getting worse.
So no, the fibers themselves were definitely a large part of the problem.