Exagone313 @Exagone313@share.elouworld.org

@simula
ls /usr/share/icons/hicolor/*/apps/steam.png

@Lapineige (attention à bien utiliser gpt et pas mbr/msdos)

@Lapineige Je viens de lire les autres commentaires - en EFI ça devrait passer si grub est installé sur un autre binaire que celui de windows, tu auras deux entrées dans l'UEFI.

@Lapineige Le mieux est d'utiliser deux disques, comme ça windows ne touche qu'à son bootloader. Il me semble que les mises à jour majeures de windows réécrivent le bootloader du disque donc adieu le grub sans être syadmin.

@Lapineige J'ai ça dans un coin, je sais pas ce que ça vaut https://github.com/10se1ucgo/DisableWinTracking

@LaurentChemla
végé ça va encore, ça me donne envie de me faire des pizzas
* 3-4 fromage avec roquette fraîche
* pesto, mozzarella, champignons et après cuisson tranches de tomates et roquette
* tomate, mozzarella, champignons, aubergine

@sebsauvage Sinon il y a l'approche de Bedrock Linux https://bedrocklinux.org/

@sebsauvage J'ai déjà fait ça plusieurs fois (sans renommer les subvolumes, pas besoin).

@devnull Y a même des fansubs où ils omettent les traductions des phrases les plus communes. 😂

@devnull Sinon, avec les fansubs d'animés en anglais, je remarque que ce n'est pas toujours fait par un anglophone.
Très souvent l'usage de "because of (someone)" plutôt que "thanks to (someone)" quand c'est positif.

Hey, I'm looking for an Ingress for Kubernetes thas is built to be secure and to be used on self-hosted ("on-premise") clusters.

It must:

* Use certificates from secrets in another namespace (specified in advance) if possible without having access to all secrets in all namespaces
=> Those are wildcard Let's Encrypt certificates managed by cert-manager (until I find another application that doesn't read secrets of whole namespace), I want to deploy multiple applications and to re-use wildcard certificates.
=> I don't want to copy the certificates in multiple namespaces.
=> bye ingress-nginx, traefik or anything relying on the Ingress resource, not supporting that feature on purpose for "security" reasons that are never explained (tell me what I'm missing in RBAC).

* Offer a way to upgrade without any downtime on any connection (although I'll never notice that in my current setup), while using hostPort for ports 80 and 443 (just like I can do with nginx on host)
=> I don't want to use firewall rules on the host to redirect on a NodePort, unless you prove me there is no other way and it is a good practice (I don't want to loose source IP so it would be SNAT?).
=> Since I bind on host ports 80/443, I can't use rolling update, so it needs to update inside the container itself without restart.
=> Maybe it's possible to use SO_REUSEADDR to be able to run multiple pods on the same port?

* Be easy to use with a PodSecurityPolicy.
=> not with a lot of deployments with different service accounts

I'm starting to brainstorm that project since there is no solution to my madness :)

@matrix

User policy for allowing access to a single bucket:

{
"Version": "2012-10-17",
"Statement": [
{
"Action": [
"s3:ListAllMyBuckets",
"s3:ListBucket"
],
"Effect": "Allow",
"Resource": [
"arn:aws:s3:::${aws:username}"
]
},
{
"Action": [
"s3:AbortMultipartUpload",
"s3:DeleteObject",
"s3:GetObject",
"s3:ListMultipartUploadParts",
"s3:PutObject"
],
"Effect": "Allow",
"Resource": [
"arn:aws:s3:::${aws:username}/*"
]
}
]
}