u/nexusband on Reddit
Basically, all of those https://www.qnap.com/en/how-to/faq/article/nas-recovery-guide-for-x86-based-nas There are some older models that can only boot from the DOM, however most newer ones (especially the AMD Ryzen ones, which i personally would highly recommend) have no issue. The early TS-X77 models do not boot from NVME, but that can be overcome with some creativity :)
If you want things to just work: Chromecast with Android TV, plus PiHole or Adguard to pull out of all the telemetry and advertising (except maybe Amazon Prime’s new stuff).
Also, Google at least gives you the possibility to pull out of the personalized stuff and doesn’t work much with 3rd party advertiser’s. And those they work with are being taken care of with PiHole and Adguard.
Sure - i should have mentioned, that the system itself runs not on the ZFS but from it’s own SSD. So a “ZFS Cache in Memory Bit-Flip” should (theoretically…) not cause a hard-lock/freeze. It would probably trigger a complete garbage collection though.
And yes - that’s what was so confusing to me, no kernel panic, no log entry…nothing, just a sudden, random freeze.
…some Linux machines definitely need anti-virus software. Samba or NFS servers, for instance, may store documents in undocumented, vulnerable Microsoft formats, such as Word and Excel, that contain and propagate viruses. Linux mail servers should run AV software in order to neutralize viruses before they show up in the mailboxes of Outlook and Outlook Express users.[
Which is exactly what I said. ClamAV serves a very specific purpose and that’s this one.
There are still no viruses for Linux specifically designed to break in to Linux, because it’s not possible.
There are none. ClamAV is the only one there is, because it has a very specific and narrow purpose. There are no viruses for Linux.
Chrootkit and rkhunter are also built for very specific things (detecting rootkits - or making them) and are not designed to protect, they are designed to analyse.
My writing here also isn’t specifically to OP, but to all others that may find this thread - Anti Virus for Linux is BS and unless you are running SMB and still have lots of Windows in your network, it’s absolutely not needed, especially if you follow the basics (like not doing stuff as root, using sudo and not giving out any system rights).
Proxy, Authentique (or what’s it called - Authentication on all stuff) and Dashy. In both cases it’s like: I want easy self hosted at home, I’m not at work. Tbh, I don’t even care for Passwords in my home net. If anyone is already inside my net, I either trust them or if not, things have gone wrong very much and that’s probably my last concern. I also don’t expose anything to the outside…Zero Tier ftw.
The basic gist of it is, Telekom switches back to DSL only, if it detects VPN traffic. And that’s only 2 Mbit/s upload. However, with the 5G Hybrid and SSL Connections on Port 443 i do get the full 60-90 Mbit/s upload. I could just put the Telekom router in my “main” network and have it be the Gateway, but that doesn’t go well with some devices i have.
I don’t really want to host stuff, i’m fine with having to make a connection (like WireGuard or a VPN), but if i do it directly, i only get DSL Speeds, because WireGuard is also “detected” now. Everything that’s not Port 443 or Port 80 get’s routed over DSL…
https://en.m.wikipedia.org/wiki/Master_Quality_Authenticated
Basically trickery with alleged lossless, but it is not even close to lossless and you need very special players that can unfold MQA. Tidal got a lot of criticism for it and eventually switched away to FLAC…but the way they handled it was pretty bad and it still brushes me the wrong way.