4 ms·

Founder here. Nice surprise to see this posted. Any questions, drop them here.

by m3nu 4y ago

goodburb 4y ago
Any detailed privacy information? e.g storage encryption and access, system credentials etc. Why do some apps require billing information for trial?
- m3nu 4y ago
  There is a boiler plate privacy page, but not with those technical details yet. First, storage isn’t encrypted and I can’t think of threat scenarios that require it, since we only use bare metal servers and control the drives. Wouldn’t add much benefit at the cost of higher CPU usage. For your account, you can enable TOTP 2FA from Account > Password/2FA. For our production servers, any admin access needs a hardware Yubikey.
  - eptcyka 4y ago
    If you control the drives, what will you do when old drives are cycled out? Will you just dump them in a bin for a letter agency to come and harvest my cat photos? IMO, FDE is easy enough to do, even if the users never get to do it themselves. It sort of protects the users from leaking their data in the event that a company goes out of business or someone breaks in to steal hardware.
    - m3nu 4y ago
      Usually overwrite the data a few times before decommissioning the server. I’ll do some testing for the next server to see how much overhead FDE would add.
tealpod 4y ago
No questions, just want to say Thank you. I see a great need for such service, planning to use some soon. Never heard about Pikapods before. Maybe there will be good demand for simple db like SQLite. Just a suggesion. Goodluck
- m3nu 4y ago
  Some apps already use SQLite as storage. In addition we run shared Postgres and Mariadb.
_j9fj 4y ago
Why Malta? Any benefits to being incorporated/hosted there? Pros/Cons? Are you planning on including resource intensive media/other apps like Plex, Emby, Jellyfin, Sonarr, Radarr etc as well? Also, I HIGHLY doubt you're "surprised" to see this posted here and elsewhere (like on Reddit: https://www.reddit.com/r/selfhosted/comments/ulm395/pikapods_instant_open_source_app_hosting/i7wa4ni/ https://www.reddit.com/r/selfhosted/comments/ulm395/pikapods...) as this all appears engineered / deliberate with your involvement - I mean, your response is literally identical - which is fine and all, but transparency is likely a better approach. Good hustle though.
- m3nu 4y ago
  Yeah, English speaking and inside the EU are some pros. (European myself) I’m trying to stay away from apps with large piracy/abuse potential for now. Later they may go on a dedicated server in a friendly country like Netherlands.
anon56 4y ago
I have some questions: If I understood correctly, this service only allows managed hosting from a curated list of services/apps? I assume that I cannot run my own docker containers. There are a lot of Run Your Own links/text, which made me think first that I could run my own, but instead it seems that I can choose what can be run for me. Assuming this is OCI based, how are the containers isolated? Is it with cgroups and namespaces (because of rootless), but still sharing the kernel or are users placed inside separate VMs? What about storage/disk/volume encryption? If I get allocated 10GB of data from the disk, does it have readable, but deleted data from a previous user? How is my data secured on the disk? I currently have a usage pattern with Jitsi, which I host when I need to have a meeting. I use it a few hours a week and a minute/hour based cloud pricing from many providers are ideal for this. It is relatively cheap to launch even a beefy instance for only a couple of hours at a time. I didn't see Jitsi on the list, but also the pricing is only listed as monthly. Is there more granular pricing? What about more closed source software containers, like game servers? I didn't see those on the list. I'm pretty sure Minecraft, Valheim, Satisfactory etc. servers would bring more customers and make the service more popular. What about managed databases? I also saw Gitea, but not Gitlab. Your offering seems to target somewhat similar audience to Linode's Marketplace. Linode calls them "one click apps": https://www.linode.com/marketplace/ https://www.linode.com/marketplace/ Your pricing seems cheaper than Linode's, but is there any other advantage to use your service over theirs? Linode can even manage and configure DNS settings for custom domains automatically for you for their one click apps. I like your website and it works well on mobile. This service also seems at glance like a great idea. I wish there was a bit more information to help me understand what this service does exactly and how it differs from the competition.
- m3nu 4y ago
  > sharing the kernel or are users placed inside separate VMs? The isolation is with users and SELinux. There are no VMs as those are pretty heavy. > the pricing is only listed as monthly. Is there more granular pricing? Pricing is with hourly granularity, but shown as monthly for simplicity. > What about storage/disk/volume encryption? We run only bare-metal servers, so this is less of a concern unless you expect the whole server to be stolen. Data still needs to be accessible all the time. > What about managed databases? It's more focused on end users, rather than devs. So trying not to go overboard with very technical apps. > I also saw Gitea, but not Gitlab. > What about more closed source software containers, like game servers? Still many apps to be added. I also try not to compete with hosting offered by FOSS authors, unless they push other options themselves. Added a note on Gitlab on our feedback tracker: https://feedback.pikapods.com/ https://feedback.pikapods.com/ > Your pricing seems cheaper than Linode's, but is there any other advantage to use your service over theirs? Linode seems to use VMs and asks you to make an install script. So it will be heavier than simple containers I use. Hope I covered a few questions. There was a lot in this comment...
crossroadsguy 4y ago
Plans to allow 3-4 apps on one pod? Something that literally is by just one person? Maybe something that hosts notes server, contacts, calendar etc?
- m3nu 4y ago
  One pod maps to one public URL and one Docker image. So would be hard to change the setup like this.
john-titor 4y ago
Cool idea. Can you comment on who the owner of the actual server hardware is and on the locations of those?
- m3nu 4y ago
  We rent from our regular colo partners and sometimes buy our own drives, if it helps lower the price. It will eventually show the DC location as tooltip on the region. For the EU it's Hetzner, for US it's INAP and Cogent DCs near Boston, for Asia it will be Leaseweb.
worble 4y ago
This looks great, I'll try it as soon as I get home. One question before I try, say I want to use FileRun or Photoprism but mount an S3 bucket for the storage, do we have enough configurability to accomplish that?
- m3nu 4y ago
  Probably yes, so just try it! If any user-configurable env var is missing, I'll add it right away. PhotoPrism already has a LOT of configurable env vars and I don't recall seeing something about S3 there. So it may be inside the app.
  - worble 4y ago
    Sorry, rather than env vars, it was more about being able to mount it as a filesystem, since I know Filerun at least tell you to do that - https://feedback.filerun.com/en/communities/1/topics/1166-aws-s3-buckett-for-filerun https://feedback.filerun.com/en/communities/1/topics/1166-aw...
    - m3nu 4y ago
      If it’s not from within the app, then I’m afraid it’s not possible with the current setup. Also not sure if this would be stable enough. I believe PhotoPrism allows mounting webdav from within the app and import pictures from there.
lf-non 4y ago
This is very interesting. However, I recommend that you keep the pricing constant and cap the resource usage at your end. A lot of semi-technical folks would understand the value of owning data and using open source application but the "fuzziness" around pricing would put them off.

Founder here. Nice surprise to see this posted. Any questions, drop them here.

by m3nu 4y ago

Founder here. Nice surprise to see this posted. Any questions, drop them here.

Any detailed privacy information? e.g storage encryption and access, system credentials etc. Why do some apps require billing information for trial?

m3nu 4y ago
There is a boiler plate privacy page, but not with those technical details yet. First, storage isn’t encrypted and I can’t think of threat scenarios that require it, since we only use bare metal servers and control the drives. Wouldn’t add much benefit at the cost of higher CPU usage. For your account, you can enable TOTP 2FA from Account > Password/2FA. For our production servers, any admin access needs a hardware Yubikey.
- eptcyka 4y ago
  If you control the drives, what will you do when old drives are cycled out? Will you just dump them in a bin for a letter agency to come and harvest my cat photos? IMO, FDE is easy enough to do, even if the users never get to do it themselves. It sort of protects the users from leaking their data in the event that a company goes out of business or someone breaks in to steal hardware.
  - m3nu 4y ago
    Usually overwrite the data a few times before decommissioning the server. I’ll do some testing for the next server to see how much overhead FDE would add.

tealpod 4y ago

No questions, just want to say Thank you. I see a great need for such service, planning to use some soon. Never heard about Pikapods before. Maybe there will be good demand for simple db like SQLite. Just a suggesion. Goodluck

m3nu 4y ago
Some apps already use SQLite as storage. In addition we run shared Postgres and Mariadb.

_j9fj 4y ago

Why Malta? Any benefits to being incorporated/hosted there? Pros/Cons? Are you planning on including resource intensive media/other apps like Plex, Emby, Jellyfin, Sonarr, Radarr etc as well? Also, I HIGHLY doubt you're "surprised" to see this posted here and elsewhere (like on Reddit: https://www.reddit.com/r/selfhosted/comments/ulm395/pikapods_instant_open_source_app_hosting/i7wa4ni/ https://www.reddit.com/r/selfhosted/comments/ulm395/pikapods...) as this all appears engineered / deliberate with your involvement - I mean, your response is literally identical - which is fine and all, but transparency is likely a better approach. Good hustle though.

m3nu 4y ago
Yeah, English speaking and inside the EU are some pros. (European myself) I’m trying to stay away from apps with large piracy/abuse potential for now. Later they may go on a dedicated server in a friendly country like Netherlands.

anon56 4y ago

I have some questions: If I understood correctly, this service only allows managed hosting from a curated list of services/apps? I assume that I cannot run my own docker containers. There are a lot of Run Your Own links/text, which made me think first that I could run my own, but instead it seems that I can choose what can be run for me. Assuming this is OCI based, how are the containers isolated? Is it with cgroups and namespaces (because of rootless), but still sharing the kernel or are users placed inside separate VMs? What about storage/disk/volume encryption? If I get allocated 10GB of data from the disk, does it have readable, but deleted data from a previous user? How is my data secured on the disk? I currently have a usage pattern with Jitsi, which I host when I need to have a meeting. I use it a few hours a week and a minute/hour based cloud pricing from many providers are ideal for this. It is relatively cheap to launch even a beefy instance for only a couple of hours at a time. I didn't see Jitsi on the list, but also the pricing is only listed as monthly. Is there more granular pricing? What about more closed source software containers, like game servers? I didn't see those on the list. I'm pretty sure Minecraft, Valheim, Satisfactory etc. servers would bring more customers and make the service more popular. What about managed databases? I also saw Gitea, but not Gitlab. Your offering seems to target somewhat similar audience to Linode's Marketplace. Linode calls them "one click apps": https://www.linode.com/marketplace/ https://www.linode.com/marketplace/ Your pricing seems cheaper than Linode's, but is there any other advantage to use your service over theirs? Linode can even manage and configure DNS settings for custom domains automatically for you for their one click apps. I like your website and it works well on mobile. This service also seems at glance like a great idea. I wish there was a bit more information to help me understand what this service does exactly and how it differs from the competition.

m3nu 4y ago
> sharing the kernel or are users placed inside separate VMs? The isolation is with users and SELinux. There are no VMs as those are pretty heavy. > the pricing is only listed as monthly. Is there more granular pricing? Pricing is with hourly granularity, but shown as monthly for simplicity. > What about storage/disk/volume encryption? We run only bare-metal servers, so this is less of a concern unless you expect the whole server to be stolen. Data still needs to be accessible all the time. > What about managed databases? It's more focused on end users, rather than devs. So trying not to go overboard with very technical apps. > I also saw Gitea, but not Gitlab. > What about more closed source software containers, like game servers? Still many apps to be added. I also try not to compete with hosting offered by FOSS authors, unless they push other options themselves. Added a note on Gitlab on our feedback tracker: https://feedback.pikapods.com/ https://feedback.pikapods.com/ > Your pricing seems cheaper than Linode's, but is there any other advantage to use your service over theirs? Linode seems to use VMs and asks you to make an install script. So it will be heavier than simple containers I use. Hope I covered a few questions. There was a lot in this comment...

crossroadsguy 4y ago

Plans to allow 3-4 apps on one pod? Something that literally is by just one person? Maybe something that hosts notes server, contacts, calendar etc?

m3nu 4y ago
One pod maps to one public URL and one Docker image. So would be hard to change the setup like this.

john-titor 4y ago

Cool idea. Can you comment on who the owner of the actual server hardware is and on the locations of those?

m3nu 4y ago
We rent from our regular colo partners and sometimes buy our own drives, if it helps lower the price. It will eventually show the DC location as tooltip on the region. For the EU it's Hetzner, for US it's INAP and Cogent DCs near Boston, for Asia it will be Leaseweb.

worble 4y ago

This looks great, I'll try it as soon as I get home. One question before I try, say I want to use FileRun or Photoprism but mount an S3 bucket for the storage, do we have enough configurability to accomplish that?

m3nu 4y ago
Probably yes, so just try it! If any user-configurable env var is missing, I'll add it right away. PhotoPrism already has a LOT of configurable env vars and I don't recall seeing something about S3 there. So it may be inside the app.
- worble 4y ago
  Sorry, rather than env vars, it was more about being able to mount it as a filesystem, since I know Filerun at least tell you to do that - https://feedback.filerun.com/en/communities/1/topics/1166-aws-s3-buckett-for-filerun https://feedback.filerun.com/en/communities/1/topics/1166-aw...
  - m3nu 4y ago
    If it’s not from within the app, then I’m afraid it’s not possible with the current setup. Also not sure if this would be stable enough. I believe PhotoPrism allows mounting webdav from within the app and import pictures from there.

lf-non 4y ago

This is very interesting. However, I recommend that you keep the pricing constant and cap the resource usage at your end. A lot of semi-technical folks would understand the value of owning data and using open source application but the "fuzziness" around pricing would put them off.