8 ms·
Docker is the de-facto standard in the community now (and, to a lesser extent, alternatives like LXC or podman). The daemon should be run rootless if possible,
by kayson 4y ago
Docker is the de-facto standard in the community now (and, to a lesser extent, alternatives like LXC or podman). The daemon should be run rootless if possible, or the containers rootless if not.
You can still use VMs, and some use that as an additional layer of isolation because they're virtualizing anyways (performance overhead is really negligible).
I've been self-hosting on my home server for at least 5 years now, and I think I've only seen two or three vulnerabilities across all the services I know about, none of which were ever really exploitable.
- scrozart 4y agoHave you tried using kubernetes to manage your containers? Wondering if the extra level of complexity is worth it for a home server.
- khimaros 4y agoit isn't
- bongobingo1 4y agoKubernetes alone recommends at least 1gb of ram just for itself IIRC, so that may push it out of some home servers such as RPIs or smaller nucs depending on the actual service load.
- robertlagrant 4y agoK3s is half that. Still quite a lot, but not as much!
- prmoustache 4y agoNot with k3s. But still, for a single or less than 3 machines and/or in a single location I don't see the point.
- adra 4y agoI've dabbled, but really docker is way easier than k8s uses until you start moving into multi-server workloads
- vineyardmike 4y ago100% not worth it. If you need multi-host for some reason (beyond “I want it” - and you don’t) then try docker swarm. It’s your home environment. You want it to be easy. You want to use the tools you run not maintain them. If you want to learn k8 for professional growth, learn it separately from a home server. Your home server can be more pet than cattle.
- enos_feedler 4y agoAnd yet my iphone is cattle. Treating any machine like a pet seems like a recipe for disaster.
- zrail 4y agoProxmox + Proxmox Backup Server + external storage (I use my NAS) means I don't really have to worry about disaster, as such, because every VM is backed up nightly. VMs and the hypervisor can all be pets and I can just restore a backup if something happens.
- Karrot_Kream 4y agoIf you're doing something for a hobby, treat it like the special snowflake it is to you. If you're doing something just to get things done, treat it like the utility it is. If you're at home playing around with machines in a homelab, feel free to baby your servers. As far as disaster is concerned, it's not that difficult to install software that really needs minimal maintenance. But it comes down to what you want out of the software and hardware that you run.
- vineyardmike 4y agoMy iPhone is a pet. It’s a pet with a great backup system that turns a new pet into exactly my pet. But it’s still a pet. There’s only one and it changes manually as I need features to change. I download and install things as needed, from gui, with no version control or script to manage it. It’s a pet.
- enos_feedler 4y ago
- chromatin 4y agoKubernetes is 1000% overkill for a home server, but Hashicorp Nomad is very manageable. It runs all my Docker containers at home.