Very cool, I’ll have to spin up some VMs and test it out myself. Thanks for all the info!

Wow cool! I believe you’re the first person I’ve met that actually used a cluster FS (in their homelab at least). I looked into it myself but it felt like nobody was really using it so I didn’t bother.

Does it involve much more work or is it a fairly transparent replacement to traditional storage options? Assuming one is already using Kubernetes. I’m wondering if it’s worth it to switch to a cluster FS for everything, like Radicale or Tiddlywiki.

Have you tried using Ceph or other distributed storage systems in your kubernetes cluster?

I’m aware of databases that support HA, but the vast majority of self-hosted apps I’ve encountered use file storage, even if they have a database as well. It sounds like you’re proposing shared storage like an NFS share. But if you’re upgrading nodes, at some point you have to upgrade the node hosting the shared storage right? Wouldn’t that take down all services? Unless you use a distributed storage system, but I’ve heard those can get very complicated…

have you found many self-hosted services that suppprt that kind of HA? I can’t imagine services like torrent clients allowing you to stream writes to one node while replicating to the other, though maybe I’m misunderstanding the setup

I believe the UK too

I remember hearing the opposite, that strikes with a set duration were ineffective because management could just wait it out…

how many countries has Signal pulled out of so far? I keep hearing about it

If you’re a developer I recommend the stepsecurity article, a detailed breakdown of the attack. Some highlights about the nx-console attack:

• the malicious version of the extension was only up for 11 minutes before getting detected and taken down, but apparently that was enough to compromise a developer at Github
• portions of the malware were hosted on nx-console’s public Github repo, though hidden in a dangling orphaned commit
• data was exfiltrated through 3 channels, including using a victim’s Github credentials to publish the data on their own repos
• the malware looked for credentials like Github and AWS tokens, likely for future supply chain attacks, and may be the first to steal AI credentials (in this case Claude API)

From the bleepingcomputer article:

“As always this is not a ransom, We do not care about extorting Github, 1 buyer and we shred the data on our end, it looks like our retirement is soon so if no buyer is found we will leak it free,” the cybercriminals said. “If you are interested. Send your offers to the communications below, we are not interested in under 50k, the best offer will get it”

The stealing of AI credentials reminds me of a lemmy post from last year: the first ai agent worm. Imagine a virus that uses AI agents to dynamically probe systems and evolve to spread through infrastructure, meanwhile stealing AI credentials to pay for the tokens that the agents are consuming, a self-funding AI virus!