Hi all,
For all people awaiting for an LXC to self host Immich the time has come. The LXC came up a month ago, sorry if it’s a repost.
For those like me still learning.
Linux Containers (LXC) is an operating system-level virtualization method for running multiple isolated Linux systems (containers) on a control host using a single Linux kernel.
They’re super useful when running Proxmox. You can create an LXC container and have it booted to a shell in under a minute
You can create an LXC container and have it booted to a shell in under a minute
Rhel5 on a VM booted in under a minute easily. Rhel6 on a VM booted in around a minute. Rhel7 on a VM booted in almost a minute, and the trend accelerated from there. Wow, is RhelX a piece for its frail-boat booting.
The key is the monolith.
So it’s Docker with extra steps?
Fewer steps actually, since it is built into the kernel
Thank you! A much needed info
Know what you’re running when you pipe to a bash script. Curl-bash pipes are a security mess.
Good advice but ime these helper scripts are legit.
I’m pretty familiar with TTech’s legacy, I just mention it because if the repos ever got compromised, it could be a shitshow. IDK what security measures the new maintainers use to secure their access or check PRs, but I get nervous when it’s as popular as it is and such a good vector for complicated installations that are hard to check out. I also don’t know the new maintainers from Adam.
Personally, I’d use the scripts as a guide for DIY.
ime these helper scripts are legit.
Let’s consider a moment the risk you’re subjecting people to, just with a recommendation based on the value of the things you secure without considering what they need to secure.
I’m not subjecting anyone to anything. I acknowledged that this practice is risky, however these scripts are maintained by a community of other nerds just like every other open source project you enjoy. If you’re going to use these proceed with the same caution you would anything else on the internet, but in my experience they are safe.
deleted by creator
deleted by creator
I created a little proof of concept last year to highlight some of the risks https://stoppip.ing/
Curl-bash pipes are a security mess.
Security mess? Red flag. Avoid.
New to me, thank you!
What’s the licensing situation with Immich? Is it still “unlimited trial period”?
Its 100% free with a totally optional donation. Appreciate there’s been a lot of concern about their partnering with FUTO, but I checked heavily into it and I’m comfortable there won’t be a rug pull.
It’s still AGPL afaik
EDIT:
This project is available under GNU AGPL v3 license.
Still is
This looks great! Is there an easy way to migrate from a docker setup to this lxc?
Docker is the better option IMO if you already have it set up, much easier to manage.
Why? Unless you need specific kernel features, Docker is superior because of containerization (runs on host kernel with no overhead), uses less space (layered image), and is easy to set up a complicated network (you want certain apps to run behind WireGuard with reverse proxy? Few lines in yaml).
LXC is containerization. Both it and Docker are using the same kernel APIs.
Currently I’m nesting docker in an LXC. I also believe that the LXC updater would take care of the breaking changes that happen with the complex docker compose changes (hasn’t in several releases but it happens)
Great to hear, thank you!
I read a lot of good things about LXC and how it was better for such things when I was starting my selfhosting journey an year or so ago. Immich was my need of the hour but I could not find any tutorials to get it done back then and now I know why. Being good and being accessible for noobs are two different things.
