Neuer Blog-Artikel

podman kennt keine Upgrade-Funktion wie docker? Brauchen wir auch nicht.

Im neuen howto machen wir aus einem pod einen sauberen systemd-service: startet beim booten, hält sich per auto-update selbst aktuell und rollt bei einem kaputten Image automatisch zurück.

Und alles rootless.

https://just-stuff.blog/podman-pod-automatisieren/

#Podman #Linux #SelfHosting #systemd #Container #FOSS #rootless

FOSS NEWS

Firefox is adding Vulkan video decoding for Nvidia GPUs:
https://www.omgubuntu.co.uk/2026/07/firefox-vulkan-video-decoding-nvidia

Brave Says This is Not a Privacy Feature, But Using Containers Has Its Perks:
https://feed.itsfoss.com/link/24361/17372577/brave-browser-containers

Introducing Lumo 2.0: advanced reasoning models, image recognition and generation, improved web search, memory collection, custom Lumos:
https://proton.me/blog/lumo-2
(Good to see a privacy focused LLM service catching up to the big guys, it's nice to have a non-invasive online service for those who don't have the hardware to run powerful local models, including image generation models)
(It still sucks at answering Linux-related questions though unfortunately)

OBS Studio 32.2.0 Beta 3 Released: Audio Mixer Fixes and Linux Polish:
https://www.linuxcompatible.org/story/obs-studio-3220-beta-3-released-audio-mixer-fixes-and-linux-polish/

Notesnook 3.4 brings an Inbox API, enhanced desktop security, unique URL slugs, and more:
https://alternativeto.net/news/2026/6/notesnook-3-4-brings-an-inbox-api-enhanced-desktop-security-unique-url-slugs-and-more/

Collabora Office 26.04 Keeps AI Optional and Refines Writer and Calc:
https://feed.itsfoss.com/link/24361/17371813/collabora-office-26-04

Ente makes business metrics public, sharing revenue and user counts:
https://alternativeto.net/news/2026/7/ente-makes-business-metrics-public-sharing-revenue-and-user-counts/

Arti 2.5 brings stable Counter Galois Onion, default Congestion Control and security fixes:
https://alternativeto.net/news/2026/7/arti-2-5-brings-stable-counter-galois-onion-default-congestion-control-and-security-fixes/

Sick of AI Slop, Former Microsoft Engineer Built a New, AI-less Notepad:
https://feed.itsfoss.com/link/24361/17371605/tinyretropad-notepad-clone

Krita AI Diffusion 1.52.1 Released to Fix Server Connection Bug in Local AI Art Plugin:
https://www.linuxcompatible.org/story/krita-ai-diffusion-1521-released-to-fix-server-connection-bug-in-local-ai-art-plugin/

Immich 3.0 adds non-destructive editing & OCR on mobile, workflows, and improved backups:
https://alternativeto.net/news/2026/7/immich-3-0-adds-non-destructive-editing-and-ocr-on-mobile-workflows-and-improved-backups/

Kodi 22 Beta Improves Linux Support for Remote Keys and HDR Profile Support:
https://9to5linux.com/kodi-22-beta-improves-linux-support-for-remote-keys-and-hdr-profile-support

ClamAV Unofficial Signatures v8.0.0 Drops After Five Years with Official Docker and ClamAV 1.x Support:
https://www.linuxcompatible.org/story/clamav-unofficial-signatures-v800-drops-after-five-years-with-official-docker-and-clamav-1x-support/

(more FOSS news in comment)

#WeeklyNews #OpenSource #FOSSNews #FOSS #OpenSourceNews #News #Firefox #Brave #Lumo #ProtonLumo #AI #OBS #OBSStudio #Notesnook #Collabora #CollaboraOffice #Ente #Arti #Tor #TinyRetroPad #KritaAIDiffusion #Immich #Kodi #ClamAV #SelfHosting #LLM #Krita #WebBrowser #Browser #FosseryTech

Found this useful tool called Hister. Basically your search history with better capabilities. I often will stumble across something, forget to save it and recalling it is a hit-or-miss if i can remember the title of the page I am thinking of. This makes it easier. It makes a local copy of the text and adds better search capabilities to sites you have visited in the past.

Forgot what Grim Dawn build I was working on. Searched for it and found it from my browsing history.

Another great tool to add to the self-hosting arsenal. Check it out!

https://hister.org/

#selfhosting #homelab

I felt so strongly about this...
... I created a meme.

Was #Vibecoding and caught myself shoving new features that were not needed.

#Programming #Selfhosting #Scripting #Codemonkey

I'm quite happy with my #forgejo replacement for #github. i was missing dependabot enforced correctness and installed a Renovate container. IMO it's an improvement over the github approach. love it.

#SelfHosting #DigitalSovereignty #Homelab #OwnYourData

https://github.com/renovatebot/renovate

I am running forgejo as part of my personal stack.
Related codebase gitea realeased 13 CVE's from 7 to 9.8 in criticality yesterday.
Forgejo's are still under embargo:
https://codeberg.org/forgejo/security-announcements/issues/55

Expect to patch around the 9th.

#minimalist #Linux #Selfhosting #selfhosted #selfhost #InfoSec #Exploit

Podman CVE-2026-44517: A breakout can happen during container build using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive. This is weird, essentially it is a path traversal, which has been fixed in 1.43.2.
Still pulling malicious code into a container, we can agree, is not ideal path traversal or not.

Have not explored the exploitation on this one.

#minimalist #Linux #Selfhosting #selfhosted #selfhost #InfoSec #Exploit

I think the title of this blog is a bit misleading. There was definitely a lot of setup and there is still “15 min” of administrative work going on. But a good list of things one can do to maintain a server for their #selfhosting #homelab
https://cleberg.net/blog/homelab-maintenance.html

New post: IPv6 Foundations.

IPv6 isn't "the future of the internet." It's the internet. IPv4 is the relic we keep alive on NAT life support.

A laid-back tour through the basics: how the addresses are built, the two rules for crushing out the zeros, a /64 per subnet so you stop counting hosts, SLAAC, and why blocking ICMPv6 is a self-inflicted wound.

And no, dual-stack isn't a destination. It's a burden.

https://blog.hofstede.it/ipv6-foundations-the-internet-protocol-you-should-already-be-using/

#IPv6 #Networking #SelfHosting

🎶 pldubouilh/gossa

🎶 a fast and simple multimedia fileserver

Serves multimedia files with a fast dependency-free web UI featuring uploads, streaming and note editing

⭐ Stars: 1094
📅 Last Update: Jun 28, 2026

https://github.com/pldubouilh/gossa

#selfhosted #homelab #selfhost #selfhosting #opensource #fileserver #webserver

It's been a full week of #GlitchySocial #Mastodon instance working with #SelfHosted S3 storage implemented with #Garage two-node cluster.

28.2 GB
141 663 objects

Doing perfectly fine for now. Also much faster than with #Hetzner Object Storage. Also for now.

#GlitchySocialMediaMigration #homelab #selfhosting #selfhost #s3 #objectStorage

Sto cercando una soluzione per segnare note/appunti/idee, che sia preferibilmente sincronizzabile e #FOSS. Tra i papabili candidati, ho trovato: #Joplin, #Notesnook e #Logseq.

La scelta principale ricadrebbe su Joplin Server, in #selfhosting, per via della sua natura "cloud". Pareri in merito? Dovrei considerare altro? Avete suggerimenti?

Eviterei soluzioni tutto in uno come #Nextcloud, che installerei comunque ma a parte, per compartimentare meglio e avere un servizio dedicato ad ogni scopo.

European institutions seem to be all in when it comes to introducing age verification mandates for citizens in member states: https://digital-strategy.ec.europa.eu/en/library/commission-sets-out-common-approach-eu-wide-age-verification-technologies

I now have daily anxiety thinking about the future of the fediverse.

So how do I channel this fear and turn it into something constructive? I'm going back to writing #selfhosting guides for newbies.

It's a great distraction, which gives me a bit of hope. Especially the next guide, which will cover my favorite fediverse software - #GoToSocial (which is powering this instance) - and how to install and configure it. Your own little home on the fediverse! Lightweight and features-packed.

Surely something like this would fall outside the scope of regulation. Right? Right?

#MySoCalledSudoLife #YunoHost #VPS #AgeVerification #privacy #EUBigTech

"You have limited resources and want Syncthing to use as few as possible. You care less about performance."

Also consider increasing the full scan interval on folders that change infrequently.
https://docs.syncthing.net/users/tuning.html#tuning-for-low-resources

#android #cloud #diday #digitalsovereignty #linux #linuxmint #macos #opensource #privacy #raspberrypi #raspi #rpi #selfhosting #syncthing #ubuntu #windows

I'm moving my location history from #OwnTracks to #GeoPulse, because GeoPulse is awesome.

#homelab #selfhosted #selfhosting #selfhost #locationtracking #locationhistory

Alt...

Timeline Generation. Geocoding locations: 20 out of 2086. 1136 of 3203 locations geocoded (2067 pending).

Bei Podman 6 gibt es einige grössere Änderungen, welche eventuell zu Problemen führen können.

Aktuell ist das neue Major Release noch nicht bei meinen Systemen angekommen, aber ich habe mir schon mal angesehen, was da demnächst kommt.

https://linuxiac.com/podman-6-0-lands-with-breaking-changes-amd-gpus-support/
https://github.com/podman-container-tools/podman/releases/tag/v6.0.0
https://byteiota.com/podman-6-migration-guide-breaking-changes/
https://blog.podman.io/2026/06/podman-6-configuration-file-changes/

@homelab_de

#Podman #Linux #Container #Selfhosting

Self-hosters: what's the actual dealbreaker that makes you walk from a tool?

Making sure I ship none of them.

#ai #selfhosting #eutech #opensource #smeldr

📓 Neuer Beitrag auf Shellstube:

OPNsense: Eigene Firewall fürs Homelab mit VLANs

OPNsense übernimmt die PPPoE-Einwahl (FritzBox nur Bridge), fünf VLANs trennen Management, Clients, Gäste, Infrastruktur und IoT, ein Managed Switch trunkt die VLANs und ein Omada-AP strahlt getrennte WLANs aus — ein professionell segmentiertes Heimnetz statt Consumer-Router.

https://shellstube.de/anleitungen/opnsense-firewall-vlans-homelab/
#Homelab #SelfHosting #Linux

@Richard_Littler You're not wrong, but the culture I see doesn't want to invest any trust to speak of in the alternative solutions of the SelfHosters of the world. The SelfHosters know how to make this grassroots internet you suggest, but they all do it in a different way. The normies of the world can't bear losing network effects, to adopt a frayed variety of solutions, where there are no network effects anywhere. The "consensual emotional clan warmth", for lack of a better term (which the status quo affords; using big tech Social media), would be lost, and although they won't come out and admit it, this isn't a thinkable, bearable loss to the normies.

You're up against a wall of unbearable emotional loss; alas this isn't really about logic.

#SelfHosting #OpenSource

This one seems interesting.
Podman CVE-2026-57231
A malicious container image with a malformed Env entry (a key with no value) can trick podman run into leaking the host environment variables into the container. The wildcard glob makes it worse, it can return all host env vars from the launching session without knowing their names.
#minimalist
#Linux #Selfhosting #selfhosted #selfhost #InfoSec
#Exploit

The "weaponization watch" script pulled up two Debian-13 kernel root exploits with public PoCs that the KEV list doesn't include:
CVE-2026-46331 "pedit COW" weaponized sometime around 6/16, unprivileged user to root on Debian 13 trixie (the user namespaces is open by default).
RHEL 10 is also in scope (again, local priv escalation not remote.)
CVE-2026-46333: ptrace logic flaw, local root + credential disclosure, exploits circulating.
Then from yesterday:
DirtyClone (CVE-2026-43503) confirmed against Debian.

#minimalist #Linux #Selfhosting #selfhosted #selfhost #InfoSec

Neuer Artikel: Docker Compose für Einsteiger – https://rootwerkstatt.de/docker-compose-einsteiger/ #docker #selfhosting #homelab #linux

I was researching a way to get to my home network remotely when my #pocketID is unreachable, as I’m using it as an identity provider for #Tailscale. Turns out #unifi One-Click VPN is like Tailscale, but with the server on your router. Also, it is actually a #wireguard so you can connect any server to it. Looks like a good alternative for Tailscale.

#homelab #SelfHosted #selfhost #selfhosting

HOLY CRAP... a RAID (albeit a faux 'SnapRAID') just saved my files! AND it did it in minutes!

I have NEVER had a RAID give me anything but grief. EVER

I mean in 30 years of running RAIDs, I've never had anything but dead controllers and week long rebuilds that failed!

I love you SnapRAID!

#selfhosted #selfhosting #snapraid #homelab

RE: https://hachyderm.io/@adminmagazine/116817007327226137

In the second installment of the self-hosting series, @adminmagazine looks at self-hosted collaboration with Forgejo.

#Forgejo #SelfHosting #Git

Hachja, der T-Online MX ... "Bad reputation" weil wir uns noch nicht kennen, alle meine Mails werden kategorisch abgelehnt.. weil...
Weil ist halt so. Die T-Online möchte anscheinend eine handverlesene Liste an Servern, von denen sie Mails aktzeptiert....
Und ohne Impressum, machen die erst recht nix...
Wieso muss ich mich aktiv von t-online irgendwo auf eine Liste setzen lassen, dass ich legitimer Mailzusteller mit meinem Server bin?
#selfhosting #mailserver #mxadmin #postmaster

📚 benjaminjonard/koillection

Koillection is a self-hosted service allowing users to manage any kind of collections.

Manages self-hosted collections of books, DVDs, stamps and more with customizable metadata and scraping

⭐ Stars: 1223
📅 Last Update: Jun 26, 2026

https://github.com/benjaminjonard/koillection

#selfhosted #homelab #selfhost #selfhosting #opensource #collectionmanager

Qual será a próxima? Desconfiemos de todo projeto com esse modelo híbrido "Community Edition" altamente merdificável. Tentemos focar no software livre e não nos deixemos enganar pela ladainha corporativa do chamado código aberto enquanto convém.

Felizmente, o que foi desenvolvido até então está publicado sob #AGPLv3, algo que, por nos conceder as quatro liberdades essenciais para isso, garante à comunidade que qualquer parte interessada assuma a liderança do projeto para tirar o barco da deriva, digo, continuar seu desenvolvimento como derivado. Parece até que isso já começou. Contudo, como há outros projetos mais ativos com propósitos semelhantes, não há certeza de que seu desenvolvimento continuará.

A notícia já é antiga, de meses atrás, mas tomei ciência apenas hoje. A primeira vez que tive contato com esse programa e o utilizei foi muito recentemente, ao implantar meu servidor #EntePhotos, de cuja documentação MinIO faz parte como armazenamento local. Agora vai ter que ficar assim, na última versão lançada, ao menos por algum tempo. Estava cogitando usar MinIO para mais funções, mas vou deixá-lo apenas para o armazenamento de objetos locais do Ente mesmo. Já devia ter usado algum outro sistema de armazenamento com API compatível com S3. Não é interessante começar algo com um componente importante já descontinuado. Lembrete a mim mesmo: mais atenção a dependências, na próxima vez!

#MinIO #selfhosting #softwareLivre #blambers

My philosophy of self hosting is that it supposed to be free. Despite, I already accepted the burden of paying for my domain.
Some people turn into self hosting because of privacy concerns or branding. But I mainly suffer from the lack of customization.
For example, with emails, I don’t really use them, but I receive spam and I want to filter it smartly
#selfhosting

I am really upset by my attempt to self host a mail server. So it’s not about configuration complexity. That went fine with a good docker setup that I chose. But what is failing me is that port 25 is blocked by my home Internet provider and by cloud service provider.
#email #selfhosting

🛡️ Retour d'expérience : chasse aux bots et scrapers derrière Nginx Proxy Manager

Au programme : architecture custom-block.conf + ai-blocklist.conf, un bug silencieux qui neutralisait tout le blocage, et les patterns observés en live (bots IA, scrapers SearXNG, Tencent Cloud, scanners credentials AWS/GCP...).

Note technique complète ici 👇
https://joplin.blablalinux.be/shares/SDdcZYIFiccbk7MSe807PE

#SelfHosting #Nginx #NginxProxyManager #Sécurité #Linux #AdminSys

@labellaragassa It's a bunch of tradeoffs. There are acceptable solutions where trust is warranted, but they're less convenient, and require more #SelfHosting skills. How far down the rabbit hole of inconvenience are you willing to go, to satisfy more of your ideals?

@Aethel @jwildeboer @mullvadnet @rysiek I for one use #PiVPN a lot, but I also have #Debian and #Linux administration skills, and run these on my own VPS'.

PiVPN (and #Wireguard) is software, is not a business per se. I subscribe to a VPN service which I provide to myself.
Serious geek skills allow for this.

**The point being: If people want to divorce and indemnify themselves from underlying politics of any provider, this is how at least one "middleman" is eliminated, IMHO.** If one feels like one can't trust any VPN provider, then at the end of the day, one needs to learn more #SelfHosting skills.

There needs to be some trust, somewhere.

Da ich gestern auch auf #SelfHosting angesprochen wurde...

Nicht jeder hat die Möglichkeit oder das Interesse an SelfHosting. Aber wenn man es "kann" und sich ein wenig unabhängiger machen möchte - es gibt viele Möglichkeiten!

Kleines persönliches Beispiel von mir:

Angefangen hatte ich mit einem ausgedienten Raspberry, auf der ich Nextcloud installierte. Mittlerweile - mit mehreren Zwischenstationen - steht bei mir daheim mit allen selbstgehosteten Diensten ein ausgedienter, gebrauchter Lenovo ThinkCentre, den ich letztes Jahr geschenkt bekommen hatte. Da wir noch eine dazu passende CPU hatten, bekam der ThinkCentre ein feines Upgrade auf einen i7. 😁

Darauf installiert ist Debian in der Minimal-Konfiguration und - weil ich es mir einfach machen wollte - Docker. Darüber habe ich u.a. installiert:

• #BookStack (dient mir als mein persönliches Server-Verwaltungs-Logbuch)
• #Glance (Dashboard)
• #Heimdall (Dashboard)
• #Homarr (Dashboard)
• #Immich (Foto-Verwaltung und Backup, ähnlich Google Photos)
• #Jellyfin (Media Center)
• #Joplin (Umfangreiche Notizen-App)
• #Linkwarden (Bookmark-Verwaltung)
• #Mealie (Rezepte-Verwaltung)
• #OpenCloud (Backup-Cloud für Dateien aller Art, inkl. selbsgehosteten Office, Markdown und mehr)
• #Organizr (Dashboard)
• #SearXNG (Umfangreiche Suchmaschine)
• #Vaultwarden (Passwort-Verwaltung)
• #WordPress (Blogging-Software)

Zusätzlich werkelt darauf auch noch eine #Nextcloud, allerdings nicht über Docker installiert. Ein #Minecraft-Server ist darauf ebenfalls installiert sowie ein #Emulator zum zocken. 😎

Das alles nutze ich mal mehr, mal weniger.

Gerade bezüglich der Suchmaschine SearXNG war ich erst echt skeptisch. Aber ich nutze diese nun schon über ein Jahr und bin sehr, sehr zufrieden damit. Die Ergebnisse sind nicht - wie bei Google z.B. - voll mit zusammengefassten KI-Ergebnissen, die kein Mensch sehen möchte, sondern mit "echten" Ergebnissen.

Meine Fotos landen allesamt bei Immich - eine wundervolle Software, die ich gerne nutze. Auch die OpenCloud, deren Anfänge ich miterleben durfte, hat sich sehr etabliert und ist für meine gesamten Daten absolute Nummer 1 bei mir, da sie schnell und zügig lädt und Collabora Online als #selbstgehostete #Office-Lösung integriert hat.

Auch Bookstack finde ich super nützlich. Wenn ich Änderungen an der Konfiguration der Server vornehme, trage ich diese Änderungen mit Datum und Uhrzeit hier ein und kann später so nachsehen, was ich wann geändert habe. Ebenso habe ich mir in Bookstack Anleitungen hinterlegt, tägliche Checks, die ich auf den Servern durchführe und weitere Dinge, die ich einfach nur schnell per Copy & Paste ins Terminal einfügen kann.

Am Lenovo ThinkCentre angeschlossen habe ich 3 2,5 Zoll HDDs.

Thema Sicherheit: Das alles ist nur für mich in meinem lokalen Netzwerk erreichbar. Ausschließlich. Zusätzlich ist der Login abgesichert mittels #Yubikey (ein kleiner, physischer Hardware-Sicherheitsschlüssel).

Trotz all dieser Maßnahmen bin ich nach wie vor noch an einige Dinge gebunden. So nutze ich z.B. Proton. Auch habe ich meine persönliche Daten an mehreren Stellen als Backup hinterlegt, auch online, nicht nur bei mir selbstgehostet daheim.

Wer technisches Interesse und Verständnis hat, kann also auch diesen Schritt gehen und ein wenig unabhängiger werden, um von Google und Co. wegzukommen.

Und wer noch einen Schritt weitergehen möchte, kann natürlich auch seine ganz eigenes Mastodon, Friendica o.ä. auf seinem Heimserver installieren - auch das ist gut umsetzbar. So kann man sich noch einen Schritt unabhängiger machen. Die Möglichkeiten, digital unabhängiger zu werden sind groß - man muss es nur umsetzen! 😉

#UnfollowBigTech, #DIDit, #DUTgemacht, #DIDAY, #UnplugBigTech