12:02 <hartan[m]> Hi,

12:02 <hartan[m]> has anyone here attempted to use FCOS as base for a self-hosted NAS before? Now that cockpit gained the ability to manage NFS/SMB shares I'm thinking about replacing my TrueNAS with something that has BTRFS. In general I don't need a pretty UI for configuration or maintenance, I'm quite happy living in the CLI. Or should I prefer regular Fedora Server for a usecase like that?

12:09 <shanduur[m]> Is there any particular reason why you want to choose BTRFS over ZFS?

12:14 <hartan[m]> shanduur: It's the default in Fedora, I do quite like how it work and am pretty comfortable handling the btrfs-progs, most of all I can't use send/sync between btrfs and zfs. I don't want to resort to having to rsync everything and then doing snapshots on that (Because it's just so insanely slow compared to send/receive).

12:14 <hartan[m]> But I'm open for discussion: Do you have particular reasons for why I should prefer ZFS over BTRFS for a NAS?

12:15 <sgallagh> dustymabe, Colin Walters When performing an rpm-ostree transaction, I know that `/etc` isn't available (or is limited to the defaults?). Is there a path that I can use to have packages have access to a locally-modified file? Is `/var` available?

12:36 <lucab> Stephen Gallagher: do you have a more concrete example of what you are attempting? Both /etc and /var should be available, but there are caveats

12:38 <walters> Stephen Gallagher: The rationale for the current design is that when building images server side, the per-client `/etc` is inherently not available, and we try to keep symmetry between server and client flows

12:38 <sgallagh> I need to cryptographically sign a file. My CA key is local.

12:38 <walters> That sounds like something better done in a systemd unit

12:38 <sgallagh> I cannot do it during a systemd unit

12:38 <sgallagh> Because I'm trying to sign a kernel driver.

12:40 <sgallagh> Which of course is on the immutable FS

12:40 <sgallagh> And it signs in-place, not detached.

12:43 <dustymabe> hartan[m]: I don't know of anyone doing that right now, but I'm sure some people are.. i'm planning to set up my own NAS in the future (next few months) based on FCOS

12:44 <walters> Stephen Gallagher: I think 3rd party kmod stuff is going to work a lot better with https://fedoraproject.org/wiki/Changes/OstreeNativeContainer but...for now yes this one is hard, you could probably hack around it by using the kernel keyring

12:47 <sgallagh> I don't see how the keyring would help, since it's not available until after the kernel is already running (which means post-measuring)

12:49 <walters> I mean as a way to smuggle the key behind the containerization rpm-ostree uses today

12:49 <walters> instead of putting it in `/etc`

12:50 <sgallagh> ah, I get you now

15:08 <Eighth_Doctor> I wish we had OS-local keyrings for kmod certificates

16:03 <dustymabe> needs LGTM: https://github.com/coreos/fedora-coreos-config/pull/1740

18:42 <hiredman> I am interesting in installing amazon's corretto jvm on fedora-coreos, but it looks like it fails in some kind of loop calling alternatives, has anyone gotten it to work?

18:43 <dustymabe> hiredman: where are you trying to run the software? in a container?

18:44 <hiredman> nope

18:44 <hiredman> rpm-ostree install https://corretto.aws/downloads/latest/amazon-corretto-18-x64-linux-jdk.rpm

18:45 <dustymabe> hiredman: I'd recommend installing things like that into a container (you can start with a Fedora container as the base if you'd like)

18:46 <dustymabe> updates alternatives don't quite work right in the rpm-ostree world: https://github.com/coreos/fedora-coreos-tracker/issues/677

18:46 <dustymabe> so there are two issues here:

18:47 <dustymabe> 1 - for FCOS we generally try to get you to run software in containers (makes automatic updates more reliable)

18:47 <hiredman> oh neat, I'll check out those issues

18:47 <dustymabe> 2 - updates alternatives don't work right (we should fix it, but haven't had a chance to yet)

18:48 <dustymabe> hiredman: np - thanks for using Fedora CoreOS

18:50 <hiredman> yeah, I do most of my software development for work sshed in to a vm running emacs in tmux, and I am trying out coreos as a way to make os maintaince on the vm less of an issue, I've got a few support services running as podman containers, but I prefer to do the actual development outside of a container

18:50 <hiredman> I am kind of surprised so far how well it just works like this

18:52 <hiredman> the most annoying thing is actually issues with the software I am working on, because development for it started on macs it assumes source code lives under /Developer, and despite no one working on it using a mac any more, it still assumes that

18:52 <walters> I'd take a look at `toolbox` for development; I use it on my host desktop and rarely execute commands outside of it on my host

18:54 <hiredman> I'll check that out