I believe the google framework is installed with less privilege than a system application

I was under the impression you could use microG instead of google services as well if you installed it manually?

Dell optiplex desktop or workstation would def be a gpod idea. Both are much quieter than servers - you can get the workstation if you want a xeon chip and ecc memory - otherwise the desktop will likely do what you need.

Oops!

Look into PICO PSU. Its a small powersupply that uses a power brick to downsize internals. It’s used by homelabbers sometimes.

If Tidal isn’t your cup of tea, check out Qobuz - I’ve had a better experience with it. It doesn’t pay artists as well as spotify, but I think it’s still more than Spotify (iirc)

Perhaps you could configure more than unbound service behind a loadbalancer. Each unbound instance is configured to use different upstream dns servers.

Double check if unbound doesn’t allow you to randomly hop between dns upstreams first, but the above solution should work if that’s unavailable atm.

Also introduces the possibility of DNS poisoning

Yes its possible 👍

Use:

forward-zone:
  forward-addr: 9.9.9.9@853#dns.quad9.net

Sounds like OP is gonna flash OpenWRT… Did you read the post?

How is running a container in an LXC worse than in a VM? It’s not really, is it? No, not really. Kubernetes could also be built on top of the LXC as well, sure. There are a number of genuine benifits from running docker on top of an LXC, and it doesn’t compromise security or come with a significant performance drop (unlike VMs).

If you virtualize unraid, unraid wont have direct drive access - you can get around this by getting an HBA card and forwarding that to the unraid VM. Others have mentioned that proxmox doesn’t have docker support, I personally run docker containers within lxc boxes on proxmox. There are solutions to make managing containers easier, like portainer, if you want to go down that route.

It does, but skipping requires plex pass which is a paid feature

On graphene, don’t feel like switching launchers again - just disabled all network access for nova launcher and its supporting apps… Thanks for the heads up!

Still better than nothing

Haven’t watched, assuming voip

Glad to help :)

rm the container, then run docker system prune -a. This will remove all unused docker images, containers, networks, volumes, etc.

Probably on IPT private tracker

I’d bet you can find it on private trackers - myanonamouse has signups semi-frequently iirc?