LXC on Arch Linux and elsewhere - 2025-01-05
The Linux kernel containers (LXC) is a nice and efficient mean to run containers. Far lighter and more efficient than Docker ones, it is well integrated in GNU/Linux system environment.
LinuxContainers developers community followed, Aleksa Sarai Incus interface, a fork of Canonical's LXD. It have both a cli and a web interface, like the very powerful Proxmox, maybe not reached the same level (in january 2025), but can be installed on your own linux, instead to having to work on a proxmox specific server. Both have their pros and cons.
I will present here all installation process step by step on Arch Linux to make LXC container working:
- In unprivileged mode (for security)
- With both busybox, the very light Alpine Linux as container (8 MB rootfs, thanks to light Musl libc and Busybox), Arch Linux or Debian.
- Crossarchitecture compatible containers (ARM (32/64-bit), RISC-V (32/64/128-bit), and x86 (32/64-bit), should work the same way with Loongson or PowerPC, as soon tempaltes are available.
Disclamair:
- The official Linux container documentation, Getting Started that could be really generic and miss some point in my case.
- The official Arch Wiki give lot of possibilities, that could lost the user, I have to navigate and search myself to found a working solution that fit my needs and willing.
- This Stan's blog blog tutorial helped me resolved some not well documented parts about the bridge.
Block AI bots an efficient way - 2024-12-14
With hipe on useless AI technologies, including ChatGPT or some other inefficient AI models, Lot of malicious companies, thinking they will found El Dorado, try to take profit of all datas they can obtain on the web, without respecting Netiquette conventions.
Suchir Balaji, a whistleblower that described OpenAI illegal reusage of other creator content has been found dead in its US partment, see "Police rules out foul play in death of OpenAI whistleblower Suchir Balaji"
As a result, more and more web service see their traffic grow insanely with most part of these bots, often saturing services like a DDoS. Search Engine crawlers generally limit their request to 1 time every few seconds to avoid overload of web servers, but recent AI bot crawlers scan as fast as possible. ClaudeAI is one of these famous bots. Until recently they at least respected "User Agent" field, that describe the user agent used, allowing web services to select which user agent they want to serve to. But as most services are blocking these chat bots due to their non-respect of crawling conventions, some newcomers to Internet, think that hiding or forging User Agent as a user Browser would be a good solution to still thieve datas to train their models.
As a result, services start to block too much things and Web users start to complain to not be able to visit regular web sites, detected as AI bots, they are blocked. And a fun sideffect, is that ibots train on bader and bader result after every new generation, degrading AI database quality that degrade the content etc....
Here are the methods I used to block an efficient way a large part of badly managed AI bots without blocking end Users.
Bootstrap Arch Linux by chroot - 2024-11-10
How to install Arch from a Debian or derivative (or other arch), using bootstrap archive and chroot.
Also added some tips for Manjaro-keyring problems, this arch derivative is well known for that.
The command pacstrap also help to install arch, the official tutorial explains how to use it
- This one too, but has an error at least on EFI mount point (boot/efi partition must be mounted in /boot, not /boot/efi and contain an efi (or EFI, FAT is not case sensitive) directory.
- Another one UEFI with LUKS encryption
WIP: Still doesn't manage to have a bootable UEFI+GPT, systemd-boot UEFI Boot Manager, bootable system (See also Archiwiki systemd-boot dedicated page)
The Linux kernel containers (LXC) is a nice and efficient mean to run containers. Far lighter and more efficient than Docker ones, it is well integrated in GNU/Linux system environment.
LinuxContainers developers community followed, Aleksa Sarai Incus interface, a fork of Canonical's LXD. It have both a cli and a web interface, like the very powerful Proxmox, maybe not reached the same level (in january 2025), but can be installed on your own linux, instead to having to work on a proxmox specific server. Both have their pros and cons.
I will present here all installation process step by step on Arch Linux to make LXC container working:
- In unprivileged mode (for security)
- With both busybox, the very light Alpine Linux as container (8 MB rootfs, thanks to light Musl libc and Busybox), Arch Linux or Debian.
- Crossarchitecture compatible containers (ARM (32/64-bit), RISC-V (32/64/128-bit), and x86 (32/64-bit), should work the same way with Loongson or PowerPC, as soon tempaltes are available.
Disclamair:
- The official Linux container documentation, Getting Started that could be really generic and miss some point in my case.
- The official Arch Wiki give lot of possibilities, that could lost the user, I have to navigate and search myself to found a working solution that fit my needs and willing.
- This Stan's blog blog tutorial helped me resolved some not well documented parts about the bridge.
With hipe on useless AI technologies, including ChatGPT or some other inefficient AI models, Lot of malicious companies, thinking they will found El Dorado, try to take profit of all datas they can obtain on the web, without respecting Netiquette conventions.
Suchir Balaji, a whistleblower that described OpenAI illegal reusage of other creator content has been found dead in its US partment, see "Police rules out foul play in death of OpenAI whistleblower Suchir Balaji"
As a result, more and more web service see their traffic grow insanely with most part of these bots, often saturing services like a DDoS. Search Engine crawlers generally limit their request to 1 time every few seconds to avoid overload of web servers, but recent AI bot crawlers scan as fast as possible. ClaudeAI is one of these famous bots. Until recently they at least respected "User Agent" field, that describe the user agent used, allowing web services to select which user agent they want to serve to. But as most services are blocking these chat bots due to their non-respect of crawling conventions, some newcomers to Internet, think that hiding or forging User Agent as a user Browser would be a good solution to still thieve datas to train their models.
As a result, services start to block too much things and Web users start to complain to not be able to visit regular web sites, detected as AI bots, they are blocked. And a fun sideffect, is that ibots train on bader and bader result after every new generation, degrading AI database quality that degrade the content etc....
Here are the methods I used to block an efficient way a large part of badly managed AI bots without blocking end Users.
Bootstrap Arch Linux by chroot - 2024-11-10
How to install Arch from a Debian or derivative (or other arch), using bootstrap archive and chroot.
Also added some tips for Manjaro-keyring problems, this arch derivative is well known for that.
The command pacstrap also help to install arch, the official tutorial explains how to use it
- This one too, but has an error at least on EFI mount point (boot/efi partition must be mounted in /boot, not /boot/efi and contain an efi (or EFI, FAT is not case sensitive) directory.
- Another one UEFI with LUKS encryption
WIP: Still doesn't manage to have a bootable UEFI+GPT, systemd-boot UEFI Boot Manager, bootable system (See also Archiwiki systemd-boot dedicated page)
How to install Arch from a Debian or derivative (or other arch), using bootstrap archive and chroot.
Also added some tips for Manjaro-keyring problems, this arch derivative is well known for that.
The command pacstrap also help to install arch, the official tutorial explains how to use it
- This one too, but has an error at least on EFI mount point (boot/efi partition must be mounted in /boot, not /boot/efi and contain an efi (or EFI, FAT is not case sensitive) directory.
- Another one UEFI with LUKS encryption
WIP: Still doesn't manage to have a bootable UEFI+GPT, systemd-boot UEFI Boot Manager, bootable system (See also Archiwiki systemd-boot dedicated page)