That just moves the problem, what happens if I put a piece of paper between them? Unless they don't interact with anything they still face the same problem.
You can nixos-rebuild her, you have the technology.
Tldr:
Rootful podman with podman run --userns=auto is more secure than one rootless host user running many pods, because those pods could (theoretically) attack each other.
though you still have the possibility of an exploit in the image pull
Rootless podman running one pod (as in service including database and so on) per host user with different subuid Ranges is the most secure, but you have to actually set that up which can be a lot of work depending on distribution.
All devices launching with Android 10 and higher are required to use file-based encryption.
To use the AOSP implementation of FBE securely, a device needs to meet the following dependencies:
- Kernel Support for Ext4 encryption or F2FS encryption.
- Hardware Root of Trust and Verified Boot bound to the Keymaster initialization is required to ensure that DE keys are not accessible by an unauthorized operating system.
https://source.android.com/docs/security/features/encryption/file-based?hl=en
Lose access to your MS account = lose your data forever. No warnings, no second chances. Many people learn about BitLocker the first time it locks them out.
It seems like they just got locked out of their Microsoft account (which stores the bitlocker key). Idk why they can't just reset their password or if this article talks about the times where people couldn't do that due to missing email access or maybe resetting the password deletes the bitlocker keys?
Either way though, the problem is that Microsoft is forcing encryption on everyone and not properly educating them on the consequences like "Backup your decryption key if you care about the data" in a way a normal user actually listens to.
But my streak is at 419, I can't stop now!
No Problem!
If you want to fix the issue: That seems like the hostname for one of the databases is wrongly set in the environment file, the hostname of containers is the same as the container name which can be read using podman ps.
Sounds like a problem fixing itself, at some point MacOS is going to have problems if it can't edit a config is my guess.
I thought this was an entry level publishing
Behold, a woman
Sure, I set it up in nixos though this is the short form of that:
Can confirm, works without problems in rootless podman.
Why do you need EV certs?
"Nix" doesn't resemble "nichts", it's slang for the same thing in German so it has the same meaning.
I don't know which language is the source but if someone can access the nix paper to confirm that'd be great.
I believe that [nix meaning 'nichts' in german] is even intentional, the original author of nix (Eelco Dolstra) is from the Netherlands. The name comes from the fact that by default, nothing is available in build environments in nix.
Which is apparently confirmed by https://pdfs.semanticscholar.org/5fd8/8f89bd8738816e62808a1b7fb12d3ab14a2f.pdf but I can't access that.
Nix = slang for "nichts" = word for "nothing" in German
Absolutely bamboozled
Update: April 15, 2025 (3:35 AM ET): Samsung has confirmed that the One UI 7 update will resume shortly. According to a solutions manager on Samsung’s Korean community forums, the rollout was temporarily paused due to maintenance-related issues. However, the inspection is now complete, and the update is expected to restart soon. Here’s the full statement:
https://www.androidauthority.com/one-ui-7-rollout-resuming-3544322/
Just the usual amount. I don't think we want to know.
We're a smaller chamber but a lot more echo.