This is where I write down things I’m thinking of at the time, maybe rant a bit. Sometimes this will be helpful to other people.
Recent Posts
Installing Frigate and TensorRT on Incus
Installing Frigate OCI images on Incus using TensorRT Now that Incus has OCI support it’s nice to pull in images that could previously only work with docker. Unfortunately as there’s no equivalent to docker-compose (yet) you have to do it manually.
In addition, although incus has the nvidia.driver setting to map nvidia files into the container, it is restricted to only work in unprivileged containers.. and Frigate only works in privileged containers, so you have to do the mapping manually.
read more
Replacing a missing package on debian
Replacing a missing package on debian I recently hit a problem where I wanted to install a package but debian had removed a dependency, and no package has a ‘provides’, thus breaking it.
There is a mechanism for coping with this.. it’s not ideal but is occasionally necessary. This is the procedure for policykit-1
First install equivs
$ sudo apt-get install equivs
Create the file policykit-1 containing
Section: misc Priority: optional Standards-Version: 3.
read more
Running LXC/Proxmox containers unprivileged
Running an unprivileged lxc container with recent systemd Recent builds of systemd (around version 252) implemented a bunch of features that break proxmox/lxc containers. The canonical way of working around this is to enable nesting, but this isn’t really recommended as it gives access to the host’s /proc and /sys.. it only takes a bug and breaking out of the container becomes possible.
There is a workaround script for this.. it’s not installed by default, and as far as I know not in any packages.
read more