You can try seeing if you can set the speed/duplex of NIC/ports manually if auto-detection keeps getting it wrong.

Unifi I like the APs for mesh & multiple SSID+vlans but I keep them on dedicated vlan with zero internet access because I don’t trust that I properly followed instructions to disable opted in analytics/telemetry. The mgmt software is alright but new UI wastes a lot of space. The PoE switch was alright until it stopped being able to keep a config last year. USG router I kept less than a year because it was too slow with any useful features enabled. I’ve glanced around at replacement APs here & there but pretty much waiting until I have more wifi 7 compatible devices and that’ll be another couple years.

Looking at Intel specs for that model of CPU has ‘Intel Turbo Boost Technology’ as ‘No’ so it may not be possible to get rid of the warning but fine to ignore. https://ark.intel.com/content/www/us/en/ark/products/122590/intel-core-i3-7020u-processor-3m-cache-2-30-ghz.html#tab-blade-1-0-7

Here’s a similar issue on their github, https://github.com/AdnanHodzic/auto-cpufreq/issues/446 Sounds like it should still be able to slow down the CPU but it won’t be able to change turbo boost due to processor not supporting that feature.

deleted by creator

I’d recommend using distro you know best and/or most prefer to work with. I use the flatpak install of Jellyfin Media Player but there are also deb files available.

I’m currently using minipc with Intel n5105 (or something similar) for 1080p HTPC. Debian 12 OS with auto-login & Jellyfin Media Player starting at login. I control it with pepper jobs RF remote but also have a logitech wireless keyboard+touchpad for it. Keyboard+touchpad come in handy when browsing media sites on firefox but some might restrict quality. Some of the newer minipc’s I tried required adding backports repo to install newer kernel for wifi to work. I had been playing with Debian a lot when I set up first one & been using clonezilla to image them so it’s stuck.

Ordered a gmtek n97 minipc to play with and should have it in about a week. Going to test it out with 4k but it’s not a deal breaker for me if it cannot handle that well enough.

Yep, asking for something I’m sure a lot of us would love to have, a ready to go TV remote control style usage, but rather than having discussions about why those options aren’t viable just downvoting.

Create a backup image from the working SD card. Write that backup image to a spare SD card and verify it works. Then try to do ‘apt update’ and see if anything breaks. If it breaks you got a spare SD card ready to go :)

I had issues with DNS checks and traced it to my pihole. I changed that container’s resolv.conf to use cloudflare DNS and it has been working fine since. It was with Caddy so needed to change over to use IPs.

Another thing to remember is the client needs to support decoding the video in hardware or have enough CPU to handle it in software. I have intel i7 (3rd gen) with no hardware HEVC/x265 support but it has enough CPU to power through.

Self-host your own ACME server. Then you can use certbot pointed there.

These instructions are old so not sure if newer/better ways, https://blog.sean-wright.com/self-host-acme-server/

Is MariaDB on spinning disk or ssd?

I initially set up Nextcloud with MariaDB on spinning disk but it was slow even completely empty. I moved that container to ssd & performance was a lot better. The web UI may still have some slow loading parts but I can’t say for sure since rarely use it. Caldav+carddav+Nextcloud client are how I usually interact with it.

Sounds like bridge mode is needed for the vm’s network interface in virt.

I would say proxmox ve is easier to start with.

The container method used should be whatever you are more familiar with or prefer. They both have their own quirks, pros, & cons.

SELinux - If you don’t want to deal with SELinux then set it to permissive mode. If you want to keep in enforcing mode you need to create the appropriate policies, https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/using_selinux/configuring-selinux-for-applications-and-services-with-non-standard-configurations_using-selinux

Firewall - If you don’t want it’s protection then look up instructions to stop & disable it on your distro.

Port forwarding - From linux container side you either need to specify host networking or the ports you want to allow through, there is no avoiding that if it needs to be network accessible. If you want it internet accessible then you need to setup port forwarding on your router.

Have you looked into something like yunohost? It may be the kind of thing you’re looking for.

If router supports it, a static route via connected machine with IP forwarding enabled might work. OpenWrt has packages for things like tailscale and zerotier so could do it without an extra machine too.

For 3, if router supports it could also try doing static route via Tailscale joined machine that has IP forwarding enabled

If your router lets you try adding a static route for the tailscale IP/subnet to the laptop with IP forwarding enabled.

Was it the official container image or 3rd party? Whichever it was, they should get notified so that init script can get fixed to prevent similar happening to others.

Intel Quick Sync video saw a lot of improvements on 8th gen & since it’s all so old the pricing differences between 7th & 8th gen are going to be negligible.

Yep, 8th gen (Coffee Lake) saw a lot of improvements in Intel Quick Sync, https://en.wikipedia.org/wiki/Intel_Quick_Sync_Video#Hardware_decoding_and_encoding

For the sata drive behavior it’s probably finishing the writes from buffer. I like to use the iotop utility to watch storage IO activity on my systems. Could try running it on both systems to get a better picture of what’s going on.

I currently use NFS and CIFS but have used iSCSI in the past. I like the simplicity of NFS & CIFS and they meet my uses. iSCSI has it’s strengths as others have stated.

• /var/lib/mysql - I would say iSCSI in it’s own image+lun. Should get lower latency as well as higher transfer rates compared to NFS for DB but it depends on the kinds & how much usage.
• virtual machine images - I prefer NFS mounts for same reason, easier to work with the files directly. If you do go with iSCSI you can have different disk images for different kinds of VMs. Should be able to use both at same time on most hypervisors if you want to play with them too.
• lots of small files - NFS should work without issue

Nothing to stop running podman containers with full root access by creating & running them as root, you run them as whatever user you want. I’ve done it to troubleshoot containers on more than one occasion, usually when I want to play with VPN or privileged ports but too lazy to do it proper. The end goal for a lot of ppl, including myself, is to run as many things as non-root as possible. Why? Best practices around security have you give a service the minimal access & resources it needs to do it’s tasks. Some people allow traffic from the internet to their containers & they probably feel a little bit safer running those programs as non-root since it can create an extra layer that may need to be broken to fully compromise a system.