• exu@feditown.com
    link
    fedilink
    English
    arrow-up
    15
    ·
    1 month ago

    I’ve been managing my containers using the older mechanism (systemd-generate) since I started and it’s great. You get the reliable service start of systemd and its management interface. Monitoring is consistent with all your other services and you have your logs in exactly one location.

    I really wouldn’t want a separate interface or service manager just because I’m running containers.

    • Lem453@lemmy.ca
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 month ago

      Do you run other things on your system other than containers? I have a VM that only runs containers so it really doesn’t do anything else with systemd apart from the basics so I’m curious if there would be any advantage to me switching.

      • exu@feditown.com
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 month ago

        Most VMs only run containers, but I have supporting services on every host as well. Stuff like the mesh VPN, monitoring agent or firewall.
        If I want a quick overview, a quick systemctl status will tell me everything I need to know.

          • exu@feditown.com
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 month ago

            I use Yggdrasil now with a whitelist of public keys. Though I’m thinking about redoing my architecture in general to make key distribution easier, have more automated DNS entries and also use the tunnel for any node to node communication.

            Before that I tried Tailscale with Headscale, but I didn’t want to have a single node responsible for the network and discovery.

            • barsquid@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              1 month ago

              That’s very interesting. Once you connect something to your mesh you can access the rest of the mesh by IP? What is the gateway in that case?