Idk of any good series but techno Tim has a great video on using cloudflare and traefik to get wildcard letsencrypt ssls for your docker services.

https://youtu.be/n1vOfdz5Nm8

I think the bulk of users are running discarded junk and raspberry pis.

That was me, I built a ~$5k rig and now some of what I’m doing is just nonsense of a typical self hoster, so the point is somewhat valid, but even those like me mostly started out with discarded junk and raspberry pis.

Docker used to scare me until I tackled a project that required me to use it. Then I realized I learned it without knowing I’d learned it.

Are the two servers on the same LAN? Did you update all configs for the new servers address?

Is the docker container spinning up and running, or failing and exiting?

Run docker ps, it’ll tell you how long your containers have been running or if they exited.

If everything is running then it’s most likely network, and I’d need to know how it is you used to access it on the old server (web address? Ip?)

If it’s not running then you get to dig through error logs to get to the next step 🤓

What do you mean “doesn’t have the same way”?

My first method eliminates waiting to see if your students code runs fast enough. Unless complexity is part of the assignment, I’d still say go for the hash.

It’s also less work for the professor/grader.

I mean just for the love of God don’t spin up something on your company’s infrastructure that accepts file uploads.

Just don’t.

If you’re reading this and going “well, it’s just internal,” or “well, it doesn’t do much it just accepts this exact file type.” My god. Ask your CISA. And if they’re okay with it, cool. That’s on them.

Unless your whole business is transferring files, don’t. And even then… Don’t.

And if you’re still confused, the answer is to use another company’s infrastructure for this. Use Azure. Use AWS. Use Google cloud or even g suites. Don’t accept that liability. Let the trillionaires do it.

Why give your students a way to get RCE on your institutions servers through anything less than perfect file upload implementation.

For a .tar? I wish you the best…

Instead of that, simplify.

Use unique salts for each assignment per student.

Align hashes with those salts to check the outcome for each students assignment.

Literally have them send you a CTF style sha256 string.

Do it step by step where each step doesn’t depend on the next, grade as a percentage of flags accurately procured.

For getting your stuff available over the internet, y I recommend a secure tunnel with wire guard between your vps and servers running the services.

Make your vps an authentication portal using stuff like Authelia and Fail2ban.

If you’re really needing out, get ELK stood up for free and get agents on your containers/services to keep visibility into any potential… Anything

I didn’t say you need it. I strongly recommend the as a provider.

No I am talking about creating a secure tunnel.

Secure tunneling.

1. Mullvad

2. Mullvad

3. Mullvad.

I agree, I only include it as a “woah this WordPress stuff is confusing!” lower barrier to entry.

Try WordPress first. If they’re absolutely stuck, wix is a lot more beginner friendly. But yes, beware of the downsides to having your hand held.

Use WordPress. It’s by far the most used content management platform, so if you’re a beginner, you’ll find the most resources. It’s also free and open source.

Then you can, if you want to make it even easier, use a page builder like Elementor or Divi or something. Or not.

There’s also Wix for very simple page builds.

Man, I don’t know. I wanna know too.

I got a refurb drive in 2019 that has been clicking and rumbling a little to moderately for 6 years now. Great value at this point, but it’s replacement is gathering dust…

Ubuntu. Many will disagree but, Debian flavors are a way smoother experience from the start and Ubuntu has a ton of community support. You’ll rarely find an issue no one found and solved before you.

Im not saying Zuck is good or a savior of choice, but now would be a good time for facebook investors to pressure him to eat that difference.

Not that he should, but hes been all in on Open Source* lately

*Massive stipulations apply.

Okay, the permission error is almost certainly because the Samba process inside the container doesn’t have the right Linux permissions for the host directory /mnt/my_ext_hdd/my_dir/my_subdir.

On your server running docker, find the numeric UID and GID for that directory: ls -ln /mnt/my_ext_hdd/my_dir/my_subdir

you likely need to set PUID=<uid_from_step_1> and PGID=<gid_from_step_1> in the environment: section of your docker-compose.yml file for the Samba service.

Recreate the container (docker compose up -d --force-recreate).

WARNING: This assumes you are only accessing Samba from within your secure local network. Never expose Samba directly to the internet. Doing so is a major security risk and makes you a target for attacks.

You’re running into that permission error because of how Docker handles file permissions between the host and the container. It’s by design for security reasons. The user inside the container likely doesn’t have access to the mounted directory unless the UID and GID match what’s on the host. You can work around it, but it’s locked down intentionally.

Also, what’s the use case here? What do you need file sharing via Samba in a Docker container for? If it’s just about moving files in and out, docker cp or docker exec -it container /bin/bash might be easier.