this post was submitted on 13 Jul 2025
137 points (96.0% liked)

Selfhosted

60482 readers
950 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world
137
An Immich LXC came up on community script (community-scripts.github.io)
submitted 1 year ago by Emanothep@jlai.lu to c/selfhosted@lemmy.world
24 comments fedilink hide all child comments
 

Hi all,

For all people awaiting for an LXC to self host Immich the time has come. The LXC came up a month ago, sorry if it's a repost.

you are viewing a single comment's thread
view the rest of the comments
[–] ikidd@lemmy.world 36 points 11 months ago (3 children)

Know what you're running when you pipe to a bash script. Curl-bash pipes are a security mess.

[–] Sanguine@lemmy.dbzer0.com 6 points 11 months ago (2 children)

Good advice but ime these helper scripts are legit.

[–] ikidd@lemmy.world 9 points 11 months ago

I'm pretty familiar with TTech's legacy, I just mention it because if the repos ever got compromised, it could be a shitshow. IDK what security measures the new maintainers use to secure their access or check PRs, but I get nervous when it's as popular as it is and such a good vector for complicated installations that are hard to check out. I also don't know the new maintainers from Adam.

Personally, I'd use the scripts as a guide for DIY.

[–] corsicanguppy@lemmy.ca 4 points 11 months ago (2 children)

ime these helper scripts are legit.

Let's consider a moment the risk you're subjecting people to, just with a recommendation based on the value of the things you secure without considering what they need to secure.

[–] Sanguine@lemmy.dbzer0.com 3 points 11 months ago (1 children)

I'm not subjecting anyone to anything. I acknowledged that this practice is risky, however these scripts are maintained by a community of other nerds just like every other open source project you enjoy. If you're going to use these proceed with the same caution you would anything else on the internet, but in my experience they are safe.

[–] ick@infosec.pub 4 points 11 months ago

I created a little proof of concept last year to highlight some of the risks https://stoppip.ing/

[–] corsicanguppy@lemmy.ca 2 points 11 months ago

Curl-bash pipes are a security mess.

Security mess? Red flag. Avoid.