# I am the Watcher. I am your guide through this vast new twtiverse.
# 
# Usage:
#     https://watcher.sour.is/api/plain/users              View list of users and latest twt date.
#     https://watcher.sour.is/api/plain/twt                View all twts.
#     https://watcher.sour.is/api/plain/mentions?uri=:uri  View all mentions for uri.
#     https://watcher.sour.is/api/plain/conv/:hash         View all twts for a conversation subject.
# 
# Options:
#     uri     Filter to show a specific users twts.
#     offset  Start index for quey.
#     limit   Count of items to return (going back in time).
# 
# twt range = 1 196323
# self = https://watcher.sour.is?offset=149125
# next = https://watcher.sour.is?offset=149225
# prev = https://watcher.sour.is?offset=149025
❤️ 🎶: Officially Missing You, Too by Geeks, SOYOU
❤️ 🎶: Officially Missing You, Too by Geeks, SOYOU
❤️ 🎶: Monthly Project 2012 June Yoon Jong Shin - Uphill Road by Jung In, Yoon Jong Shin
❤️ 🎶: Monthly Project 2012 June Yoon Jong Shin - Uphill Road by Jung In, Yoon Jong Shin
[47°09′29″S, 126°43′44″W] Bad satellite signal -- switching to analog communication
[47°09′30″S, 126°43′05″W] --white noise--
Of skies and bullets:
@eapl.me QR code printed on paper?
@eapl.me QR code printed on paper?
@eapl.me QR code printed on paper?
🧮 USERS:1 FEEDS:2 TWTS:686 ARCHIVED:66320 CACHE:2361 FOLLOWERS:13 FOLLOWING:14
[47°09′29″S, 126°43′49″W] Reading: 1.71000 PPM
telnet sursum-corda.com
[47°09′38″S, 126°43′10″W] --interrupted--
here's my old web page at Brandeis University
> Coevolutionary algorithms typically explore domains in which no single evaluation function is present or known. For the purpose of selecting which individuals to maintain and vary, they instead rely on the outcomes of interactions between evolving entities.

I've been using variations of that same phrasing for a very long time--I wrote that web page circa 2005 maybe?
Found another example of Google stealing something I've written and putting it in a "featured snippet".

What's super annoying about this one is that the source is a course page at Tufts University, not the official page of the publication they're taking this text from. I know the professor who taught that course and I've guest lectured for them before on this topic. They put this publication in their course readings, and I guess that's where Google picked it up.

@jmjl Figured out the bug and fixed it. Pushing a new version shortly 👌
@jmjl Figured out the bug and fixed it. Pushing a new version shortly 👌
@jmjl Figured out the bug and fixed it. Pushing a new version shortly 👌
@abucci Yeah I think there's a bit more work on the Docker-compat component of Podman. I'll try to figure this out and work with the developers of the project. 👌
@abucci Yeah I think there's a bit more work on the Docker-compat component of Podman. I'll try to figure this out and work with the developers of the project. 👌
@abucci Yeah I think there's a bit more work on the Docker-compat component of Podman. I'll try to figure this out and work with the developers of the project. 👌
@prologic hmm, bummer. I was hoping that translating the docker commands to podman syntax would work but it looks like it's more subtle than that. Thanks for trying!

The weird thing was I wasn't getting errors like that on my end when I tried it. podman thought the connection was created, and it set it as the default. But I don't think it was sending anything over the wire. When I have more time to tinker with it maybe I'll play around and see if I can figure out what's up.
filmed a nice walk with Nanook today, you can watch it here : https://activitypub.stigatle.no/stigatle/p/1691503487.536879
And to be clear, we're talking about TLS mutual authentication here too
And to be clear, we're talking about TLS mutual authentication here too
And to be clear, we're talking about TLS mutual authentication here too
I really don't think TLS is supported yet.
I really don't think TLS is supported yet.
I really don't think TLS is supported yet.
See:


$ podman ps
Cannot connect to Podman. Please verify your connection to the Linux system using `podman system connection list`, or try `podman machine init` and `podman machine start` to manage a new Linux VM
Error: unable to connect to Podman socket: failed to connect: ssh: handshake failed: knownhosts: /Users/prologic/.ssh/known_hosts:43: address [host=tcp:]: missing port in address
See:


$ podman ps
Cannot connect to Podman. Please verify your connection to the Linux system using `podman system connection list`, or try `podman machine init` and `podman machine start` to manage a new Linux VM
Error: unable to connect to Podman socket: failed to connect: ssh: handshake failed: knownhosts: /Users/prologic/.ssh/known_hosts:43: address [host=tcp:]: missing port in address
See:


$ podman ps
Cannot connect to Podman. Please verify your connection to the Linux system using `podman system connection list`, or try `podman machine init` and `podman machine start` to manage a new Linux VM
Error: unable to connect to Podman socket: failed to connect: ssh: handshake failed: knownhosts: /Users/prologic/.ssh/known_hosts:43: address [host=tcp:]: missing port in address

$ podman system connection add "host=tcp://localhost:2376,ca=$HOME/.docker/certs.d/localhost/ca.pem,key=$HOME/.docker/certs.d/localhost/key.pem,cert=$HOME/.docker/certs.d/localhost/cert.pem"
Error: accepts 2 arg(s), received 1


I think this should be:


$ podman system connection add localhost "host=tcp://localhost:2376,ca=$HOME/.docker/certs.d/localhost/ca.pem,key=$HOME/.docker/certs.d/localhost/key.pem,cert=$HOME/.docker/certs.d/localhost/cert.pem"


But now:


$ podman system connection list
Name        URI                    Identity    Default
localhost   ssh://@[host=tcp:]:22              true


And this doesn't work 😢

$ podman system connection add "host=tcp://localhost:2376,ca=$HOME/.docker/certs.d/localhost/ca.pem,key=$HOME/.docker/certs.d/localhost/key.pem,cert=$HOME/.docker/certs.d/localhost/cert.pem"
Error: accepts 2 arg(s), received 1


I think this should be:


$ podman system connection add localhost "host=tcp://localhost:2376,ca=$HOME/.docker/certs.d/localhost/ca.pem,key=$HOME/.docker/certs.d/localhost/key.pem,cert=$HOME/.docker/certs.d/localhost/cert.pem"


But now:


$ podman system connection list
Name        URI                    Identity    Default
localhost   ssh://@[host=tcp:]:22              true


And this doesn't work 😢

$ podman system connection add "host=tcp://localhost:2376,ca=$HOME/.docker/certs.d/localhost/ca.pem,key=$HOME/.docker/certs.d/localhost/key.pem,cert=$HOME/.docker/certs.d/localhost/cert.pem"
Error: accepts 2 arg(s), received 1


I think this should be:


$ podman system connection add localhost "host=tcp://localhost:2376,ca=$HOME/.docker/certs.d/localhost/ca.pem,key=$HOME/.docker/certs.d/localhost/key.pem,cert=$HOME/.docker/certs.d/localhost/cert.pem"


But now:


$ podman system connection list
Name        URI                    Identity    Default
localhost   ssh://@[host=tcp:]:22              true


And this doesn't work 😢
@abucci Hmm I see! Let me trry that 👌
@abucci Hmm I see! Let me trry that 👌
@abucci Hmm I see! Let me trry that 👌
Woh.. never heard of it. Growing up it was always just the MS EDIT.EXE or for more advanced stuff Nortons editor.
Woh.. never heard of it. Growing up it was always just the MS EDIT.EXE or for more advanced stuff Nortons editor.
@prologic Change your script to this:

#!/bin/sh

set -e

alias docker=podman

if [ ! command -v docker > /dev/null 2>&1 ]; then
  echo "docker not found"
  exit 1
fi

mkdir -p $HOME/.docker/certs.d/cas

## key stuff omitted

# DO NOT DO THIS docker context create cas --docker "host=tcp://cas.run:2376,ca=$HOME/.docker/certs.d/cas/ca.pem,key=$HOME/.docker/certs.d/cas/key.pem,cert=$HOME/.docker/certs.d/cas/cert.pem"
# DO THIS:
podman system connection add "host=tcp://cas.run:2376,ca=$HOME/.docker/certs.d/cas/ca.pem,key=$HOME/.docker/certs.d/cas/key.pem,cert=$HOME/.docker/certs.d/cas/cert.pem"
# DO NOT DO THIS docker context use cas
# DO THIS: 
podman system connection default cas
Not in the same way docker context create does.
Not in the same way docker context create does.
Not in the same way docker context create does.
But it doesn't understand how to use TLS certs.
But it doesn't understand how to use TLS certs.
But it doesn't understand how to use TLS certs.
It does have this flag:


$ podman context create --help
Record destination for the Podman service

Description:
  Add destination to podman configuration.
  "destination" is one of the form:
    [user@]hostname (will default to ssh)
    ssh://[user@]hostname[:port][/path] (will obtain socket path from service, if not given.)
    tcp://hostname:port (not secured)
    unix://path (absolute path required)


Usage:
  podman context create [options] NAME DESTINATION

Options:
      --default-stack-orchestrator string   Ignored.  Just for script compatibility
      --description string                  Ignored.  Just for script compatibility
      --docker string                       Description of the context
      --from string                         Ignored.  Just for script compatibility
      --kubernetes string                   Ignored.  Just for script compatibility
It does have this flag:


$ podman context create --help
Record destination for the Podman service

Description:
  Add destination to podman configuration.
  "destination" is one of the form:
    [user@]hostname (will default to ssh)
    ssh://[user@]hostname[:port][/path] (will obtain socket path from service, if not given.)
    tcp://hostname:port (not secured)
    unix://path (absolute path required)


Usage:
  podman context create [options] NAME DESTINATION

Options:
      --default-stack-orchestrator string   Ignored.  Just for script compatibility
      --description string                  Ignored.  Just for script compatibility
      --docker string                       Description of the context
      --from string                         Ignored.  Just for script compatibility
      --kubernetes string                   Ignored.  Just for script compatibility
It does have this flag:


$ podman context create --help
Record destination for the Podman service

Description:
  Add destination to podman configuration.
  "destination" is one of the form:
    [user@]hostname (will default to ssh)
    ssh://[user@]hostname[:port][/path] (will obtain socket path from service, if not given.)
    tcp://hostname:port (not secured)
    unix://path (absolute path required)


Usage:
  podman context create [options] NAME DESTINATION

Options:
      --default-stack-orchestrator string   Ignored.  Just for script compatibility
      --description string                  Ignored.  Just for script compatibility
      --docker string                       Description of the context
      --from string                         Ignored.  Just for script compatibility
      --kubernetes string                   Ignored.  Just for script compatibility
@prologic

$ podman --docker                                                                                                                                                        
Error: unknown flag: --docker


Why are you using a flag that podman doesn't have?
I've already tried, it doesn't _quite_ work (yet).
I've already tried, it doesn't _quite_ work (yet).
I've already tried, it doesn't _quite_ work (yet).
Not quite.


[22:51:47]  <prologic> bkhl you misunderstand what I'm asking :( I'm asking whether we can add TLS support to Podman the CLI / client? It looks like it doesn't understand how to connect to a typical Docker TCP service over TLS
[22:52:52]  <prologic> e.g: Error: --docker additional options "ca=/Users/prologic/.docker/certs.d/localhost/ca.pem,key=/Users/prologic/.docker/certs.d/localhost/key.pem,cert=/Users/prologic/.docker/certs.d/localhost/cert.pem" not supported
[22:53:03]  <prologic> When running: podman context create localhost --docker "host=tcp://localhost:2376,ca=$HOME/.docker/certs.d/localhost/ca.pem,key=$HOME/.docker/certs.d/localhost/key.pem,cert=$HOME/.docker/certs.d/localhost/cert.pem"
Not quite.


[22:51:47]  <prologic> bkhl you misunderstand what I'm asking :( I'm asking whether we can add TLS support to Podman the CLI / client? It looks like it doesn't understand how to connect to a typical Docker TCP service over TLS
[22:52:52]  <prologic> e.g: Error: --docker additional options "ca=/Users/prologic/.docker/certs.d/localhost/ca.pem,key=/Users/prologic/.docker/certs.d/localhost/key.pem,cert=/Users/prologic/.docker/certs.d/localhost/cert.pem" not supported
[22:53:03]  <prologic> When running: podman context create localhost --docker "host=tcp://localhost:2376,ca=$HOME/.docker/certs.d/localhost/ca.pem,key=$HOME/.docker/certs.d/localhost/key.pem,cert=$HOME/.docker/certs.d/localhost/cert.pem"
Not quite.


[22:51:47]  <prologic> bkhl you misunderstand what I'm asking :( I'm asking whether we can add TLS support to Podman the CLI / client? It looks like it doesn't understand how to connect to a typical Docker TCP service over TLS
[22:52:52]  <prologic> e.g: Error: --docker additional options "ca=/Users/prologic/.docker/certs.d/localhost/ca.pem,key=/Users/prologic/.docker/certs.d/localhost/key.pem,cert=/Users/prologic/.docker/certs.d/localhost/cert.pem" not supported
[22:53:03]  <prologic> When running: podman context create localhost --docker "host=tcp://localhost:2376,ca=$HOME/.docker/certs.d/localhost/ca.pem,key=$HOME/.docker/certs.d/localhost/key.pem,cert=$HOME/.docker/certs.d/localhost/cert.pem"
@prologic podman supports TLS.
@abucci I _think_ it only supports SSH is the problem. If it supported TLS we'd be good to go 👌 Might ahve to file a feature request? 🤔
@abucci I _think_ it only supports SSH is the problem. If it supported TLS we'd be good to go 👌 Might ahve to file a feature request? 🤔
@abucci I _think_ it only supports SSH is the problem. If it supported TLS we'd be good to go 👌 Might ahve to file a feature request? 🤔
@prologic what do you mean when you say "Docker API"? There are multiple possible meanings for that. podman conforms to *some* of Docker's APIs and it's unclear to me which one you say it's *not* conforming to.

You just have to Google "podman Docker API" and you find stuff like this: https://www.redhat.com/sysadmin/podman-rest-api

## What is Podman's REST API?

Podman's REST API consists of two components:
- A Docker-compatible portion called Compat API
- A native portion called Libpod API that provides access to additional features not available in Docker, including pods


Or this: https://docs.podman.io/en/latest/markdown/podman-system-service.1.html
> The REST API provided by podman system service is split into two parts: a compatibility layer offering support for the Docker v1.40 API, and a Podman-native Libpod layer.
@jmjl What do you mean? 🤔 Open to alternative ideas 🙏
@jmjl What do you mean? 🤔 Open to alternative ideas 🙏
@jmjl What do you mean? 🤔 Open to alternative ideas 🙏
Might cycle to town to get some wine and ciabatta
Might cycle to town to get some wine and ciabatta
[47°09′27″S, 126°43′35″W] Saalmi, retransmit, please
Pinellas County Cycling: 8.15 miles, 00:06:44 average pace, 00:54:55 duration

#cycling
user/bmallred/data/2023-08-08-05-46-21.fit: 8.15 miles, 00:06:44 average pace, 00:54:55 duration

#cycling
user/bmallred/data/2023-08-08-05-46-21.fit: 8.15 miles, 00:06:44 average pace, 00:54:55 duration

#cycling
user/bmallred/data/2023-08-08-05-46-21.fit: 8.15 miles, 00:06:44 average pace, 00:54:55 duration

#cycling
@prologic Thanks, but I (personally) think setting up services directly is easier.
@jmjl Confirmed:


$ dke -t 6cf690c08e6b /bin/sh
unable to upgrade to tcp, received 500


I'll try to fix this today 👌
@jmjl Confirmed:


$ dke -t 6cf690c08e6b /bin/sh
unable to upgrade to tcp, received 500


I'll try to fix this today 👌
@jmjl Confirmed:


$ dke -t 6cf690c08e6b /bin/sh
unable to upgrade to tcp, received 500


I'll try to fix this today 👌
@prologic Yep, I mean docker exec into a existing container.
[47°09′11″S, 126°43′02″W] Reading: 1.32 Sv
@xuu Yeah a lot of local data is transferred around 👌
@xuu Yeah a lot of local data is transferred around 👌
@xuu Yeah a lot of local data is transferred around 👌
❤️ 🎶: Paradise by NiziU
❤️ 🎶: Paradise by NiziU
[47°09′46″S, 126°43′55″W] Reading: 1.84 Sv
I need to get influxdb up on my router. But I do about .5TB per week. So seems pretty on par to you with all that streaming the family does.
I need to get influxdb up on my router. But I do about .5TB per week. So seems pretty on par to you with all that streaming the family does.
🧮 USERS:1 FEEDS:2 TWTS:685 ARCHIVED:66301 CACHE:2363 FOLLOWERS:13 FOLLOWING:14
@jmjl I'll look into this a bit later today. You mean docker exec ... right into an existing container? 🤔
@jmjl I'll look into this a bit later today. You mean docker exec ... right into an existing container? 🤔
@jmjl I'll look into this a bit later today. You mean docker exec ... right into an existing container? 🤔
You then automatically get a route to http://jmlj.cas.run pinting at this service.
You then automatically get a route to http://jmlj.cas.run pinting at this service.
You then automatically get a route to http://jmlj.cas.run pinting at this service.
@jmjl Right now:

docker stack deploy -c jmlj.yml jlmj

Where jmlj.yml is:

l
---
version: "3.8"

services:
  prologic:
    image: r.mills.io/prologic/zs
    networks:
      - traefik
    deploy:
      mode: replicated
      replicas: 1
      labels:
        - "traefik.enable=true"
        - "traefik.http.services.prologic.loadbalancer.server.port=8000"
      resources:
        reservations:
          memory: 16M
        limits:
          memory: 32M
      restart_policy:
        condition: any

networks:
  traefik:
    external: true
@jmjl Right now:

docker stack deploy -c jmlj.yml jlmj

Where jmlj.yml is:

l
---
version: "3.8"

services:
  prologic:
    image: r.mills.io/prologic/zs
    networks:
      - traefik
    deploy:
      mode: replicated
      replicas: 1
      labels:
        - "traefik.enable=true"
        - "traefik.http.services.prologic.loadbalancer.server.port=8000"
      resources:
        reservations:
          memory: 16M
        limits:
          memory: 32M
      restart_policy:
        condition: any

networks:
  traefik:
    external: true
@jmjl Right now:

docker stack deploy -c jmlj.yml jlmj

Where jmlj.yml is:

l
---
version: "3.8"

services:
  prologic:
    image: r.mills.io/prologic/zs
    networks:
      - traefik
    deploy:
      mode: replicated
      replicas: 1
      labels:
        - "traefik.enable=true"
        - "traefik.http.services.prologic.loadbalancer.server.port=8000"
      resources:
        reservations:
          memory: 16M
        limits:
          memory: 32M
      restart_policy:
        condition: any

networks:
  traefik:
    external: true
@abucci I asked the folks over at #pormdn on IRC and this is what they said:


[01:47:58]  <Remco> prologic: The podman executable doesn't understand anything docker, but podman does offer a compatibility api for the docker executable. So it would be the second in your or statement


I don't think Podman is compatible with the Docker API, onl the Docker CLI.
@abucci I asked the folks over at #pormdn on IRC and this is what they said:


[01:47:58]  <Remco> prologic: The podman executable doesn't understand anything docker, but podman does offer a compatibility api for the docker executable. So it would be the second in your or statement


I don't think Podman is compatible with the Docker API, onl the Docker CLI.
@abucci I asked the folks over at #pormdn on IRC and this is what they said:


[01:47:58]  <Remco> prologic: The podman executable doesn't understand anything docker, but podman does offer a compatibility api for the docker executable. So it would be the second in your or statement


I don't think Podman is compatible with the Docker API, onl the Docker CLI.