VPS: upgrade to Debian 13 #100

New issue

Open

opened 2026-08-17 15:07:09 -04:00 by mysticalsoap · 0 comments

mysticalsoap commented

2026-08-17 15:07:09 -04:00

Owner

Debian 12 ships Podman 4.3.1, predating both Quadlet (4.4) and pasta. Without Quadlet the declarative story collapses into imperative podman run. The VPS doubles as a testing ground for Quadlet ahead of the homelab migration.

The gotcha that fails quietly: rootless Podman's default port handler masquerades source IPs. That destroys frps' view of client IPs, makes ufw limit on 22/27341 meaningless, and reduces edge CrowdSec to banning your own gateway. Use pasta, rootful, or --network=host. Given everything is going into Podman, this is the single most dangerous item in the plan.

Debian 12 ships Podman 4.3.1, predating both Quadlet (4.4) and pasta. Without Quadlet the declarative story collapses into imperative `podman run`. The VPS doubles as a testing ground for Quadlet ahead of the homelab migration. **The gotcha that fails quietly:** rootless Podman's default port handler masquerades source IPs. That destroys frps' view of client IPs, makes `ufw limit` on 22/27341 meaningless, and reduces edge CrowdSec to banning your own gateway. Use pasta, rootful, or `--network=host`. Given everything is going into Podman, this is the single most dangerous item in the plan.

mysticalsoap added the

vps

label

2026-08-17 15:07:09 -04:00