Thanks for the link!

Is there any good DoT/DoH DNS resolver that works well in China? I know I can build one myself, but forwarding all DNS requests to my home server in NA slows down all connections...

This indeed reminds me the blackjack movie 21

They are announcing this ahead of the re:invent keynote. Now I'm more curious what they will announce later this week.

From the AWS Compliance Shared Responsibility Model: https://aws.amazon.com/compliance/shared-responsibility-mode...

Operating system maintenance falls under the Customer responsibility side. With using this new OS, would this responsibility shift back to AWS?

Unlikely, I'd say. If you fail to upgrade when a new release is made, are they at fault?

You'd need to look towards providers that specifically take on more responsibility like https://compliantkubernetes.com/ (disclaimer: I have worked at Elastisys, the company behind Compliant Kubernetes).

No, although it might reduce your effort needed. AWS offers that responsibility shift under the Fargate ECS/EKS launch types, which might run this underneath.

Agree. my 4GB model is at around 50C most of the time with pihole running. I don't have any heatsink/fan attached to it either

Please write up a blog when you have it fully working. I'm mostly interested in which STAT to USB cable you pick. Also power consumption in general :)

I haven't written a blog, but I do have a 5 node RaspberryPi cluster running Docker Swarm. The docker stacks and compose files are on GitHub https://github.com/jmb12686/raspi-docker-stacks

Look at the 'gluster' branch for my current active work on clustered persistent storage using SSDs and docker volume plugins.

I have setup quite a few GitHub projects for building / publishing multiarchitecture ARM compatible images of open source projects (Elasticsearch, Kibana, CAdvisor, etc). Check them out if interested in running common tools on RaspberryPis.

I have this set up couple years ago via this lambda function: https://github.com/arithmetric/aws-lambda-ses-forwarder

It may look outdated, but it still functions well for me

The big difference is my setup doesn’t require another email service. Just 10 lines in a config to spin up an imap server. I was trying avoid the big mail providers when I set this up.