- 276
- 415 113
Scotti-BYTE Enterprise Consulting Services
United States
เข้าร่วมเมื่อ 27 เม.ย. 2020
Scottibyte Enterprise Consulting Services is dedicated to describing the best practices for creating and maintaining home and office networks that are fundamentally secure with the best possible performance.
We leverage private cloud to provide extended functionality in home and office automation using Ubiquti Unifi and QNAP NAS products.
We provide simplified processes and procedures to leverage best in class products to make your life easier.
We also focus on providing simplicity to the Home Automation environment.
We leverage private cloud to provide extended functionality in home and office automation using Ubiquti Unifi and QNAP NAS products.
We provide simplified processes and procedures to leverage best in class products to make your life easier.
We also focus on providing simplicity to the Home Automation environment.
Rare Ubuntu Update Fail
I recently experienced many problems with my desktop system including the inability to upgrade to Ubuntu 24.04. This is about my upgrade process to a Minisforum UM890 Pro.
------------
Come visit us at: www.scottibyte.com
Discourse: : discussion.scottibyte.com
RocketChat: chat.scottibyte.com
------------
Come visit us at: www.scottibyte.com
Discourse: : discussion.scottibyte.com
RocketChat: chat.scottibyte.com
มุมมอง: 82
วีดีโอ
Backup Home Lab Network
มุมมอง 36012 ชั่วโมงที่ผ่านมา
If you are planning to change routers (and even if you aren't) you might want to backup your IP address assignments made by your DHCP server. Come visit us at: www.scottibyte.com Discourse: : discussion.scottibyte.com RocketChat: chat.scottibyte.com
Automatic Failover: NginX Proxy Manager (NPM)
มุมมอง 44714 วันที่ผ่านมา
I show how to create an automatic fail-over for NPM. I leverage this "higher availability NPM" to provide a self-hosted service with fail-over expanding on my "SearXNG: Privacy Respecting self Hosted Search". Show Notes: discussion.scottibyte.com/t/automatic-failover-nginx-proxy-manager/498 Come visit us at: www.scottibyte.com Discourse: : discussion.scottibyte.com RocketChat: chat.scottibyte.com
Add a New Pi hole to the Homelab
มุมมอง 36721 วันที่ผ่านมา
This tutorial is a follow up to "High Availability Pi-Hole & Local DNS". Show Notes: discussion.scottibyte.com/t/add-a-new-pi-hole-to-the-homelab/496 Come visit us at: www.scottibyte.com Discourse: : discussion.scottibyte.com RocketChat: chat.scottibyte.com
High Availability Pi-hole & Local DNS
มุมมอง 57221 วันที่ผ่านมา
Learn how to replicate local DNS entries between Piholes. In this video you will learn how to have a local DNS on two Piholes which will automatically failover in the event one Pihole goes down. Show Notes: discussion.scottibyte.com/t/high-availability-pi-hole-local-dns/492 Come visit us at: www.scottibyte.com Discourse: : discussion.scottibyte.com RocketChat: chat.scottibyte.com
Ubiquiti UNAS Pro -- My Thoughts
มุมมอง 79028 วันที่ผ่านมา
I wanted to provide some of my thoughts on the new Ubiquiti UNAS Pro NAS device. This might be a really cost effective NAS storage option for some use cases. Come visit us at: www.scottibyte.com Discourse: : discussion.scottibyte.com RocketChat: chat.scottibyte.com
Ubuntu Custom Desktop - Step by Step
มุมมอง 352หลายเดือนก่อน
In this tutorial, I will show how to customize an Ubuntu desktop with some of my favorite options. Linux is all about making the experience fit the requirements of the end user. Show Notes: discussion.scottibyte.com/t/ubuntu-custom-desktop-step-by-step/486 Come visit us at: www.scottibyte.com Discourse: : discussion.scottibyte.com RocketChat: chat.scottibyte.com
Virtualbox to Incus
มุมมอง 264หลายเดือนก่อน
This tutorial shows step by step how to convert a Virtualbox Virtual Machine to an Incus Virtual Machine. Show Notes: discussion.scottibyte.com/t/virtualbox-to-incus/479 Come visit us at: www.scottibyte.com Discourse: : discussion.scottibyte.com RocketChat: chat.scottibyte.com
Incus More Storage via iSCSI
มุมมอง 2922 หลายเดือนก่อน
In this tutorial, I demonstrate making your Incus server an iSCSI initiator and connecting to network storage on an iSCSI target. I show how to create a storage pool on the iSCSI storage. Show Notes: discussion.scottibyte.com/t/incus-more-storage-via-iscsi/477 Come visit us at: www.scottibyte.com Discourse: : discussion.scottibyte.com RocketChat: chat.scottibyte.com
Plex on Incus OCI Container
มุมมอง 4062 หลายเดือนก่อน
In this tutorial we learn how to use Incus custom volumes to store data. In this example, we create a Plex server on an Incus OCI container that uses custom volumes to store the configuration and media for a Plex server. Show Notes: discussion.scottibyte.com/t/plex-on-an-incus-oci-container/476 Come visit us at: www.scottibyte.com Discourse: : discussion.scottibyte.com RocketChat: chat.scottiby...
What makes a GOOD Self Hosting Server?
มุมมอง 5512 หลายเดือนก่อน
This is a discussion about some of the basic details that you might want to consider when choosing a Home Lab server for self-hosting an Incus/LXD server. Come visit us at: www.scottibyte.com Discourse: : discussion.scottibyte.com RocketChat: chat.scottibyte.com
Immich - How to Bust the UPLOAD Limits
มุมมอง 1.3K2 หลายเดือนก่อน
Did you know that your self-hosted applications behind NginX Proxy Manager (NPM) may have upload limits? This tutorial shows how to install Immich, a self-hosted picture/video server, how to serve it via NPM and how to lift the file uploads limits on NPM. Show Notes: discussion.scottibyte.com/t/immich-how-to-bust-the-upload-limits/475 Come visit us at: www.scottibyte.com Discourse: : discussion...
NginX Reverse Proxy Manager EASY in Incus
มุมมอง 4772 หลายเดือนก่อน
I covered NPM in "NginX Proxy Manager in Incus" back in April of 2024. This time, I show a super easy way to host NPM in an OCI container. Show Notes: discussion.scottibyte.com/t/nginx-reverse-proxy-manager-npm-easy-in-incus/474 Come visit us at: www.scottibyte.com Discourse: : discussion.scottibyte.com RocketChat: chat.scottibyte.com
MIND a Self Hosted Scheduled Notifier
มุมมอง 2712 หลายเดือนก่อน
MIND can send scheduled/timed notifications to any of 80 notification services thus keeping you abreast of things to keep you in the right "MIND". Show Notes: discussion.scottibyte.com/t/mind-an-open-source-self-hosted-scheduled-notifier/470 Come visit us at: www.scottibyte.com Discourse: : discussion.scottibyte.com RocketChat: chat.scottibyte.com
2025 Privacy -- Security and Beyond
มุมมอง 2292 หลายเดือนก่อน
This video is about steps to protect yourself from fraud on public and government websites. Come visit us at: www.scottibyte.com Discourse: : discussion.scottibyte.com RocketChat: chat.scottibyte.com
Web Check: Self Hosted Web Security Check
มุมมอง 2583 หลายเดือนก่อน
Web Check: Self Hosted Web Security Check
SearXNG: Privacy Respecting self hosted Search
มุมมอง 6713 หลายเดือนก่อน
SearXNG: Privacy Respecting self hosted Search
Ubiquiti Unifi Wireguard Connection to NordVPN
มุมมอง 3.1K4 หลายเดือนก่อน
Ubiquiti Unifi Wireguard Connection to NordVPN
Linux Desktop Environments in an Incus Container
มุมมอง 7354 หลายเดือนก่อน
Linux Desktop Environments in an Incus Container
Thanks for these videos! Only thing is I'd love if they had TH-cam "chapters" so that it'd be easier to skip around to specific places
That is a reasonable point. However, I have a couple videos with chapters and my experience with them has been that subscribers come to me with questions because they skip over critical material. I try to keep my "editorial" content to a minimum and just present the material in an easy to follow, abridged fashion. "Incus Containers Step by Step" is one of those videos where not missing anything is critical to success. I will consider chapters in the future where viable. Thanks for the comments!
@@scottibyte that's fair enough :)
@@bwbuhse Be sure to join the chat chat.scottibyte.com/. Lots of folks there and I get a lot of input from other subscribers there to target future content.
It is now obvious to me that I need to review a lot of previous content to enhance my education in networking. This was superb. I do have a quick question about references. When you referenced the container test1, do you have that defined in local DNS in your pihole? Otherwise I am missing something that shows how your desktop knows how to find that system. Thanks, Scott for great content.
Outstanding, Scott. Very concise and to the point.
i am looking for verylight weight file sync similar ro dropbox. I looked into nextcloud but it seems very heavy for raspberry pi which already runs immich and nginx. Do you have any suggestions for file server? with ios app support
I like Cryptpad and PSITransfer. I know I have an old video on PSITransfer. I also like YouTransfer and I have a video on it for sure. It's an old app, but my notes have the pertinent info to get you going.
Thank you so much. I have been struggling with upload issues with large file and hopefully this will take care all upload issues
Yes, who would have thought that NPM was the long pole in the tent? As it turns out, NPM is a web server like any other and so the same limits apply. Glad it helped. Drop by chat.scottibyte.com/ to say hi sometime.
4:00 unifi routers auto backup configs to the cloud including dhcp reservations
@@raiden72 yes, agreed. However, the point of the presentation was really someone migrating from an ISP router to something like a Unifi router.
Great video. I found this video while searching for a solution to the file upload issue I am having. This is ALMOST what I was looking for. My scenario is a little different. I am not running NPM in docker, but and LXC in Proxmox. However I was able to make the suggested changes to nginx.conf and the changes stayed after reboot. I have made exactly you showed in the video. While I do not get any errors immediately upon start upload of a large video, it will go all the way through the upload process then give the error alert. Also, I am still unable to backup larger videos from mobile even though they're considerably smaller. (395.4MB) Do you have any insight? (For clarification I am running a debian 12 LXC for immich, immich is then installed via the docker script. NPM is running in a seperate LXC, NOT in docker. Also my domain provided by cloudflare is pointed to my public ip which NPM then proxy's to my services. I have seen mentioned that cloudflare imposes their own file upload size limit but am unable to verify.)
Superb, thanks Scotty!
Let's see if you get more subs. I thought your Channel deserves much more attention, and boosted you on Mastodon §8-)
Woahh :) Now THAT's a Homelba hahaa. Allways great stuff Scotti. Thanks man!
OMG, where have you been! Your videos contain the information I been trying to figure out for months. Thank you!
Glad to be of help. Stop by and say hi in the chat at chat.scottibyte.com/. My subscriber numbers are a clear indication that my channel has been highly effective at hiding. I've had the channel for four years and almost 275 videos.
Good job mr.
still this is the best out there right now for getting started with incus in my view this and the whole series on incus is very good and I am glad to have found this and the channel many thanks
Thanks Jon. Be sure to join the chat and say hi. chat.scottibyte.com
Thanks Scott, nice vid! I bieleve all your hardware is running on the same vlan, tho, it must take a few more steps, to provide multi-vlan redundancy.. it's a nice 'beginner guide' to vrrp / keepalived :-) (for exemple, in case of multi-site cluster + L3 vpn overlay with multiple WAN addresses.. it's basically the 'same' but with vrrp running on routers, to provide failover routes)
That would make sense in the commercial world use of redundancy but the audience here is not commercial use-case but the home-lab. Curious how a home-lab would have multipel clusters and WAN connections to bounce around for VRRP to live on their router (in this case UDM-P) ...
All my systems are distributed across 8 VLANs.
@@CalvinHenderson Oh, any "homelab" depending on how many "homes" and "labs" you can run.. ;-) It's more common in the 'pro' world, but to achieve real redundancy, servers and services should be span across differents sites, using multiples wan on each site :-) (i'm not a real home-laber, that is probably twisting my vision of things..)
People at ‘home’ are not running multiple sites across multiple homes. That is a commercial setup. I see you are one of the few that have multiple homes or connections via personal or professional and can use them all. Many people say they want multi-site setup’s but few can afford multi-sites just for a ‘home’.
@@CalvinHenderson It's true :-) My job offers me a lot of opportunities (6months in europe/6months in south america + multi pro-sites).. it might not be the case for many peoples, tho, this video is still interesting and a very nice "learning support" for some of my co-workers :-) In the setup described, 8 VLANS, one site, multi homelab-servers.. it's a concept i'd call "RAIS" : Redundant Array of Inexpensive Servers :-D
Nope, stopped watching when you got to "install docker".
Docker, like LXD and Incus are containerization technologies designed to isolate applications or components of applications to improve reliability. This is achieved either by providing a dedicated environment for the application to run or by isolating it from the host OS for interoperability concerns. Docker has the additional benefit of allowing application developers to deliver an "appliance" that runs the same way on every target system regardless of any dependencies that might be missing. Both NginX Proxy Manager and SearXNG are delivered as docker containers for this precise reason and the docker packaging makes those apps easier to deploy and more resilient against changes in the host environment.
@@scottibyte Yes, I know all that, but I still despise how docker works and avoid it like a plague. For one thing, relying on docker-compose deprives us of learning how to install apps natively, which is what I am primarily interested in.
@MarkConstable not all apps will have a native install for your OS of course. Docker excels because it provides a dedicated environment where an appliance can run reliably despite any dependency limitations imposed by your host OS. Docker exists in part because some apps are too fragile or complex to coexist with other apps.
@@scottibyte Then that is a red alert that I would not want to use those apps anyway.
@@MarkConstable To get around the need for no appliance configurations you are eliminating probably 70% of open source applications. I get wanting perform native installs. However, by that logic docker, flatpaks, snaps and appimages are all off the table for you.
Outstanding, Scott. You are getting better and smoother with the videos. I am impressed! A wealth of knowledge available for the asking.
Thanks Jim. The significant challenge is developing a procedure with absolute repeatability on every system it is deployed on with as simple as possible set of steps. This one is a more complex subject and not usually covered in regards to home labs and I felt the message needed to get out. Thanks for the kudos again!
Thank you for the walk through, times VM, times LXC you manage :) Very helpful, clear and succint.
Welcome. Be sure to drop by the chat and say hi. chat.scottibyte.com/
Thanks for the great video. I'm curious to know how this works with dynamic IPV6 addresses though? When your IPV6 address changes you wont be able to access your local services?
Unlike the IPv4 WAN address that your ISP assigns you via DHCP which changes, the IPv6 prefix allocation that your ISP assigns is fixed and so using IPv6 global addresses on devices on your LAN should not change.
I enjoyed this. TY
This is amazing, Scott! Well done. Another step on the way to "bullet proofing" the network
Very well done, Scott and this showed me why you like this product so much. I will be completing my transition from Roboform to Bitwarden within the next couple of days and removing Roboform at least from the browser extensions Thanks.
Thank you for the training. It looks like Incus now has a native UI, is that so? Either way, is LXConsole superior in your view? Lastly, presumably LXConsole is only for VMs, and something like Portainer would still be necessary to manage my docker containers? I'm a total n00b. Thanks again! (Edit: Sorry, one last question: I'm learning as I go using VPSs before I attempt to build a homelab. Will LXConsole let me spin up VMs in a VPS like Digital Ocean? Thank you so much!)
Incus doesn't have a Native UI. It somewhat borrows (or can run) the LXD server UI. It's a bit limited because it has to be installed on each server it managers. LXConsole can manage both LXD and Incus servers and one instance of LXConsole can manage many servers. My LXConsole manages 8 incus servers and 2 LXD servers. Come on by chat.scottibyte.com/ if you have time and I can give you an overall briefing. Incus supports incus containers, incus VM's and Incus OCI containers (docker) at this point. You can view an incus server as being your own private VPS and LXConsole is a GUI that lets you spin up all three types of containers.
I believe Ubiquiti plan adding RAID 6 as an option in firmware update. They often listen to feedback, even from the smallest of users, so I would expect a lot of features to be added. I think this initial offering may just be feeling out the market so to speak. The hardware is the exact same as the UNVR Pro, except doubling the RAM, which makes sense as they had the hardware. The Raid Levels currently are Raid 5 or Raid 10 if I recall correctly. I would be surprised if UI don't add more RAID and NFS, but as I always say, never buy a device based on what may come. I don't think iSCSI will come until enterprise level device is available. iSCSI tends to be more SAN than NAS . The price is right here. Closest Synology would be the 923, which is lower spec overall. If you want a good NAS that performs well, the UNAS Pro does that. If you want a home server, then this is not the device you seek.
I agree that Ubiquiti is testing the waters. Regarding iSCSI, I have had maybe four videos exploring its application in the home lab. iSCSI really is an elegant solution even over 2.5Gbps. I would also like to see integration into an elegant web based portal using Unifi accounts with 2fa. I don't think I saw any mention of the CIFS shares being able to operate within a domain.
I use unifi switches, router and access points, but I run OMV for my NAS, I do like the idea of running docker, lxc, vm from the 1 box. But with this unifi NAS, once it's had a few updates, which I watch a few channels announce. What I think we might see more homelabbers doing is running a mini pc to run docker etc on and then use the NAS as we used to just for data storage, in fact just watched a video on @wundertech channel suggesting just this idea. Not sure I would as I like to build my own pc and only do this for fun. Might be some good job opportunities using this route though
I agree, definitely needs to mature a little more to be considered a competitor in my opinion. Looking forward to see what they do next,
🍭🍭 port hokie pokie too funny
I tried install lxconsole via Incus OCI support. Through macvlan network couldn't find a route to a server on which it was running. When I set to bridge network it worked.
Precisely why I didn't present it that way.
@@scottibyte But probably since Incus now support OCI, it will be common method to run lxconsole. Yes, I know OCI support still need to be improved. BTW: Thank you for your videos.
@@piotrtalarczyk8987I have at least one video showing how to use Incus volumes with OCI containers and you can use that method if you like for hosting LXConsole.
Please note he is using linux etc not windows so youre not able to follow this
Perfect timing, as I am in the middle of transitioning permanently over to Ubuntu from windows 10. Appreciate the video scott.
That is a lot to absorb! It also opened my eyes a bit for why your desktop looks and operates the way it does. Thanks Scott
when using ipvlan, how to make contininer have network access to host and public ip, like ping to google ? i've tried it and always returning no route error
In general, I would suggest macvlan. Join the chat at chat.scottibyte.com/ to ask more.
Good vid scott, useful info
Just start with what you have, or can get at a decent price as a starting point. What takes time, is actually not buying the hardware, but figuring out how to actually configure all the stuff you want, and when you have that knowledge you should also know what to aim for hardware wise.
and that's basically what the channel is all about. Infrastructure design/configuration in a nutshell.
100 C means silicon temperature and its fine, silicon shouldn’t have any issues until 110-115 degrees. In reality it’s even higher since getting accurate temperature from a chip is impossible and its more of a ballpark figure. The outside of the switch will be nowhere near 100 C.
Great video, Scott. I really enjoyed how thorough you are by including the necessary steps to get the job done.
10:40 This is not a downside. This is the way it's designed for, like Jails in FreeBSD. If i would need a clean OS to work with and maintain, LXC is a smaller and simpler, than a full size virtual machine. In this case Docker design would be a downside for me.
HiScott. Thanks for the video. I tried it your way but unfortunately it is not possible. To create the file some commands need to be installed on the computer. jp command gedit command At 7:15 you said that you are connected with a NordVPN server and then suddenly you need to be connected with a wireguard server to type in that sudo wg show code. That means I have to stop the NordVPN connection and start a wireguard connection? How does this fit? How can I mix the wireguard public key and the nordvpn private key? Thanks for a feedback. Have a nice day
As shown in the video, you would use NordVPN's tool to acquire the info from the wireguard connection. That allows you to perform the "wg" commands to get what you need. Did you reference the show notes at discussion.scottibyte.com/t/ubiquiti-unifi-wireguard-connection-to-nordvpn/452
@@scottibyte Thanks a lot for the feedback. What is the NordVPN's tool? How do I get the necessary information out of it? I can only choose the country I want to connect. I tried to follow your show notes but it is still not possible. I could manage to get wireguard-tools from homebrew but the command sudo wg does not show anything despite I'm connected via NordVPN client to a server.
@@doembele I am not really a Mac guy, so not sure I can advise. Do you not have a Linux machine around? Mac is a variant of BSD Unix and not Linux.
@@scottibyte Thanks for your help.
Unifi is capable of DNS records now btw.
Yes, I am aware. However, the Unifi DNS doesn't support CNAME records and Unifi doesn't have granular ad blocking like Pi-hole. We have waited five years for Unifi DNS and perhaps another five it will be there.
Great video. Took me a little while, but its running nice. One thing. The logo thing desnt work any more for some reason. When you change the logo based on your instructions, the only logo that changes, is the upper left of the preferences page.
Thanks. So, I recreated my instance following my guide and I was able to get the logo worked as described. Perhaps join the chat at chat.scottibyte.com/ to ask questions.
Thanks for much for posting these videos on how to use incus. One question I always had, both lxc and incus default to zfs, as well as you also choose in your videos. I would like try zfs as default storage, but have concern about zfs wearing out ssd and nvme storage disks. Is this a concern or how to handle?
When you say "default storage" I am assuming that you mean using zfs as your default for the root file system as opposed to ext-4. Generally if you are using a zfs file system, there is a chron job that sets autotrim to run on a weekly basis. If you are interested in seeing the trim operation status on your default storage pool in incus, use "zpool iostat -r default". Just FYI, the chat is better for these discussions than TH-cam comments.
May I ask you sir? Why Plex and not the open source Jellyfin?
I use both Plex and Jellyfin. Jellyfin is super easy to host. Plex is the more complex use case and no one had yet covered the topic of hosting Plex in an incus OCI container. I like both apps and I consider the use case just a bit different. In my case, most of my media is hosted on Plex. I tend to use Jellyfin for my HDHomeRun live TV because it is just simpler than the network tuner configuration in Plex. That being said, I use it in Plex as well for live TV. Yes, I prefer open source when possible, however Plex is pretty close to an open source model in the way they manage, update, and support the product.
@@scottibyte thanks for explaining
I have a Older 80gb HDD with a custom linux install with multiple partitions and custom software, I want to clone that disk it to a another drive to do tests on that clone. I thought about using a virtual drive instead of a physical drive, Can the linux boot loader mount that virtual image and boot from it ? or am I stuck to HDD to HDD/SSD, Reason for that is I want to run the custom linux OS and not just mount it to access files.
Virtual disks require the loop driver to be mounted and the loop driver cannot be handed the boot process from grub. My advice is to use something like redorescue to clone the drive to other media. Perhaps the redorescue image could be made on an iSCSI target.
Excellent!
Thanks. Be sure to join the chat at chat.scottibyte.com/.
I know it's out of topic, but I can't find a solution to this issue, maybe you could help me out. From what I see the containers are not inheriting the dns settings from the hyjpervisor. I imagine, to set a custom dns for all the containers, should be specified in the profile? I can't figure how to do that. Thanks
This is something that I can help with if you join the chat at chat.scottibyte.com/ as featured in every tutorial.
2x 10g SFP+ for 24 bucks wow. nice deal
Sometimes they are great and sometimes, not so much.
Scott, Have you experienced storage performance issues with nested zfs? For example, a NAS running zfs pools, with iSCSI iqn's, then running incus zfs pools on top. Since zfs is a "COW" Copy On Write file system on another (zfs) COW file system I have seen latency within the containers when I tried running lxd pools on the NAS iSCSI targets. Great video, and thanks for the info as always!
@@jblow530 I don't understand. Incus storage pools via iscsi are not nested in any way. Containers operate inside of storage pools and whether they are hardware on the Incus server or iscsi is immaterial and involves no nesting of any kind.
@@scottibyte Well nested as in running a zfs file system at the virtualization layer (in this case incus) running on top of the phsycial (NAS) storage layer also running zfs - on the back end. When I tested zfs pools on hosts running ZFS as the native file system I ran into write bottlenecks (IOPS were about half) due to the multiple copy-on-write transactions. Was my experience at least with TrueNAS as the NAS back-end when I tested iSCSI targets, may not be the case with others.
@@jblow530 ohhhh, I never considered that. I think if one were running zfs as the host file system, then a "dir" storage pool actually makes sense because containers would be in zfs natively. In that case, creating a zfs storage pool only makes sense on a dedicated device as shown in my video. Having a zfs virtual pool on a zfs file system is not only redundant, but probably a bottleneck as you described. My hosts typically are ext-4 and so a zfs pool for incus makes sense.
Very helpful information. Thanks Scott for all your videos & effort you put into them! 🙏
@@animaniaTV thanks for the kudos!
11
@@GTRComputers-u9y 11? 12...
Certainly interested accessing storage on networked drives, from incus containers and OCI,s, as my bulk data is on SAS raid arrays. In regard to movies, 700-ish. TV episodes, well over a 1000.
I have addressed accessing NFS storage from Incus/LXD before. Basically you map the target folder from inside of the container to the incus host. Then you use the mapped folder on the incus host as a mount point to either an NFS export or an iSCSI target. In the case of iSCSI, you could instead create an Incus storage pool that uses an iSCSI target.
The actual solution for DRM encrypted OTA signals is to DEMAND that the FCC actually do their job and stop broadcasters from encrypting broadcasts on the PUBLIC airwaves. The PUBLIC owns the airwaves, not the broadcasters.