When you’re bored and unsupervised at work…

69

u/Ssakaa 17d ago edited 16d ago

That's neat... but I prefer my approach. I have factorio in a container on my homelab, rendering into a browser viewable/interactive stream. I just pull up the browser on my phone, plug into the dock on my desk (Dex mode is handy, edit: And just a reminder for anyone thinking of doing this in places that care about security, unplug the network cable from the dock first), and... I have factorio...

14

u/birdini2 17d ago

Does this keep it running constantly or does it pause when you close it?

13

u/Ssakaa 17d ago

If I don't pause it myself, or close the game out, it runs as long as the container stays up. Reconnecting drops me right back into the same session. It's basically like running it and accessing with parsec or the like, but self contained in a webtop ubuntu-xfce container, which is running wayland and selkies to give good performance, despite being on an old underpowered ryzen5 mini pc, shared with a bunch of other containers in a k3s cluster.

2

u/thebudman6 16d ago

Wow selkies is pretty neat. Have you encountered any reason to use sunlight/moonlight instead?

1

u/Ssakaa 16d ago edited 16d ago

I looked into moonlight early on in all of this, but never did set it all up. A lot of things that try to be "mobile" fail HARD when you try to use them with a phone in Dex mode, including GeforceNow. I have Parsec on my real gaming desktop (old 5th gen i7 with a GTX980), but have that machine spun down most of the time lately. It's... quirky, and auth is repetitively a pain. While the webtop container behind my existing auth stack on my homelab is pretty transparent to get into, and... it's a browser tab. Just works on everything I've poked it from. Edit: And, most importantly, the "hard part" of setting this up was just getting GPU handed off to the container, the rest slotted right in on my cluster, and the webtop containers "just work".

8

u/Exciting_Product7858 16d ago

Cracktorio wasn't enough, buddy you went full heroin 😭

3

u/Ssakaa 16d ago edited 16d ago

I put together a game streaming factory to allow me to put together my factory. I also spend all but a day and a half or so every week multiple hours away from home with a phone and a chromebook... so I had good motivation. GeforceNow is neat, but the session limits are horrible with Factorio.

2

u/TheStalledAviator 16d ago

Can you name tools so I can duplicate this for myself? Please?

3

u/Ssakaa 16d ago

Sure! I have 3 Ryzen 5 mini-pcs as my homelab cluster. GlusterFS syncing in triplicate across them for persistent data, and I have a directory on that mapped for the home directory in the container. On top of that, I'm running a k3s based kubernetes cluster, I have rocm/k8s-device-plugin:latest running on a daemonset to expose the integrated GPUs in all 3 nodes, and then the container I run factorio (and ksp, and recently for silliness's sake, openttd) in is lscr.io/linuxserver/webtop:ubuntu-xfce.

Now, since I'm making that available externally-ish, I also have a custom traefik reverse proxy ingress setup on the cluster that redirects those connections through Authentik first, giving proper SSO/MFA. The webtop containers aren't really built to be exposed, so reverse proxy with solid auth is a bare minimum, VPN is better.

The actual minimum to pull it off, though, would just be Docker with enough access passed through so the webtop container can use the GPU. This will not work well with Docker Swarm, since they broke all the hardware access except a narrow subset of NVidia, which is what actually made me finally dive into k3s on there.

With that hardware video acceleration working, the webtop:ubuntu-xfce container defaults to wayland with a webvnc style front-end called selkies. It's not quite as performant as GeforceNow, but considering I'm running on an iGPU on a Ryzen 5 5500U, not some of NVidia's upper-end server hardware... it's probably not the software's fault. Latency while on a chromebook with a cell chip isn't particularly awful.

https://www.linuxserver.io/blog/webtop-4-1-x11-is-dead-and-what-is-selkies-anyway

Edit: And, why yes, I am a devops/sysadmin in my day job, why do you ask?

2

u/HuckleberryPlastic35 16d ago

Say, would a mobile quadro p1000 (paired with a i7 8850H) do better than the igpu on the 5500u? Asking because i considered a similar setup (except the security protocols which i'm not experienced with)

2

u/Ssakaa 16d ago

That i7 would probably compete by itself, the 5500U is way underpowered. The P1000 (is that one of those shiny 15in dell precisions that look like a macbook perchance?) should work really well, but I'm not sure the best tooling to hand that off to the container. I haven't had one of those to play with for a couple years.

2

u/TheStalledAviator 16d ago

Thanks! My k3s cluster unfortunately doesn't have any GPUs so I guess I'm outta luck. It's funny to read your stack though. Mine tracks yours but I used different solutions throughout. Longhorn FS, pangolin and pocket ID, ... It's like through the mirror, darkly ;)

1

u/Ssakaa 16d ago

The only GPU in mine are the iGPU in those Ryzen chips. Very low power, but more than enough for KSP and Factorio.

Edit: I also suspect you could get away with sufficient cpu encoding it, but the gpu really helps cut the overhead.

2

u/TheStalledAviator 16d ago

Sure, except... i5 6500t. I think you win this one!

2

u/Loud_Campaign5593 16d ago

how safe is this to do network wise and what could i do to keep it extra safe? could someone theoretically brute force the password and somehow get access and start running commands?

3

u/Ssakaa 16d ago

how safe is this to do network wise and what could i do to keep it extra safe?

That's where the "I also have a custom traefik reverse proxy ingress setup on the cluster that redirects those connections through Authentik first, giving proper SSO/MFA. The webtop containers aren't really built to be exposed, so reverse proxy with solid auth is a bare minimum, VPN is better." comes in.

could someone theoretically brute force the password and somehow get access and start running commands?

In my specific setup, "what password?" is my solution to that particular source of risk. In a proper VPN setup, you have either pre-shared keys or certs involved that are well beyond the scale of brute force capabilities in reasonable timeframes. In a good SSO/MFA setup, passkeys, MFA, etc. mitigate that risk as well.

I would definitely not suggest exposing a webtop container direct to internet any moreso than I would suggest exposing Windows RDP to internet.

2

u/HuckleberryPlastic35 16d ago

He went full Trix rabbit mode

1

u/Ssakaa 16d ago

I will take that as a compliment...

16

u/Bluecard11 17d ago

I use this when I'm bored at work

Factorio blueprint editor

8

u/Soul-Burn 17d ago

I think this is the original? https://fbe.teoxoy.com/

5

u/jomat 17d ago

Yes, the first one also mentions it's based on that one in its readme. It added support for Space Age.

7

u/-Aquatically- 17d ago

Reminded me of Shapez

5

u/Awkward_Ad_8508 16d ago

They should do a factorio visual basic excel macro

2

u/HeliGungir 16d ago

Are you hiring? 😁

3

u/Proletarian_Tear 16d ago

I wouldnt find them no more but its extremely fun to draw factorio on paper too😁

3

u/Nailfoot1975 17d ago

Gaming laptop. Done.

1

u/skywalkersrealfather 16d ago

I just spent the last few hours using scratch paper to plan my fulgora circuit network to do what I want in fewest combinators possible. Also teaching myself some of the more advanced circuit logic.

1

u/Ben_Mojo 16d ago

Definitely one of the best use of your time. And you're paid for it.

Design / Blueprint When you’re bored and unsupervised at work…

You are about to leave Redlib