Welcome to Friendica.Eskimo.Com

Home of Censorship Free Hosting

 Eskimo North Linux Shells, E-mail, Virtual Machines, Web Hosting.

E-mail, Web Hosting, Linux Shell Accounts terminal or full remote desktops.

Sign Up For A Free Trial Here

Please tell your friends about federated social media site that speaks several fediverse protocols thus serving as a hub uniting them, hubzilla.eskimo.com, also check out friendica.eskimo.com, federated macroblogging social media site, mastodon.eskimo.com a federated microblogging site, and yacy.eskimo.com an uncensored federated search engine. All Free!

lemmy - Link to source

Looking for YouTube Tutorials on Arch

I'm moderately experienced with linux. Been using it as my daily driver since 2018. Mostly using Fedora but also have a Debian server. I'm pretty comfortable with systemd but don't love the bloat.

Anyway, I've decided that I'd like to try Arch. So I'm looking for tutorials to help me learn or get familiar with Arch instead of just diving in head first like a madlad.

So what Arch tutorials do you like and are there any that you'd recommend that I watch?

Edit: lmao you guys are brutal. yeah i know about the arch wiki, rtfm and all that. I know i'll be spending a lot of time with the wiki. I just wanted to get a rough intro first. Well, I guess I'm off to read the fkin wiki now.

This entry was edited (2 months ago)
in reply to tkw8

lemmy - Link to source

www-gem

As others said, the Arch wiki is so well made that it should be the only source you need. Videos will not bring you anything given your background. The main difference with other distros will be the package manager.

A video about the install process will just be someone reading the wiki to you, and a video to "explain" pacman to you will be overkill ;)

Installation guide - ArchWiki

wiki.archlinux.org
This entry was edited (2 months ago)

lemmy - Link to source

If you have to pick only one Desktop Environment and use it till your computer breaks, what would you choose?

I know Gnome is the default on popular distros: Fedora, Ubuntu, Rhel, Pop OS (it's Cosmic Desktop yes but it is still based on Gnome)...etc. But Gnome just doesnt work for me. I would pick XFCE - stable and no BS.

Before Manjaro and their cetificate shenanigan, I used to use their XFCE version. At the time, it was marketed as the "Flagship Manjaro version". I went 4 years without any problems and I did tinker a lot, just couldnt get their XFCE to break.

After a tough Arch or Gentoo installs, I just want to put XFCE on and call it a day.

What about you guys?

lemmy - Link to source

A good e-mail client for linux?

I have been using KDE for a while, while I like many features I am looking for suggestions to the default email client:

Kmail - completely unusable for me and the only one which could maybe be integrated with kontacts, it could not receive mails from IMAP or pop or would receive only sometimes

Geary - good but too minimal, I need at least some kind of contact list and mailing lists feature, maybe this integrates with gnome contacts? I couldn't find anything in settings

in reply to blackghost1st

lemmy - Link to source

Sundray

Sadly no, according to their wiki:

Mac computers with Apple silicon processors are not currently capable of running Zorin OS natively. However, you may be able to use an app called UTM to run Zorin OS in a virtual machine on Mac computers with Apple silicon processors.

System Requirements

Find out if your computer is capable of running Zorin OS and which edition is better suited for your computer.
Zorin Group (Zorin Help)
in reply to Sundray

lemmy - Link to source

trevor (he/they)

Running x86_64 emulation on an ARM CPU is a miserable experience and should be avoided. I've done this on an M-series Mac with UTM, and you're looking at ~10-minute boot times just to get the VM booted, and ~3 minutes for it to render a response to whatever you click.

It's honestly wild that they seriously suggest doing this on their Wiki.

This entry was edited (2 months ago)

lemmy - Link to source

Radarr, Sonarr, SABnzbd and Permissions

I'm trying, and struggling a little bit with getting the three items in the title setup the way that I want.

Running Arch.

I would like to run Radarr, Sonarr and SABnzbd all under the same user/group. My reasoning is that I (am just being overly particular) want any of the files created by those services to fall under the same owner/group. This is easy enough to accomplish by running systemctl edit service.service and adding the appropriate lines in the configuration for each one and saving it so the services run using the specified user/group.

The issue that I'm having is that the correlating folders in /var/lib/ have the ownership of the original users. I can manually change that ownership to the user/group I want but if I reboot the computer the SABnzbd folder ownership reverts back to default (the other two were doing the same thing but suddenly stopped and I'm not 100% sure why) or if the services get updated, the folders will also revert back to their default user/group.

Is there a way for me to enforce the ownership of those folders to the user/group that I have set to run the services regardless of them getting updated or the machine rebooting?

in reply to non_burglar

lemmy - Link to source

skizzles

Interesting, was there anything in particular that you did with the services other than editing the service to run as those particular users?

Side note, I just tried to chown the sabnzbd folder and everything inside updated but the main folder itself refuses to change. Even after stopping the service.

Edit: scratch that. I closed and re-opened Dolphin and checked the properties of the folder and now it's showing correctly.

This entry was edited (2 months ago)
in reply to skizzles

lemmy - Link to source

non_burglar

I just vi the systemd/system/fancyname.service files father than use systemd edit, but I think the result is the same.

There are two configs you can add to the [service] directive:

user=someuser

This should allow you to run the service under the credentials of your choosing.

Remember to systemctl daemon-reload after making changes to unit files.

This entry was edited (2 months ago)

lemmy - Link to source

Which Distribution and Desktop Environment should I use?

Background: I am a lifelong Windows user who is planning to move to Linux in October, once Microsoft drops support for Windows 10. I use a particularly bad laptop (Intel Celeron N3060, 4 GB DDR3 RAM, 64 GB eMMC storage).

I do have some degree of terminal experience in Windows, but I would not count on it. If there are defaults that are sensible enough, I'd appreciate it. I can also configure through mouse-based text editors, as long as there is reliable, concise documentation on that app.

So, here's what I want in a distro and desktop environment:
- Easy to install, maintain (graphical installation and, preferably, package management too + auto-updating for non-critical applications)
- Lightwight and snappy (around 800 MB idle RAM usage, 10-16 GB storage usage in a base install)
- Secure (using Wayland, granular GUI-based permission control)

I have narrowed down the distributions and desktop environments that seem promising, but want y'all's opinions on them.

Distributions:
- Linux Mint Xfce: Easy to install, not prone to randomly break (problems: high OOTB storage usage, RAM consumption seems a little too high, kind of outdated packages, not on Wayland yet)
- Fedora: Secure, the main DEs use Wayland (problems: similar to above except for the outdated packages; also hard to install and maintain, from what I have heard)
- antiX Linux (problems: outdated packages, no Wayland)

Desktop Environments:
- Xfce: Lightweight, fast, seems like it'd work how I want (problems: not on Wayland yet, that's it)
- labwc + other Wayland stuff: Lightweight, fast, secure (problems: likely harder to install, especially since I have no Linux terminal experience, cannot configure through a GUI)

In advance, I thank you all for helping me!

I appreciate any help, especially in things like:
- Neofetch screenshots, to showcase idle RAM usage on some DEs
- Experiences with some distributions

This entry was edited (2 months ago)
in reply to thatonecoder

lemmy - Link to source

notanapple

Try Fedora LXQT too, it ll default to wayland in the next fedora release (~4th april i think). Its very lightweight.

Fedora LXQt Spin

Fedora LXQt provides a lightweight, well-integrated LXQt desktop environment. In addition to LXQt itself it provides a small, well selected collection of applications like the Falkon browser, which combines Chromium's rendering engine with a nice Qt …
fedoraproject.org
This entry was edited (2 months ago)

lemmy - Link to source

[Solved] How can I free space in BTRFS?

Edit 2: Through all of my shenanigans I ended up on a read-only snapshot for root. The error I got just seemed similar to previous out-of-space errors. I went to a later snapshot as default and everything is working great!

My OpenSUSE Tumbleweed is wonky since I last did a dist-upgrade with about 4000 packages. Midway through it errord out with an error that indicated that the filesystem was full althou df showed plenty of free space.

BTRFS seemed to be the culprit. Removing snapshots let me continue the upgrade until it errored out again. Rinse and repeat until it was done.

Edit: My root subvolume is read only. So there must be some error in that. The other subvolumes work correctly. So I guess it isn't about free space after all.

But now the BTRFS seems to be almost full and I cannot update anymore.

...
Checking for file conflicts: .....................[done]error: can't create transaction lock on /usr/lib/sysimage/rpm/.rpm.lock (Read-only file system)                 ( 1/40) Removing: ovpn-dco-kmp-default-0.2.202412[error]Removal of (76899)ovpn-dco-kmp-default-0.2.20241216~git0.a08b2fd_k6.13.7_1-2.2.x86_64(@System) failed:          Error: Subprocess failed. Error: RPM failed: Command exited with status 1.                                      Abort, retry, ignore? [a/r/i] (a):                      Problem occurred during or after installation or removal of packages:                                           Installation has been aborted as directed.              Please see the above error message for a hint.

I've tried a full balance but that didn't even seem to help. So I suspect that the space is caught up in snapshots, but I can't delete them.
# snapper list

# │ Type   │ Pre # │ Date                             │ User │ Used Space │ Cleanup │ Description           │ Userdata                                               ─────┼────────┼───────┼──────────────────────────────────┼──────┼────────────┼─────────┼───────────────────────┼─────────────                                             0  │ single │       │                                  │ root │            │         │ current               │  1  │ single │       │ Thu 18 Apr 2024 05:58:31 PM CEST │ root │  12.51 GiB │ number  │ first root filesystem │365* │ pre    │       │ Wed 26 Mar 2025 04:28:33 PM CET  │ root │  16.00 KiB │ number  │ zypp(zypper)          │ important=no                                           366  │ pre    │       │ Wed 26 Mar 2025 07:28:09 PM CET  │ root │  16.00 KiB │ number  │ zypp(zypper)          │ important=no                                           367  │ pre    │       │ Wed 26 Mar 2025 07:36:53 PM CET  │ root │  16.00 KiB │ number  │ zypp(zypper)          │ important=no
# snapper rm 1

Deleting snapshot failed.
# snapper rm 365

Cannot delete snapshot 365 since it is the currently mounted snapshot.
# btrfs filesystem usage /

Overall:                                                    Device size:                 476.44GiB                  Device allocated:            389.06GiB                  Device unallocated:           87.37GiB                  Device missing:                  0.00B                  Device slack:                  3.50KiB                  Used:                        382.53GiB                  Free (estimated):             90.80GiB      (min: 47.12GiB)                                                     Free (statfs, df):            90.80GiB                  Data ratio:                       1.00                  Metadata ratio:                   2.00                  Global reserve:              512.00MiB      (used: 0.00B)                                                       Multiple profiles:                  no                                                                      Data,single: Size:381.00GiB, Used:377.57GiB (99.10%)       /dev/mapper/cr_root   381.00GiB                                                                              Metadata,DUP: Size:4.00GiB, Used:2.48GiB (61.97%)          /dev/mapper/cr_root     8.00GiB                                                                              System,DUP: Size:32.00MiB, Used:80.00KiB (0.24%)           /dev/mapper/cr_root    64.00MiB                                                                              Unallocated:                                               /dev/mapper/cr_root    87.37GiB
# btrfs qgroup show /

Qgroupid    Referenced    Exclusive   Path              --------    ----------    ---------   ----              0/5           16.00KiB     16.00KiB   <toplevel>        0/256         16.00KiB     16.00KiB   @                 0/257         14.25GiB     14.25GiB   @/var             0/258         16.00KiB     16.00KiB   @/usr/local       0/259         16.00KiB     16.00KiB   @/srv             0/260         54.32MiB     54.32MiB   @/root            0/261         24.09GiB     24.09GiB   @/opt             0/262        289.02GiB    288.95GiB   @/home            0/263         16.00KiB     16.00KiB   @/boot/grub2/x86_64-efi                                                   0/264         16.00KiB     16.00KiB   @/boot/grub2/i386-pc                                                      0/265         16.00KiB     16.00KiB   @/.snapshots      0/266         24.00GiB     12.51GiB   @/.snapshots/1/snapshot                                                   0/473         16.00GiB     16.00GiB   @/.snapshots/1/snapshot/swap                                              0/657         23.68GiB     16.00KiB   @/.snapshots/365/snapshot                                                 0/661         23.68GiB     16.00KiB   @/.snapshots/366/snapshot                                                 0/662         23.68GiB     16.00KiB   @/.snapshots/367/snapshot                                                 1/0           36.19GiB     36.12GiB   <0 member qgroups>

Any tips?
This entry was edited (2 months ago)
in reply to ikidd

lemmy - Link to source

Xanza

The performance you're dealing with here is in the tens of milliseconds possibly hundreds if you're lucky. Anyone seriously pursuing this issue from the angle of performance genuinely doesn't understand the deep rooted issues here.

If you're so incredibly hard up for compute time that it's critical for you to squeeze out the extra 1/10 of a second from your system utilities then you need to shut your fucking computer down and go touch grass.

I mean even if this saves you 30 seconds a day 50 weeks a year 5 days a week that's 2 hours per year it's saving you.... I'd rather slow fuck the two hours and get an extra 2 hours of pay.

This entry was edited (2 months ago)

lemmy - Link to source

Warning: Gnome file manager (Nautilus) can make remote requests when previewing files

I just found this out recently. So this isn't actually Nautilus itself but it's the file previewer (Gnome Sushi) that comes with it. If you select a file and press the spacebar, it will automatically preview the file if it supported. If the file is an audio file, it will automatically fetch album art from the web, and if the file is an HTML file, it can make third-party requests. IMHO this is a huge privacy issue. For example if you were browsing the web using Tor Browser and saved a page to view offline, and then later accidentally opened it using the file previewer, any third-party requests will leak out the clearnet.

This is an open issue and I don't expect it to be fixed anytime soon, so the easiest solution is to simply uninstall Gnome Sushi (on Fedora, it is the sushi package). On atomic distros if Gnome Sushi is installed as a flatpak you might be able to revoke internet permissions for it using Flatseal, though I have not tested this.

Edit: I'm aware that KDE also has file previewers, but I'm not sure if they have the same issue. If anybody else knows please leave a comment letting us know


Add an option to disable metadata retrieval / make it opt in (#113) · Issues · GNOME / sushi · GitLab

Music album art appears to be pulled from remote locations, without any warning or ability to disable. It could be considered a privacy issue, since it likely requests...
GitLab
This entry was edited (2 months ago)

ActivityPub - Link to source

Is there a way to connect multiple desktops and treat them as one system?

I have some desktops (the tower kind) lying around and I'm wondering if there's a way that I can connect them all to one display and combine their computational power or at least make them all accessible in one place. I want to get into server hosting but only have one monitor. They're currently running LMDE.

Any ideas?

lemmy - Link to source

Those who use DWM, how do you get the autostart scripts to work?

I'm talking about this patch:

dwm.suckless.org/patches/autos…

Now, the notes seem simple: after apply the patch, dwm will look for the autostart script in ~/.dwm/autostart.sh.

But if you read it carefully, the file is:

~/.dwm/autostart.sh &

Wth does a "&" have to do with file name? I tried to just use the normal file: autostart.sh with exec dunst. It doesnt work..

I tried to create in the Thunar this weird file name, "autostop.sh &". The system does not recognize it as sh script anymore. .

Any help is welcome.

dwm - dynamic window manager | suckless.org software that sucks less

dwm.suckless.org
in reply to mazzilius_marsti

lemmy - Link to source

vvv

The & is an indicator to most shells to run this command in "the background". Try and run ( sleep 10; echo hi ) & - you'll see you get your shell prompt back, where you can run more commands, but 10 second later you'll see that 'hi' come through. 'blocking' is the default behavior, if you don't add the & you're still going get the hi in ten seconds, but you don't get a prompt because your shell's execution is blocked until your command is done.

The doc here is indicating that you havea choice between autostart_blocking.sh and autostart.sh, the latter of which would be run with a &. They could have expressed this better.

As for why your script didn't work, I'd try executing it in a terminal to see what error message comes up.

in reply to mazzilius_marsti

lemmy - Link to source

Ferk

But, whichever command I put in autostart.sh will run as if I run in terminal with the & sign. E.g: dunst & to run in the background.


Well, only if it's one single command, if you have multiple commands inside of the script, they will still run sequentially (the next command will only run after the previous one completely closes) unless you add & to them as well.

The difference is that dwm itself will not have to wait for the autostart.sh to complete before launching itself (thanks to it being run in the background with &)

However, autostart_blocking.sh (which isn't run with a &) will stop dwm from fully launching until the script completes.. I guess this is useful if you need certain things to be set up before dwm actually starts.. but it would potentially add a delay on dwm startup.

This entry was edited (2 months ago)

lemmy - Link to source

Gentoo help: sys-kernel/Installkernel

Im following the handbook, and I'm up to configuring the kernel. (In a vm. Skipping the optional installing firmware/microcode for now)

Trying for an OpenRC system, but it looks like all the steps need systemd.

All the videos I watched seems to skip this step and just go to Kernel configuration and compilation, but I dont want to a) mix old videos and up-to-date handbook, and b) blindly copy commands.
I understood mostly everything untill now. Just this kernel step where I got lost the first time I tried to install gentoo.

Configuring the Linux kernel - Gentoo wiki

wiki.gentoo.org
in reply to MidsizedSedan

lemmy - Link to source

bodaciousFern

So if you want to use systemd-boot as the bootloader you have to (apparently) install the systemd-utils package. Or you can just use GRUB / efistub.

Edit: looks like groche beat me to it 😁

It's probably been 4 years since I last had to rebuild my Gentoo, but I would be very surprised if there weren't good OpenRC instructions. I built mine with systemd and Gentoo handbook instructions always felt like 'Are you sure you don't want to use OpenRC? Ok, here are the systemd steps I guess'

This entry was edited (2 months ago)
in reply to MidsizedSedan

lemmy - Link to source

mkwt

Within section 2.1 choose only one subsection to follow. Those are all alternative bootloader options.

The bootloader subsection chosen in 2.1 on this page should match what is done in Configuring the Bootloader. The default path on that page is GRUB, which does not require any systemd components.

If following the GRUB path, follow instructions in 2.1.1 and skip the rest of 2.1. This is not at all clear in the handbook.

I believe that sys-kernel/installkernel is a utility script internal to the Gentoo project that can be configured to work with various bootloader solutions, including (optionally) systemd, and that is what this section 2.1 is talking about.

This appears to be an out of order dependency in the handbook

Configuring the bootloader - Gentoo wiki

wiki.gentoo.org
This entry was edited (2 months ago)
in reply to Karna

lemmy - Link to source

Peffse

Funny, I just saw an article saying don't get too excited about Linux gaming boosts because apparently Wine doesn't use ntsync yet, and Valve already worked around ntsync by implementing the faster fsync in SteamOS.

Linux kernel 6.14 out late due to 'pure incompetence' - don't get too excited about Linux gaming boosts

Linux kernel 6.14 has arrived today, and a day later than it was expected. As usual there's lots new from supported hardware to various improvements.
Liam Dawe (GamingOnLinux)
in reply to Peffse

lemmy - Link to source

Laser

fsync isn't faster than ntsync, it's merely a workaround to match Linux to Windows synchronization primitives. From ntsync's official description:

It exists because implementation in user-space, using existing tools, cannot match Windows performance while offering accurate semantics.


So without this, you either have a huge perfomance hit in case of an accurate implementation or you have good performance, but might run into edge cases where software doesn't work well or at all because it's not accurate (see github.com/ValveSoftware/Proto… for examples)


fsync issues · Issue #2922 · ValveSoftware/Proton

If you can reproduce a crash or performance regression with Proton 4.11 that consistently goes away with PROTON_NO_FSYNC=1, please post it here.
GitHub
in reply to Peffse

lemmy - Link to source

Laser

I don't think his statement is true though. If reddit.com/r/linux_gaming/comm… is not manipulated in any way, games with lots of these calls still get big improvements with ntsync over fsync (about 30% in this particular case, which is a massive boost). So while nobody can rule out that his statement may be true on average or in general, there are still cases where ntsync offers a tangible advantage – be it improved FPS or the fact that the game runs at all.

Edit: in the video that the thread is about, fsync didn't beat ntsync in a single one (or I missed it when jumping through it). In the best one, they were exactly tied. Sure, the difference wasn't really big, but again there are titles not working with fsync.

However, I want to stress that I'm not trying to talk about fsync. It's a good solution that significantly improved performance. But ntsync is, from everything I've seen, almost always better; how much depends on the case, and it never seems to be worse.

Reddit - The heart of the internet

www.reddit.com
This entry was edited (2 months ago)

lemmy - Link to source

Was anybody else just burned by the Tor Browser flatpak?

And by burned, I mean "realize they have been burning for over a year". I'm referring to a bug in the Tor Browser flatpak that prevented the launcher from updating the actual browser, despite the launcher itself updating every week or so. The fix requires manual intervention, and this was never communicated to users. The browser itself also doesn't alert the user that it is outdated. The only reason I found out today was because the NoScript extension broke due to the browser being so old.

To make matters worse, the outdated version of the browser that I had, differs from the outdated version reported in the Github thread. In other words, if you were hoping that at least everybody affected by the bug would be stuck at the same version (and thus have the same fingerprint), that doesn't seem to be the case.

This is an extreme fingerprinting vulnerability. In fact I checked my fingerprint on multiple websites, and I had a unique fingerprint even with javascript disabled. So in other words, despite following the best privacy and security advice of:

  1. using Tor Browser
  2. disabling javascript
  3. keeping software updated

My online habits have been tracked for over a year. Even if Duckduckgo or Startpage doesn't fingerprint users, Reddit sure does (to detect ban evasions, etc), and we all know 90% of searches lead to Reddit, and that Reddit sells data to Google. So I have been browsing the web for over a year with a false sense of security, all the while most of my browsing was linked to a single identity, and that much data is more than enough to link it to my real identity.

How was I supposed to catch this? Manually check the About page of my browser to make sure the number keeps incrementing? Browse the Github issue tracker before bed? Is all this privacy and security advice actually good, or does it just give people a false sense of security, when in reality the software isn't maintained enough for those recommendations to make a difference? Sorry for the rant, it's just all so tiring.

Edit: I want to clarify that this is not an attack on the lone dev maintaining the Tor Browser flatpak. They mention in the issue that they were fairly busy last year. I just wanted to know how other people handled this issue.

Update: I just noticed that based on this comment, the flatpak was only verified by Tor Project after this particular issue had been fixed. So perhaps I should have waited before installing the flatpak. Sigh...


Older Tor Browsers Breaking, Update Now! | Tor Project

The expiration on March 14 2025 of a root certificate can cause breakages Tor Browser version 13.0 and below. Users should updgrade immediately.
blog.torproject.org
This entry was edited (2 months ago)

lemmy - Link to source

Was anybody else just burned by the Tor Browser flatpak?

cross-posted from: futurology.today/post/4000823

And by burned, I mean "realize they have been burning for over a year". I'm referring to a bug in the Tor Browser flatpak that prevented the launcher from updating the actual browser, despite the launcher itself updating every week or so. The fix requires manual intervention, and this was never communicated to users. The browser itself also doesn't alert the user that it is outdated. The only reason I found out today was because the NoScript extension broke due to the browser being so old.

To make matters worse, the outdated version of the browser that I had, differs from the outdated version reported in the Github thread. In other words, if you were hoping that at least everybody affected by the bug would be stuck at the same version (and thus have the same fingerprint), that doesn't seem to be the case.

This is an extreme fingerprinting vulnerability. In fact I checked my fingerprint on multiple websites, and I had a unique fingerprint even with javascript disabled. So in other words, despite following the best privacy and security advice of:

  1. using Tor Browser
  2. disabling javascript
  3. keeping software updated

My online habits have been tracked for over a year. Even if Duckduckgo or Startpage doesn't fingerprint users, Reddit sure does (to detect ban evasions, etc), and we all know 90% of searches lead to Reddit, and that Reddit sells data to Google. So I have been browsing the web for over a year with a false sense of security, all the while most of my browsing was linked to a single identity, and that much data is more than enough to link it to my real identity.

How was I supposed to catch this? Manually check the About page of my browser to make sure the number keeps incrementing? Browse the Github issue tracker before bed? Is all this privacy and security advice actually good, or does it just give people a false sense of security, when in reality the software isn't maintained enough for those recommendations to make a difference? Sorry for the rant, it's just all so tiring.

Edit: I want to clarify that this is not an attack on the lone dev maintaining the Tor Browser flatpak. They mention in the issue that they were fairly busy last year. I just wanted to know how other people handled this issue.


Older Tor Browsers Breaking, Update Now! | Tor Project

The expiration on March 14 2025 of a root certificate can cause breakages Tor Browser version 13.0 and below. Users should updgrade immediately.
blog.torproject.org
This entry was edited (3 months ago)
in reply to nikqwxq550

lemmy - Link to source

TheChickenOfDoom

So the notification that is in the browser that directs you to update it wasn't enough? Because that totally works with the flatpak version of tor, because all the flatpak version of tor does is download a copy of the browser to your home directory and run it. There's a little notification dot on the hamburger menu of tor that directs you to the about page where you can download and update.

Because that's what I've been doing.

This entry was edited (2 months ago)
in reply to TheChickenOfDoom

lemmy - Link to source

nikqwxq550

Afaik the notification was suppressed, see the linked github issue in the post, or this one. I can guarantee the notification wasn't there on my end or else I would have noticed it

Tor Browser (Flatpak) Auto update doesn't work anymore after i think 13.0 update · Issue #721 · torproject/torbrowser-launcher

Before the Tor Browser would just update normally together when a new update dropped and in settings you could fine an update search button said button is now missing in the torbrowser launched by ...
GitHub
This entry was edited (2 months ago)

lemmy - Link to source

Why do we hate SELinux?

This is not a troll post. I'm genuinely confused as to why SELinux gets so much of hate. I have to say, I feel that it's a fairly robust system. The times when I had issues with it, I created a custom policy in the relevant directory and things were fixed. Maybe a couple of modules here and there at the most. It took me about 15 minutes max to figure out what permissions were being blocked and copy the commands from. Red Hat's guide.

So yeah, why do we hate SELinux?

lemmy - Link to source

(help) How to disable a laptop's internal keyboard on Fedora?

Hey folks, thanks for all of your recommendations for distros a while back. I ended up settling on Fedora KDE, and have been futzing around with it on my old laptop just for funsies.

I've re-encountered an old problem though. The laptop's Caps Lock and F1 keys are busted, sending in dozens of keypresses per second even when unpressed. I solved this on windows with a bit of a headache (using a program to disable those keys), but I have no idea how to solve it in this environment. I've tried futzing with keyd with little success, and my search powers are really failing me here.

Any advice?

lemmy - Link to source

What's the best way to create dedicated devices with Linux?

Let's say I want to build a GPS module for my car, which is only a GPS, doesn't hold anything else.
Or a recipe tablet for my kitchen which only hold a recipe app.

Is this kind of purposes common? What would be the best way to do this kind of stuff? How do I choose the hardware? How do I "lockdown" certain aspects I don't need about software?

These kind of devices could be convenient because, by only holding what's needed, they would use less resources, they would be completely distraction free and they would be suitable to be used by non tech savy user which would need to use only one or two programs without messing with the system in any way.

I know KDE ha some kind of multi app kiosk settings, GNOME also can achieve something similar tho it's more confusing.. There are some kiosk distros which only give you a browser. But I don't see anything that can be set up, customized, and locked like that.

But would that be the best way of achieving something like that? I mean to use a GPS I don't need a terminal, nor video codecs, nor a browser.. Maybe I can add the possibility to send Osmand google maps links.. Or I can decide to make it hold Spotify too to make it a radio as well.. But a full distro would be wasted!

But how do I prevent every other use except the intended ones? Is there an easy way to achieve a "one purpose device" using Linux? Should I simply use whichever distro I like and uninstall everything which is not needed (I see use case for arch)?

I feel like we have the total freedom of Linux distros on one side, and companies using managed devices on the other by setting complicated policies, but I don't know any options in between!

Maybe the focus here is the desktop environment more than distros! Are there desktop environment purposed to give the user a set of limited apps, or a single app (which isn't only a browser)?

in reply to dontblink

lemmy - Link to source

GustavoM

Dietpi user here. I've got a orange pi zero 3 w/ 1GiB of ram serving me nextdns under docker + playing a live stream 24/7 (via yt-dlp/ffplay) and it does its job just nicely.

Lightweight justice for your SBC!

Optimised | Simplified | For everyone - Backed by community, DietPi is a minimal OS image for SBCs - Raspberry Pi, Odroid, PINE64 etc. Install software optimised for you!
DietPi
This entry was edited (2 months ago)
in reply to dontblink

lemmy - Link to source

Björn Tantau

Small tangent, I didn't have the energy to read your whole post, so you might have addressed that. But often it's cheaper to go with an established multi purpose device instead of building something new.

I used to build and sell Raspberry Pi gaming handhelds that were as cheap as possible and literally just held together by some string. My purpose was to get enough money through the sales to be able to build one for myself. Sure, the building process was fun. But when I crunched the numbers just buying a cheap smartphone and controller was much cheaper and more performant and versatile than the self-built solution.

Just buying a cheap phone or tablet is often the cheaper solution.

Heck, even Valve just bought off the shelve tablet displays and turned the image in software for the Steam Deck.

This entry was edited (2 months ago)

lemmy - Link to source

Ubuntu explores replacing gnu utils with rust based uutils

At first I was sceptical, but after a few thought, I came to the solution that, if uutils can do the same stuff, is/stays actively maintained and more secure/safe (like memory bugs), this is a good change.

What are your thoughts abouth this?

https://www.cyberciti.biz/linux-news/ubuntu-to-explore-rust-based-uutils-as-potential-gnu-core-utilities-replacement/

in reply to joel_feila

lemmy - Link to source

atzanteol

This is one of the old-time original arguments in the OSS community.

The crux of the matter is that the GNU licenses require that modifications be released back to the community. Other "more permissible" licenses like MIT do not.

So if you want to make a commercial version of X, and X is under a GPL, then any changes you make need to be released under the GPL. The idea being "I shared this code with the community with the intent that you can use it for free and modify it as you like, but you need to share back what you do." Also called "Share and share alike".

This defends against "embrace, extend, extinguish" tactics that companies like Microsoft has loved to do. They can't take your code, modify it for their own purposes and re-sell it possibly making a more popular version that is now proprietary.

lemmy - Link to source

Is there a downside to sticking to iptables over ufw?

In short, sell me on ufw.

I learned recently that yfw is basically replacing iptables "everywhere", and as I'm getting old and crusty, this means that I have to learn something new when I'd much rather practice yelling at kids to get off my lawn.

To me, iptables is fine, and I like its flexibility. I've been using it ever since it de facto replaced ipchains, so ease of use isn'treally a factor in this equation.

So my more pointed question is: Can I just stick to iptables, or am I missing out on something that can only be done with ufw?

in reply to dan

lemmy - Link to source

wvstolzing

I was about to say the same -- and also: nftables syntax is a lot cleaner compared to iptables, and the whole configuration can be loaded from a single file just like pf, without doing the dump/reload cycle that iptables required. Unless UFW does features like defining zones which a user might need (like firewalld), then it's not a huge improvement on bare nftables usability-wise.
This entry was edited (2 months ago)

lemmy - Link to source

What's with the move to MIT over AGPL for utilities?
I would understand if Canonical want a new cow to milk, but why are developers even agreeing to this? Are they out of their minds?? Do they actually want companies to steal their code? Or is this some reverse-uno move I don't see yet? I cannot fathom any FOSS project not using the AGPL anymore. It's like they're painting their faces with "here, take my stuff and don't contribute anything back, that's totally fine"
in reply to marauding_gibberish142

lemmy - Link to source

ipkpjersi

For me, my personal projects are generally MIT licensed. I generally don't like "restrictions" on licenses, even if those "restrictions" are requiring others to provide their source and I want as many people to use my projects as possible, I don't like to restrict who uses it, even if it's just small/home businesses who don't want to publish the updated source code. Although, I admit, I'm not a huge fan of large corporations potentially using my code to generate a profit and do evil things with it, but I also think that's not going to be very common versus the amount of use others could get from it by having it using MIT who might not be able to use it otherwise with AGPL.

With that said, though, I have been starting to come around more to AGPL these days.

This entry was edited (2 months ago)
Unknown parent

lemmy - Link to source

ReakDuck

In my Company, we do use such code. But its mainly because we distribute our own Propriatary Linux OS.

We sometimes need to change such code, so we just put it on Github as a fork.

This entry was edited (2 months ago)

lemmy - Link to source

Gnome Customizations - is it possible to use custom image in application view?

Hello all,

If this is not the right community for this question, I would be happy to be redirected elsewhere, so just let me know.

I recently configured my terminal emulator to an aesthetic that I like (custom font, coloring, shell prompt, etc) and it has made me wonder about customization in gnome.

One of the biggest things that I wish I could change in gnome is the grey-ness of the application view.

In this screenshot, you can see the familiar application view. In between the organizing folders, the desktops, and the dock, there is just so much nothing.

I am wondering if it is possible to customize this relatively easily. I would much prefer an image of my own choosing in place of this, or at least a different color from time to time.

Is anyone aware if this is configurable? I can't seem to find an extension for this, or any real information on how you would do such a thing.

Thanks

This entry was edited (2 months ago)

lemmy - Link to source

How to have a boring and low-maintenance system?

Those who don't have the time or appetite to tweak/modify/troubleshoot their computers: What is your setup for a reliable and low-maintenance system?

Context:

I switched to Linux a couple of years ago (Debian 11/12). It took me a little while to learn new software and get things set up how I wanted, which I did and was fine.

I've had to replace my laptop though and install a distro (Fedora 41) with a newer kernel to make it work but even so, have had to fix a number of issues. This has also coincided with me having a lot less free time and being less interested in crafting my system and more interested in using it efficiently for tasks and creativity. I believe Debian 13 will have a new enough kernel to support my hardware out of the box and although it will still be a hassle for me to reinstall my OS again, I like the idea of getting it over with, starting again with something thoroughly tested and then not having to really touch anything for a couple of years. I don't need the latest software at all times.

I know there are others here who have similar priorities, whether due to time constraints, age etc.

Do you have any other recommendations?

This entry was edited (2 months ago)
in reply to GustavoM

lemmy - Link to source

F04118F

No it is

pandasecurity.com/en/mediacent…

And:

You're allowing for more attack vectors that would not be there if the system were to be patched. Depending on the severity of the vulnerability, this can result in something like crashes or something as bad as remote code execution, which means attackers can essentially do whatever they want with the pwned machine, such as dropping malware and such. If you wanna try this in action, just spin up a old EOL Windows machine and throw a bunch of metasploit payloads at it and see what you can get.

While nothing sensitive may be going to or on the machine (which may seem to be the case but rarely is the case), this acts as an initial foothold in your environment and can be used as a jumpbox of sorts for the attacker to enumerate the rest of your network.


And:

Not having vulnerability fixes that are already public. Once a patch/update is released, it inherently exposes to a wider audience that a vulnerability exists (assuming we’re only talking about security updates). That then sets a target on all devices running that software that they are vulnerable until updated.

There’s a reason after windows Patch Tuesday there is Exploit Wednesday.

Yes, a computer with vulnerabilities can allow access to others on the network. That’s what it means to step through a network. If computer A is compromised, computer B doesn’t know that so it will still have the same permissions as pre-compromise. If computer A was allowed admin access to computer B, now there are 2 compromised computers.


From reddit.com/r/cybersecurity/com…


The consequences of not applying patches

Many recent cyberincidents in have shared one characteristic: they have been possible thanks to a vulnerability in an IT system that needed patches.
Panda Security (Panda Security Mediacenter)
in reply to F04118F

lemmy - Link to source

GustavoM

Nice cherry picking/moving the goalpost, but that is not how refuting works. A PC at NASA has a much higher "threat level" than my Orange pi zero 3, just chilling on the background. Which means, a potential "security hole" may prove harmful for these pcs... but it'll definitely not hurt me in the slightest.

And before you parrot with other links and/or excuses... yes, I'm not negating their existence. I'm just saying they are there... but, well... "who cares"? If anything, its much faster to set up my distro back up "just like never happened before" than performing any "maintenance" whatsoever. Again, "Common sense antivirus" reigns supreme here -- know what you are doing, and none of these things will matter.

in reply to GustavoM

lemmy - Link to source

F04118F

You keep using the word "maintenance". All I'm worried about is not installing any security patches for months.

The problem that I tried to highlight with my "cherry picking" is:

  • Running a machine with open vulnerabilities for which patches exist also "paints a target on your back": even if your data is worthless, you are essentially offering free cloud compute.
  • But mostly, a single compromised machine can be an entrypoint towards your entire home network.

So unless you have separated this Orange Pi into its own VLAN or done some other advanced router magic, the Orange Pi can reach, and thus more easily attack all your other devices on the network.

Unless you treat your entire home network as untrusted and have everything shut off on the computers where you do keep private data, the Orange Pi will still be a security risk to your entire home network, regardless of what can be found on the little machine itself.

This entry was edited (2 months ago)
in reply to truthfultemporarily

lemmy - Link to source

d00phy

This really is the answer. The more services you add, the more of your attention they will require. Granted, for most services already integrated into the distro’s repo, the added admin overhead will likely be minimal, but it can add up. That’s not to say the admin overhead can’t be addressed. That’s why scripting and crons, among some other utilities, exist!

lemmy - Link to source

Thinking on switching to linux

Approaching the end of window 10 and have no plans on upgrading to 11.

I am trying to find alternatives to applications I regularly use before jumping ship (it is mostly a gaming focused pc) any suggestions?

There’s oculus software for my vr but don’t know what I’m going to do with that

Small update: probably going to do Linux mint as that appears to be the most beginner friendly

Update two: that's a lot of comments, and Thanks for all the info

This entry was edited (2 months ago)
in reply to MonkeMischief

lemmy - Link to source

DFX4509B

I'd recommend Lutris over Heroic both because it runs locally where Heroic is Electron, and because Lutris allows community-based native Linux ports for games where applicable, eg. for Ultima VII: The Black Gate + The Forge of Virtue, Lutris gives you the option of installing that game with Exult instead of DOSbox, for Tomb Raider and Tomb Raider II, you have the option to install those with OpenLara, for Doom 1 and 2, you have the option to install those with ZDoom, for Little Big Adventure, you can install that with the ScummVM runner, etc.

Also, at least for DOS games where you don't have the option to install a community-based modern port, you can use native DOSbox as a runner instead of Windows DOSbox as well through Lutris.

Oh, and one more bonus particularly for GOG games in Lutris' favor over Heroic, is Lutris uses the offline installers so that if anything ever goes wrong with any given GOG game, you can just reinstall from the offline installer where Heroic operates more like GOG Galaxy or Steam in that it's always downloaded from scratch.

This entry was edited (2 months ago)
in reply to DFX4509B

lemmy - Link to source

MonkeMischief

Hey, points for Lutris! Thanks for sharing!

I've had issues in the past installing stuff with Lutris, although for advanced scenarios like using community engines and stuff, that's really cool. I definitely have both installed on my machine for different reasons. Lutris handles EA / Origin stuff pretty well. (Titanfall 2 and Sims 2 Ultimate (not the Steam one) run beautifully on Linux, truly glorious!)

Electron annoys me as well, but I will say that I appreciate how Heroic hooks into GoG APIs.
It handles auto-updates, cloud saving, play time logging, that kinda stuff that made Galaxy decent and had a degree of convenience-parity with Steam.

(Maybe Lutris does this too now?)

For a complete newbie , I'd say Heroic has a bit of a smoother and expected ramp to just "Download game and run." But if you want more control, Lutris definitely has more options!

I also can't recommend Bottles enough for other games that aren't from distribution platforms. Shockingly simple.

This entry was edited (2 months ago)
in reply to Emtity_13

lemmy - Link to source

deadcade

  • AMD Drivers: Good news! They work even better on Linux. Bad news, you're probably referring to the AMD "control panel" type application instead of the drivers themselves, which doesn't have a direct equivalent. The drivers should come pre-installed, though depening on distro you may need to select/install "radv" or "vulkan-radeon" manually. Most of the control panel functionality can be found in other applications, like OBS for recording or CoreCtrl for clock speeds.
  • Chrome: Although Firefox is pre-installed in most cases, you have full freedom of choice here. Most people find that Firefox works basically the same after using it for a bit, but if it doesn't fit you, there's other options. Google Chrome is most likely available in your distros app store, but there's also less "spying" options like ungoogled-chromium.
  • Gmail: You can access this on the website, or through a mail client like thunderbird. You can switch if you want to, you're not limited by any means here.
  • Office 360: Though LibreOffice is a great alternative, some find themselves forced to use MS office for compatibility reasons. This is still possible, buy only in a webbrowser.
  • ITunes: This is a hard one to find alternatives for, depending on what you use it for. For managing iPhones from a PC, you essentially need Windows or macOS. For playing music, there's plenty of options.
  • JBL: I'm unsure as I don't use any of their products, but assuming you mean audio related "control panels", there's many options available. Though they may need a bit of tweaking and searching around to get things to sound the way you want.
  • Musescore: I also don't use this, but it's available on Flathub, meaning you can (and probably should) use your distros "App Store" to install this.
  • Norton AV: Not many AVs targeting Linux exist, and they're not the greatest quality. Though it's doable to go without one, as long as you don't download and run random files off the internet. Stick to the app store, and you should be totally fine.
  • PyCharm: This is available on Linux, also in the "app store". There's other IDEs available too, like vscode.
  • Remote Desktop to iOS: I haven't owned an iOS device since 2019, so I don't know which protocol they use. It's possible this isn't supported at all.
  • Star Citizen: It looks like this is playable through Proton. You can use Steam (add non-steam game), Lutris, or Bottles to launch non-steam Windows apps/games.
  • Steam: Works great
  • VPN: As you didn't put a previous VPN provider here, I'm not able to tell you if it works on Linux. Personally I have a hard time recommending any VPN service, but Mullvad stands out as being the least untrustworthy. Almost all others like Nord, Express, etc. share some common traits that make them very untrustworthy to me.
  • Windows Games: This is a bit more complicated. Games from the Microsoft Store are very unlikely to run, and require messing about to even try in the first place. Other games made for Windows likely work (even outside Steam), using management tools like Lutris or Bottles is often easier than manually using Wine.

If a tool (or distro) works well for you, it's a good option. Everyone has different opinions on the "best" distro, but since it's very subjective, there is no single "best" distro. There's only 2 distros I recommend against, that's Ubuntu (and close spin-offs) and Manjaro, because they have major objective downsides compared to equivalents like Mint or Endeavour. The distros I generally recommend to new users are Mint and Fedora, but feel free to look around, you're not forced to pick a specific one.

You noted you were likely going to choose Linux Mint, great! It's a "stable" distro, as in, it doesn't change much with small updates. Instead, new release versions (23, 24, 25, etc) come with new changes. Linux Mint comes with an App Store that can install from Flathub, which should be the first place to check for installing new applications.

As for VR, it depends heavily on which exact headset you have, and is not always a great experience on Linux right now (speaking from experience with an Index). The LVRA wiki is a great starting place: lvra.gitlab.io/. If you're on a Quest, WiVRN and ALVR exist, though they both have their own downsides. If you're on a PCVR headset from Oculus, your options are more limited. You might also want to consider a different distro, as VR development is moving very fast. Many VR users choose to go with a "harder" rolling release distribution, like EndeavourOS, to receive feature updates quicker.

Also of note, if you have the storage space, you can choose to "dual boot" (even with just one drive). This will give you a menu to choose between Windows and Linux when starting your computer, and will give you time to move stuff over. I generally recommend this, as it provides an option to immediately do a task you know how to do on Windows, when it's absolutely required to do the task asap.

Home

Welcome to the LVRA Wiki # A collection of links, useful resources and guides for the amazing world of VR on Linux. Feel free to contribute to this wiki yourself if you find anything useful that you might want to share with others.
Linux VR Adventures Wiki

lemmy - Link to source

Has anyone else questioned their choice of computers for running Linux?

3 years ago I needed a new computer and decided on an 16 inch M1 Macbook Pro, but did lots of overthinking about if I wanted to stick to it. I tried Asahi Linux didn't have any reasons at the time to use linux over macOS (but there was always the chance I might later), the build quality is 2nd to none, none of my Windows laptops lasted more than a few years.

3 years later, I've really been itching to switch to Linux. Two of several reasons: because its DEs are more customizable, it has better documented accessibility APIs if you want to make keyboard navigation software. I reinstalled Asahi Linux and really tried to make it my daily driver, but the lacks of apps would require me to dual boot: Photoshop and Roblox.

I researching again for computers closest to Macbook Pros but none of them come close to its build quality. I think it would be best for me to make my own desktop PC for linux. I don't think I'd fare well with another windows laptop brand.

in reply to TheTwelveYearOld

lemmy - Link to source

Kazumara

9 years and 4 months ago I bought an Acer laptop with a 4 core Intel Skylake with hyperthreading (i7-6700HQ) and a Nvidia GTX 960M, because the laptop I had was slow for compiling in my classes at Uni, and I wanted a discrete GPU for the occasional game when away from my Desktop PC (winter break and such (still use it for that btw)). I regretted that three times:

  • First when I wanted to install Linux instead of just using VMs. In early 2016 the kernels on live system ISOs didn't properly support Skylake yet, so I fucked around with Arch a bunch, but didn't end up keeping it installed. Don't remember why, probably got busy with schoolwork.
  • Then a while later, after I had installed Ubuntu or Fedora at some point, the next issue was that cooperative mode of Bluetooth and Wifi on the included Intel wireless chip wasn't well supported (even found an Intel Bluetooth dev saying as much on a mailing list), and it hung sometimes, so I had to make a script to turn the chip off and then rescan the PCI bus, that worked as a workaround but was still annoying.
  • Finally when we had Machine Learning classes I thought I might be able to use CUDA locally, so I tried installing the proprietary Nvidia driver and was greeted by a black screen on the next boot. Had to boot from a live system and chroot in to remove the proprietary crap again.

On my Desktop PC I have used AMD GPUs for quite a while and dual booting Windows and Linux has always been a breeze.

This entry was edited (2 months ago)
in reply to TheTwelveYearOld

lemmy - Link to source

LiveLM

To be fair, your issue seems more to be software based than hardware.
I should warn you that even if you do get a x86 laptop, Photoshop is rather janky under Wine and Roblox could find a way to kill the Vinegar client in the future.
I'd recommend you borrow a friend's machine and give it a spin, you might unfortunately not be off the dual-booting hook just yet...
This entry was edited (2 months ago)

lemmy - Link to source

EU push for open source, GIMP3 is out, Firefox gets webapps back_ Linux & Open Source News

EU push for open source, GIMP3 is out, Firefox gets webapps back_ Linux & Open Source News

Try out Proton Mail, the secure email that protects your privacy: https://proton.me/mail/TheLinuxEXP Grab a brand new laptop or desktop running Linux: https://www.tuxedocomputers.com/en# https://ww...
PeerTube.wtf

lemmy - Link to source

Looking for a "set it and forget it" distro

Hi all,
Relatively long time Linux user (2017 to be precise), and about two 3rds of that time has been on Arch and its derivatives.

Been running Endeavour OS for at least 2.5 years now. It's a solid distro until it's not. I'd go for months without a single issue then an update comes out of nowhere and just ruins everything to either no return, or just causes me to chase after a fix for hours, and sometimes days. I'm kinda getting tired of this trend of sudden and uncalled for issues.

It's like a hammer drops on you without you seeing it. I wish they were smaller issues, no, they're always major. Most of the time I'd just reinstall, and I hate that. It's so much work for me.

I set things the way I like them and then they're ruined, and the hunt begins. I have been wanting to switch for a long time, and I honestly have even been looking into some of those immutable distros (that's how much I don't want to be fixing my system.

I'm tired, I just want to use my system to get work done). I was also told that Nobara is really good (is it? Never tried it). My only hold back — and it's probably silly to some of you— is the AUR. I love it.

It's the most convenient thing ever, and possibly the main reason why I have stuck with Arch and its kids. Everything is there.

So, what do y'all recommend? I was once told by some kind soul to use an immutable distro and setup "distrobox" on it if I wanted the AUR.

I've never tried this "distrobox" thing (I can research it, no problem). I also game here and there and would like to squeeze as much performance as I can out of my PC (all AMD, BTW, and I only play single player games).

So, I don't know what to do. I need y'all's suggestions, please. I'll aggregate all of the suggestions and go through them and (hopefully) come up with something good for my sanity. Please suggest anything you think fits my situation. I don't care, I will 100% appreciate every single suggestion and look into it.

I'm planning to take it slow on the switch, and do a lot of research before switching. Unless my system shits the bed more than now then I don't know. I currently can't upgrade my system, as I wouldn't be able to log in after the update. It just fails to log in.

I had to restore a 10 days old snapshot to be able to get back into my damn desktop. I have already copied my whole home directory into another drive I have on my PC, so if shit hits the fan, I'll at least have my data. Help a tired brother out, please ❤. Thank you so much in advance.

This entry was edited (2 months ago)

lemmy - Link to source

Custom refresh rate on KDE wayland
I'm running KDE wayland with proprietary Nvidia drivers on CachyOS, so far I haven't found a way to set a custom monitor refresh rate, on windows I could use the Nvidia control panel to make one (going from 60hz to 75hz). kscreen-doctor doesn't let you set "unsupported" modes, the kernel launch option of video=1920x1080@75 didn't work, somehow. So how would I do it?
in reply to levzzz

lemmy - Link to source

MentalEdge

That is what xrandr allows you to do on X11, create and set display modes that aren't reported by the monitor.

EDID editing is basically replacing the data reported by the monitor, which also allows you to add display modes it doesn't report itself. This is the only way to do what you are looking for on wayland.

You can either switch to X11, and use xrandr, or create an EDID file with the display mode you want, and have it load on boot. Doing that is unfortunately not simple.

This entry was edited (2 months ago)

lemmy - Link to source

Krita is so KOOL, but how do i Verify the current AppImage?

don't know if this is of any help to anyone except maybe past me, but i had a hard time finding the correct Public Key to verify the current Krita AppImage: So what finally worked was gpg --import this Public Key here files.kde.org/krita/dmitry_kaz… and gpg --verify krita-5.2.9-x86_64.AppImage.sig then gpg says Good signature (fingerprint: E9FB 29E7 4ADE ACC5 E303 5B8A B69E B4CF 7468 332F). Anyway (>' v ')> here is a drawing i made using my laptops wonky touchpad.

KOOL
Cool Drawing!!!
This entry was edited (2 months ago)
Unknown parent

lemmy - Link to source

InnerScientist

From the mailing list I'm reading that kernel maintainers have heard a few companies looking for something like this, so yes?

Edit:

However, to be clear, the Hornet LSM proposed here seems very reasonable to me and I would have no conceptual objections to merging it upstream. Based on off-list discussions I believe there is a lot of demand for something like this, and I believe many people will be happy to have BPF signature verification in-tree.
This entry was edited (2 months ago)
in reply to ikidd

lemmy - Link to source

WasPentalive

They probably named it HORNET for a reason - think Japanese Murder Hornets... What Could Possibly Go Wrong??

It will probably start out as little glitches and slowdowns to destroy faith in your system ("Windows works right all the time") a random 2 second pauses. Finally one day every Linux box in the world crashes, all at the same time, because some 'dummy' in Microsoft deleted the private signing key.

This entry was edited (2 months ago)

lemmy - Link to source

Latest image of u-blue has removed firefox, several gnome support packages and some pipewire and gstreamer packages

Removed: firefox-136.0.1-1.fc41.x86_64 firefox-langpacks-136.0.1-1.fc41.x86_64 freerdp-libs-2:3.12.0-1.fc41.x86_64 gnome-bluetooth-1:47.1-1.fc41.x86_64 gnome-browser-connector-42.1-8.fc41.x86_64 gnome-classic-session-47.4-2.fc41.noarch gnome-initial-setup-47.2-1.fc41.x86_64 gnome-remote-desktop-47.3-1.fc41.x86_64 gnome-shell-extension-apps-menu-47.4-2.fc41.noarch gnome-shell-extension-background-logo-47.0-1.fc41.noarch gnome-shell-extension-common-47.4-2.fc41.noarch gnome-shell-extension-launch-new-instance-47.4-2.fc41.noarch gnome-shell-extension-places-menu-47.4-2.fc41.noarch gnome-shell-extension-window-list-47.4-2.fc41.noarch gstreamer1-plugin-libav-1.24.11-1.fc41.x86_64 gstreamer1-plugins-bad-free-1.24.11-1.fc41.x86_64 pipewire-utils-1.2.7-7.fc41.x86_64 uresourced-0.5.4-2.fc41.x86_64

The latest build of u-blue:main has removed these packages. Is anybody also experiencing this? I could find no information regarding this on the discourse forum.

Edit : the issue has been resolved in the next build image. It was a small error that crowd in due to shifting to dnf5. Thanks for to maintainers for doing all the hardwark

This entry was edited (2 months ago)
in reply to Sentau

lemmy - Link to source

Sims

Didn't know what uBlue was, so here: universal-blue.org/

"The Universal Blue project builds a diverse set of continuously delivered operating system images using bootc. That's nerdspeak for the ultimate Linux client: the reliability of a Chromebook, but with the flexibility and power of a traditional Linux desktop.

These images represent what's possible when a community focuses on sharing best practices via automation and collaboration. One common language between dev and ops, and it's finally come to the desktop.

We also provide tools for users to build their own image using our templates and processes, which can be used to ship custom configurations to all of your machines, or finally make the Linux distribution you've long wished for, but never had the tools to create.

At long last, we've ascended."


Universal Blue - Powered by the future, delivered today

Universal Blue is a diverse set of images using bootc's OCI support as a delivery mechanism. That's nerdspeak for the ultimate Linux client!
universal-blue.org
in reply to Leaflet

lemmy - Link to source

Arthur Besse

Nice post, ~~but your title is misleading~~: the blog post is actually titled "Supply Chain Attacks on Linux distributions - Overview" - the word "attacks" as used here is a synonym for "vulnerabilities". It is not completely clear from their title if this is going to be a post about vulnerabilities being discovered, or about them actually being exploited maliciously, but the latter is at least not strongly implied.

~~This lemmy post however is titled (currently, hopefully OP will retitle it after this comment) "Supply Chain Attack found in Fedora's Pagure and openSUSE's Open Build Service".~~ edit: @OP thanks for changing the title!

Adding the word "found" (and making "Attack" singular) changes the meaning: this title strongly implies that a malicious party has actually been detected performing a supply chain attack for real - which is not what this post is saying at all. (It does actually discuss some previous real-world attacks first, but it is not about finding those; the new findings in this post are vulnerabilities which were never attacked for real.)

~~I recommend using the original post title (minus its "Overview" suffix) or keeping your more verbose title but changing the word "Attack" to "Vulnerabilities" to make it clearer.~~

TLDR: These security researchers went looking for supply chain vulnerabilities, and found several bugs in two different systems. After responsibly disclosing them, they did these (very nice and accessible, btw - i recommend reading them) writeups about two of the bugs. The two they wrote up are similar in that they both involve going from being able to inject command line arguments, to being able to write to a file, to being able to execute arbitrary code (in a context which would allow attackers to perform supply chain attacks on any software distributed via the targeted infrastructure).

This entry was edited (2 months ago)

lemmy - Link to source

On Zorin OS, can't get XClicker custom location to work [Solved]

Sorry if this isn't the place for this, I couldn't find a forum for the program. I have 2 monitors and when I try to use a custom location it seems like XClicker doesn't understand how to handle that. When getting a location the coordinates behave as I'd expect, treating all of my screen space as one with the numbers increasing as you go right and down, the top left of my left monitor currently being 0,142. However when I activate to start clicking it seem as though it treats the top left corner of whichever monitor the cursor is on as though it were 0,0, meaning it doesn't actually click where I want.

For example, if I Get a location on the right monitor and position the mouse on the right monitor it'll actually click a location 1920 pixels to the right, since the left is 1080p, and I think 142 pixels down. With the same coordinates, if I position my mouse on the left monitor then activate It'll go close to where I want it to on the right monitor for the first click, then shift to the right again since it's now on the right monitor.

Edit: Oh I figured it out and it's definitely newbie stuff. I was poking around and for shits tried to upgrade my OS. While I couldn't do that, it seems like it did upgrade a lot of other stuff and now the clicker works normally. I was hoping it'd be a miracle and fix another issue, too, but it didn't.

This entry was edited (2 months ago)
in reply to mina86

lemmy - Link to source

Arthur Besse

Note: for readers who aren't aware, the notation ^X means hold down the ctrl key and type x (without shift).

ctrl-a though ctrl-z will send ASCII characters 1 through 26, which are called control characters (because they're for controling things, and also because you can type them by holding down the control key).

^D is the EOF character.
$ stty -a | grep eof
intr = ^C; quit = ^\; erase = ^?; kill = ^U; eof = ^D; eol = <undef>;
$ man stty |grep -A1 eof |head -n2
       eof CHAR
              CHAR will send an end of file (terminate the input)


Nope, Chuck Testa: there is no EOF character. Or, one could also say there is an EOF character, but which character it is can be configured on a per-tty basis, and by default it is configured to be ^D - which (since "D" is the fourth letter of the alphabet) is ASCII character 4, which (as you can see in man ascii) is called EOT or "end of transmission".

What that stty output means is that ^D is the character specified to trigger eof. That means this character is intercepted (by the kernel's tty driver) and, instead of sending the character to the process reading standard input, the tty "will send an end of file (terminate the input)".

By default eof is ^D (EOT), a control character, but it can be set to any character.

For instance: run stty eof x and now, in that terminal, "x" (by itself, without the control key) will be the EOF character and will behave exactly as ^D did before. (The rest of this comment assumes you are still in a normal default terminal where you have not done that.)

But "send an end of file" does not mean sending EOT or any other character to the reading process: as the blog post explains, it actually (counterintuitively) means flushing the buffer - meaning, causing the read syscall to return with whatever is in the buffer currently.

It is confusing that this functionality is called eof, and the stty man page description of it is even more so, given that it (really!) does actually flush the contents of the buffer to read - even if the line buffer is not empty, in which case it is not actually indicating end-of-file!

You can confirm this is happening by running cat and typing a few characters and then hitting ^D, and then typing more, and hitting ^D again. (Each time you flush the buffer, cat will immediately echo the latest characters that had been buffered, even though you have not hit enter yet.)

Or, you can pipe cat into pv and see that ^D also causes pv to receive the buffer contents prior to hitting enter.

I guess unix calls this eof because this function is most often used to flush an empty buffer, which is how you "send an end of file" to the reader.

The empty-read-means-EOF semantics are documented, among other places, in the man page for the read() syscall (man read):

RETURN VALUE
      On success, the number of bytes read is returned (zero indicates end of
      file), and the file position is advanced by this number.


If you want to send an actual ^D (EOT) character through to the process reading standard input, you can escape it using the confusingly-named lnext function, which by default is bound to the ^V control character (aka SYN, "synchronous idle", ASCII character 22):

$ man stty|grep lnext -A1
       * lnext CHAR
              CHAR will enter the next character quoted
$ stty -a|grep lnext
werase = ^W; lnext = ^V; discard = ^O; min = 1; time = 0;

Try it: you can type echo " and then ctrl-V and ctrl-D and then "|xxd (and then enter) and you will see that this is sending ascii character 4.

You can also send it with echo -e '\x04'. Note that the EOT character does not terminate bash:

$ echo -e '\x04\necho see?'|xxd
00000000: 040a 6563 686f 2073 6565 3f0a            ..echo see?.
$ echo -e '\x04\necho see?'|bash
bash: line 1: $'\004': command not found
see?

As you can see, it instead interprets it as a command.

::: spoiler (Control characters are perfectly cromulent filenames btw...)

$ echo -e '#!/bin/bash\necho lmao' > ~/.local/bin/$(echo -en '\x04')
$ chmod +x ~/.local/bin/$(echo -en '\x04')
$ echo -e '\x04\necho see?'|bash
lmao
see?

:::

code point in a character set, that does not represent a written symbol

Contributors to Wikimedia projects (Wikimedia Foundation, Inc.)
This entry was edited (2 months ago)
in reply to Arthur Besse

lemmy - Link to source

mina86

Which is why I haven’t wrote ‘EOF character’, ‘EOT’ or ‘EOT character’. Neither have I claimed that \x4 character is interpreted by the shell as end of file.

Edit: Actually, I did say ‘EOF character’ originally (though I still haven’t claimed that it sends EOF character to the program). I’ve updated the comment to clear things up more.

This entry was edited (2 months ago)

lemmy - Link to source

Here's an exercise in extreme masochism:

The Linux Ship of Theseus


  1. pick any distro and install it.
  2. Then, without installing another distro over the top of it, slowly convert it into another distro by replacing package managers, installed packages, and configurations.

System must be usable and fully native to the new distro (all old packages replaced with new ones).

No flatpaks, avoid snaps where physically possible, native packages only.

EDIT: Some clarification on some of the clever tools brought up here:

chroot, dd, debootstrap, and partition editors that allow you to install the new system in an empty container or blanket-overwrite the old system go against the spirit of this challenge.

These are very useful and valid tools under a normal context and I strongly recommend learning them.

You can use them if you prefer, but The ship of Theseus was replaced one board at a time. We are trying to avoid dropping a new ship in the harbor and tugging the old one out.

It may however be a good idea to use them to test out the target system in a safe environment as you perform the migration back in the real root, so you have a reference to go by.

Easy: pick two similar distros, such as Ubuntu and Debian or Manjaro and Arch and go from the base to the derivative.

Medium: Same as easy but go from the derivative to the base.

Hard: Pick two disparate distros like Debian and Artix and go from one to the other.

Nightmare: Make a self-compiled distro your target.

This entry was edited (2 months ago)

lemmy - Link to source

Switching to linux for newbies.

Honestly, at this point I’m so done with window’s bullshit. Their operating system is damn near unusable. All the convenient stuff is hidden in weird places. The constant whining about having to buy their crap. Or worse trying to get me to use the horrible software that comes with the new versions.

My excuse used to be, but I can’t play games on it. This is no longer the case for the games I love. So Windows can suck it. At this point I’m switching away from a lot of stuff I used to use. (x-box became Steam-deck, twitter became blue-sky and reddit is becoming Lemmy) As a kind of computer illiterate person, this has been a worth while transition but a difficult one. Let’s just say I had to learn a lot of new stuff.

So I’m a total Linux newbie but thanks to my Steam deck I’ve become somewhat used to using it. Not like an expert, but I have run wine to create separate environments for running pokémon fangames. And have taken a look around the Linux environment. I like it and think I’ll be able to get used to it with practice. It reminds me weirdly of windows XP in how easily I can get everything to work the way I want. It takes a bit of doing and some research, but it works. Which is all I want in an operating system.

I am looking for tips as to where to start searching, because I am converting my windows computer to Linux. I just don’t know what version.

Any user experience is welcome, I have no idea where to begin. I mostly use the computer I’m installing this on as a glorified typewriter, that I play movies, music and retro-games on.

A user friendly version is preferred, I find it hard to parse out from the various versions I have seen so far how easy they actually are to use. Extra points if a large amount of the information has easy to find tutorials on the internet. I don’t always know where to start looking and as I learned while getting wine to work, some of the names/terms are completely different. (And kind of a lot at once if you are just getting started).

Any resources you might think are useful for a newbie are also highly appreciated.

tl;dr: I (a Linux noob) am looking for a recommendation for what version of Linux to use for my needs. And any tips tricks or other info that I might need to know before I switch. Because windows sucks.

I’m sorry if this has already been asked and answered. I did try to find an answer through searching, but as I already mentioned. My lack of terms and knowledge is holding me back.

lemmy - Link to source

Email client for Linux

I have been looking for an email client on Linux after being tired of Gmail and Outlook web clients.

I had Thunderbird installed on my system and thought I'd give it a spin. I set up POP for my email accounts and it worked fantastic... For a total of 2 hours, after which I realised that searching in Thunderbird is simply not going to work for me. I need to search by attachment name and sometimes even by text inside attachment and unfortunately Thunderbird can't do that (I think I tried an extension too but it made the UI super clunky to the point that I couldn't even understand how to navigate it anymore).

Does Betterbird or any other email client fix this problem? I'm willing to try other options if they are FOSS.

Thanks

in reply to marauding_gibberish142

lemmy - Link to source

𝚝𝚛𝚔

Yes but I can’t search by the name of the attachment.


I just searched for text thats in an attachment filename and it worked - with a caveat. I have a filename called "PMASUP236 - Operate Vehicles In The Field.pdf" on an email. There is no reference to the PMASUP236 in any other part of any email.

If I search "PMASUP236", it returns the email as a result.
If I search "SUP236" it does not.
If I search "Operate Vehicles" it returns that email (along with a heap of others containing the word "Operate" and "Vehicles" in any order).

Admittedly this is on Windows at work, though I do run Thunderbird on Linux at home. Will have to try it there to confirm.

in reply to marauding_gibberish142

lemmy - Link to source

𝚝𝚛𝚔

I just checked on Linux (Thunderbird 128.5.2esr, Opensuse Tumbleweed) and the behaviour is the same.

If I search “PMASUP236”, it returns the email as a result.
If I search “SUP236” it does not.


This is using the normal search function (top of screen in current version). Quick Filter does not look at attachments at all by the looks. The "Attachments" toggle is only a has / does not have attachment filter.

This entry was edited (2 months ago)
in reply to dontblink

lemmy - Link to source

Arthur Besse

sure. first, configure sudo to be passwordless, or perhaps just to stay unlocked for longer (it's easy to find instructions for how to do that).

then, put this in your ~/.bashrc:

alias sudo='echo -n "are you sure? "; for i in $(seq 5); do echo -n "$((6 - $i)) "; sleep 1; done && echo && /usr/bin/sudo '

Now "sudo" will give you a 5 second countdown (during which you can hit ctrl-c if you change your mind) before running whatever command you ask it to.

This entry was edited (2 months ago)

lemmy - Link to source

Need help with setting up full disk encryption (FDE) where /home is on another drive.

Any distro would do, but for my case, it is Arch because I have more control over the partitions. I would like the OS, so root, swap and others on 1 drive. The /home should be on a separate drive. The tricky thing is to have everything encrypted, except /boot and /efi of course.

Now, here is what I can do

1) FDE on 1 drive. This is easy: you create /efi, /boot and then create a large LUKS partition. From there, you create LVM on that LUKS partition and get your: /, /home and swap. Then mount everything correctly and install.

In the grub config, you only need to set it so it knows the LUKS partitom and where the root is. For eg, if your LUKs partition is /dev/sda3, you do:

  • cryptdevice=UUID=: cryptlvm rootfs=/dev/vg/root.

2) Unencrypted /home on another drive. This is like 1) but /home is mounted on a separate drive. Still need to do the grub config, but nothing is needed for /home. It is automatically mounted when you login.

Now for my case: Encrypt /home

The encryption and mount part is easy. But how to get the OS to recognize it? The Arch wiki has this weird thing where you create an encryption key, they called it home.key, using cryptsetup. You then store the key in /etc and then in your /etc/crypttab, you specifiy the drive with /home and location of the key. No need for any passphrase.

The problem I have with this is that keys are stored in root. So if my root system is corrupted, I cant even decrypt home....

Any advice is welcome..

This entry was edited (2 months ago)
in reply to mazzilius_marsti

lemmy - Link to source

mazzilius_marsti

Well thanks everyone. I finally managed to get it to work on Arch. System has separate encrypted root and swap in LVM, and a separate encrypted home. It can suspend and hibernate. Below are my steps

DISK PREP

  • partition the main drive for your swap and root first. For me, it is a boot partition + an EFI + a LUKS container with LVM on top. Create your volumes. I use Arch, so format and mount them appropriately before pacstrap. Leave out mount point for /home.
  • Go to your other drive, follow: cyberciti.biz/hardware/cryptse…

to create a LUKS container that is encrypted with: a keyfile and a password. Test both to make sure you can open the locked drive. Format and mount it at /mnt/home or where you want the /home to be.

  • Pacstrap and then genfstab.
    Important: Make sure to copy the keyfile from your archiso environment to your chroot environment aka your system. Otherwise, when reboot, the keyfile is gone. I put it in /root and set permission so only root can read.

AUTOMATIC UNLOCK

  • First, fstab. When you do genfstab, things should be fine. But just double check the UUID is correct for /home. Note in fstab, the UUID is the unlocked one: so the one with /dev/mapper/home. Change to noatime if you desire.
  • Second, crypttab. Assume you decrypt your LUKS home as "home". Add this:

home uuid of the unencrypted home drive location of the keyfile luks

The link above said to just use /dev/sda, but imo UUID is safer if you have a removable drive.

  • Third, grub. Edit your /etc/default/grub and append the following to GRUB_CMD_LINUX:

"rd.luks.uuid=UUID of the locked luks home drive"

FOR HIBERNATION

For some reasons, hibernation doesnt work out of the box. It works when I have everything in 1 drive, i.e 1 boot, 1 efi, 1 lvm on luks for /home, swap and /. The fix is simple:

  • add "resume" to /etc/mkinitcpio.conf. Add before "filesystems" . Rebuild your initramfs with mkinitcpio -P.
  • add to /etc/default/grub: "resume= uuid of the unlocked swap partition". Or if you do LVM, just use "resume=/dev/vg/swap".

Special thanks to bodaciousFern@lemmy.dbzer0.com and Lemmchen@feddit.org for giving me correct ideas about "rd.luks.uuid" and that LUKS can do both pass and keyfile.

This entry was edited (2 months ago)

lemmy - Link to source

My (satisfying) experience moving to Linux!

Just wanted to share my experience moving to Linux from MacOS. Very satisfying, but of course not at first. I think my patience has improved a lot too lol.

I started out trying live bootables on my 2012 MBA. 4GB RAM, 60GB HDD. Not a beast really, but it is my only computer. I obviously couldn't risk ending up without a working OS, so the only option was dual boot from an external drive. Bought an SSD connected via USB and started trying to install distros. Initially Fedora Workstation. Was a mess. Slow, wifi was not working well, odd crashes etc.. Decided to start over with something lighter, but all other installers crashed halfway through. I kid you not I shot my back again bent over my small laptop i
without working peripherals trying to install different distros. My doctor was not happy when I came back and told her I fucked up my back again because of my posture lol. Apparently, a shitty USB leads to crashes on most installers. I knew Anaconda worked tho, so I went back to a lighter DE with Fedora, XFCE. Set up an install on the SSD with a shared partition I could access from both MacOS and fedora. No big permission issues yet.

Then fixing network drivers. There is a lot of info about what chip needs what driver, a lot of which is incorrect apparently, because my chip which was supposed to work with bcma needed broadcom-wl. The joy when I remembered USB tethering was a thing.. For a laptop with no ethernet plug this was a godsend. Got the drivers, got wifi.

And since then, many "issues" I encountered where simply things that generally happened behind the scenes on MacOS I didn't even know where happening. Learning about these things has been very gratifying, and gives a lot of respect for a polished OS that just works like magic. Eventually, an issue on MacOS I could not solve due to it being a walled garden made me switch to Linux as a daily driver, and once I got over CMD and CTRL being swapped it sped up my workflows and runs better overall. More tweaking tho of course.

There are odd quirks but I found fun solutions for some, and began planning and learning to remedy others. Mostly, everything is working really well. I am having a lot of fun!

My tip for anyone struggling with getting started with linux, set up a log function so you can easily log any relevant changes you make, and have it accessible from somewhere else (like a shared partition or external drive for example). This way you know what you have done and can use that to fix whatever you fuck up. Also, make a knowledge base with the sources you find useful. I have a small kb in UpNote now so I can look up how some things were done instead of having to search and find the right guides over and over.

This entry was edited (2 months ago)
in reply to wewbull

lemmy - Link to source

jamie_oliver

Nice I didn't know that ^^ should probably learn at least the basic bash operators, I am just hacking together the different commands I happen to know at the moment really

Edit: why echo instead of printf?

This was causing a lot of issues with newlines, like when I fetched the log to view it my $ was right after the log entry so I switched it back. But it is probably useful in the future to use >> instead :)

This entry was edited (2 months ago)

lemmy - Link to source

TIL you can send commands to terminal (in vscodium)

I've been using the terminal for 5 years.

99% of attempts at keeping valuable code snippets failed. Or having a useful command history.

Finally, I looked up how to send a line to terminal.

I use vscode since Atom was discontinued (looking forward to zed). But in the meanwhile, I just added

{
    "key": "ctrl+enter",
    "command": "workbench.action.terminal.runSelectedText",
    "when": "terminalProcessSupported && editorTextFocus && editorLangId =~ /shell|bash|zsh|fish/"
  }

Maybe it helps someone :)

With this, I can finally keep a history of all useful commands I run. Like I can have a systemd shell file where I store the commands that I ran. Or a file to store all my podman commands. Now I do not have to type them anymore, I can just run them.

This entry was edited (2 months ago)

lemmy - Link to source

Torvalds Frustrated Over "Disgusting" Testing "Turd" DRM Code Landing In Linux 6.15
The big set of open-source graphics driver updates for Linux 6.15 have been merged but Linux creator Linus Torvalds isn't particularly happy with the pull request. In particular, he's unhappy with some new "hdrtest" testing code being built as part of full kernel builds and the "turds" it leaves behind and this code "needs to die" at least from the perspective of non-DRM driver developers.

Torvalds Frustrated Over "Disgusting" Testing "Turd" DRM Code Landing In Linux 6.15

www.phoronix.com

lemmy - Link to source

Mint Cinnamon Issues (Solved)

So following on from my last post I'v now tried again, this time using Rufus to make my boot USB rather than balena etcher which despite being reccomended is apparently problematic. I also downloaded and verified a fresh install of the cinnamon ISO.

Result is uh....

Failed to open \EFI\BOOT\mmx64.efi - Not Found
Failed to load image (windows symbol): Not Found
Failed to start MokManager: Not Found
Something has gone seriously wrong: import_mok_state() failed: Not Found

This happens when trying to boot from the USB so its actually worse than last time where the demo environment worked but it kept crashing on attempting a proper setup.

PC in question is a small notebook with no discreet GPU to speak of (Intel integrated graphics) that I've been hoping to use as a testbed before comiting to Linux on my main PC.___

This entry was edited (2 months ago)
in reply to CheeseNoodle

lemmy - Link to source

e0qdk

Sorry to link to reddit, but have you already tried the suggestions in this thread from a year ago: old.reddit.com/r/pop_os/commen… ?

Large (1920x9750, ~3MB) screenshot for posterity + those who absolutely do not want to access reddit at all: files.catbox.moe/mqsdxh.png

Edit: (Related links)
- linuxquestions.org/questions/l…
- forums.linuxmint.com/viewtopic…
- unix.stackexchange.com/questio…

I'd try the "copy \EFI\BOOT\grubx64.efi to EFI\BOOT\mmx64.efi" solution personally and see what happens. If that works, you might just have an obnoxious BIOS on that computer.

Something has gone seriously wrong: import_mok_state() failed: Not...

Hi guys, I'm in a real bind and I don't know what to do. Really hoping someone who has experienced something similar can help. Background: 1....
reddit
This entry was edited (2 months ago)

lemmy - Link to source

The fediverse has a bullying problem

So check it out: Mastodon decided to implement follower-only posts for their users. All good. They did it in a way where they were still broadcasting those posts (described as "private") in a format that other servers could easily wind up erroneously showing them to random people. That's not ideal.

Probably the clearest explanation of the root of the problem is this:

Something you may not know about Mastodon's privacy settings is that they are recommendations, not demands. This means that it is up to each individual server whether or not it chooses to enforce them. For example, you may mark your post with unlisted, which indicates that servers shouldn't display the post on their global timelines, but servers which don't implement the unlisted privacy setting still can (and do).

Servers don't necessarily disregard Mastodon's privacy settings for malicious reasons. Mastodon's privacy settings aren't a part of the original OStatus protocol, and servers which don't run a recent version of the Mastodon software simply aren't configured to recognize them. This means that unlisted, private, or even direct posts may end up in places you didn't expect on one of these servers—like in the public timeline, or a user's reblogs.


That is super relevant for "private" posts by Mastodon. They fall into the same category as how you've been voting on Lemmy posts and comments: This stuff seems private, because it's being hidden in your UI, but it's actually being broadcasted out to random untrusted servers behind the scenes, and some server software is going to expose it. It's simply going to happen. You need to be aware of that. Even if it's not shown in your UI, it is available.

Anyway, Pixelfed had a bug in its handling of those types of posts, which meant that in some circumstances it would show them to everyone. Somebody wrote on her blog about how her partner has been posting sensitive information as "private," and Pixelfed was exposing it, and how it's a massive problem. For some reason, Dansup (Pixelfed author) taking it seriously and fixing the problem and pushing out a new version within a few days only made this person more upset, because in her (IMO incorrect) opinion, the way Dansup had done it was wrong.

I think the blog-writer is just mistaken about some of the technical issues involved. It sounds like she's planning on telling her partner that it's still okay to be posting her private stuff on Mastodon, marked "private," now that Pixelfed and only Pixelfed has fixed the issue. I think that's a huge mistake for reasons that should be obvious. It sounds like she's very upset that Dansup made it explicit that he was fixing this issue, thinking that even exposing it in commit comments (which as we know get way more readership than blog posts) would mean people knew about it, and the less people that knew about it, the safer her partner's information would be since she is continuing to do this apparently. You will not be surprised to discover that I think that type of thinking is also a mistake.

That's not even what I want to talk about, though. I have done security-related work professionally before, so maybe I look at this stuff from a different perspective than this lady does. What I want to talk about is this type of comments on Lemmy, when this situation got posted here under the title "Pixelfed leaks private posts from other Fediverse instances":

Non-malicious servers aren’t supposed to do what Pixelfed did.

Pixelfed got caught with its pants down

rtfm and do NOT give a rest to bad behaving software

dansup remains either incompetent for implementing badly something easy or toxic for federating ignoring what the federation requires

i completely blame pixelfed here: it breaks trust in transit and that’s unacceptable because it makes the system untrustworthy

periodic reminder to not touch dansup software and to move away from pixelfed and loops

dansup is not competent and quite problematic and it’s not even over

developers with less funding (even 0) contributed way more to fedi, they’re just less vocal

dansup is all bark no bite, stop falling for it

dansup showed quite some incompetence in handling security, delivering features, communicating clearly and honestly and treating properly third party devs


I sort of started out in the ensuing conversation just explaining the issues involved, because they are subtle, but there are people who are still sending me messages a day later insisting that Dansup is a big piece of shit and he broke the internet on purpose. They're also consistently upset, among other reasons, that he's getting paid because people like the stuff he made and gave away, and chose to back his Kickstarter. Very upset. I keep hearing about it.

This is not the first time, or even the first time with Dansup. From time to time, I see this with some kind of person on the Fediverse who's doing something. Usually someone who's giving away their time to do something for everyone else. Then there's some giant outcry that they are "problematic" or awful on purpose in some way. With Dansup at least, every time I've looked at it, it's mostly been trumped-up nonsense. The worst it ever is, in actuality, is "he got mad and posted an angry status HOW DARE HE." Usually it is based more or less on nothing.

Dansup isn't just a person making free software, who sometimes posts angry unreasonable statuses or gets embroiled in drama for some reason because he is human and has human emotions. He's the worst. He is toxic and unhinged. He is keeping his Loops code secret and breaking his promises. He makes money. He broke privacy for everyone (no don't tell me any details about the protocol or why he didn't he broke it for everyone) (and don't tell me he fixed it in a few days and pushed out a new version that just makes it worse because he put it in the notes and it'll be hard for people to upgrade anyway so it doesn't count)

And so on.

Some particular moderator isn't just a person who sometimes makes poor moderation decisions and then doubles down on them. No, he is:

a racist and a zionist and will do whatever he can to delete pro-Palestinian posts, or posts that criticize Israel.

a vile, racist, zionist piece of shit, and anyone who defends or supports him is sitting at the table with him and accepts those labels for themselves.


And so on. The exact same pattern happened with a different lemmy.world mod who was extensively harassed for months for various made-up bullshit, all the way up until the time where he (related or not) decided to stop modding altogether.

It's weird. Why are people so vindictive and personal, and why do they double down so enthusiastically about taking it to this personal place where this person involved is being bad on purpose and needs to be attacked for being horrible, instead of just being a normal person with a variety of normal human failings as we all have? Why are people so un-amenable to someone trying to say "actually it's not that simple", to the point that a day later my inbox is still getting peppered with insistences that Dansup is the worst on this private-posts issue, and I'm completely wrong and incompetent for thinking otherwise and all the references I've been digging up and sending to try to illustrate the point are just more proof that I'm horrible?

Guys: Chill out.

I would just recommend, if you are one of these people that likes to double down on all this stuff and get all amped-up about how some particular fediverse person is "problematic" or "toxic" or various other vague insinuations, or you feel the need to bring up all kinds of past drama any time anything at all happens with the person, that you not.

I am probably guilty of this sometimes. I definitely like to give people hell sometimes, if in my opinion they are doing something that's causing a problem. But the extent to which the fediverse seems to like to do this stuff just seems really extreme to me, and a lot of times what it's based on is just weird petty bullying nonsense.

Just take it it with a grain of salt, too, if you see it, is also what I'm saying. Whether it comes from me or whoever. A lot of times, the issue doesn't look like such a huge deal once you strip away the histrionics and the assumption that everyone's being malicious on purpose. Doubly so if the emotion and the innuendo is running way ahead of what the actual facts are.

Pixelfed leaks private posts from other Fediverse instances - fiona fokus

fokus.cool
This entry was edited (2 months ago)
in reply to PhilipTheBucket

lemmy - Link to source

Ulrich

IMO, Dan has some responsibility but more of it lies with Mastodon and other microblogging software that labels this post type as "private", "followers only" or similar without any further explanation. It needs to be clear that it's dependent on good faith and competence of remote servers that may collect that information.

Moreover we need to do a better job of letting users know that anything posted on the internet, and especially anything posted to the fediverse where it's backed up on potentially thousands of servers, should be assumed to be publicly-visible and eternal. If nothing else, it will be backed up on the internet archive. If you want to communicate privately, this is the wrong place.

I wish there was a private social media platform but it seems like the closest we're going to get is Signal.

Also "the bullying problem" has nothing to do with the Fediverse and everything to do with people in general and the erosion of nuance.

This entry was edited (2 months ago)
in reply to PhilipTheBucket

nodebb - Link to source

julian

Re: The fediverse has a bullying problem

Let's clarify something here. Mastodon follower only posts don't have the "public pseudo user" addressed, do they?

That's the important piece that this whole thing hinges upon

If it is present, Mastodon is a fault. If not, Pixelfed messed up.

Am I mistaken?

For example, a followers-only post is addressed to the followers collection of the author, at minimum. When NodeBB sees this, it doesn't even consider it public, because the public pseudo user isn't addressed. We also have no concept of "followers only", but we handle them just fine.

This entry was edited (2 months ago)

lemmy - Link to source

Is it rude to reply using English under posts in a language you can’t speak?
I often reply under Japanese posts, and I always assume users will use a translator as I do, but maybe in the context of a Japanese instance or conversation this may look rude?
This entry was edited (2 months ago)
in reply to Jumuta

lemmy - Link to source

splendoruranium

nah, it’s better for information integrity to reply in the language you understand imo, comments translated using translator services are very obvious anyway and some people are multilingual


Sure, I agree? Maybe there's a misunderstanding here and I should add that it simply would never even occur to me to enter a conversation if I didn't natively understand the language that's being used.

This entry was edited (2 months ago)

lemmy - Link to source

Interstellar (mbin app) added piefed support!

Interstellar (!interstellar@kbin.earth) has added Piefed support!

How do i try?


Install interstellar from the play store/F-droid, and create an account on preferred.social/ (only instance with the API enabled, get join code from invite). Then, login from interstellar and you're done!

What's next?


Well, andrew is working on porting thunder to piefed (the main dev of it is interested in it) Admiral patrick said he might port tesseract to piefed, once the API is stable, and ae_harding said he may add it after lemmy 1.0.

Thank you @andrew_s@piefed.social, @olorin99@kbin.earth and @jwr1@kbin.earth for working tirelessly to implement this :D


GitHub - jwr1/interstellar: An app for Mbin/Lemmy/PieFed, connecting you to the fediverse.

An app for Mbin/Lemmy/PieFed, connecting you to the fediverse. - jwr1/interstellar
GitHub
This entry was edited (2 months ago)

lemmy - Link to source

Kann man das Mastodon Konto verknüpfen?

Bin wirklich noch etwas überfordert hier. Wie kann man das feddit Konto und das Mastodon konto verknüpfen?

Wo finde ich die Adresse von meinem feddit Konto und muss ich es auf Mastodon einbinden? Hilfe.... 😱 Bitte...

This entry was edited (2 months ago)

don't like this

lemmy - Link to source

I propose we storm Toronto. Search every building until we find Nicole. The fediverse chick!

Maybe then she'll SHUT UP! Oh my god, is there a single person on this platform who doesn't get these messages every month???

Guys, you all KNOW what I'm talking about, right? Gonna have to go get Tim Misney on this case! And you KNOW what he DOES! eyebrows

don't like this

in reply to Lost_My_Mind

lemmy - Link to source

Lucy :3

One huge motive behind creating !nicole@feddit.org was to concentrate all the posts about that spam, which, in turn, are also spam, to one place, which can easily be blocked by users that - understandably - don't want to see that spam. Especially when they don't get the original nicole spam in the first place, such as me - which is highly ironic, but an interesting phenomenon. I'm pretty active as a commentator, and not inactive as a poster, yet only got exactly one message a few months ago.
This entry was edited (2 months ago)

advanced38 doesn't like this.

lemmy - Link to source

Isn’t GPLv3 the ultimate solution to all broligarcy problems?

I always believed that problems around technocratic broligarchy could’ve been solved if the software ecosystem using GPLv3 was strong. So when I suddenly see a flurry of articles stating that the EU is trying to come up with its own spin of Linux to boycott monopolies by US companies, I think it is either a waste of time or self defeating because the ultimate power of computer codes isn’t the code itself, but the license attached to it.

Is there something that I have missed in this matter because I barely see anyone talking about the need for more libre software. I find the latest transition from GLP to MIT license for rust-based coreutils to be concerning because we’re basically adopting “doormat” licenses that will enable companies to easily embrace, extend and extinguish the freedoms we cherish so much in this space.

in reply to Maroon

lemmy - Link to source

enemenemu

We as a society have to enlighten ourselves such that we have a standard and this standard is open source.

The more people refuse to use proprietary stuff, and promote open source tools, the more powerful those tools get.

As long as we pay 100 bucks for a shitty game and refuse to donate 1 buck to a foss calendar we are far away from where we'd like to be.

If people would pay good for foss, companies would do it

This entry was edited (2 months ago)
in reply to AbnormalHumanBeing

piefed - Link to source

tuckerm

I've started doing notes in the terminal as well. I used Obsidian and Logseq for a while, mainly because I wanted something with a GUI so that I could recommend it to people who aren't comfortable with the terminal. But eventually I figured that a terminal solution was the right one for me, since I have a terminal open all the time anyway.

I switched from vim to kakoune a while ago ( kakoune.org ), so I use nb ( xwmx.github.io/nb ) instead of vimwiki.

nb is a terminal application that will open whatever your default text editor is.

Kakoune - Official site

The official website of Kakoune, a selection-first modal code editor
kakoune.org
This entry was edited (2 months ago)
in reply to AbnormalHumanBeing

friendica (DFRN) - Link to source

Nanook

Not a fan of vim, it's improper implementation of the ex command set and the way it ads line feeds, when you cut-n-paste between windows, makes it basically useless. I much prefer the BSD derived nvi, even on Linux. Like VIM it also handles multiple byte character sets, but UNLIKE VIM it is a COMPLETE and CORRECT implementation of vi/ex not a half-assed kind of sort of implementation.
in reply to CheeseNoodle

lemmy - Link to source

BCsven

If you want to try to get Linux on the main drive working (since USB works but isn't ideal) there are a few things I encountered.

-some distros just didn't like my hardware. Failed to install, or installed but boot would get errors and halt. The remedy was using an rpm distro rather than deb based (I tried about 10 debs, the rpm ones acknowledged the bios error and moved on)

-secure boot can be a bit of a pain. If you don't want to deal with it, Turnoff secureboot, and in some cases EFI and use legacy BIOS mode.

-if you want Secure boot and EFI. Allow USB boot in BIOS, do the install and ensure it is building a GPT disk with an EFI partition. At the reboot stage it should ask if you want to enroll keys, say yes.

If during reboot it does nothing or boots to windows(assuming you have windows drive). Go into BIOS and choose secure boot option where you can pick which Secure OS it found and move that to top of boot list.

-if it is not those things it is often nvidia on Wayland or X issue on laptops. If you don't want to mess with installing a GPU switcher, you can often set your laptop to discrete graphics before install and bypass the two GPU issues

This entry was edited (2 months ago)
in reply to CheeseNoodle

lemmy - Link to source

Sims

As others say, it can be done. If you want more normal umpf, you'll need to mount parts of the filesystem to your ssd. You can mount /home or / on ssd, or have an overlay file system as a file on an ssd/hdd, or use bcachefs with back propagation to the usb, or similar fancy setups.

So you'll boot linux kernel from the usb, but most disk activity will be on your ssd. Fun project, but not super easy/practical if it isn't done automatically.

My old HP microserver is 'made' to boot from a usb-stick inserted on the mb.

Anyway, perhaps an AI can suggest a script to do what you want ?

This entry was edited (2 months ago)

lemmy - Link to source

What do you think might be some fun, positive ways for instances to distinguish themselves?
Instances of any fediverse software, to be clear.

don't like this

lemmy - Link to source

Can we please make a viable (federated!) amazon alternative? I have an idea!

Hi folks!
I'm here with another idea. Let's make an amazon alternative. I know! I know! That was asked for a couple times already but lets discuss some details.

Amazon is basically glorified dropshipping by now. What if we just made federated (not sure if over activitypub would work) ads and sales, powered by fediseer (the "trust" network of the fediverse).

Example 1:
So you buy at toms groceries, you trust them. they have experience with tina's hardware store and they trust them. so you can buy both toms and tinas wares on both sites.

Example 2:
So for example, I run a small business that sells computers. You run a small business that sells mice and keyboards. I have worked with you before so I mark you as trusted in my local website, which federates with yours, showing your products in my shop. If a customer buys my computer and buys your keyboard on top, my site sends you a buy order with customer address and payment. I get a small fee for my electricity of say 1%.

Can someone try and poke holes in this idea? It feels like this could work!

Have a nice weekend.

in reply to haui

lemmy - Link to source

naught101

A version of this focussed on a gift economy/trading platform (e.g. like freecycle, or the buy nothing groups on facebook) would also be cool.

Also person-to-person buying/selling, rather than business-to-person would be nice to have, like craigslist, reverb.com, gumtree, or used items on ebay.

If this was focused on a craigslist/gumtree style of selling, where most of the actual trade is done off-site/in-person with cash or bank transfers, it would completely side-step the payment processor problem.

This entry was edited (2 months ago)

lemmy - Link to source

Bridges: The Last Network Effect
This talk discusses how, through bridging, Mastodon and Bluesky can create a cross-protocol network for the open social web.

Bridges: The Last Network Effect, Anuj Ahooja, ATmosphereConf Seattle 2025

Anuj Ahooja https://bsky.app/profile/quillmatiq.comA New Social https://anew.social, profile https://bsky.app/profile/anew.socialBridgy https://bsky.app/prof...
YouTube
This entry was edited (2 months ago)

lemmy - Link to source

Federated wiki software?

I absolutely love wiki walking through random obscure fan wikis, but I hate how most are on Fandom.

I think a federated wiki solution makes sense. I could see it as an evolution of the interwiki concept.

don't like this

in reply to lgsp@feddit.it

lemmy - Link to source

naught101

Also:

  • gift economy/trading platform (e.g. like freecycle)
  • buying/selling (e.g. like ebay)
  • local community/bioregionalism networks (e.g. what nextdoor should be)

These seem kind of ideal for a federated network, IMO.

I actually think Lemmy would be a pretty decent format for something stackoverflow like - just maybe needs to UI tweaks to minimise the visual space that replies take up, plus maybe answered post flair


Post tags · Issue #317 · LemmyNet/lemmy

Is there an interest to develop a post tagging feature? I remember seeing an issue about it some time ago, but I can't find it anymore so it's possible I'm making this up. A post tag would be defin...
GitHub
in reply to ProfHillbilly

lemmy - Link to source

deadcatbounce

I think you're starting too big, to use your phrase.

Get used to the basics first: what's different (to whatever you're running now), what's the same. They Linux distributions almost all have GUIs (KDE, GNOME are the main ones but there are many others).

Run a live USB version from a usb stick to get used to it until you have the confidence to install it on an old pc. Personally I do not recommend dual booting; data gets lost that way. Install it on an old pc and learn how to restore your backups to a Linux filesystem (not the fs of what you're used to on Linux platform). I write that because you said that want to end up with a Linux server.

Choose one of the top few from distrowatch.com/

Your aim is to understand what's going on under neither the GUI; how permissions work.

I started by installing a VoIP product into a VM on Windows 2000, but there are better ways now.

Good luck. You shouldn't find it that difficult.

This entry was edited (2 months ago)

lemmy - Link to source

Configuring A PeerTube Instance

Configuring A PeerTube Instance

PeerTube has a lot of settings to toggle and tweak before uploading videos and inviting new users. We're going through the most common ones for new instance owners like setting up a Home Page, tran...
AbnormalBeingsTube
This entry was edited (2 months ago)

lemmy - Link to source

What is going on behind the scenes when searching for a lemmy post in a search engine?

I was looking for some collection of posts earlier about Proton Mail and the whole controversy with the CEO, and I opened a post the lemmy instance that was suggested was lemmy.zip but the community and the poster were from lemmy.world so that made me ask myself a bunch of questions. Reference link

Note: I used duckduckgo

Here are some questions I have:

  • How does the search engine decide which instance to link you to as you could in theory show every instance for the same post?
  • Could you get a result where all the results are the same post just different instances?
  • Do you think that could deter new people finding out about lemmy through search results?
  • How can an instance make themselves more visible in the search results (for exposure)?
  • I did not get any results from lemmy clients such as vger.app the only results were direct instances, will this always be the case?

I remember learning about search engines a while back but I don't know how relevant that information is any more. Having crawlers and the more a website is linked in other websites the higher up in the search result will be and the whole robot.txt thing.

I know if I wanted to search for something specific in lemmy I could just use its own search function, but what about people who ask general questions and that happens to be answered in a lemmy post. I wanted to know how exposed we are/ will be to people who don't yet know about lemmy.

Meltdown doesn't like this.

in reply to JustAnotherKay

lemmy - Link to source

🇦🇺𝕄𝕦𝕟𝕥𝕖𝕕𝕔𝕣𝕠𝕔𝕠𝕕𝕚𝕝𝕖

So domains are recursive tree structures. So u have node com which has a bunch of nodes below it of different domains which can have sub domains etc. Its like this cos that's how DNS was designed.

Search engines gives scores to domains and pages. When u say that the content origin of ur page is some other domain the search engines will use that knowledge to adjust rating accordingly.

Say u have 2 domains site1.example.com and site2.example.com the search engine will have a rank for site1, site2, and example.com where the rating of both site1 and site2 effect the rating for example.com.

If the content origin for all federated content has the same origin say instance.fediverse.com then the rating for all federated content will be classified as part of fediverse.com and all content will be working together across all instances boosting the fediverse as a single entity.

This entry was edited (2 months ago)

ActivityPub - Link to source

PieFed supports auto merging threads so you see all the comments in one post

cross-posted from: piefed.social/post/538685

No more duplicate posts

One of the things that the recent addition of the Feeds feature highlighted was how many cross-posts / duplicate posts there are. When you display posts from linux@lemmy.world, linux@programming.dev, linux@lemmy.ml, etc all the cross-posts make it get repetitive, really fast. The same thing happens on the home feed too although it's a bit less obvious because there's a wider range of subjects involved.

Except now, it doesn't, because PieFed de-duplicates your feed! And your home page, and your topics. Attached to this post is a screenshot showing how it works out - an article posted to 7 different places is only shown once despite me having joined most of those communities.

We're still figuring out whether it's a good idea to merge all the comments from all the cross-posts into one page and how to do that in a way that respects the different culture/rules in the communities that the posts were made in. It's a tricky UX and social question.

I've held off on adding a cross-post function to PieFed until now but it'll be added soon.

don't like this

lemmy - Link to source

I believe that the "Nicole" images being sent to Threadiverse users may be intending to deanonymize accounts

For those not familiar, there are numerous messages containing images being repeatedly spammed to many Threadiverse users talking about a Polish girl named "Nicole". This has been ongoing for some time now.

Lemmy permits external inline image references to be embedded in messages. This means that if a unique image URL or set of image URLs are sent to each user, it's possible to log the IP addresses that fetch these images; by analyzing the log, one can determine the IP address that a user has.

In some earlier discussion, someone had claimed that local lemmy instances cache these on their local pict-rs instance and rewrite messages to reference the local image.

It does appear that there is a closed issue on the lemmy issue tracker referencing such a deanonymization attack:

github.com/LemmyNet/lemmy/issu…

I had not looked into these earlier, but it looks like such rewriting and caching intending to avoid this attack is not occurring, at least on my home instance. I hadn't looked until the most-recent message, but the image embedded here is indeed remote:

lemmy.doesnotexist.club/pictrs…

I haven't stored and looked through a list of these, but as I recall, the user sending them is bouncing around different instances. They certainly are not using the same hostname for their lemmy instance as the pict-rs instance; this message was sent from nicole92 on lemmy.latinlok.com, though the image is hosted on lemmy.doesnotexist.club. I don't know whether they are moving around where the pict-rs instance is located from message to message. If not, it might be possible to block the pict-rs instance in your browser. That will only be a temporary fix, since I see no reason that they couldn't also be moving the hostname on the pict-rs instance.

Another mitigation would be to route one's client software or browser through a VPN.

I don't know if there are admins working on addressing the issue; I'd assume so, but I wanted to at least mention that there might be privacy implications to other users.

In any event, regardless of whether the "Nicole" spammer is aiming to deanonymize users, as things stand, it does appear that someone could do so.

My own take is that the best fix here on the lemmy-and-other-Threadiverse-software-side would be to disable inline images in messages. Someone who wants to reference an image can always link to an external image in a messages, and permit a user to click through. But if remote inline image references can be used, there's no great way to prevent a user's IP address from being exposed.

If anyone has other suggestions to mitigate this (maybe a Greasemonkey snippet to require a click to load inline images as a patch for the lemmy Web UI?), I'm all ears.

Security: Enabling image inlining by default via markdown is a deanonymization vulnerability · Issue #1036 · LemmyNet/lemmy

Issue Summary By using markdown image embedding syntax: ![alt text](url) Along with a link that collects IPs, an attacker may harvest IPs that visit the page. This can be combined with the "auto di...
GitHub
This entry was edited (2 months ago)

lemmy - Link to source

Help with systemd (I think)

SOLVED If any lost souls find themselves here in a similar situation let it be known that the file that worked for me was creating a file at '%h/.config/systemd/user/google-drive-ocamlfuse.service' with the following content:

[Unit]
Description=FUSE filesystem over Google Drive
After=network.target

[Service]
ExecStart=google-drive-ocamlfuse %h/googledrive
ExecStop=fusemount -u %h/googledrive
Restart=always
RestartSec=300
Type=forking

[Install]
WantedBy=default.target

Howdy, I have very recently installed Opensuse Tumbleweed alongside Windows 10 (On a seperate drive) and am trying to get things setup to where I can fully transition to linux. One of the first things I have hit a wall on is getting a file to execute on boot using systemd.

I am trying to use this package to be able to access my google drive from Dolphin. And so far it works okay. Except that it doesn't survive a reboot. I have to run the command:

google-drive-ocamlfuse ~/googledrive

after each reboot in order for the google drive directories to be accessible. So I googled how to make that happen automagically on boot and found this guide that helped me get a startup script going.

I created /usr/local/bin/ocamlfuseStartup.sh as a file that contains the command from before:

google-drive-ocamlfuse ~/googledrive

and verified that it works as intended when I enter ./ocamlfuseStartup.sh from that directory.

I then created another file at /usr/lib/systemd/system/startup.service that contains the following:

[Unit]
Description=Startup Script

[Service]
ExecStart=/bin/bash /usr/local/bin/ocamlfuseStartup.sh

[Install]
WantedBy=multi-user.target

I have no idea what the /bin/bash portion is for because I found it from a googling but without it I get the following error:

startup.service: Main process exited, code=exited, status=203/EXEC

However with it I get this error:

startup.service: Main process exited, code=exited, status=2/INVALIDARGUMENT

which I take to mean that there is something wrong with my ocamlfuseStartup.sh file maybe? But since it works when I manually execute the file I'm kind of at a loss.

I found this thread where it seemed like someone else was having a similar issue but I didn't really grok what they were talking about.

Any and all help is greatly appreciated!

Running a Linux Command on Start-Up | Baeldung on Linux

Learn various ways to run a command or a script when a Linux system starts up
Haidar Ali (Baeldung)
This entry was edited (2 months ago)
in reply to Marafon

lemmy - Link to source

12510198

The 203 error you got is because your script isnt a valid executable, it needs to have a shebang at the top, you can change it to something like this and set the executable bit with chmod +x <file>

\#!/usr/bin/env bash
google-drive-ocamlfuse ~/googledrive

this tells it to run using bash as the interpreter.

Im not familliar with this google drive software, but im figuring that its exiting with an error code cuz its running as a system service, and $HOME probobly isnt set so ~ doesnt expand and the software gets an invalid path.

But I recommend using a user service for this, it will run when you login, you should be able to copy the service file you already have into ~/.config/systemd/user/ and run systemctl --user daemon-reload and systemctl --user enable startup.service --now, this will enable and start the service in one go.

I also recommend adding the following lines under [Service]

Type=simple
Restart=always
RestartSec=60

idk if the software will exit if it loses network or wifi or anything, but this will have it automatically restart after 60 seconds, should it exit for any reason.

If you need it to run before login, it is possible to do with a system service, but it will need a bit more setup

This entry was edited (2 months ago)
in reply to Marafon

lemmy - Link to source

smb

i would install cron if its not installed, then add a file under

/etc/cron.d/someNiceToRememberName

and with an editor write the following in it:

@reboot root /bin/bash -x /usr/local/bin/ocamlfuseStartup.sh >> /tmp/output 2>&1 ; echo returncode=$? >> /tmp/output

where root is the user it should run with and the redirection (>> /tmp/output 2>&1) is for seeing what is wrong, and echo returncode= prints the exit error indicator.

you might be able to do this with systemd too, but it often messes things up and i like i.e. clean log outputs.

for testing you can add a line that would start it without a reboot.

22 * * * * root /path/to/your/command parameters >> /tmp/output 2>&1

where the 22 is the next minute it should run. with this cronjob it would be run at every x:22 after each hour 09:22 pm 10:22 pm aso. i do this sometimes for testing

as systemd starts cron with a broken environment too, it might as well not work using cron, but then you know its the broken environment systemd starts it with.
if thats your problem, you might want to add:
PATH=$PATH:/usr/sbin:/usr/local/sbin

somewhere at the top of the shellscript depending on what is missing, which by itself would be the directories the commands executed are in.
in terminal use :

which sed

for example to find where the "sed" binary is located (if the script cannot find it)
you could change every occurance of "sed" in the script with the full path to it, or add the directory using the PATH variable as a colon separated list of directories to search commands in (where order matters)

to maybe more easy see what is missing i added the -x as a parameter to bash which makes it print out a line for every command it executes to sdterr so you can see what the last commands were.
you can try it in the terminal (if your terminal is bash or compatible

$ set -x
$ echo foo
+ echo foo
foo
$

i'ld guess systemd starts the shellscript with a broken environment and thats maybe why it doesnt work, maybe try adding this to the script too:
echo PATH: $PATH

somewhere at the top of the script and use the redirection i showed for the cron job.
run it once in your terminal and compare the output with what it prints during automated script run.

good luck.

transition to linux. One of the first things I have hit a wall on is getting a file to execute on boot using systemd.

I am trying to use this package to be


that bash thing is the interpreter. the script ocamlFuseStartup.sh is written as bash (possibly the same as your terminal) if that script has a "shebang" (#!/bin/bash) as the very first line AND the file has the execute permission set (chmod +x /path/to/file), then you dont need /bin/bash at the beginning to start it.

This entry was edited (2 months ago)

lemmy - Link to source

Raspberry Pi Announces rpi-image-gen To Help Craft Custom Software Images

Raspberry Pi Announces rpi-image-gen To Help Craft Custom Software Images

Following a slew of hardware announcements in the past few months like the RP2350 shipping, Raspberry Pi 5 16GB, Raspberry Pi Monitor, and Raspberry Pi 500, today they have a new software announcement
www.phoronix.com
This entry was edited (2 months ago)

lemmy - Link to source

Following the article about old school forums dying, a reminder that there is !fedibridge@lemmy.dbzer0.com that is dedicated to promote the Fediverse. Pinned posts have resources everyone can use.
!fedibridge@lemmy.dbzer0.com
in reply to solrize

lemmy - Link to source

🇰 🌀 🇱 🇦 🇳 🇦 🇰 🇮

The fediverse is more like the evolution of those old school forums, but diversified into more than just forums. Decentralized, user ran shit that could be a forum, a microblog, a YouTube alternative, a Discord/IRC alternative, an image host, etc. And then they could possibly share content with each other directly, but that's kinda up to the individual app/site.
This entry was edited (2 months ago)

lemmy - Link to source

Pixelfed user count has gone vertical.
Editing to let people know that I will be blocking anyone who feels the need to tell me why this graph is inaccurate. I truly don't care, but feel free to chime in with your useless take and land a spot on my block list! 🙂
This entry was edited (4 months ago)

Madbrad200 doesn't like this.

Unknown parent

lemmy - Link to source

L3ft_F13ld!

Yeah I was on Fosstodon first. Moved to Sakurajima (Sharkey) and now I'm on Sakurajima (Mastodon).

You're right, the instance makes a big difference. Very important to find one you enjoy.


Fosstodon

Fosstodon is an invite only Mastodon instance that is open to those who are interested in technology; particularly free & open source software. If you wish to join, contact us for an invite.
Mastodon hosted on fosstodon.org
This entry was edited (2 months ago)

lemmy - Link to source

Subscribing to mastodon

Given the different way they apps are structured I don't even know if it's a sensible question, but is there a way to subscribe to something on a Madison server?

The server as a community, or a tag as a community? Does mastodon have some other concept that I could subscribe to?

don't like this

lemmy - Link to source

Mastodon.online invitation if anyone wants it

For anyone who wants an invitation to join mastodon.online, let me know! Like mastodon.social, it is one of the two official communities run by the Mastodon non-profit. The difference is that mastodon.online is invite-only.

Joining an invite-only server helps keep out spammers who target mastodon.social and lets someone be part of a more exclusive community. This can help someone have a better-quality mastodon experience, overall.

Of course, to keep out scammers, the invitation isn't open to just anyone who asks, they will have to have a posting history of some sort.

don't like this

in reply to Sibshops

lemmy - Link to source

Komodo Rodeo

Quick question for you. I signed up to Mastadon a while back, have been endeavouring to use it more regularly, and have been trying to sign on to as many local or often-subscribed orgs (on other media platforms). What I'm finding is that remarkably few of them are on Mastadon, and often those that are have been using them as a kind of alt-Twitter content splash with little engagement.

Are the actual active profiles/communities sort of walling themselves off from bots and bad actors in the way that you're describing? Invite-only groups whose activity isn't seen by non-members, or even accessible when searching for related tags/topics? Have I been casting about looking for content like someone looking for people in a neighbourhood where everyone is inside with the curtains drawn, or is there actually low engagement on Mastadon overall?

in reply to Komodo Rodeo

lemmy - Link to source

Sibshops

If you want to follow specific organizations, unfortunately, there aren’t as many on Mastodon as on other social media platforms. Some are accessible through Threads.net federation, like @theonion@threads.net, through the Bluesky bridge, or via other non-Mastodon federated communities (e.g., Flipboard.com) if that’s something you’re interested in.

However, some communities do wall themselves off from bots and bad actors. For example, the most popular Mastodon instance (mastodon.social) blocks the second-largest instance (pawoo.net). Other instances, like mastodon.art, defederate from AI art supporting instances, while others like hachyderm.io has defederated from Threads.net. Additionally, some Mastodon communities, like Truth Social, are entirely isolated and defederate from everyone else.

So, if you want access to the widest range of communities, you may need to join more than one instance.

in reply to Sheridan

lemmy - Link to source

Sibshops

The servers are hosted by Hetzner with servers across Europe. They call out Hetzner when there is an outage.

status.mastodon.online/cm722jt…

We have switched back to our original networking, and all functionality and performance is restored. Hetzner has confirmed that is was indeed a vSwitch issue that caused the network outage.


More info about Hetzner here:
hetzner.com/unternehmen/ueber-…


DB connection issues - Incident details - mastodon.online - Status

DB connection issues - Incident details - mastodon.online Status
status.mastodon.online
This entry was edited (2 months ago)

lemmy - Link to source

Substack open source rival Ghost is now connected to the fediverse

Substack rival Ghost is now connected to the fediverse | TechCrunch

Newsletter platform Ghost, an open source competitor to Substack, is now connected to the fediverse, also known as the open social web. Federated apps run
Sarah Perez (TechCrunch)
in reply to jackalope

lemmy - Link to source

fmstrat

The docs are super unclear.

In future, we hope to develop a deeper integration between your social web profile and followers <> and your public website and registered members. To start with, though, they operate independently from one another.

Your social web profile and followers are separate to the rest of your site and memberships, so you can think of it as a new, additional distribution channel.


Emphasis mine. I think the setup is basically federating links in Mastodon style. So if you have a post available as a subscription, it will prompt a login after clicking through.

This entry was edited (2 months ago)

lemmy - Link to source

Organizing files to admit different grouping depending on use cases

I have separate directories for uni courses, which are grouped in semester directory. I also TA some classes, which is stored in separate folder named 'TA'. That is, it is grouped like this:

University
| - ...
| - 2024.2
| | - Lie algebra
| | - Operator algebra
| - 2025.1
| | - Mathematical Algorithms
| | - Diophantine equations
| - TA
| | - ...
| | - 2024.2
| | - 2025.1

Oftentimes, I focus on the current semester, so I want to view courses on a same semester grouped together.
On other times, I want to group TA activities across semesters together to .
I may also do the same with grouping similar subjects.

Basically, I want to view directories with different grouping for each use case, as in the title. I hope this makes sense..
Is there any kind of directory structure or application-based solutions for this cases?

EDIT: I want both GUI and TUI solution for browsing files like this, it's great if linux filesystem supports this natively but fine if it doesn't.
Database with redirection capability would be even better.

Thanks in advance!

This entry was edited (2 months ago)

lemmy - Link to source

Why aren't lemmy DMs compatible with mastodon?
Mastodon dms are just posts with limited visibility, and a mention to the person recieving it.
They don't seem to be compatible with lemmy.

Palestine WIll Be Free doesn't like this.

in reply to irelephant [he/him]🍭

lemmy - Link to source

Rikudou_Sage

They're not, they're a different kind of object on the ActivityPub level. Lemmy and some others use the unofficial extension called Litepub which includes a custom ChatMessage type, while Mastodon and others have chosen to repurpose the Note object (used for posts and comments on Mastodon and comments on Lemmy) with limited visibility and weird mention rules.
in reply to Eiri

lemmy - Link to source

Kichae

So many AP platforms are made by a couple of guys in their garage, it's not even funny, and the mentality of "just dicking around" means what gets used is whatever the whims of the day dictate, rather than the standard.

"If it works, it's not stupid" and all that.

But that kind of work lacks real world testing, and depe concern for public expectaton or desire.

Plus, you have to keep in mind that the idea of interplatform interoperability isn't this core conceit of ActivityPub. It's a potential use case, but it's not an expectation. There's no reason anyone should expect interop like that, other than some developers wanted to try it.

But some didn't, and now that their platforms are gaining audience, they're refactoring to meet that audience's expectations.

in reply to Eiri

lemmy - Link to source

Rikudou_Sage

I recently did a library implementing pretty much the whole ActivityPub protocol and let me tell you one thing I've learned: ActivityPub is a half-assed unfinished mess.

It has so little constraints that pretty much anything is valid. You'd think that there was some logic at the core, but not really.

For example, there's the Like activity, the name is pretty self-explanatory. But it's valid to like anything. You want to like another Like activity? Why not! So you can like a like that likes a like...

Obviously, no real project implements such nonsense. But because almost everything is valid and up to interpretation of the implementer, there really is no single ActivityPub to implement that gets you running smoothly. There are many de-facto standards with various levels of compatibility with each other. Sending private messages is one such thing that many projects chose to implement in different ways.

Fun fact: Without implementing the HTTP Signatures spec, your app will not be able to send any activities to any software, because ActivityPub allows anyone to impersonate anyone, which obviously didn't really fly with people developing actual software that uses it.

In conclusion, pure ActivityPub is an unusable mess in its pure form that literally won't be able to communicate with other software implementing "ActivityPub," so everyone is kind of implementing a similar slice/hybrid of ActivityPub and other protocols, but not exactly the same ActivityPub.

pwalker doesn't like this.

in reply to Rikudou_Sage

lemmy - Link to source

P03 Locke

They have conferences about ActivityPub. Why isn't W3C trying to fix this mess in newer backwards-incompatible versions? The time to do it is now, not later, because it would involve a major version and years of pushing for adoption. The lack of standardization of basic concepts is why integrations of different types of implementations is a broken mess, which is the whole fucking point of ActivityPub! Now, we have to compete with ATProto, which has different kinds of problems, and it's very possible that it just wins out and kills ActivityPub.

This reminds of the early days of SMTP, where there was zero thought behind security, and that created an entire spam industry.

PeerTube integration into Lemmy is still shit, poorly implemented, and rarely linked by Lemmy admins.

lemmy - Link to source

Creating A GoToSocial Instance on FediHost

Creating A GoToSocial Instance on FediHost

GoToSocial is probably the best way to get yourself onto the fediverse at the lowest price possible. It's an excellent choice for solo instances and enables you to migrate both to and from Mastodon...
PeerTube.wtf

lemmy - Link to source

Does something like this exist?

I'm asking myself if exist something inside the fediverse where you can list your profiles and other people can Send you a message throw your most used app/profile without needing an sccount on that service, unify conversations throw different platforms and notify you if one person you follow in A service has a new profile in B service.

Something like a federated meeting point compatible with all ActivityPub developments. Does it exist?

Thanks!

don't like this

in reply to javilopezg

lemmy - Link to source

gon [he]

Send you a message [through] your most used app/profile without needing an [account] on that service


No, I don't think so...

However, what you're describing kind of sounds like a polycentric identity. Maybe check that out. Also, I believe ActivityPods aim to handle a little of what you're describing, but I don't know how much adoption it's had.

lemmy - Link to source

PostgreSQL Database Lands Initial Support For IO_uring: "Can Be Considerably Faster"

PostgreSQL Database Lands Initial Support For IO_uring: "Can Be Considerably Faster"

As a very exciting improvement for the open-source PostgreSQL database server, it has merged initial support for making use of IO_uring on Linux servers for asynchronous I/O and can provide for some nice performance improvements.
www.phoronix.com

ActivityPub - Link to source

KDE Dolphin can use ripgrep and ripgrep-all for faster searching, also inside PDFs!

Use `ripgrep-all` / `ripgrep` to improve search in Dolphin

In the next release of Dolphin, the search backend (when Baloo indexing is disabled) will be faster and support more file types, by using external projects ripgrep-all and ripgrep to do the search. Merge Request
Use `ripgrep-all` / `ripgrep` to improve search in Dolphin
⇧