[Solved, sort of] Keyboard doesn't work after logging in. Fedora


Update: Issue disappeared without doing anything. After just letting my computer sit turned off for a few hours I started it back up to troubleshoot. Now it works again. Something happened to break it and then to unfuck it again without any input from me. Something is unstable and I’m gonna try to figure it out.

Started my PC up today, logged in like normal, but my keyboard wont work after logging in.
Except for the calculator button. None of the keys will actually do anything. But logging in works normally.

Worked fine last night, no updates have run or anything. Where to start diagnosing this? In a way where I won’t need a keyboard?

Fedora 42 KDE

Edit: Keyboard works fine in a live environment on the USB I used to install yesterday. Tried a different keyboard on my main install, and that didn’t work either. So it’s not the keyboard itself at least

This entry was edited (1 month ago)
Unknown parent

lemmy - Link to source

Parptarf

Already checked the i put and that looks to be right.
No slow keys enabled in settings and no response holding down keys for up to 15 seconds.

My keyboard can both use a dongle and BT. But I can’t find it on BT. Other keyboard is the same model, which isn’t ideal but it was worth testing out.

Also, mouse still works. And I’m logged into here on my browser so I can copy commands and stuff.

This entry was edited (1 month ago)
Unknown parent

lemmy - Link to source

Parptarf

Tried turning stuff on, then off, then reset to default. Nothing.

Nothing, except function keys for volume etc. and the calculator keys work when I’m logged in. I can log out and write my password normally.

I can get to a console from the login screen, which tells me to login. But I get incorrect credentials even though they are correct.

This entry was edited (1 month ago)

Decentralization Scoring System


🧮 Decentralization Scoring System (v1.0)


This scoring system evaluates how decentralized and self-hostable a platform is, based on four core metrics.

📊 Scoring Metrics (Total: 100 Points)


Top Provider User Share (30 points): Measures how many users are on the largest instance. Full points if <10%; 0 if >80%.
Top Provider Content Share (30 points): Measures how much content is hosted by the largest instance. Full points if <10%; 0 if >80%.
Ease of Self-Hosting: Server (20 points): Technical ease of running your own backend. Full points for Docker/simple setup with good docs.
Ease of Self-Hosting: User Interface (20 points): Availability and usability of clients. Full points for accessible, FOSS, multi-platform clients.


📋 Example Breakdown (Estimates)

📧 Email (2025)


  • Top Provider User Share: Apple ≈ 53.67% → Score: 4.5/30
  • Top Provider Content Share: Apple likely handles >50% of mail → Score: 4.5/30
  • Self-Hosting: Server: Easy (Leverage email hosting services) → Score: 18/20
  • Self-Hosting: Client: Easy (Thunderbird, K-9, etc.) → Score: 18/20

Total: 45/100


🐹 Lemmy (2025)


  • Top Provider User Share: lemmy.world ≈ 37.17% → Score: 12/30
  • Top Provider Content Share: lemmy.world likely hosts ~37% content → Score: 12/30
  • Self-Hosting: Server: Easy (Docker, low resource) → Score: 18/20
  • Self-Hosting: Client: Good FOSS apps, web UI → Score: 18/20

Total: 60/100


🐘 Mastodon (2025)


  • Top Provider User Share: mastodon.social ≈ 42.7% → Score: 11/30
  • Top Provider Content Share: mastodon.social ≈ 45–50% content → Score: 10/30
  • Self-Hosting: Server: Docker setup, moderate difficulty → Score: 15/20
  • Self-Hosting: Client: Strong ecosystem (Tusky, web, etc.) → Score: 19/20

Total: 55/100


🔵 Bluesky (2025)


  • Top Provider User Share: bsky.social ≈ ~90%+ (very centralized) → Score: 0/30
  • Top Provider Content Share: Nearly all content on bsky.social → Score: 0/30
  • Self-Hosting: Server: PDS hosting possible but very niche → Score: 4/20
  • Self-Hosting: Client: Mostly official client; some 3rd party → Score: 10/20

Total: 14/100


🟥 Reddit (2025)


  • Top Provider User Share: Reddit ≈ 48.4% → Score: 0/30
  • Top Provider Content Share: Reddit hosts a significant portion of user-generated content → Score: 0/30
  • Self-Hosting: Server: Not self-hostable (proprietary platform) → Score: 0/20
  • Self-Hosting: Client: Some unofficial clients available → Score: 3/20

Total: 3/100


How Scores are Calculated

🧑‍🤝‍🧑 How User/Content Share Scores Work


This measures how many users are on the largest provider (or instance).

  • 100% (one provider): If one provider has all the users, it gets 0 points.
  • No provider > 10%: If no provider has more than 10%, it gets full 30 points.
  • Between 10% and 80%: Anything in between is scored on a linear scale.
  • > 80%: If a provider has more than 80%, it gets 0 points.


📊 Formula:


Score = 30 × (1 - (TopProviderShare - 10%) / 70%)
…but only if TopProviderShare is between 10% and 80%.
If below 10%, full 30. If above 80%, zero.

📌 Example:


If one provider has 40% of all users:
Score = 30 × (1 - (40 - 10) / 70) = 30 × (1 - 0.43) = 17.1 points

🖥️ How Ease of Self-Hosting Scores Work


These scores measure how easy it is for individuals or communities to run their own servers or use clients.

This looks at how technically easy it is to run your own backend (e.g., email server, Mastodon server) or User Interface (e.g., web-interface or mobile-app)

  • Very Easy: One-command Docker, low resources, great documentation → 18–20 points
  • Moderate: Docker or manual setup, some config, active community support → 13–17 points
  • Hard: Complex setup, needs regular updates or custom config (e.g. DNS, spam) → 6–12 points
  • Very Hard or Proprietary: Little to no self-hosting support, undocumented → 0–5 points


PS.


This is Version 1.0 so there are likely flaws and mistakes in it, feel free to help create the best version we can I've put it on github.com/NoBadDays/decentral…

in reply to AnonomousWolf

in reply to anothermember

Based on my brief searches yes, but I haven't looked into the example data in great detail.

If you have a good data point for me I can update the examples.

don't like this

in reply to AnonomousWolf

No data I'm afraid but it just doesn't ring true to me, unless there are vast regional differences. It sticks out to me as much as if you'd said that Bing is the largest search engine; I've barely heard of Apple email but almost everyone I know uses Gmail except me, including Apple users I know.
This entry was edited (1 month ago)
in reply to AnonomousWolf

One metric you might want to add is the network effect: how much of a difference does it make to the user experience to join a large instance (or the same instance most of your friends are on) compared to a small or self-hosted one? (Or in other words—does the nature of the platform software potentially incentivize consolidation?)
This entry was edited (1 month ago)

[SOLVED] Power Profile not working on Arch with KDE. Tried everything.


My laptop does support this feature since it was working on Fedora KDE. But jumping over to arch, it seems not to work at all.

1. power-profiles-daemon.service is enabled and running.

● power-profiles-daemon.service - Power Profiles daemon
     Loaded: loaded (/usr/lib/systemd/system/power-profiles-daemon.service; enabled; preset: disabled)
     Active: active (running) since <time>; 12min ago
 Invocation: 4f20b3d144584a759b4a6c5ea14aa739
   Main PID: 608 (power-profiles-)
      Tasks: 4 (limit: 6850)
     Memory: 1.6M (peak: 2.8M)
        CPU: 81ms
     CGroup: /system.slice/power-profiles-daemon.service
             └─608 /usr/lib/power-profiles-daemon

Apr 18 11:14:52 berserk-arch systemd[1]: Starting Power Profiles daemon...
Apr 18 11:14:52 berserk-arch systemd[1]: Started Power Profiles daemon.

2. plasma-powerdevil.service is static and running.

● plasma-powerdevil.service - Powerdevil
     Loaded: loaded (/usr/lib/systemd/user/plasma-powerdevil.service; static)
     Active: active (running) since <time>; 12min ago
 Invocation: 7d72f24a0e5e4a74889a3895b91eb51c
   Main PID: 1074 (org_kde_powerde)
      Tasks: 9 (limit: 6850)
     Memory: 10.6M (peak: 11.4M)
        CPU: 1.391s
     CGroup: /user.slice/user-1000.slice/user@1000.service/background.slice/plasma-powerdevil.service
             └─1074 /usr/lib/org_kde_powerdevil

3. upower.service is enabled and running.

● upower.service - Daemon for power management
     Loaded: loaded (/usr/lib/systemd/system/upower.service; enabled; preset: disabled)
     Active: active (running) since <time>; 12min ago
 Invocation: 7aa43a43146346e383c961ce12cc9ded
       Docs: man:upowerd(8)
   Main PID: 540 (upowerd)
      Tasks: 4 (limit: 6850)
     Memory: 5.1M (peak: 5.9M)
        CPU: 251ms
     CGroup: /system.slice/upower.service
             └─540 /usr/lib/upowerd

I've already tried to to put
GRUB_CMDLINE_LINUX_DEFAULT="amd_pstate=active"

as a kernel argument that doesn't seem to do anything as well. I can't figure it out. The power management settings work tho. Any idea what's wrong? Thanks.
This entry was edited (1 month ago)

Canonical Releases Ubuntu 25.04 Plucky Puffin | Canonical


Why do you use the distro you use?


Title is quite self-explanatory, reason I wonder is because every now and then I think to myself "maybe distro X is good, maybe I should try it at some point", but then I think a bit more and realise it kind of doesn't make a difference - the only thing I feel kinda matters is rolling vs non-rolling release patterns.

My guiding principles when choosing distro are that I run arch on my desktop because it's what I'm used to (and AUR is nice to have), and Debian on servers because some people said it's good and I the non-rolling release gives me peace of mind that I don't have to update very often. But I could switch both of these out and I really don't think it would make a difference at all.

in reply to aleq

I use OpenSUSE Tumbleweed because it focuses more on KDE than GNOME, is quite stable, and has snapshots to roll back to in case something does go wrong. I don't want to mess with my OS, I just want it to work reliably. I do use Debian on some devices (like my server) but the software (especially in terms of GUI apps) is very outdated and it doesn't come with the other features of OpenSUSE out of the box.
This entry was edited (1 month ago)
in reply to aleq

I wanted a mainstream but not Ubuntu, and one that was preferably offered with KDE Plasma pre-packaged.

So I ended up deciding between Debian and Fedora, and what tipped me to Fedora was thinking: Well SELinux sounds neat, quite close to what I learned about Mandatory Access Control in the lectures, and besides, maybe it will be useful in my work knowing one that is close to RHEL.

Now I work in a network team that has been using Debian for 30 years, lol. Kind of ironic, but I don't regret it, now I just know both.

And fighting SELinux was kind of fun too. I modified my local policies so that systemd can run screen because I wanted to create a Minecraft service to which I could connect as admin, even if it was started by systemd.

This entry was edited (1 month ago)

Hi, I need in-person help from a computer whiz-can travel


Hello!

So, I live on a bus. We travel around, it's pretty great. I don't have a laptop or a mailing address that works, so getting certain things done is difficult, and I have two things I need help with.

I installed a solar system a while back, with an older charge controller a friend recommended. I more recently upgraded the batteries to lithium irons. So now this controller requires reprogramming, and to do so you have to plug an RJ45 (pretty sure that's the name) into it, and probably download some shitty chinese spyware program to fiddle with it. Their newer models bluetooth and require an app of course.

The other thing is either much trickier or impossible, and while I've booted up dumpstered laptops with thumbdrive linux before (and found the homemade blowjob video, heh) I've no idea how to even go about fiddling with this.

It's a (shitty chinese) dash/backup/security camera system. It's been referred to as a 'pizza box' system by someone who hates money. It might have a wifi chip onboard, but I can't figure out it does or not.

I'd like to flash it to run linux, if possible, and put some actually useable video monitoring/porting/editing maybe programs on there. The current UI is unusable even when it's cooperating. Like if there were an accident, I'd just basically be bluffing. Sure the data's probably there, but it's in a format that won't register on any device I've plugged the SD card into. I need it to export to filetype I can use with an ipad, which is the only computer we have aboard.

If any of this sounds like a fun or interesting challenge, I can throw some dollars at you. Or trade work! We do auto/diesel/bicycle mechanic work, welding, sewing, leather and general handy shit.

in reply to DempstersBox

Sell it and get something with an existing FOSS firmware. And a laptop (dumpster ones work too). What you're asking for is $1000 upfront, at minimum, with no satisfaction guarantee.

If you're willing to do most of the work yourself, I'd suggest finding an official firmware update and running binwalk on it. Also take good photos of the PCB and look for datasheets of every chip. Then you'll be able to pose specific questions and maybe get decent help.

Still, it's probably best to set up ONVIF client software or something.

This entry was edited (1 month ago)

Canonical Releases Ubuntu 25.04 Plucky Puffin


Hardware enablement highlights
Canonical continues to enable Ubuntu across a broad range of hardware. The introduction of a new ARM64 Desktop ISO makes it easier for early adopters to install Ubuntu Desktop on ARM64 virtual machines and laptops.

Qualcomm Technologies is proud to collaborate with Canonical and is fully committed to enabling a seamless Ubuntu experience on devices powered by Snapdragon®. *Ubuntu’s new ARM64 ISO paves the way for future Snapdragon enablement, enabling us to drive AI innovation and adoption together.

Leendert van Doorn, SVP, Engineering at Qualcomm Technologies, Inc.*

This entry was edited (1 month ago)

[solved] What ports do I need to open for mDNS?


EDIT: The bad solution is to unblock UDP port 5353 but the port has to be source port, not destination port. (--sport flag) See the now modified rules. The issue is that this is very insecure (see this stackexchange question and comments) but obviously better than no firewall at all because at least I'm blocking TCP traffic.

The proper solution (other than using glibc and installing nss-mdns package) is to open a port with netcat (nc) in the background (using &) and then listen with dig on that port using the -b flag.

port="42069"
nc -l -p "$port" > /dev/null || exit 1 &
dig somehostname.local @224.0.0.241 -p 5353 -b "0.0.0.0#${port}"

Then we need to remember to kill the background process. The DNS reply will now be sent to port 42069, so we can just open it with this iptables rule:
-A INPUT -p udp -m udp --dport 42069 -j ACCEPT

---->END OF EDIT.

I want to setup iptables firewall but if I do that, it blocks multicast DNS which I need. I am using command

dig "somehostname.local" @224.0.0.251 -p 5353

to get the IP through mDNS and these are my iptables rules (from superuser.com):
*filter

# drop forwarded traffic. you only need it of you are running a router
:FORWARD DROP [0:0]

# Accept all outgoing traffic
:OUTPUT ACCEPT [623107326:1392470726908]


# Block all incoming traffic, all protocols (tcp, udp, icmp, ...) everything.
# This is the base rule we can define exceptions from.
:INPUT DROP [11486:513044]

# do not block already running connections (important for outgoing)
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

# do not block localhost
-A INPUT -i lo -j ACCEPT

# do not block icmp for ping and network diagnostics. Remove if you do not want this
# note that -p icmp has no effect on ipv6, so we need an extra ipv6 rule
-4 -A INPUT -p icmp -j ACCEPT
-6 -A INPUT -p ipv6-icmp -j ACCEPT

# allow some incoming ports for services that should be public available
# -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
# -A INPUT -p udp -m udp --dport 5353 -j ACCEPT # does not help
-A OUTPUT -p udp -m udp --sport 5353 -j ACCEPT # SOLVES THE ISSUE BUT IS INSECURE - not recommended


# commit changes
COMMIT

Any help is welcome 😀
This entry was edited (1 month ago)
in reply to TMP_NKcYUEoM7kXg4qYe

As I said, I’m not sure about that.

Still, dig won’t be listening on port 5353 for the answer, it’ll open some random port, so the firewall rule for 5353 will not apply. And the conntrack rule, is my guess, also doesn’t apply, because what I think the conntrack module does is:

  • Remembers about the outgoing connection (i.e. when dig sends its udp packet out): source port, destination IP and port
  • Check incoming packets against this info, and lets them through if they appear to be an answer

Since the outgoing packet is going to multicast, and the incoming packet (I suspect) is coming from the IP of the machine that answers (a different IP therefore), conntrack wouldn’t be able to figure that out. The answer doesn’t match the outgoing packet that dig sends. Since this is just a hunch, I would try to confirm this by looking at the traffic in e.g. wireshark.

in reply to gnuhaut

Edit 2: Actually dig picks a random port to send the mDNS request from and sends it to 224.0.0.251:5353 (multicast IP). The correct host then replies from port 5353 to the previously picked random port from dig. But I found that you can specify the port with dig -b IP#port so I think that should help. I kinda don't have the time to try it out currently though.

end of edit2.

well I randomly solved it by adding

-A OUTPUT -p udp -m udp --sport 5353 -j ACCEPT

Which basically means you are right. The destination port is just some randomly picked number (checked wireshark), so I have to filter based on source port, which is 5353.

Edit: Also thanks for your help!

This entry was edited (1 month ago)

crc32sum - Calculate CRC32 for each file (Bash using 7z) - bugfix


Hi all. This is an update on my script extracting CRC32 checksum from the 7z commandline tool. The output should be similar to how the md5sum tool outputs, the checksum and the file name/path.

The initial version of this script was actually broken. It would not output all files if a directory was included (wrong counting of files through argument number). Also filenames that contained a space would only output the first part until the space character. All of this rookie mistakes are solved. Plus there is a progress bar showing what files are processed at the moment, instead showing a blank screen until command is finished. This is useful if there are a lot of files or some big files to process.

Yes, I'm aware there are other ways to accomplish this task. I would be happy to see your solution too. And if you encounter a problem, please report.

crc32sum:

(Note: Beehaw does not like the "less than" character and breaks the post completley. So replace the line cat %%EOF with or copy it from the Github Gist link below:)

\#!/usr/bin/env bash

if [[ "${#}" -eq 0 ]] || [[ "${1}" == '-h' ]]; then
    self="${0##*/}"
    cat %%EOF
usage: ${self} files...

Calculate CRC32 for each file.

positional arguments:
  file or dir       one or multiple file names or paths, if this is a directory
                    then traverse it recursively to find all files
EOF
    exit 0
fi

7z h -bsp2 -- "${@}" |
    \grep -v -E '^[ \t]+.*/' |
    \sed -n -e '/^-------- -------------  ------------$/,$p' |
    \sed '1d' |
    \grep --before-context "9999999" '^-------- -------------  ------------$' |
    \head -n -1 |
    \awk '$2=""; {print $0}'
This entry was edited (1 month ago)
in reply to thingsiplay

I was actually looking for something like this a few days ago. This is pretty useful as there's no crc32sum readily available on linux. Thanks for that!

I would personally change a few things, mostly small nitpicks to be fair.
1. Prefer [[ ]] over [ ] for tests. Source: shellcheck.net/wiki/SC2292
2. Use $0 instead of hardcoding crc32sum in the help messages. That way it will work even if someone names the script differently
3. You could exit 0 after the help and end the if there instead of having the whole work being done in an else.

As I said, nitpicks!

This entry was edited (1 month ago)
in reply to acidrain42

Agreed on your points and usually I do 2. (name) and 3. (exit instead else) sometimes. For the [[ over [, it usually matters only for word splitting and globbing behavior, if you do not enclose the variables between quotes I believe. But looking into the shellcheck entry, looks like there is no disadvantage. I may start doing this by default in the future too.

So thanks for the suggestions, I will update the script in a minute.

Edit: I always forget that Beehaw will break if I use the "lower than" character like in
, so I replaced it in the post with cat %%EOF which requires to change that line. And the example usage is gone for the moment.

Edit2 (21 hours later): I totally forgot to remove the indentation and else-branch. While doing so I also added a special option -h, in case someone tries that. Not a big deal, but thought this should be.

This entry was edited (1 month ago)

Sharing some of my newest small Bash scripts using 7z


New version for toarchive: gist.github.com/thingsiplay/88…

(I have added a new version of the script. The old one is renamed to 'toarchive-old'. The new script has some guard rails and more checks. Also original files can be removed automatically on success, like gzip does. But an option -r must be explicitly given here, like toarchive zip -r file.txt. Directories can be removed too, but the option uppercase -R is required here, as in toarchive zip -R my_dir. Have in mind this will use rm -r system command. Although some guard rails are in place to prevent massive fail, you should be very careful. Note that no file is removed, if -r or -R are not used at all.)


I always write little scripts and aliases that help me from time to time. I just wanted to share some of my newest simple scripts. There are probably better or easier ways to do, but writing and testing them is fun too. Both make use of the 7z command, a commandline archive tool. Posting it here, so anyone can steal them. They are freshly written, so maybe there are edge cases.

crc32sum:

(Update April 17, 2025: Note this is a new version that addresses some issues. The old version I had posted was broken.)

\#!/usr/bin/env bash

# Calculate CRC32 for each file.
if [ "${#}" -eq 0 ]; then
    echo "crc32sum files..."
    echo "crc32sum *.smc"
else
    7z h -bsp2 -- "${@}" |
        \grep -v -E '^[ \t]+.*/' |
        \sed -n -e '/^-------- -------------  ------------$/,$p' |
        \sed '1d' |
        \grep --before-context "9999999" '^-------- -------------  ------------$' |
        \head -n -1 |
        awk '$2=""; {print $0}'
fi

toarchive:
\#!/usr/bin/env bash

# Create one archive for each file or folder.
if [ "${#}" -eq -1 ]; then
    echo "toarchive ext files..."
    echo "toarchive zip *.smc"
else
    ext="${1}"
    shift
    opt=()
    stop_parse=false

    for arg in "${@}"; do
        if [ ! "${stop_parse}" == true ]; then
            if [ "${arg}" == "--" ]; then
                stop_parse=true
                opt+=(--)
                continue
            elif [[ "${arg}" =~ ^- ]]; then
                opt+=("${arg}")
                continue
            fi
        fi
        file="${arg}"

        7z a "${opt[@]}" "${file}.${ext}" "${file}"
    done
fi
This entry was edited (1 month ago)

Is there an easy way to create blocklist of post or comment for other people?


I'll bring you straight into my mind: I was scrolling throught the n-th depressing post of the ~~day~~ hour and I thought "If I answer that post/comment by #negativity, will other people be able to filter out this content using my answer?" If not, how could we build some sort of blocklist for people to curate there experience on the fediverse.

I know I can block key word like "politics" "Trump" "Elon" but sometimes it doesn't have a precised word yet use human can categorise it easily.

don't like this

in reply to pseudo

I don’t agree with this particular usecase. Because I’ve personally experienced, people who shun “negativity” meaning they just completely ignore people’s suffering which often adds a devastating layer of invisibility to oppression. But probably hopefully this isn’t your case and it’s more about “doom and gloom” than people’s reality of suffering.

But anyways, I do agree that blocklists are probably a feature that lemmy needs.

This entry was edited (1 month ago)

don't like this

Getting used to Helix


I'm leaving text editors like vscode/codium behind to learn something more modular, like Helix. I really wanna get used to. What advices can you give me to practice? I know that there is a :tutor command, I'm almost done with it. Do anyone know if there are exercices to practice? Im looking something similar to Ruby koans, a list of excersices to solve like "puzzles" but to Helix.
in reply to oni ᓚᘏᗢ

Not quite what you were asking for, but there is tomgroenwoldt.github.io/helix-…

It's quite good for letting you know about things you didn't know you could do, but sometimes it tells me I'm wrong because I'd do it a different way - e.g. I'd go to line 13 by :13 but it wants 13G.

Also, from within helix you can do space ? to get the list of commands and any bindings they're on.

USB Tethering from Android just stopped working [Fedora 42]


Upon upgrading from Fedora 41 to 42, I noticed that the USB tethering just doesn't work

networkctl recognizes the device as "wwan" now, instead of "ether". If I load up a previous kernel, USB tethering works normally.

This seems to be a change in the kernel, and probably won't be reverted in the future. What do I do?

More detail in this comment

You know what? Fuck this. I just backed my shit up and installed Debian. Still, please try to look into this, this could be a problem for many others

This entry was edited (1 month ago)
in reply to maliciousonion

I've been working on a phone tethering router so might have some insight here for you. Android can use CDC or RNDIS to tether. It depends on your phone which ones gonna be used. Try to figure out which one its using (can do this by watching logs when plugging in usb usually itll say there which type of device is connecting). When i was doing the router i had to make sure cdc_ether and rndis_host kernel modules were both loaded to ensure compatibility. It might be as simple as manually loading a module in the new kernel version. Although I'm not exactly sure how it'll work on fedora i was doing this all on OPNsense.

What i was doing was tethering the phone to a router (old thinkpad running router OS) then passing that connection on to its network and connecting to the Access Point on the network with my laptop. I still havent fully worked out the kinks yet but its going pretty well. Sorry i can't be more specific for your case, but hopefully it gives you some terms you can use to google more effectively at the least.

This entry was edited (1 month ago)
in reply to IHave69XiBucks

Below are the kernel logs for when I connect the USB on F42 (new kernel)

::: spoiler new(the one that doesn't work)

Apr 17 hh:mm:15 fedora kernel: usb 5-8: USB disconnect, device number 6
Apr 17 hh:mm:15 fedora kernel: rndis_host 5-8:1.0 wwp0s29f7u8: unregister 'rndis_host' usb-0000:00:1d.7-8, Mobile Broadband RNDIS device
Apr 17 hh:mm:15 fedora systemd-networkd[2818]: wwp0s29f7u8: Link DOWN
Apr 17 hh:mm:15 fedora avahi-daemon[1092]: Interface wwp0s29f7u8.IPv6 no longer relevant for mDNS.
Apr 17 hh:mm:15 fedora systemd-networkd[2818]: wwp0s29f7u8: Lost carrier
Apr 17 hh:mm:15 fedora avahi-daemon[1092]: Leaving mDNS multicast group on interface wwp0s29f7u8.IPv6 with address fe80::acfa:54ff:fee2:5884.
Apr 17 hh:mm:15 fedora avahi-daemon[1092]: Withdrawing address record for fe80::acfa:54ff:fee2:5884 on wwp0s29f7u8.
Apr 17 hh:mm:20 fedora kernel: usb 5-8: new high-speed USB device number 7 using ehci-pci
Apr 17 hh:mm:20 fedora kernel: usb 5-8: New USB device found, idVendor=2717, idProduct=ff88, bcdDevice= 4.19
Apr 17 hh:mm:20 fedora kernel: usb 5-8: New USB device strings: Mfr=1, Product=2, SerialNumber=3
Apr 17 hh:mm:20 fedora kernel: usb 5-8: Product: Redmi Note 11
Apr 17 hh:mm:20 fedora kernel: usb 5-8: Manufacturer: Xiaomi
Apr 17 hh:mm:20 fedora kernel: usb 5-8: SerialNumber: 2ce0eff1
Apr 17 hh:mm:20 fedora kernel: rndis_host 5-8:1.0 wwan0: register 'rndis_host' at usb-0000:00:1d.7-8, Mobile Broadband RNDIS device, 7a:03:3c:1e:05:d2
Apr 17 hh:mm:20 fedora mtp-probe[3287]: checking bus 5, device 7: "/sys/devices/pci0000:00/0000:00:1d.7/usb5/5-8"
Apr 17 hh:mm:20 fedora mtp-probe[3287]: bus: 5, device: 7 was not an MTP device
Apr 17 hh:mm:20 fedora kernel: rndis_host 5-8:1.0 wwp0s29f7u8: renamed from wwan0
Apr 17 hh:mm:20 fedora systemd-networkd[2818]: wwan0: Interface name change detected, renamed to wwp0s29f7u8.
Apr 17 hh:mm:20 fedora mtp-probe[3291]: checking bus 5, device 7: "/sys/devices/pci0000:00/0000:00:1d.7/usb5/5-8"
Apr 17 hh:mm:20 fedora mtp-probe[3291]: bus: 5, device: 7 was not an MTP device
Apr 17 hh:mm:24 fedora ModemManager[1186]: <msg> [base-manager] couldn't check support for device '/sys/devices/pci0000:00/0000:00:1d.7/usb5/5-8': not supported by any plugin

:::

And these are the logs on the old kernel that still works:

::: spoiler old(the one that works)

Apr 17 hh:mm:15 fedora kernel: usb 5-8: new high-speed USB device number 5 using ehci-pci
Apr 17 hh:mm:15 fedora kernel: usb 5-8: New USB device found, idVendor=2717, idProduct=ff88, bcdDevice= 4.19
Apr 17 hh:mm:15 fedora kernel: usb 5-8: New USB device strings: Mfr=1, Product=2, SerialNumber=3
Apr 17 hh:mm:15 fedora kernel: usb 5-8: Product: Redmi Note 11
Apr 17 hh:mm:15 fedora kernel: usb 5-8: Manufacturer: Xiaomi
Apr 17 hh:mm:15 fedora kernel: usb 5-8: SerialNumber: 2ce0eff1
Apr 17 hh:mm:15 fedora kernel: rndis_host 5-8:1.0 usb0: register 'rndis_host' at usb-0000:00:1d.7-8, RNDIS device, 82:1c:ae:65:4a:34
Apr 17 hh:mm:15 fedora NetworkManager[1495]: <info>  [1744877835.2127] manager: (usb0): new Ethernet device (/org/freedesktop/NetworkManager/Devices/7)
Apr 17 hh:mm:15 fedora mtp-probe[4001]: checking bus 5, device 5: "/sys/devices/pci0000:00/0000:00:1d.7/usb5/5-8"
Apr 17 hh:mm:15 fedora mtp-probe[4001]: bus: 5, device: 5 was not an MTP device
Apr 17 hh:mm:15 fedora kernel: rndis_host 5-8:1.0 enp0s29f7u8: renamed from usb0
Apr 17 hh:mm:15 fedora NetworkManager[1495]: <info>  [1744877835.2356] device (usb0): interface index 7 renamed iface from 'usb0' to 'enp0s29f7u8'
Apr 17 hh:mm:15 fedora NetworkManager[1495]: <info>  [1744877835.2456] device (enp0s29f7u8): state change: unmanaged -> unavailable (reason 'managed', managed-type: 'external')
Apr 17 hh:mm:15 fedora NetworkManager[1495]: <info>  [1744877835.2479] device (enp0s29f7u8): carrier: link connected
Apr 17 hh:mm:15 fedora NetworkManager[1495]: <info>  [1744877835.2484] device (enp0s29f7u8): state change: unavailable -> disconnected (reason 'carrier-changed', managed-type: 'full')
Apr 17 hh:mm:15 fedora NetworkManager[1495]: <info>  [1744877835.2497] policy: auto-activating connection 'Wired connection 2' (1cd60103-249a-3a35-b7e8-c2ac149f67ab)
Apr 17 hh:mm:15 fedora NetworkManager[1495]: <info>  [1744877835.2501] device (enp0s29f7u8): Activation: starting connection 'Wired connection 2' (1cd60103-249a-3a35-b7e8-c2ac149f67ab)
Apr 17 hh:mm:15 fedora NetworkManager[1495]: <info>  [1744877835.2502] device (enp0s29f7u8): state change: disconnected -> prepare (reason 'none', managed-type: 'full')
Apr 17 hh:mm:15 fedora NetworkManager[1495]: <info>  [1744877835.2505] device (enp0s29f7u8): state change: prepare -> config (reason 'none', managed-type: 'full')
Apr 17 hh:mm:15 fedora NetworkManager[1495]: <info>  [1744877835.2566] device (enp0s29f7u8): state change: config -> ip-config (reason 'none', managed-type: 'full')
Apr 17 hh:mm:15 fedora NetworkManager[1495]: <info>  [1744877835.2579] dhcp4 (enp0s29f7u8): activation: beginning transaction (timeout in 45 seconds)
Apr 17 hh:mm:15 fedora avahi-daemon[1380]: Joining mDNS multicast group on interface enp0s29f7u8.IPv6 with address fe80::78eb:ce85:f0d8:dda6.
Apr 17 hh:mm:15 fedora avahi-daemon[1380]: New relevant interface enp0s29f7u8.IPv6 for mDNS.
Apr 17 hh:mm:15 fedora avahi-daemon[1380]: Registering new address record for fe80::78eb:ce85:f0d8:dda6 on enp0s29f7u8.*.
Apr 17 hh:mm:15 fedora mtp-probe[4003]: checking bus 5, device 5: "/sys/devices/pci0000:00/0000:00:1d.7/usb5/5-8"
Apr 17 hh:mm:15 fedora mtp-probe[4003]: bus: 5, device: 5 was not an MTP device
Apr 17 hh:mm:17 fedora NetworkManager[1495]: <info>  [1744877837.2676] dhcp4 (enp0s29f7u8): state changed new lease, address=192.168.244.164, acd pending
Apr 17 hh:mm:17 fedora NetworkManager[1495]: <info>  [1744877837.4372] dhcp4 (enp0s29f7u8): state changed new lease, address=192.168.244.164
Apr 17 hh:mm:17 fedora avahi-daemon[1380]: Joining mDNS multicast group on interface enp0s29f7u8.IPv4 with address 192.168.244.164.
Apr 17 hh:mm:17 fedora avahi-daemon[1380]: New relevant interface enp0s29f7u8.IPv4 for mDNS.
Apr 17 hh:mm:17 fedora avahi-daemon[1380]: Registering new address record for 192.168.244.164 on enp0s29f7u8.IPv4.
Apr 17 hh:mm:17 fedora NetworkManager[1495]: <info>  [1744877837.4400] policy: set 'Wired connection 2' (enp0s29f7u8) as default for IPv4 routing and DNS
Apr 17 hh:mm:17 fedora systemd-resolved[1315]: enp0s29f7u8: Bus client set default route setting: no
Apr 17 hh:mm:17 fedora NetworkManager[1495]: <info>  [1744877837.4676] device (enp0s29f7u8): state change: ip-config -> ip-check (reason 'none', managed-type: 'full')
Apr 17 hh:mm:17 fedora NetworkManager[1495]: <info>  [1744877837.4739] device (enp0s29f7u8): state change: ip-check -> secondaries (reason 'none', managed-type: 'full')
Apr 17 hh:mm:17 fedora NetworkManager[1495]: <info>  [1744877837.4771] device (enp0s29f7u8): state change: secondaries -> activated (reason 'none', managed-type: 'full')
Apr 17 hh:mm:17 fedora NetworkManager[1495]: <info>  [1744877837.4790] device (enp0s29f7u8): Activation: successful, device activated.

:::

{clock details changed to hh:mm for privacy}

One thing I notice is the new upgrade trying to use ModemManager rather than NetworkManager. The device is also defined as "Mobile Broadband", instead of "Ethernet".

Loading the kernel module with modprobe, as another commenter suggested, didn't make any change.

Another thing: An excerpt from the kernel changelog at cdn.kernel.org/pub/linux/kerne…

rndis_host: Flag RNDIS modems as WWAN devices

[ Upstream commit 67d1a8956d2d62fe6b4c13ebabb57806098511d8 ]

Set FLAG_WWAN instead of FLAG_ETHERNET for RNDIS interfaces on Mobile
Broadband Modems, as opposed to regular Ethernet adapters.

Otherwise NetworkManager gets confused, misjudges the device type,
and wouldn't know it should connect a modem to get the device to work.
What would be the result depends on ModemManager version -- older
ModemManager would end up disconnecting a device after an unsuccessful
probe attempt (if it connected without needing to unlock a SIM), while
a newer one might spawn a separate PPP connection over a tty interface
instead, resulting in a general confusion and no end of chaos.

The only way to get this work reliably is to fix the device type
and have good enough version ModemManager (or equivalent).

I am so lost xD
This entry was edited (1 month ago)
in reply to maliciousonion

You're not alone in this:

discussion.fedoraproject.org/t…

discussion.fedoraproject.org/t…

bugzilla.kernel.org/show_bug.c…

lore.kernel.org/all/e0df2d85-1…

When Debian upgrades to this kernel version you might run into the issue again. Unless there is a fix deployed before then.

This entry was edited (1 month ago)

Help me understand DSP on Linux?


And also on computers generally lol.

The situation: I'm trying out Bitwig on my geriatric computer, which is running Linux Mint. It seems that I can't do very much without spiking the DSP, leading to awful glitchiness in playback. However, according to btop, the CPU (i7 4770) load isn't breaking 30%, spread evenly across the cores.

Things I have tried:
- uninstalling speech dispatcher, which helped
- tweaking the pipewire config, which doesn't seem to have helped much

So... what is the bottleneck here?

EDIT: the (main) issue was that my user didn't have real time priority permissions. An edit to /etc/security/limits.conf has improved things immeasurably.

This entry was edited (1 month ago)
in reply to Andrzej3K [none/use name]

One of the things you run into with audio production software is that in order to maintain accuracy with respect to phasing between channels, they require very accurate timing, this usually comes at the expense of very high interrupt rates and context switching and under the best of circumstances this is hardware intensive, more so with older processors that don't have single instructions for storing the entire register set or restoring the entire register set to the stack with one instruction as many modern CPUs do. So hate to say it but you may need to upgrade to something less geriatric. You might also try a real-time kernel, it might allow the application to keep things sync'd up with less hardware interrupts though it will rely more on software interrupts do do the same. Unfortunately, I have found that while I can get the performance I require on my six year old processor using a realtime kernel, it has come with a sacrifice of stability, that is to say real time on my hardware at least has not been terribly stable.

This is what resistance to the digital coup looks like


in reply to cm0002

in reply to cm0002

She touches on the aspect of monetization and claims that "you could save money by being on the Fediverse".

Yes, in theory it is possible. In practice this is something that only is available for the already-famous journalists who have enough pull to move their audience from Substack to their own property.

For everyone else, the Fediverse is (a) too small and (b) too "anti-money" to encourage professionals to even try making a living here. They stay on Substack for the same reason that video creators stay on YouTube: it's a horrible master, but at least it lets them pay their bills.

This entry was edited (1 month ago)

supersquirrel doesn't like this.

in reply to amateurcrastinator

I don't mind paying for software either. I own Affinity & Zbrush licenses. However I run the risk that in the future, these products may be sold to the highest bidder and development stalls (as it happened a couple years ago in the case of Zbrush) or interoperability suffers. When this happens, you have to go through learning a different program, and DCCs are... huge. Whole factories. It's very hard to reinvest the time necessary to learn them inside out and be proficient again. It is also impossible to contribute to a non-open codebase. Proprietary programs are ticking bombs.
This entry was edited (1 month ago)

Why I'm breaking up with Windows


I'm going back to Linux after ~8 years of maining Windows. I was a Linux desktop and server user back in college and did all my dev on there. When I got my first job, I bought a better laptop and started maining Windows.

I am going back to Linux for three main reasons: I hate the Windows 11 UI, I'm increasingly paranoid about privacy/security, and the development experience for native software has sucked for a long time.

Besides the obvious downward spiral in UI since Windows 7, it's also become unreliable and slow. Some days, File explorer just won't open. Others, it takes a full minute to load my "home" view, and some others I get weird bugs where the color settings are broken or I can't actually click on folders anymore. The start menu is slow to open when pressing the Windows key, windows search is slow to index and sometimes looks stuff up on Bing instead of opening a file. The default apps (calculator, image viewer, media player) have been getting replaced with slower UWP versions with flatter and flatter UI. Finally, Windows is increasingly pushing AI stuff onto the platform, which leads me to privacy/security

I am increasingly paranoid these days about privacy and security. While I don't have any outstanding issues with security at large, I don't trust Microsoft's telemetry collection and I especially don't trust anything that gets sucked up into Windows Recall's AI Black hole. This hasn't been an issue, but I've always wondered why Microsoft hasn't made it simpler to create containerized applications with AppX/Windows SDK. It seems like it should be way easier to create a flatpak-like sandboxed application with any API (Win32, WinForms, WPF, or any language really).

Believe it or not, Windows is a good development platform, these days, unless you're trying to write Windows software. Microsoft, under Satya Nadella, has been taking care of its developer community and making a lot of tools free and some open source. vcpkg has revolutionized my C++ development and I've always been fond of many MSVC extensions such as SAL. There's a lot of pros and cons, but I generally prefer NT API calls over POSIX API calls (which are far more long in the tooth than NT at this point). That said, I tend to just write cross-platform "modern" C++ and don't make too many system calls anymore. I will miss Visual Studio (and the ease of SLN/Vcxproj files), and it seems like the only comparable C++ IDE available for Linux is CLion. I'm actually a fan of DirectX and HLSL over OpenGL and Vulkan: Microsoft has made a lot of really great first party libraries/tools available for DirectX that make it a really fun API to work with when you include DirectXTK. I am one of the rare few users who actually enjoys PowerShell; I prefer piping typed, structured data over piping streams of bytes. I also really hate sh/zsh/bash syntax.

That said: Microsoft has utterly lost the plot on native windows application development. They release a new UI Framework for C# and Whatever the latest managed C++ framework is every 3 or so years, and then immediately fail to support it, subtly changing XAML syntax or .Net namespaces so that your old UWP or WPF code is strangely not compatible anymore. To me, what is most telling about Microsoft's level of commitment to its newest frameworks is the fact that they are still supporting WinForms with modern, cross platform .Net builds, meaning that you can use modern C# and .Net features in a runtime that is supposed to have been replaced by their XAML products a long time ago. The only really viable way to write a DirectX application, and the only way that has any official documentation on it, is STILL to use the original Win32 APIs to create a window and manage IO.

So anyways, I'm not as zealous about Linux as most people on the internet are; I still think Windows is a good software development platform and maybe Microsoft can turn the ship around some day, but I doubt it.

in reply to shortrounddev

the development experience for native software has sucked for a long time.


For as long as Windows has existed, I have found its APIs to be noisy, awkward, and generally unpleasant to use. It was a major part of why I switched my development focus to Unix a long time ago. I guess this is a matter of personal taste; I wonder how you'll feel about the APIs more commonly used on Linux after five or ten years of using them full-time.

Despite a few niggles (I don't care for Bourne-style shell syntax or Windows shell syntax) I have found my productivity to be better and more enjoyable since the switch. Nowadays, benefits include everything that comes with an open-source ecosystem, like the software install/update model of Linux distros, and the ability to solve or work around library/OS problems myself if I can't wait for someone else to fix something.

And, of course, having a privacy-respecting platform for myself and my users is important to me.

In short, I'm happier here. Welcome.

By the way, if you do cross-platform desktop app development in native code, give Qt a try. It does an excellent job overall.

This entry was edited (1 month ago)
in reply to shortrounddev

they are still supporting WinForms with modern, cross platform .Net builds, meaning that you can use modern C# and .Net features in a runtime that is supposed to have been replaced by their XAML products a long time ago.


Microsoft is all about corporate clients, that's why their Windows is backwards compatible down to Windows 95, because there is some big corporation that buys the corporate license in bulk and runs some corporate Windows 95 accounting application on it.

This entry was edited (1 month ago)
in reply to Kanedias

Yeah no, Putin is a different story

He doesn't give a shit about dead soldiers in body bags. Almost noone in Russia sees that, or if they do they'll be told som lie about it. Its much simpler than in the US

You know what's not simpler? Demographics. As I recently read somewhere, demographics is like a freight train, slow, but all of the sudden you hear this horn bare and you're splattered under it.

Putin lost now about a million men of working age. That is a huge gash that will come back to haunt Russia. Not Putin, mind you, he'll be dead and gone within a few years. Russia, though, is thoroughly fucked for the next decades. It already has low population issues before, and their demographics chart at this point is a fucking rollercoaster. Their population is already relatively old, and with the loss of about a million men, in a country largely dependent on mineral extraction and sale, it will be ugly.

in reply to Phoenixz

He's losing men over 50 years old that are left out and are garbage of society. They wouldn't be participating in any demographic activities anyway.

I bet there are millions of Americans like this too. Coal miners who lost the job, casino players, heavy drinkers. For a hefty sum of money and a chance to be important again they'd do anything. You really underestimate how quick they can be turned into a cannon fodder and how little the society will miss them.

Source: I lived in Russia.

This entry was edited (1 month ago)

Security is a mess, and why a threat model is important


This post is long and kind of a rant. I don't expect many to read the whole thing, but there's a conclusion at the bottom.

On the surface, recommended security practices are simple:
- Store all your credentials in a password manager
- Use two factor authentication on all accounts

However, it raises a few questions.
- Should you access your 2FA codes on the same device as the password manager?
- Should you store them in the password manager itself?

This is the beginning of where a threat model is needed. If your threat model does not include protections against unwanted access to your device, it is safe for you to store access your 2FA codes on the same device as your password manager, or even in the password manager itself.

So, to keep it simple, say you store your 2FA in your password manager. There's a few more questions:
- Where do you store the master password for the password manager?
- Where do you store 2FA recovery codes?

The master password for the password manager could be written down on a piece of paper and stored in a safe, but that would be inconvenient when you want to access your passwords. So, a better solution is to just remember your password. Passphrases are easier to remember than passwords, so we'll use one of those.

Your 2FA recovery codes are something that are needed if you lose access to your real 2FA codes. Most websites just say "Store this in a secure place". This isn't something you want to store in the same place as those (in this case our password manager), and it's not something you will access often, so it's safe to write it down on a piece of paper and lock it in a safe.

Good so far, you have a fairly simple system to keep your accounts safe from some threats. But, new problems arise:
- What happens if you forget your master passphrase?
- What happens if others need access to your password manager?

The problem with remembering your passphrase is that it's possible to forget it, no matter how many times you repeat it to yourself. Besides naturally forgetting it, things like injuries can arise which can cause you to forget the passphrase. Easy enough to fix, though. We can just keep a copy of the passphrase in the safe, just in case we forget it.

If someone else needs to access certain credentials in your password manager, for example a wife that needs to verify bank information using your account, storing a copy of the password is a good idea here too. Since she is a trusted party, you can give her access to the safe in case of emergencies.

The system we have is good. If the safe is stolen or destroyed, you still have the master passphrase memorized to change the master passphrase and regenerate the 2FA security codes. The thief who stole the safe doesn't have your password manager's data, so the master passphrase is useless. However, our troubles aren't over yet:
- How do you store device credentials?
- How do you keep the password manager backed up?

Your password manager has to have some device in order to access it. Whether it's a phone, computer, tablet, laptop, or website, there needs to be some device used to access it. That device needs to be as secure as your password manager, otherwise accessing the password manager becomes a risk. This means using full disk encryption for the device, and a strong login passphrase. However, that means we have 2 more passwords to take care of that can't be stored in the password manager. We access those often, so we can't write them down and store them in the safe, Remembering two more passphrases complicates things and makes forgetting much more likely. Where do we store those passphrases?

One solution is removing the passwords altogether. Using a hardware security key, you can authenticate your disk encryption and user login using it. If you keep a spare copy of the security key stored in the safe, you make sure you aren't locked out if you lose access to your main security key.

Now to keep the password manager backed up. Using the 3-2-1 Backup Strategy. It states that there should be at least 3 copies of the data, stored on 2 different types of storage media, and one copy should be kept offsite, in a remote location (this can include cloud storage). 2 or more different media should be used to eliminate data loss due to similar reasons (for example, optical discs may tolerate being underwater while LTO tapes may not, and SSDs cannot fail due to head crashes or damaged spindle motors since they do not have any moving parts, unlike hard drives). An offsite copy protects against fire, theft of physical media (such as tapes or discs) and natural disasters like floods and earthquakes. Physically protected hard drives are an alternative to an offsite copy, but they have limitations like only being able to resist fire for a limited period of time, so an offsite copy still remains as the ideal choice.

So, our first copy will be on our secure device. It's the copy we access the most. The next copy could be an encrypted hard drive. The encryption passphrase could be stored in our safe. The last copy could be a cloud storage service. Easy, right? Well, more problems arise:
- Where do you store the credentials for the cloud storage service?
- Where do you store the LUKS backup file and password?

Storing the credentials for the cloud storage service isn't as simple as putting it in the safe. If we did that, then anyone with the safe could login to the cloud storage service and decrypt the password manager backup using the passphrase also stored in the safe. If we protected the cloud storage service with our security key, a copy of that is still in the safe. Maybe we protect it with a 2FA code, and instead of storing the 2FA codes in the password manager, we store it on another device. That solves the problem for now, but there are still problems, such as storing the credentials for that new device.

When using a security key to unlock a LUKS partition, you are given a backup file to store as a backup for emergencies. Plus, LUKS encrypted partitions still require you to setup a passphrase, so storing that still becomes an issue.

Conclusion


I'm going to stop here, because this post is getting long. I could keep going fixing problems and causing new ones, but the point is this: Security is a mess! I didn't even cover alternative ways to authenticate the password manager such as a key file, biometrics, etc. Trying to find "perfect" security is almost impossible, and that's why a threat model is important. If you set hard limits such as "No storing passwords digitally" or "No remembering any passwords" then you can build a security system that fits that threat model, but there's currently no security system that fits all threat model.

However, that doesn't let companies that just say "Store this in a secure place" off the hook either. It's a hand wavy response to security that just says "We don't know how to secure this part of our system, so it's your problem now". We need to have comprehensive security practices that aren't just "Use a password manager and 2FA", because that causes people to just store their master passphrase on a sticky note or a text file on the desktop.

The state of security is an absolute mess, and I'm sick of it. It seems that, right now, security, privacy, convenience, and safety (e.g. backups, other things that remove single points of failure) are all at odds with each other. This post mainly focused on how security, convenience, and safety are at odds, but I could write a whole post about how security and privacy are at odds.

Anyways, I've just outlined one possible security system you can have. If you have one that you think works well, I'd like to hear about it. I use a different security system than what I outline here, and I see problems with it.

Thanks for reading!

Using Mac Keyboard-layout on Linux?


Hey everyone,

as a longtime-Mac user who got used to the typical Mac-keyboard layout and using a Logitech MX Keys (Mac only) I was wondering if there is any chance of adopting the Mac-layout 1:1 on one of my favourite Linux-distros using KDE (desktop PC) without mapping each single key to match the Mac-key?

Is there any base tool I can use for this or any tool I can download to accomplish this?

Thanks in advance!

in reply to eldavi

Oh that's sad. Last version of MacOS I used was 11 or 12, and things like keyboard shortcuts and mouse behaviour stopped working randomly there too. Guess the detoriation of their GUI hasn't slowed down.

For what it's worth I used some drag and drop shelf tool, closed source, a mix of macboard and dropover, can't find it right now.

This entry was edited (1 month ago)

secureblue: Hardened Fedora Atomic and Fedora CoreOS images


Not many people have heard about secureblue, and I want to spread the word about it. secureblue provides hardened images for Fedora Atomic and CoreOS. It's an operating system "for those whose first priority is using linux, and second priority is security."

secureblue provides exploit mitigations and fixes for multiple security holes. This includes the addition of GrapheneOS's hardened_malloc, their own hardened Chromium-based browser called Trivalent, USBGuard to protect against USB peripheral attacks, and plenty more.

secureblue has definitely matured a lot since I first started using it. Since then, it has become something that could reasonably be used as a daily driver. secureblue recognizes the need for usability alongside security.

If you already have Fedora Atomic (e.g. Secureblue, Kinoite, Sericea, etc.) or CoreOS installed on your system, you can easily rebase to secureblue. The install instructions are really easy to follow, and I had no issues installing it on any of my devices.

I'd love more people to know about secureblue, because it is fantastic if you want a secure desktop OS!

(In honor of Holiday. You know who you are.)

This entry was edited (3 months ago)

secureblue: Hardened Fedora Atomic and Fedora CoreOS images


cross-posted from: lemmy.ml/post/26453685

Not many people have heard about secureblue, and I want to spread the word about it. secureblue provides hardened images for Fedora Atomic and CoreOS. It's an operating system "for those whose first priority is using linux, and second priority is security."

secureblue provides exploit mitigations and fixes for multiple security holes. This includes the addition of GrapheneOS's hardened_malloc, their own hardened Chromium-based browser called Trivalent, USBGuard to protect against USB peripheral attacks, and plenty more.

secureblue has definitely matured a lot since I first started using it. Since then, it has become something that could reasonably be used as a daily driver. secureblue recognizes the need for usability alongside security.

If you already have Fedora Atomic (e.g. Secureblue, Kinoite, Sericea, etc.) or CoreOS installed on your system, you can easily rebase to secureblue. The install instructions are really easy to follow, and I had no issues installing it on any of my devices.

I'd love more people to know about secureblue, because it is fantastic if you want a secure desktop OS!

Interesting thoughts about privacy, security, and all the things


I'm making this post to share some interesting less talked about things about privacy, security, and other related topics. This post has no direct goal, it's just an interesting thing to read. Anyways, here we go:

I made a post about secureblue, which is a Linux distro* (I'll talk about the technicality later) designed to be as secure as possible without compromising too much usability. I really like the developers, they're one of the nicest, most responsible developers I've seen. I make a lot of bug reports on a wide variety of projects, so they deserve the recognition.

Anyways, secureblue is a lesser known distro* with a growing community. It's a good contrast to the more well known alternative** Qubes OS, which is not very user friendly at all.

* Neither secureblue, nor Qubes OS are "distros" in the classical sense. secureblue modifies and hardens various Fedora Atomic images. Qubes OS is not a distro either, as they state themselves. It's based on the Xen Hypervisor, and virtualizes different Linux distros on their own.

** Qubes OS and secureblue aren't exactly comparable. They have different goals and deal with security in different ways, just as no threat model can be compared as "better" than any other one. This all is without mentioning secureblue can be run inside of Qubes OS, which is a whole other ballpark.

secureblue has the goal of being the most secure option "for those whose first priority is using Linux, and second priority is security." secureblue "does not claim to be the most secure option available on the desktop." (See here) Many people in my post were confused about that sentence and wondered what the most secure option for desktop is. Qubes OS is one option, however the secureblue team likely had a different option in mind when they wrote that sentence: Android.

secureblue quotes Madaiden's Insecurities on some places of their website. Madaiden's Insecurities holds the view that Linux is fundamentally insecure and praises Android as a much better option. It's a hard pill to swallow, but Madaiden's Insecurities does make valid criticisms about Linux.

However, Madaiden's Insecurities makes no mention of secureblue. Why is that? As it turns out, Madaiden's Insecurities has not been updated in over 3 years. It is still a credible source for some occasions, but some recommendations are outdated.

Many people are strictly anti-Google because of Google's extreme history of privacy violations, however those people end up harming a lot of places of security in the process. The reality is, while Google is terrible with privacy, Google is fantastic with security. As such, many projects such as GrapheneOS use Google-made devices for the operating system. GrapheneOS explains their choice, and makes an important note that it would be willing to support other devices as long as it met their security standards. Currently only Google Pixels do.

For those unfamiliar, GrapheneOS is an open source privacy and security focused custom Android distribution. The Android Open Source Project (AOSP) is an open source project developed by Google. Like the Linux kernel, it provides an open source base for Android, which allows developers to make their own custom distributions of it. GrapheneOS is one such distribution, which "DeGoogles" the device, removing the invasive Google elements of the operating system.

Some Google elements, such as Google Play Services can be optionally installed onto the device in a non-privileged way (see here and here). People may be concerned that Google Pixels can still spy on them at a hardware level even with GrapheneOS installed, but that isn't the case.

With that introduction of secure Android out of the way, let's talk about desktop Android. Android has had a hidden option for Desktop Mode for years now. It's gotten much better since it was first introduced, and with the recent release of Android 15 QPR2, Android has been given a native terminal application that virtualizes Linux distros on the device. GrapheneOS is making vast improvements to the terminal app, and there are many improvements to come.

GrapheneOS will also try to support an upcoming Pixel Laptop from Google, which will run full Android on the desktop. All of these combined means that Android is one of, if not the, most secure option for desktop. Although less usable than some more matured desktop operating systems, it is becoming more and more integrated.

By the way, if you didn't know, Android is based on Linux. It uses the Linux kernel as a base, and builds on top of it. Calling Qubes OS a distro would be like calling Android and Chrome OS distros as well. Just an interesting fact.

So, if Android (or more specifically GrapheneOS) is the most secure option for desktop, what does that mean in the future? If the terminal app is able to virtualize Linux distros, secureblue could be run inside of GrapheneOS. GrapheneOS may start to become a better version of Qubes OS, in some respects, especially with the upcoming App Communication Scopes feature, which further sandboxes apps.

However, there is one bump in the road, which is the potential for Google to be broken up. If that happens, it might put GrapheneOS and a lot of security into a weird place. There might be consequences such as Pixels not being as secure or not supporting alternative Android distributions. Android may suffer some slowdowns or halts in development, possibly putting more work on custom Android distribution maintainers. However, some good may come from it as well. Android may become more open source and less Google invasive. It's going to be interesting to see what happens.

Speaking of Google being broken up, what will happen to Chrome? I largely don't care about what happens to Chrome, but instead what happens to Chromium. Like AOSP, Chromium is an open source browser base developed by Google. Many browsers are based on Chromium, including Brave Browser and Vanadium.

Vanadium is a hardened version of Chromium developed by GrapheneOS. Like what GrapheneOS does to Android, Vanadium removes invasive Google elements from the browser and adds some privacy and security fixes. Many users who run browser fingerprinting tests on Vanadium report it having a nearly unique fingerprint. Vanadium does actually include fingerprint protections (see here and here), but not enough users use it for it to be as noticeable as the Tor Browser. "Vanadium will appear the same as any other Vanadium on the same device model, and we don't support a lot of device models." (see here)

There's currently a battle in the browser space between a few different groups, so mentioning any browser is sure to get you involved in a slap fight. The fights usually arise between these groups:

For that last one, I would like to mention that Firefox rewrote the terms after backlash, and users have the ability to disable bloatware in Brave. Since Brave is open source, it is entirely possible for someone to make a fork of it that removes unwanted elements by default, since Brave is another recommended browser by the GrapheneOS team for security reasons.

Another interesting Chromium-based browser to look at is secureblue's Trivalent, which was inspired by Vanadium. It's a good option for users that use Linux instead of Android as a desktop.

Also, about crypto, why is there a negativity around it? The reason is largely due to its use in crime, use in scams, and use in investing. However, not all cryptocurrencies are automatically bad. The original purpose behind cryptocurrency was to solve a very interesting problem.

There are some cryptocurrencies with legitimate uses, such as Monero, which is a cryptocurrency designed to be completely anonymous. Whether or not you invest in it is your own business, and unrelated to the topics of this post. Bitcoin themselves even admit that Bitcoin is not anonymous, so there is a need for Monero if you want fully decentralized, anonymous digital transactions.

On the topic of fully decentralized and anonymous things, what about secure messaging apps? Most people, even GrapheneOS and CISA, are quick to recommend Signal as the gold standard. However, another messenger comes up in discussion (and my personal favorite), which is SimpleX Chat.

SimpleX Chat is recommended by GrapheneOS occasionally, as well as other credible places. This spreadsheet is my all time favorite one comparing different messengers, and SimpleX Chat is the only one that gets full marks. Signal is a close second, but it isn't decentralized and it requires a phone number.

Anyways, if you do use Signal on Android, be sure to check out Molly, which is a client (fork) of Signal for Android with lots of hardening and improvements. It is also available to install from Accrescent.

Accrescent is an open source app store for Android focused on privacy and security. It is one of the default app stores available to install directly on GrapheneOS. It plans to be an alternative to the Google Play Store, which means it will support installing proprietary apps. Accrescent is currently in early stages of development, so there are only a handful of apps on there, but once a few issues are fixed you will find that a lot of familiar apps will support it quickly.

Many people have high hopes for Accrescent, and for good reason. Other app stores like F-Droid are insecure, which pose risks such as supply chain attacks. Accrescent is hoped to be (and currently is) one of the most secure app stores for Android.

The only other secure app store recommended by GrapheneOS is the Google Play Store. However, using it can harm user privacy, as it is a Google service like any other. You also need an account to use it.

Users of GrapheneOS recommend making an anonymous Google account by creating it using fake information from a non-suspicious (i.e. not a VPN or Tor) IP address such as a coffee shop, and always use a VPN afterwards. A lot of people aren't satisfied with that response, since the account is still a unique identifier for your device. This leads to another slap fight about Aurora Store, which allows you to (less securely) install Play Store apps using a randomly given Google account.

The difference between the Play Store approach and the Aurora Store approach is that Aurora Store's approach is k-anonymous, rather than... "normal" anonymity. The preference largely comes down to threat models, but if you value security then Aurora Store is not a good option.

Another criticism of the Play Store is that it is proprietary. The view of security between open source software and proprietary software has shifted significantly. It used to be that people viewed open source software as less secure because the source code is openly available. While technically it's easier to craft an attack for a known exploit if the source code is available, that doesn't make the software itself any less secure.

The view was then shifted to open source software being more secure, because anyone can audit the code and spot vulnerabilities. Sometimes this can help, and many vulnerabilities have been spotted and fixed faster due to the software being open source, but it isn't always the case. Rarely do you see general people looking over every line of code for vulnerabilities.

The reality is that, just because something is open source, doesn't mean it is automatically more or less secure than if it were proprietary. Being open source simply provides integrity in the project (since the developers make it as easy as possible to spot misconduct), and full accountability towards the developers when something goes wrong. Being open source is obviously better than being proprietary, that's why many projects choose to be open source, but it doesn't have to be that way for it to still be secure.

Plus, the workings of proprietary code can technically be viewed, since some code can be decompiled, reverse engineered, or simply read as assembly instructions, but all of those are difficult, time consuming, and might get you sued, so it's rare to see it happen.

I'm not advocating for the use of proprietary software, but I am advocating for less hate regarding proprietary software. Among other things, proprietary software has some security benefits in things like drivers, which is why projects like linux-libre and Libreboot are worse for security than their counterparts (see coreboot).

Those projects still have uses, especially if you value software freedom over security, but for security alone they aren't as recommended.

Disclaimer before this next section: I don't know the difference in terminology between "Atomic", "Immutable", and "Rolling Release", so forgive me for that.

Also, on the topic of software freedom, stop using Debian. Debian is outdated and insecure, and I would argue less stable too. Having used a distro with an Atomic release cycle, I have experienced far less issues than when I used Debian. Not to mention, if you mess anything up on an Atomic distro, you can just rollback to the previous boot like nothing happened, and still keep all your data. That saved me when I almost bricked my computer motifying /etc/fstab/ by hand.

Since fixes are pushed out every day, and all software is kept as up to date as possible, Atomic distros I argue give more stability than having an outdated "tried and tested" system. This is more an opinion rather than factually measured.

Once I realized the stable version of Debian uses Linux kernel 6.1, (which is 3 years old and has had actively exploited vulnerabilities), and the latest stable version of the kernel is 6.13, I switched pretty quick for that reason among others.

Now, many old kernel versions are still maintained, and the latest stable version of Android uses kernels 6.1 and 6.6 (which are still maintained), but it's still not great to use older kernel versions regardless. It isn't the only insecurity about Debian.

I really have nothing more to say. I know I touched on a lot of extremely controversial topics, but I'm sick of privacy being at odds with security, as well as other groups being at odds with each other. This post is sort of a collection of a lot of interesting privacy and security knowledge I've accrued throughout my life, and I wanted to share my perspective. I don't expect everybody to agree with me, but I'm sharing this in case it ever becomes useful to someone else.

Thanks for taking the time to read this whole thing, if you did. I spent hours writing it, so I'm sure it's gotten very long by now.

Happy Pi Day everyone!

Comprehensive guide to hardening RHEL clones?


Is there some sort of comprehensive guide on hardening RHEL clones like Alma and Rocky?

I have read Madaidan's blog, and I plan to go through CIS policies, Alma and Rocky documentation and other general stuff like KSPP, musl, LibreSSL, hardened_malloc etc.

But I feel like this is not enough and I will likely face problems that I cannot solve. Instead of trying to reinvent the wheel by myself, I thought I'd ask if anyone has done this before so I can use their guide as a baseline. Maybe there's a community guide on hardening either of these two? I'd contribute to its maintenance if there is one.

Thanks.

in reply to pastermil

You raise a valid point. In which case, I want to try and prevent malicious privilege escalation by a process on this system. I know that's a broad topic and depends on the application being run, but most of the tweaks I've listed work towards that to an extent.

To be precise, I'm asking how to harden the upcoming AlmaLinux based Dom0 by the XCP-NG project. I want my system to be difficult to work with even if someone breaks into it (unlikely because I trust Xen as a hypervisor platform but still).

I admit I was a bit surprised by the question since I've never consciously thought about a reason to harden my OS. I always just want to do it and wonder why OSes aren't hardened more by default.

in reply to marauding_gibberish142

Privilege escalations always have to be granted by an upper-privilege process to a lower-privilege process.

There is one general way this happens.

Ex: root opens up a line of communication between it and a user, the user sends input to root, root mishandles it, it causes undesired behavior within the root process and can lead to bad things happening.

All privilege escalation is two different privilege levels having some form of interaction. Crossing the security boundary. If you wish to limit this, you need to find the parts of the system that cross that boundary, like sudo[1], and remove those from your system.

[1]: sudo is an SUID binary. That means, when you run it, it runs as root. This is a problem, because you as a process have some influence on code that executes within the program (code running as root).

This entry was edited (1 month ago)

Is there still any hope for static binaries (games) that "just work" across distros?


Has anybody been able to build a statically linked binary that shows a Vulkan surface? I've put some context around this problem in the video. I understand that the vulkan driver has to be loaded dynamically - so it's more of a question whether a statically built app can reliably load and talk with it. I think it should be possible but haven't actually seen anyone make it work. I'm aware of "static-window9" by Andrew Kelley but sadly it doesn't work any more (at least on my Gentoo machine T_T).

(I'm also aware of AppImages but I don't think they're the "proper" solution to this problem - more like a temporary bandaid - better than Docker but still far from perfect)

Unknown parent

lemmy - Link to source

hilliard

edit and alas: I have seen the error of my ways, and as such, will, from this day forth, worship at the linux of mint
and ye though there are other worthy transitional distros, I shall not see them, for the votes have taught me so. and the people said mint
This entry was edited (1 month ago)

Help with sed commands


Hi all! I have always only used sed with s///, becouse I've never been able to figure out how to properly make use of its full capabilities. Right now, I'm trying to filter the output of df -h --output=avail,source to only get the available space from /dev/dm-2 (let's ignore that I just realized df accepts a device as parameter, which clearly solves my problem).

This is the command I'm using, which works:

df -h --output=avail,source \
    | grep /dev/dm-2 \
    | sed -E 's/^[[:blank:]]*([0-9]+(G|M|K)).*$/\1/

However, it makes use of grep, and I'd like to get rid of it. So I've tried with a combiantion of t, T, //d and some other stuff, but onestly the output I get makes no sense to me, and I can't figure out what I should do instead.

In short, my question is: given the following output

$ df -h --output=avail,source 
Avail Filesystem
  87G /dev/dm-2
 1.6G tmpfs
  61K efivarfs
  10M dev
...

How do I only get 87G using only sed as a filter?

EDIT:

Nevermind, I've figured it out...

$ df -h --output=avail,source \
    | sed -E 's/^[[:blank:]]*([0-9]+(G|M|K))[[:blank:]]+(\/dev\/dm-2).*$/\1/; t; /.*/d'
85G
This entry was edited (1 month ago)

Can this become the European Union's own Linux Distribution?


cross-posted from: lemmy.zip/post/36434157

cross-posted from: lemmy.zip/post/36434036
A new community-led initiative called “EU OS” to develop a Linux distribution initiative looks like a positive development. It is specifically created to address the unique requirements of the European Union's (EU) public sector organizations. For me, this initiative stands out for its commitment to the EU's digital sovereignty, reducing reliance on external vendors, and creating a secure, independent digital ecosystem.




Can this become the European Union's own Linux Distribution?


cross-posted from: lemmy.zip/post/36434036

A new community-led initiative called “EU OS” to develop a Linux distribution initiative looks like a positive development. It is specifically created to address the unique requirements of the European Union's (EU) public sector organizations. For me, this initiative stands out for its commitment to the EU's digital sovereignty, reducing reliance on external vendors, and creating a secure, independent digital ecosystem.



in reply to quack

As much as I like fedora, I'm on the suse side.

It should be based on suse because it is european. EU wants to push european it solutions. Fedora would be better than microsoft but it is both linux after all. Both can use kde and gnome. They are not so much different.

Moreover, BSI, Secunet and others already work with suse.

Edit: I should install opensuse myself to put my money where my mouth is. The difference between fedora and opensuse isn't too big for me anyway.

Are there suse based distros, like ublue? https:// osinside.github.io/kiwi/overview.html

This entry was edited (1 month ago)

Can this become the European Union's own Linux Distribution?


A new community-led initiative called “EU OS” to develop a Linux distribution initiative looks like a positive development. It is specifically created to address the unique requirements of the European Union's (EU) public sector organizations. For me, this initiative stands out for its commitment to the EU's digital sovereignty, reducing reliance on external vendors, and creating a secure, independent digital ecosystem.

Can this become the European Union's own Linux Distribution?


cross-posted from: lemmy.zip/post/36434036

A new community-led initiative called “EU OS” to develop a Linux distribution initiative looks like a positive development. It is specifically created to address the unique requirements of the European Union's (EU) public sector organizations. For me, this initiative stands out for its commitment to the EU's digital sovereignty, reducing reliance on external vendors, and creating a secure, independent digital ecosystem.
in reply to quack

Just in case nobody reads the article:

EU OS is not an entirely new operating system and uses a Linux foundation based on Fedora and KDE Plasma as the desktop environment.

The main advantage of EU OS lies in its focus on standardization rather than creating something entirely new. It offers a shared Linux foundation that can be fine-tuned with additional bits, regardless of whether it be for national, regional, sector-specific, or organizational use.

This entry was edited (1 month ago)

Episode 10 - Dansup - Pixelfed, Loops, Sup, etc - Livestream 2025-04-14


cross-posted from: lemmy.world/post/28252147

Fedicast / Podcast: audio.firesidefedi.live/@fires…

Need help for very different fonts rendering on the same setup (i3wm + i3status) on 2 different machines (Fedora and Arch) with FontAwesome 6


Hi all. I am facing problems with fonts rendering on my 2 different laptops. The only difference is in the OS: one runs Arch and the other runs Fedora. Both run latest i3wm and i3status and use the same config files.

On Fedora, the fonts are rendered beautifully with colors. On Arch, it is just black and white line. You can see them clearly here: imgur.com/a/QtJyRiJ. Top image is Arch and the bottom one is Fedora's.

How do I get Arch to render just like the polybar on Fedora? For the font, on Arch , I installed ttf-font-awesome.
In LX Appearance, I would then have: Font Awesome 6, Font Awesome 6 Brands and Font Awesome 4 Compatibility.

On Fedora, I installed a bunch of stuff like fontawesome-6-free-fonts, fontawesome-6-brand-fonts and fontawesome-fonts-all.
Here, LX Appearance shows Font Awesome 6 and Font Awesome 4

In i3 config, I just have:

font pango:Font Awesome 12

to set the fonts. But the results are so much difference as you can see from the link.

This entry was edited (1 month ago)

musk.sucks is up for auction


Domain is up for auction, would make a nice domain for a fedi instance

Fedora Linux 42 released


What’s new?

We’ve promoted our KDE Plasma Desktop offering to “Edition” status. The Fedora KDE team has been hard at work making sure bugs get fixed and everything is polished just so. We’re confident that this can stand along our other amazing flagship offerings.

I know the naming is a bit confusing, with GNOME-powered “Workstation” using a generic label while KDE Plasma Desktop has the tech right in the name. We’ll get that figured out eventually. If you don’t know where to start, don’t panic. Pick one and see how it goes. They’re both excellent desktop environments with great upstream communities, and the same Fedora system underneath it all.

We also have a new alternative desktop choice: COSMIC. This is a modern, written-all-in-Rust desktop environment from our friends over at System 76.

Perhaps most excitingly, we have a new installation interface! The previous UI was designed to manage a lot of before-you-even-start configuration choices. Over the past decade, though, we’ve gone to “get the full system installed with no fuss, then set up what you need from a complete environment”. That made the “hub and spoke” model more confusing than helpful. The new UI is streamlined and sleek, just like the Heart of Gold.

Of course, there are other big changes, as well as the usual updates to thousands of packages. See the Fedora Linux 42 Release Notes for all of the details, and don’t miss the “What’s New?” posts here on Fedora Magazine.

in reply to qaz

that would be awesome but i can't seem to get ram speed from /proc/meminfo or other files (i tried to look files in /sys and other directories for the ram speed) since they aren't there so i dont think i can really add that.. i tried to look online too but they seem to use lshw/dmidecode which i don't really wanna use
This entry was edited (1 month ago)

Why did they make window control buttons smaller in GNONE 48?


I'm genuinely curious. Other changes are just following modern (and stupid) trends so nothing weird with that. This one though just makes the maximize, minimize and close buttons look smaller than others (new tab in Console etc) which imo creates inconsistency. Also it may not apply to all display resolutions but it does on mine.
in reply to cmgvd3lw

All extensions are disabled. I use the adw-gtk3 theme for GTK3 apps but I'm not talking about those (though the latest version of the theme also has smaller buttons that means the GTK devs probably have indeed changed the size of the buttons).

On the screenshot there is a GTK4 app that hasn't been updated to the newest libadwaita version (Pipeline), and on the right there is a default GNOME app that has been updated (Console).

This entry was edited (1 month ago)
in reply to SplashJackson

Actually, . That means you can get a system with coreboot on relatively recent hardware (instead of a thinkpad from like 2012).
This entry was edited (1 month ago)
in reply to dirtycrow

I've revived a Dell Venue battery the laptop reported as dead. Connecting several alkaline batteries in series to provide a voltage slightly higher than the Dell battery's rated voltage and using them charge the Li-ion battery did the trick. After charging the Dell battery for about 10 minutes I reinstalled it, the laptop recognized it and it worked normally from that point on.
This entry was edited (1 month ago)

How to Migrate a Mastodon Account to GoToSocial


in reply to AbnormalHumanBeing

For those like myself who hadn't heard of GoToSocial and are curious what it is but don't want to watch a video, it is as you might guess an ActivityPub based microblogging platform. With a focus on smaller instances capable of running on low end hardware. According to their site, anyway. gotosocial.org/
This entry was edited (1 month ago)
in reply to marauding_gibberish142

Oh, sweet!

In that case, I highly recommend taking a look at some more real-world examples. That link is just something that makes self-hosting and small jobs more or less thoughtless for me.

Imagine all those config management tools built into your OS, and that's NixOS in a nutshell. There's obviously WAY more it can do if you look into creating your own derivations, or getting into the new-ish concept of Flakes.

Again, though, nixops is the thing that makes me continue to use it, besides just already knowing how to throw together a config in nix's syntax. The nixops tool basically allows you to federate all your systems, tag them, group them, and do anything under the sun with each machine (or several in batches). It's hard to get across in a simple text blurb.

In my case (SaaS), imagine having 10 devs that all want their own dev environment that mirrors production within our VPN, then you need a beta and production environment for each client that licenses the app. Each environment has a couple databases, a few different APIs, some background scraper-type applications, and front-ends for everything. Some of that stuff can live on one machine, some needs to be alone and redundant. You can see how very quickly there's a lot of machines to keep track of.

Now I need to update a couple config pieces to match a new feature in the app itself. Well, all I gotta do is sort out the config, then run a couple nixops command to push to all the dev environments. When ready, do the same for beta, then do it for prod when the fat lady sings.

Being all within one ecosystem, focused on security hardening, is what I really like about it. Hopefully that wasn't too stream-of-consciousness for ya, lmao.

ETA: links, also note that nixops is undergoing some serious changes in the past year. NixOS itself also undergoes changes fairly regularly in syntax as vulnerabilities are addressed and improvements made.

This entry was edited (1 month ago)
in reply to madame_gaymes

Thank you for the note. I'm been cursing myself for not being able to provide my devs with something similar (they don't complain but I know it will make their lives easier). I will start nix from scratch if I learn it but nixops definitely seems like it can help because terraform isn't that great at the example you provided. Thanks.

focused on security hardening


Could you elaborate?

This entry was edited (1 month ago)

Help me list custom keyboard shortcuts from terminal on Linux [RESOLVED]


Background:

I'm using Bazzite Linux, Gnome, Wayland. As the title states, I'm trying to list my existing custom keyboard shortcuts. I know I can go to Settings > Keyboard > Keyboard Shortcuts > View and Customize Shortcuts > Custom Shortcuts. I want to list my custom shortcuts in Terminal using gsettings.

I've gotten as far as listing the names of the custom shortcuts:

me@fedora:~$ gsettings get org.gnome.settings-daemon.plugins.media-keys custom-keybindings
['/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0/', '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1/', '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom2/', '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom3/', '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom4/']

How do I use this info to list the specific details (name, shortcut, command) of the first keyboard shortcut?

What I've tried so far:

I've tried following examples from the answers in this Ask Ubuntu post from March 2015, and I've tried turning to Duck.ai for help. I'm just not connecting the dots between the documentation I've read and what I'm trying to do.

me@fedora:~$ gsettings get org.gnome.settings-daemon.plugins.media-keys custom-keybindings/custom0
No such key “custom-keybindings/custom0”
me@fedora:~$ gsettings get org.gnome.settings-daemon.plugins.media-keys.custom-keybindings:/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0 name
No such schema “org.gnome.settings-daemon.plugins.media-keys.custom-keybindings”
me@fedora:~$ gsettings get org.gnome.settings-daemon.plugins.media-keys custom-keybinding:/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0/ name
Usage:
  gsettings [--schemadir SCHEMADIR] get SCHEMA[:PATH] KEY

Get the value of KEY

Arguments:
  SCHEMADIR A directory to search for additional schemas
  SCHEMA    The name of the schema
  PATH      The path, for relocatable schemas
  KEY       The key within the schema

What am I doing wrong?

EDIT: Thank you, @nmtake@lemm.ee, for your help!

This entry was edited (1 month ago)
in reply to Karna

I read the blog post and am still confused as to what this is. It's something I never used in X11 (if X11 supported it), therefore it's not possible for me to miss it.

Is this the "restart all applications you were running when you restart your computer" feature? Was it broken in Wayland? If so, why? I thought the desktop environment would take care of starting the processes, placing the windows, and so on.

Not entirely sure what the before and after of this are. The blog post and article are written as if people know what this feature is.

Anti Commercial-AI license

This entry was edited (1 month ago)
in reply to Heavybell

The last time I tried a linux system for a daily driver was over 10 years ago. At the time everything felt rough, unstable, unsupported, and gaming in particular was nonexistent.

Set up a CachyOS dual boot back in February, think I booted up Windows 3 times at most since then (and have since sorted out the issues that I had to do that for in the first place).

I still can't seriously recommend the switch to less tech savvy folks (try putting grandma on Mint and see what happens lmao), but we're definitely finally getting there after all these years.

Linux Gaming PC 2024 (with Coreboot-Support)?


Hi, I have never build a PC before, that is why I am asking you for your help and suggestions.
I have informed (or misinformed) myself about a few aspects of building a PC.
I will give my reasoning why I chose each part, and let you decide why I am wrong.

Usage:


The goal of this build is to create a Gaming PC which can play most games at least at lower resolutions and at sufficient frame rate.
I plan to build this PC with future software requirements in mind, to reduce e-waste and to leave room for possible upgrades.
This PC should support Coreboot to allow for firmware updates, even after the official firmware support has stopped.
This machine will run Linux as the main OS and probably Dasharo as the Coreboot-distribution.
The main use is playing games and emulation, but I also intend to use it for virtualisation.

Components:


  • Motherboard: ~~Pro Z790-P Wifi (DDR5 Variant)~~
  • CPU: ~~Intel Core i5-13600KF (Alder/Raptor_Lake-S)~~
  • CPU-Cooler: ~~Scythe Fuma 3 67.62 CFM CPU Cooler (4-30 dB)~~
  • GPU: XFX Speedster QICK 309 Radeon RX 7600 XT 16 GB Video Card
  • RAM: G.Skill Ripjaws S5 32 GB (2 x 16 GB) DDR5 5600 (CL 28)
  • Storage: Samsung 980 Pro 2 TB M.2-2280 PCIe 4.0 X4 NVME Solid State Drive
  • PSU: SeaSonic FOCUS Plus 650 Gold 650 W 80+ Gold Certified Fully Modular ATX Power Supply


Why did I choose those parts?

Motherboard:


  • The main two reasons why I choose the Z790-P are, that the motherboard needs to support Coreboot and that it is DDR5 compatible.
  • I could not care less if the motherboard supports Wifi or Bluetooth, since the PC is not going to leave my desk, but I will not complain for having it.


CPU:


  • ~~Since I already decided on a motherboard, the manufacturer decided the CPU-brand for me. In this case Intel.
    The CPU-socket only allows for microarchitectures Alder and Raptor Lake-S, so my choice is limited.~~
    Intels 13th and 14th generation CPUs have many reported issues. Intel reported that many of those issues are due to faulty voltage configuration in the motherboard bios, which cause the CPU to degrade at an accelerated pace. They are due to release a microcode patch mid-august, which reportedly fixes the issue without a significant performance loss. Obviously, this patch will not fix already damaged chips.
    Another problem is, that they had some issues while manufacturing these chips in 2023, which caused oxidation and therefore degradation.
  • Generally you want more from everything, cores, threads and core clock, except power usage.
  • You also have the choice between a CPU with integrated graphics or without.
    ~~To save the environment and my bank account I will choose one without it.
    For Intel that is every CPU with the "F" designation.~~
    As thingsiplay and felsiq have pointed out there can appear several issues, when building a system without a integrated GPU. One which is, that it becomes harder to debug issues, since you can not just unplug your GPU, to test if the GPU drivers are at fault.


CPU-Cooler:


  • Check if the TDP matches your CPU, e.g. >=125 W for 125 W.
  • Check if it matches your motherboard and case, i.e. everything fits.
  • Lastly, make sure it is not to loud.


GPU:


  • Main OS is Linux, so I will spare myself the pain and choose AMD over Nvidia.
  • More demanding games use more video memory. I have read that 8 GB often is not enough anymore.


RAM:


  • Virtualisation often needs a lot of resources i.e. RAM.
  • For optimal performance your RAM-speed should match your CPU.
    Any more and you waste money, any less and you create a bottleneck.
    Since the i5 only has 5600 MT/s, any more is wasted.


Storage:


  • Since most games today use around 60-150 GB, this PC will need a lot of storage.
    About thirteen 150 GB games can be stored on a 2 TB drive. I hope this will suffice.


Power supply unit:


  • Deciding factors are form factor and power.
    You can not use your PSU, if it either does not fit in your PC-case or does not have enough juice to power your other components.
  • Your PSU should have a few more 20-30 % clearance in case of a spike. I think a 650 W PSU should be enough for a workload of 490 W idle. Please, correct me, if I am wrong.
  • Some people recommend buying a PSU with more power than needed to allow for upgrades with higher power usage, but apparently the PSU will not run efficiently in this case.
    I have read that a PSU should be most efficient at idle hardware usage to maximize power savings.
    E.g. do not buy a 1000 W PSU, when you only use around 400 W at idle.
  • Also important are the +12V-rails. You should make sure the supply at least 24 A.
    Lastly you should check which power plugs the PSU will/can use.

Since I plan something special for the PC-case, it will not be part of this post.
I hope this post can be used by others in the future, as a reference for building a Linux PC.

PS: This is my first post on lemmy. I am sorry for any formatting errors. I hope the post is legible.

Edit:
- added links for explanation
- fixed some grammatical errors
- added suggestions from the comments

It is getting late here. I will look into a substitute for intel tomorrow (8 hours from the latest edit) and add this here.

This entry was edited (10 months ago)
in reply to B0g3nNutz3r

You can MANUALLY set the voltage on your motherboard lower, for me this is just part of installing a new system, I always use prime95 or mprime on Linux to fully load it and find the absolute minimal voltage the CPU is stable at. We did this with my sons i7-13900k and have never had an issue even though he beats the holy hell out of the machine with gaming and we got it early one right after the chips release. CPU's are a silicon lottery game and if you just let it set things you're going either give up efficiency or CPU life over what you get determining optimum settings manually. If you happen to get a chip near the center of the die it will run faster and at lower voltage than one near the outside, but since the manufacturer has to assume the worst, they will specify a voltage that is adequate to run the chip at the rated speed even if it is one of the poor quality chips from the outer edges of the die, the result is excessively cooking your CPU way more than you need to.

Linux PC build (2025)


Linux PC build (2025)


Hello,

it's me again.
Some of you might remember me from this post,
in which I was asking for feedback to build a Linux PC in 2025.

Stuff happened and I didn't went through with it.
So this still my first attempt at a build.
Well now I've got time and want to try it again.

As you may notice,
I've ditched the Z790-9 mother board in favor of a MSI PRO B650M-P.
My dream of building a coreboot-system is officially dead,
thus I decided to build an AMD-System.

Short Listing:


If you notice anything wrong
or have suggestions/improvements don't hesitate to point them out.

Thanks in advance!!!

Specifications:


This entry was edited (1 month ago)
in reply to 𝘋𝘪𝘳𝘬

Why do you consider AppImages as last resort?

I can understand that in a distro the main repo need to be prioritized to avoid bloat of repetitive dependencies that could happen with a lot of AppImages.

I can't understand why so many people are opposed to it as an supportive role from a practical and complementary perspective.

This entry was edited (1 month ago)

Determining the reason no one replied to your Lemmy post.


I was playing around with Lemmy statistics the other day, and I decided to take the number of comments per post. Essentially a measure of engagement – the higher the number the more engaging the post is. Or in other words how many people were pissed off enough to comment, or had something they felt like sharing. The average for every single Lemmy instance was 8.208262964 comments per post.

So I modeled that with a Poisson distribution, in stats terms X~Po(8.20826), then found the critical regions assuming that anything that had a less than 5% chance of happening, is important. In other words 5% is the significance level. The critical regions are the region either side of the distribution where the probability of ending up in those regions is less than 5%. These critical regions on the lower tail are, 4 comments and on the upper tail is 13 comments, what this means is that if you get less than 4 comments or more than 13 comments, that's a meaningful value. So I chose to interpret those results as meaning that if you get 5 or less comments than your post is "a bad post", or if you get 13 or more than your post is "a good post". A good post here is litterally just "got a lot of comments than expected of a typical post", vice versa for "a bad post".

You will notice that this is quite rudimentary, like what about when the Americans are asleep, most posts do worse then. That's not accounted for here, because it increases the complexity beyond what I can really handle in a post.

To give you an idea of a more sweeping internet trend, the adage 1% 9% 90%, where 1% do the posting, 9% do the commenting, and 90% are lurkers – assuming each person does an average of 1 thing a day, suggests that c/p should be about 9 for all sites regardless of size.

Now what is more interesting is that comments per post varies by instance, lemmy.world for example has an engagement of 9.5 c/p and lemmy.ml has 4.8 c/p, this means that a “good post” on .ml is a post that gets 9 comments, whilst a “good post” on .world has to get 15 comments. On hexbear.net, you need 20 comments, to be a “good post”. I got the numbers for instance level comments and posts from here

This is a little bit silly, since a “good post”, by this metric, is really just a post that baits lots and lots of engagement, specifically in the form of comments – so if you are reading this you should comment, otherwise you are an awful person. No matter how meaningless the comment.

Anyway I thought that was cool.

This entry was edited (1 month ago)
in reply to Minnels

I comment a shit ton and often with absolute banalities. Especially on posts with 0 comments.

My reasoning is twofold: first of all I want to encourage posters by engaging with their content so they don't stop posting. Second I want to invite others to comment and it's much more inviting to do so if a post has at least one comment. People tend to think it's dead otherwise and not bother.

I think at the current level of MAUs there is no comment too small, and every little bit helps just by virtue of breaking the silence.

This entry was edited (1 month ago)

Why don't we build a kernel with "app" permissions?


I've been thinking. Android implements app permissions on top of Linux, Flatpak does it too. But why is it it's not part of the kernel?

Like all executable files would be sandboxed and would only be able to access syscalls and parts of the file system if they were allowed to. Making sandboxing the default instead of having to restrict programs.

I'm not a kernel developper so this question may be naive, but it bothers my mind. I guess part of it is because of historical reasons but are there any practical ones that make it not feasable?

EDIT : Thank you all for your answers, almost all of you were very nice and explained things clearly

This entry was edited (1 month ago)
in reply to nasteva

The Linux kernel already has the infrastructure required for that. Heck, Android itself, including its permission system, is built atop the Linux kernel.

Making sandboxing the default instead of having to restrict programs.


What's missing for that is work on userspace software and app packaging. The kernel can't automatically know what a program should and shouldn't be allowed to do.

Some of that work has happened, like moving from X11, which really wasn't designed around sandboxing, to Wayland.

But a lot of it requires making a permission system the norm and creating a system such that software is normally distributed with restricted permissions and developers develop around that. Like, I can use firejail and disallow write access to parts of the filesystem or network access to a program, but there isn't a broad system of appropriate pre-created profiles that applications are distributed with and way to view this. We don't have a convention for an application-private space on disk and lack of access to most of the filesystem, which Android does and apps need to be written around.

IMHO, one of the largest jumps would be Valve doing this for Steam games --- a lot of games are going to be amenable to being sandboxed, don't need broad access to the system, and are closed source. There are some issues there; for Windows binaries run under Proton, WINE wasn't originally written around being isolated, and the game developers writing the software are writing to a Windows API that aren't under the control of people on the Linux side of things.

I haven't poked at snaps much or their technical underpinnings, but my understanding is that they distribute apps in a sandboxed form, so that might be the closest Linux-native approach.

This entry was edited (1 month ago)
in reply to AstroLightz

Not surprised, it was a bit of a niche project that was quite hard to get into (the options took a bit of reading around to understand what they were on about). It is easy enough to find the flavour of UI you want and more from the arch distros out there (I just found I actually do need cups on my EndeavourOS gnome distro and that's something I didn't toggle (printing). Time to throw in some cups and foomatic packages in there). So again, it's about purpose and as much as I would have liked to have gotten into something about customisation, I've kind of already got a minimal-ish distro to work on.
This entry was edited (1 month ago)

Follow libreddit with lemmy client


Is it possible to follow communities in an instance like libreddit.kavin.rocks/r/Profes… with a lemmy client?
in reply to LemUrun

It's not a reddit or lemmy thing, generally backslash is used as an escape character in a lot of programming languages. Here and in reddit comments accept markdown and markdown uses backslash as escape character.
This entry was edited (1 month ago)

how to investigate unexpected power management behavior


I have a lowend netbook with debian-type linux only (no dualboot). Power management should be via XFCE4's xfce4-power-manager-settings.

I'm having weird behavior with suspend and trying to identify/troubleshoot it. It seems to be usually draining power and never charging when the lid is closed for many hours.

I tried explicitly entering power off, hibernate and suspend followed by unplugging then leaving it a few hours but couldn't replicate. It seems to be doing something on its own after being unplugged a long time.

What logs can I look at to see when my device changes its power modes, what were the triggers, what settings are governing it etc?

I can't tell if it's a software issue or there is some sort of power saving thing going on in the hardware or what.

Just hoping for some investigation tips here, I know its not enough info to solve.

Edit to clarify no dual boot.

This entry was edited (1 month ago)

What the actual f is wrong with Linux?


I'm not a master pro Linux user. I've dabbled over the years several times. It's been about 6-8 years since I've last used it. I am having the absolute worst experience I have ever had with any OS so far, I have to be doing something wrong.

First. R7 5800x3d. 32gb ram. Rtx 3060. Nvme dual boot.

Problems so far, this is my first day. One, changing my monitors orientation and position cause my mouse to be on one screen and actively click on a different screen.

Whenever I open settings to change date and time the program crashes.

My mouse movement is that of a spastic child and is not smooth and I can't install ghub on Linux, so I'm forced to use the OS adjustments, which in turn crash the settings application.

The OS is SLOW! like insanely slow. I open discord and literally 3-4 minutes goes by before the loading pop up appears.

If I click in an icon, there is no indication that I clicked it until 1-2 minutes later, this even happens with like Firefox or chrome, file browser. Any app.

I have to have a password to do anything. Why? No one is going to steal my PC, boot it up and smash f11 to get into my Linux box where I'm just messing around.

I don't understand.. I have used Ubuntu before, fedora, mint and a few others. But it just seems like it's absolutely garbage right now.

Do I have to install certain things? Do I have to install Nvidia drivers? Doni have to install chipset drivers?

And honestly question, why do simple takes require you to "run a script"? Like why?

[Solved] What just happened to 4 million posts?


Stats from here: lemmy.fediverse.observer/daily…

Like, has an instance gone down and if so, why hasn't there been a comparable drop in users and comments?

Edit: Thanks to @example@reddthat.com here for pointing to zerobytes.monster becoming more aggressive against bots as the likely culprit.

This entry was edited (1 month ago)
in reply to flamingos-cant

in reply to flamingos-cant

¯_(😀_/¯


I don't know exactly how that post counter ... actually, technically counts posts, but:

1:

Zip going down could have uncounted all posts anywhere made by zip accounts.

2:

There could have been some kind of... propogating post count negation effect, as various other instances reacted differently to zip users posts on their instances could not pull them anymore, on different time scales.

3: If a zip user had a ... top level comment, on another instance, its possible all lower level comments responding to that comment may also have poofed out of existence, in some respect.

I may be using some terminology here, and this is just spitballing, but yeah.

Almost all of my .zip account's posts... are not on zip itself, and its possible that that is fairly common amongst .zip users.

This entry was edited (1 month ago)
in reply to flamingos-cant

I think this is zerobytes.monster, one of the reddit mirror instances.

the post count fits and it also matches with the user count not significantly dropping.

that instance has been using rather strict waf blocking rules from time to time that likely also affect the crawler for fediverse.observer.

This Week in Plasma: The beginnings of Wayland session restore


in reply to MazonnaCara89

KWin has gained support for the initial version of the Wayland session restore protocol


I found it interesting that they were merging support for a not-yet-merged protocol so I looked it up.

It seems the plan is to use the new experimental protocol thing that was introduced a while back:

gitlab.freedesktop.org/wayland…

in reply to notanapple

Oh yeah. Can't wait for this. bad session management/restore is basically the only thing I still mis on Wayland. Hopefully Firefox and other apps will gain support for this soon (I guess all Qt/KDE apps will get support at once when they also add support to Qt and KDE Frameworks). Anyways I just opened the enhancement request for Firefox for this just hoping they will add support soon.

NMVE offline after suspend


So...I just purchased a brand new WD black SN850X 2TB to store a bunch of games. I installed it on my last NVME slot available no my motherboard, M2C_SB, which I understand doesn't directly plug into the CPU but onto the motherboard's southbridge. Not sure if this has any reason for the issue. So, the problem is...whenever the PC suspends (which, by the way, it can go suspended even in the middle of a file transfer...not sure why KDE won't block that)...anyway, after a suspension, that drive is missing. Checking any partition manager, it shows the NVME drive is still somewhat there, but with no partitions listed. There's an error 'partition xxxx is not properly aligned". It seems my only option is a reboot. After the reboot, the drive is fine, it's properly mounted, shows correctly the partition in the disk manager, and runing a check finds no errors. Mind you, there's 3 NVME drives plugged, only this last one is giving me headaches after suspension.

...what's causing this? And how can I avoid it?

This entry was edited (1 month ago)
in reply to iturnedintoanewt

I've been having the same problem, and it's not Linux specific; this happens on both my Linux and Windows partitions. I've yet to find a clear cause and no amount of changes to power consumption or boot parameters seems to fix it. In my case, the unit is also the boot/OS drive for both.

I suspect it's something related to the NVME, since I did not have the problem with my 1TB unit, it only started after replacing it with a 4TB one. Both are WD, though I don't have the exact model on hand.

I'd love to hear back if you find a fix, because it's got me stumped.

in reply to Oth

Just revisiting this, as I didn't have time to try reopening the case until today - busy week! I swapped The NVMEs between M2B_CPU and M2C_SB. I did nothing else here. But after a couple of suspends (a quick one, and then the automatic one when I leave the PC overnight), neither of the drives has gone offline. At least...for now.
(just make sure they're mounted by their UUID in fstab, not their /dev assignation, to avoid trouble when doing the swap).
This entry was edited (1 month ago)

AceCoding.social - Vibe coding on the social web based on the semi-formalic language ACE (Demo)


Combining vibe coding, attempto controlled english (ace) and the social web - form space on the social web through words, secured by attempto controlled english.

You are only able to run code based on attempto controlled english (ace), which is a formally defined subset of the english language.
In the future, admins could through this restrict certain kinds of code from executing for security purposes.
Additionally, it lessens the ambiguity of natural language and you can be sure that the resulting code will do what it should.

Here are a few example commands in ACE that could be run on AceCoding.social in the future:

  • Moderation: If a user posts more than 20 times in 1 hour then the system temporarily restricts the user's posting ability.
  • Look and feel: If a post contains an image then the system displays the image with rounded corners.
  • For content curation: Every post that has more than 50 likes is added to the "Popular Today" collection.
  • For notifications: If a user has not logged in for 7 days then the system sends a digest of missed interactions.
  • For accessibility: Every image in a post has an alt-text that is either provided by the user or generated by the system.

Repo: github.com/bluebbberry/AceCodi…

(Image from Veronica Casson, freethink.com/wp-content/uploa…)

in reply to jagged_circle

Since you seem to understand it then:

How do two clients communicsting over a proprietary network negotiate an end to end encrypted chat channel without sharing keys in an easily decrypted manner?

It seems to me that some kind of handshake needs to occur where the clients need to agree on a cypher, so how does this happen securely?

I'm not worried about encryption being broken, it just seems like if you're handing the keys over the mail, it's pretty easy to xray the package and copy the key, is the same not true over digital communication?

AceCoding.social - Vibe coding on the social web based on the semi-formalic language ACE (Demo)


Combining vibe coding, attempto controlled english (ace) and the social web - form space on the social web through words, secured by attempto controlled english.

You are only able to run code based on attempto controlled english (ace), which is a formally defined subset of the english language.
In the future, admins could through this restrict certain kinds of code from executing for security purposes.
Additionally, it lessens the ambiguity of natural language and you can be sure that the resulting code will do what it should.

Here are a few example commands in ACE that could be run on AceCoding.social in the future:

  • Moderation: If a user posts more than 20 times in 1 hour then the system temporarily restricts the user's posting ability.
  • Look and feel: If a post contains an image then the system displays the image with rounded corners.
  • For content curation: Every post that has more than 50 likes is added to the "Popular Today" collection.
  • For notifications: If a user has not logged in for 7 days then the system sends a digest of missed interactions.
  • For accessibility: Every image in a post has an alt-text that is either provided by the user or generated by the system.

Repo: github.com/bluebbberry/AceCodi…

(Image from Veronica Casson, freethink.com/wp-content/uploa…)

in reply to blue_berry

The amount of domain knowledge to even begin to parse what the fuck you're talking about is absurd.

Secondly, why would anyone want this?

I'm glad you've found yet another project to look nice for your github portfolio, but maybe be up front about that instead of drowning everyone in near gibberish and what seems like poorly written advertisement.

"Hey, I've made another quasi-social media network leveraging the fediverse, AI, and a programming language made to resemble normal english. Check it out!"

Otherwise this is just blatant buzzword salad. I'm going to guess you're also using AI to get project idea involving the latest buzzwords? Maybe even using AI to write this psuedo ad-copy?

Again, more power to you if you're trying to build a portfolio/github/resume where you can say that you've "created numerous projects leveraging federated social media and AI", but just be up front about what you're doing when you post about it here please.

No one needs more shit pretending to be something it isn't. It's okay for your little portfolio project to be just that.

This entry was edited (1 month ago)

Very cheap VPS for hosting proxies


What are the very VPS cheap options for like <10$/year or maybe even less?

I want to host a large number of censorship-resistant proxy servers (XTLS) around the world.

The location does not matter (except it must not be in some shithole like China or Russia). Perfomance and reliability are not a priority either.

Being able to pay with crypto would be great.

(Not sure if a post about commercial services like this is allowed, if not, I will delete it)

This entry was edited (1 month ago)
in reply to Leaflet

Dilemma: Fedora has introduced and worked on a lot of things that make "Year of Linux on the Desktop" more likely. Even if UNIX purists disagree with the direction, Fedora is what Ubuntu used to be back in the day. Linux for humans.

At the same time, it's possible due to corporate backing. American corporate backing even. A part of me thinks that if we can't get there as a community without corporate influence, then it's all for nothing. I want the community model to not just be an ethical alternative, but that this model of cooperation also produces the best results.

(PS. I'm open for having my view changed, maybe I'm thinking about this the wrong way.)

This entry was edited (1 month ago)
in reply to pmk

Currently most cooperate linux companies are not in the business of selling linux desktop itself. Rather its linux for servers, administration, embedded things (like cars), and other enterprisey stuff. So at least at the moment they are not looking to profit of linux desktop users directly which has saved us from enshittiffication attempts.

But even if they in the future attempt to do something fishy, that most users dont agree with, I think by the virtue of how stuff works on linux it will be very easy for people to move to something else or a fork, and still get 95-99% of the same experience. This in turn will force companies to think twice before doing something like this.

A good example here is canonical/Ubuntu who has made questionable decisions in the past and each time they had to take it back. Even now, Snap due to its use of a centralized store is almost universally shunned by the linux community and is only supported maintained by canonical. While Flatpak is supported by the wider linux community with people from different projects contributing to it (though I sometimes worry about everyone centralizing on Flathub to the point where they are actively discourage other projects from launching/maintaining their own stores/repos).

This is why we need to build and champion tech that is resistant to control and enshittiffication. Then we dont have to worry too much about who is developing it.

This entry was edited (1 month ago)

BlogOnLemmy - I made my Blog using Lemmy's API


Lemmydocs 7:4 – Thou shall create a blog

Features


  • Linked to a user using Lemmy’s API, no authentication
  • Host content on any instance
  • Category filters: Set one or more community as the categories
  • Easy to adapt to your profile
  • One page constraint
  • Anchor navigation and permalinks
  • Responsive
  • Dark / Light mode
  • No cookies or tracking
  • Interactive “about me”
  • No backend: serving a single lightweight page that can be hosted anywhere, including GitHub
  • HTML, CSS and ES6 JavaScript. That's it.


TODO


  • Possible compatibility issues with older iOS devices. Let me know if you encounter an issue! I'll be cleaning up the code in the meantime.
  • The only class not written by me is the markdown-html translation layer for which I'm using snarkdown. It does so using regex queries. As to not completely re-invent the wheel I've forked it for this purpose, but I'd like to write one myself.

GitHub | ./Martijn.sh > Blog

in reply to will_a113

A lot of static site blog generators use markdown to create posts. Lemmy also uses markdown for its’ post formatting. From my understanding what OP has done is that he made this post on Lenmy and has created a front end that basically retrieves the given post from Lemmy and displays it with a more traditional blog style CSS as well as a few other pages that aren’t hosted on Lemmy.
in reply to kernelle

A blog entry on how it works and what it does at a high level could be nice. I'm not sure what I'm looking at, but there must be some API call to Lemmy and it's probably happening on the server due to CORS; not sure how this would work just in the browser if the Lemmy instance has CORS setup...

Edit: OK the instance 0d.gs does in fact not have CORS 😮 That's a little concerning...

Hold up, neither does programming.dev? Uh... @recursive_recursion@programming.dev and @Ategon@programming.dev is that safe? I'm not a security expert but doesn't this allow for cross site attacks?

Anti Commercial-AI license

This entry was edited (1 month ago)

How to find a post labeled "lemmy.world" that was on another instance?


No idea how I got there but somehow I saw this post somehow on sh.itjust.works, about a prefab house that was found floating in the Pacific. I wanted to comment but the only login I have is on lemmy.world. Notice the post is from The Picard Maneuver, whose posts I've seen many times, and it says lemmy.world above their name.

Lemmy.world has a whitepeopletwitter community but the newest post is 2 months old. This one is from 10 hours ago. Search on the lemmy.world main page for "Minding" turns up a bunch of posts going back months, but this one isn't there.

I thought I understood how federation works but I'm stumped. Is this really a lemmy.world post? If not, what does the presence of "lemmy.world" on it indicate?

This entry was edited (1 month ago)
in reply to Lovable Sidekick

moist.catsweat.com/m/whitepeop…

you would go to an instance, search for that sub/group (whitepeopletwitter@sh.itjust.works)

im not on lemmy, but i think the significance of the 'lemmy.world' is the origin of the post... in this case the_picard_maneuver@lemmy.world posted it to sh.itjust.works

in reply to originalucifer

i think the significance of the ‘lemmy.world’ is the origin of the post… in this case the_picard_maneuver@lemmy.world posted it to sh.itjust.works


Close, it's where the image is hosted. The lemmy.world bit is a link to the image. Just like how any website link will say the domain of the destination.

I mean it probably is where a user is posting from, but sometimes it is not (not sure why but sometimes non-ml users will post images from ml)

This entry was edited (1 month ago)
in reply to originalucifer

How could the_picard_maneuver@lemmy.world post to sh.itjust.works? They would have to login to sh.itjust.works. I'm not able to login there as lovablesidekick or lovablesidekick@lemmy.world.

Likewise, if you're originalucifer@moist.catsweat.com how are you replying to my comment on lemmy.world without logging into lemmy.world?

This entry was edited (1 month ago)

geekwithsoul doesn't like this.

in reply to Lovable Sidekick

They would have to login to sh.itjust.works.


nope. every instance can post to any other instances groups. my 'home base' instance (moist) has almost no local communities, but the users can interact with all of the lemmyverse

if you look at the group list you'll see they are all remote groups that local users can subscribe and interact with locally

my instance has a 'copy' of the remote content. when a local user interacts with that content, it is sent to the other instance.

its what the 'federation' in the fediverse means. all users can subscribe/upvote/interact with 'remote' instances. the actions of the users are federated between instances.

in reply to originalucifer

Makes sense and I appreciate the help. But when I go to the post link on sh.itjust.works it says:

I'm currently logged in to lemmy.world, but apparently I do need to login sh.itjust.works. This is how I thought lemmy worked, but I also thought the content from sh.itjust.works would be repeated on lemmy.world as you described, and I would be able to find it here and comment. But the whitepeopletwitter community on lemmy.world is pretty empty and that post isn't there. Does this mean something's wrong, or maybe lemmy.world has muted that community, or some other explanation? Just trying to figure all this out.

Edit: I rethought what you said and found where I can remote-subscribe to the sh.itjust.works community. It says subscription pending. I will give it a while and see if this solves the problem. Again, I appreciate your help.

This entry was edited (1 month ago)
in reply to Lovable Sidekick

I wonder if you're running into the same thing that I've had quite a bit of issue with in the last few weeks on lemmy.world.

When I go to the 'copy' of a post on lemmy.world from another instance, I will get the same message of "You must log in or register to comment."
Only by searching for the post on lemmy.world, clicking through to it, and then also refreshing, does lemmy seem to acknowledge that I am in fact logged in! But only if I do those steps in that order.

EDIT: I've made it a bit easier for myself by setting up the search engine in my browser: https://lemmy.world/search?q=%25s
So that I can just copy any other instance link, go to the address bar and type ls (the keyword I chose for the search engine), paste in the link and then go to the lemmy.world version from there, and refresh the page.

I used to be able to just use the Instance Assistant for Lemmy & Kbin extension by cynber, but for the last few weeks I have to do the whole search and refresh dance instead.

This entry was edited (1 month ago)

How do you guys manage your iOS device(s)?


Switched to Linux a little over a year ago and it's been great, but one thing eludes me. What's the best way to do the following when you don't use Windows or MacOS?

  1. Manage music collection - on Windows I used iTunes to sync my mp3's to the phone. Is there a linux solution?
  2. Manage SMS from desktop - I'd like to be able to read and reply to SMS messages on my iPhone from the linux PC right in front of me instead of this rinky dink iPhone soft keyboard. Is this possible?

And how the hell does anyone but a child type on an iPhone anyway, while we're at it? (rhetorical) Grrrr.

Thanks!

in reply to CarbonatedPastaSauce

I don't have an iPhone but my daughter does.

For music I don't sync anything to her phone. I run a navidrome server and set up an account so she can stream whatever she wants whenever. I think she uses isub as her streaming app. It does allow you to download and cache files from the server to play if you are offline

As for sms, I don't know of any way to sync in Linux, but if you use Windows, the phone link app works, as several of my coworkers have set it up. I know it installs some piece of software on the iPhone you want to sync to, maybe you could do that and try running the phone link program with wine?

I also know kde connect has a link for iOS. It's not perfect but it will do the sms linking thing.

This entry was edited (1 month ago)

I'm committing to Linux, but it's so unstable. Any suggestions?


Hey folks. I've had an on-again, off-again relationship with Linux for over 20 years. Usually, my attempts to use it are either thwarted by issues installing, issues booting, or general problems while using it... leading to “catastrophic failure” that I can't fix without digging into hours of research and terminal commands.

Windows 11 (even 10) are rock solid for me, even as a very heavy multitasker. No crashes. No needing to reboot, unless I'm forced to with an update, and really no issues with any hardware or software I was running.

But with Linux, I just can't believe how unstable it is, even when I do the absolute basic things.

I'm trying to learn why this is, and how I can prevent these issues from coming up. As I said, I'm committed to using Linux now (I'm done with American software), so I'm open to suggestions.

For context, I'm using a Framework laptop, which is fully (and officially) supports Fedora and Ubuntu. Since Fedora has American ties, I've settled with Ubuntu.

All things work as they should: fingerprint scanner, wifi, bluetooth, screen dimming, wake up from suspend, external drives, NAS shared folders, etc. I've even got VirtualBox running Windows 11 for the few paid software that I need to load up from time to time.

But I'm noticing issues that seemingly pop out of nowhere on the software/os end of things.

For example, after having no issues updating software, I get this an error: "something went wrong, but we're not sure what it is."

Then sometimes I'll be using Firefox, I'll open a new tab to type in a search term or URL, and the typing will "lag", then the address bar will flicker like it's reloading, and it doesn't respond well to my mouse clicks. I have to close it out, then start over for it to resolve.

Then I'll open a different app, sometimes it might open, sometimes it won't.

Or an app will freeze for no obvious reason, and I'll get a popup asking to wait or quit.

Another time I left my computer while I went out for a walk, came back, and it was like I just rebooted... all my work was gone, and it was starting fresh from the login screen.

I'm trying not to overload things, and I'm doing maybe 1/5th of what I'd normally be doing when running windows. But I don't understand why it's so unstable.

Any suggestions would be greatly appreciated.

FWIW, I'm not keen to switch away from Ubuntu, because I do still want official support if there's ever a problem with getting hardware to work.

UPDATE: Wow, I did not expect to get so many responses! Amazing!

Per suggestions, I ran a memtest86 for over 3 hours and it was clean.

I installed Fedora 41 and am now setting it up. Seems good so far, and elevated permissions can be authorized with biometrics! This was not something I had to. Ubuntu, so awesome there!

Any specific tips for Fedora that I should know? Obviously, no more Snap packages now! 😂

UPDATE 2: Ok, Fedora seems waaaay more stable than Ubuntu (and Mint). No strangeness like before... but not everything works as easily. For example, getting a bridged network adapter to work in virtualbox was one-click easy on Ubuntu... not so much on Fedora (still trying to get it working). And Virtualbox didn't even run my VM without more terminal hackery.

But the OS seems usable, and I'm still setting things up.

One thing I have noticed, however. When I search for how to fix or do something, nearly all websites and forums reference Debian/Ubuntu commands, so the fragmentation there is a little annoying

This entry was edited (1 month ago)
in reply to The Bard in Green

I honestly think mint is an outdated suggestion for beginners, I think immutability is extremely important for someone who is just starting out, as well as starting on KDE since it’s by far the most developed DE that isn’t gnome and their… design decisions are unfortunate for people coming from windows.

I don’t think we should be recommending mint to beginners anymore, if mint makes an immutable, up to date KDE distro, that’ll change, but until then, I think bazzite is objectively a better starting place for beginners.

The mere fact that it generates a new system for you on update and lets you switch between and rollback automatically is enough for me to say it’s better, but it also has more up to date software, and tons of guides (fedora is one of the most popular distros, and bazzite is essentially identical except with some QoL upgrades).

How common is the story of “I was new to linux and completely broke it”? that’s not a good user experience for someone who’s just starting, it’s intimidating, scary, and I just don’t think it’s the best in the modern era. There’s something to be said about learning from these mistakes, but bazzite essentially makes these mistakes impossible.

Furthermore because of the way bazzite works, package management is completely graphical and requires essentially no intervention on the users part, flathub and immutability pair excellently for this reason.

Cinnamon (the default mint environment) doesn’t and won’t support HDR, the security/performance improvements from wayland, mixed refresh rate displays, mixed DPI displays, fractional scaling, and many other things for a very very long time if at all. I don’t understand the usecase for cinnamon tbh, xfce is great if you need performance but don’t want to make major sacrifices, lxqt is great if you need A LOT of performance, cinnamon isn’t particularly performant and just a strictly worse version of kde in my eyes from the perspective of a beginner, anyway.

I have 15 years of linux experience and am willing to infinitely troubleshoot if you add me on matrix.

This entry was edited (1 month ago)

Recommendations for a good photo printing application?


Hello linux@lemmy.world!

I've completely switched from dual boot to full Linux last year and I've been struggling to find the one tool that could replace the printer software that came with my Canon printer.

My printer came with an application that allows me to print border-less photos and apply fixes such as colour correction, remove red eyes, etc. So far I haven't found any application that allows me to print photos properly.

I'm using Kubuntu 24.04 and I tried using Gwenview to print my photos. While the dialog allows me to configure my printer to print on 4x6 border-less photo paper, it still prints with ~4mm borders.

I'm also asking myself, is this more of a KDE Plasma printing issue or an application printing issue?

Any help would be appreciated.

EDIT: I'm even considering using paid software at this point. Any solution is welcome.

This entry was edited (1 month ago)

Great take on "Why don't more people use Linux?"


Stumbled across this quick post recently and thought it was a really good tale and worth sharing.


A couple of weeks ago, I saw a tweet asking: "If Linux is so good, why aren't more people using it?" And it's a fair question! It intuitively rings true until you give it a moment's consideration. Linux is even free, so what's stopping mass adoption, if it's actually better? My response:

  • If exercising is so healthy, why don't more people do it?
  • If reading is so educational, why don't more people do it?
    • If junk food is so bad for you, why do so many people eat it?


The world is full of free invitations to self-improvement that are ignored by most people most of the time. Putting it crudely, it's easier to be fat and ignorant in a world of cheap, empty calories than it is to be fit and informed. It's hard to resist the temptation of minimal effort.

And Linux isn't minimal effort. It's an operating system that demands more of you than does the commercial offerings from Microsoft and Apple. Thus, it serves as a dojo for understanding computers better. With a sensei who keeps demanding you figure problems out on your own in order to learn and level up.

Now I totally understand why most computer users aren't interested in an intellectual workout when all they want to do is browse the web or use an app. They're not looking to become a black belt in computing fundamentals.

But programmers are different. Or ought to be different. They're like firefighters. Fitness isn't the purpose of firefighting, but a prerequisite. You're a better firefighter when you have the stamina and strength to carry people out of a burning building on your shoulders than if you do not. So most firefighters work to be fit in order to serve that mission.

That's why I'd love to see more developers take another look at Linux. Such that they may develop better proficiency in the basic katas of the internet. Such that they aren't scared to connect a computer to the internet without the cover of a cloud.

Besides, if you're able to figure out how to setup a modern build pipeline for JavaScript or even correctly configure IAM for AWS, you already have all the stamina you need for the Linux journey. Think about giving it another try. Not because it is easy, but because it is worth it.

in reply to Sips'

What issues are you all talking about? I m a Linux user for eleven years now, the only issues you may have with them are only in the beginning when everything is not installed or sometimes not everything is perfectly installed and set up, once you finish with that you may get bored by how extremely stable they are, you just do your work and that's it, and they stay like that forever, the only reason people are using windows is because they are pre installed, that's the only truth.

Are fake-bans on Lemmy a thing? My friend was supposedly instance banned from Lemmy.world, lemmy.blahaj.zone, dbzer0, sh.itjust.works and lemmy.ml but she can still post in some communities


It says she’s banned here lemmy.world/u/shinigamiookamir…

Modlog

lemmy.world/modlog?page=1&acti…

But as we can see here, she’s been recently posting in lemmy.world communities

in reply to Pavlovian

Those aren't actually lemmy.world communities.

Everything on that list is a community on that instance (whatever it is - lemm.ee I guess).

For example, a post from a lemm.ee account to AskLemmyWorld@lemmy.world is actually a post to an entirely separate community - AskLemmyWorld@lemmy.world@lemm.ee That lemm.ee community is a mirror of the lemmy.world community (and of all the other communities on all the other instances that mirror it.

That's how federation actually works. You never actually leave your home instance, and what seems like a post to a community on another instance is actually a post to a locally hosted mirror of that community.

This entry was edited (1 month ago)

Thoughts on AlmaLinux bootc images?


Old post but I think it is still relevant. Fedora also supports this but Fedora doesn't have a LTS support window
This entry was edited (2 months ago)

Can you configure tmux to use "normal" modifier keys?


I find the whole "Ctrl+b followed by another key" way of navigating tmux to be too cumbersome to warrant a switch away from something like Tilix where I can hit Ctrl+Alt+| and the screen splits vertically, or Alt+Left to switch to the terminal on the left. I think it's the mandatory release of all keys followed by more keys that does it.

Is there a way to tell tmux to understand that "Alt+Left means switch to the terminal on the left" and bypass the whole Ctrl+b song and dance altogether?

in reply to whaleross

I agree, you could ask a search engine which is gamed to give you the most promoted result instead of the bestt one, or you could indeed ask an AI which is trained to give you an aesthetically pleasing answer that may or may not be without substance....

More simply, you could just reach out to the wider community and get a reasonably up-to-date answer with an easy back and forth from others in the same situation without any worry about nefarious incentives.

I guess it depends on how you measure what a good and trustworthy answer is.

App launchers with interactive extensions like Alfred & Raycast?


I did some searching and many users recommend Rofi but looking at man rofi-script it seems to just be a list picker. You pick something from the a list and only one thing runs. On Alfred and Raycast you can have interactive extensions which are essentially keyboard navigable UIs.

  • One example looking at the Alfred workflow gallery is Reddit Browser, where you select a subreddit from a list and then it shows of lists of posts, you can press cmd enter to go back & select another subreddit.
  • Another one lets you ask questions for chatgpt and shows answers right in the launcher (I'm not necessarily looking for AI extensions).
  • This Raycast extension lets you search and create Notion pages.
in reply to Byter

I've done lots of searching and Reddit comments about what makes Emacs so appealing. I think Emacs users like the specific ecosystem and things it offers and they put in the work to tailor it for them. Consistently is one thing I hear. Tell me ur thoughts.

I don't find anything appealing about it over Neovim + TUIs and keyboard navigation in GUI apps, including hints: github.com/AlfredoSequeida/hin…

This entry was edited (1 month ago)
in reply to TheTwelveYearOld

Well, I started using Emacs because I was feeling limited by my Vim+Tmux-based workflow. Like you've heard from others, what convinced me was the consistency in interface, and the composability that enables.

Everything is a text buffer. When the text is drawn to screen, it might be resized, colored, hidden, replaced with images, etc, but it's all still just text. Because of that consistency of medium, all your interactions boil down to manipulations of that text.

What's important isn't the verbatim text, but what the text represents. It could be code (symbol, function, library, in any language, literately), prose (word, sentence, paragraph, or whole book), , a button, a list, a foldable outline, a process, a container, a , a typo, a secret, a , a pull request, the string you're looking for, a definition, a chat message, an RSS feed/item, a web page, etc...

Each of those has a mode (or modes) that makes interacting with those objects in a semantically meaningful way both efficient and composable (to varying degrees).

That's why Emacs devotees try to do everything in Emacs. Leaving Emacs means leaving that consistency and semantic expressiveness behind. In a CLI shell, yes everything is text, but it's comparatively raw. The best you can do is define variables and color. TUIs bridge the semantic-meaning gap, but aren't composable with each other. (Same with GUIs, but because of administering remote systems I avoided them when possible.) You can't add functionality to htop without recompiling the whole thing. You can't pipe ncdu's results to rsync. Emacs is a live Lisp machine. You can redefine (or advise) any function on a whim, without restarting.

That's not even getting into how everything you do to improve interacting with text improves your experience with all those text-encoded objects. Completions can be filtered and ranked by different algorithms, lines can be "narrowed" to, it has an interactive regex builder, you can autofill with simple, intelligent predictions (like, what's under your cursor, or a prefix-matching word up-buffer), you can deeply integrate LLMs, reflow and pretty print, follow externally-edited files, transparently access remote resources...

I don't know. Obviously it's not for everyone, but using Emacs makes me feel liberated; in control of my software. I love it.

This entry was edited (1 month ago)

The Channel Directory - Discover new content!


cross-posted from: lemmy.wtf/post/15810205

This directory contains known content creators and their channels in the PeerTube vidiverse. The directory is a work-in-progress and everyone is welcome to suggest content creators.

::: spoiler Activism
- Kate Making Waves - My name is Kate Hildenbrand. I'm a marine ecologist and conservationist. My goal is to create a space where normal humans can learn about this beautiful blue planet, to understand and see the beauty of the ocean, and to feel like they can make a difference. It's not too late to affect change. We need to demand change now, to scream for it until governments, industry, and lobbies are forced to listen.
- subMedia - sub.Media is a small collective of anarchist filmmakers based on the colonially occupied territories of the Anishinaabe and Haudenosaunee, in so-called Canada.
:::

::: spoiler Animals
- Dermaleon - Bird watching
:::

::: spoiler Art
- Krita - The official Krita peertube channel!
- Coreyartus Imagery's Art - This channel is a repository of the speed paints and livestreams of Corey Johnston, the artist behind Coreyartus Imagery.
- Hegeezias | Art - Here you can watch a person make abstract art using traditional mediums.
- Photography with Ewen Bell - Welcome to my PeerTube account and home to my photography videos. I'll have a little bit of gear on here, but mostly I want to talk about creativity and the creative process for photography.
- Blender Studio - This is the official Blender Studio channel on Peertube.
- Anditosan - All things Open Source design!
- Operation: Puppet - The official Operation: Puppet Peertube Channel! Puppetry, puppet building, and The Oracle show!
- Graphic Artwork - Mostly time lapse videos of artworks I've made, sometimes a few animated works. At this point I'm mostly just uploading some of my YT backlog.
:::

::: spoiler Comedy
- The Schuman Show - The Schuman Show uses comedy to make EU affairs more understandable for a global audience.
:::

::: spoiler Education
- Learn Together - I love learning new programming languages and tech. Learn with me! Often I get lost in tutorials because they go too fast or assume I know something. With me, I usually know very little so we'll be in it together!
- Indie Creator Hub - Welcome to Indie Creator Hub! Are you a content creator or live streamer looking for a community that shares your passion for alternative platforms? You've come to the right place! Here at Indie Creator Hub, we focus on fostering a supportive and engaging environment where creators like you can thrive. Join us to exchange ideas, collaborate on projects, and find the resources you need to succeed. Let's create and grow together!
:::

::: spoiler Entertainment
- ASMR of the Fediverse - CC licensed ASMR videos.
- Mr. Funk E. Dude's Place.
- Hotel Breakfast Review
:::

::: spoiler Films
- Digital Digest 4K+ Trailers & Clips - Watch the latest 4K trailers and clips. - A place to put whatever's on my mind at the time.
- ClassX - Preserving the best Classic Movies, copyright-free and of the highest quality, since 1915!
- Public domain films - Feddit.uk Admin @emperor@feddit.uk, I'm using this account to host public domain films. I can't be comprehensive so it is going to be a curated list of films I like or are intriguing for some reason (I'll try and explain in the description).
:::

::: spoiler Food
- Zalasur: Food and Cooking - Game playthroughs with no commentary.
:::

::: spoiler Gaming
- Boiling Steam - We talk about PC Gaming on Linux!
- Solarus - Solarus is a free and open-source 2D game engine.
- Start Gametrailers - Trailers and teasers of upcoming games.
- Open Source_Gaming - I'll play Opensource Games here every week and play/spectate tournaments as well!
- Gardiner Bryant - Gardiner Bryant (formerly The Linux Gamer) talks about Linux, gaming, and everything in between!
- Guild Wars 2 - An unofficial mirror of the official Guild Wars 2 channel on YouTube.
- Space Quest Historian - Hi, I'm the Space Quest Historian! I make videos predominantly about adventure games and narrative-driven games.
- marco_rennmaus Gaming
- Vitekc45c - Game playthroughs with no commentary.
- Blender Dumbass
- Gamercast - The official Gamercast PeerTube channel. Our videos range from unboxings of collector's editions, reviews, pickups, competitions and more.
- FinnVT Online - Playing games through the digital gates of hell.
- Beko Motion - My occasional videos usually resolve around HEMA (Historical European Martial Art), LinuxGaming / GamingOnLinux and SimPit projects.
- Linux (vs Windows) Benchmarks - A channel dedicated to Linux benchmarks and comparing games on Linux vs Windows.
- lyn1337 - Mostly does videos and live streams about World of Warcraft.
- The R-Man - My name is The R-Man, or simply Roman, a VTuber from another dimension and I try to find a way to go back to my Original-Dimension. Until then, I'll stream on Twitch and sometimes upload highlights (or something else too) on here.
- Nico's Arcade - Couch gaming with 80s spirit!
- MyNamesTee
- mezzo On Demand - Stream recordings from video.mezzo.moe.
- AshenWolf - Hi, I'm Ash! Nice to meet you all! I'll be releasing most if not all content here. I like Fire Emblem, so there will be a good amount of that , but I might also make content related to politics, history, and music!
- First 2 Hours - Ever bought games during Steam sales that just sit in your library? Join me as I randomly select and play games from my Steam collection for 2 hours each! No preparation, just pure genuine reactions and gameplay exploration.
- Triple Iris - Dedicated to Indie Games and Indie Game Accessories!
- NorthWestWind - I code stuff. I draw stuff. Hongkonger, Splatoon 3 ☂ main, vector artist, Minecraft modder. Streaming every day here as well as on Twitch!
:::

::: spoiler How To
- Privacy Guides
- Trafotin - I hate technology, but love to fix it.
- TheGiddyStitcher - On this channel you'll find project vlogs, tutorials and experiments in everything from fiber crafts to 3d printing, and your new biggest supporter in all your crafting goals.
- Nick's Workshop - How-to's by graphic designer Nick Saporito about Inkscape and Gimp, the Open-Source vector graphics editor and raster graphics editor for Linux, Windows and Mac.
- Roots & Calluses - Learning how to live in balance with nature. Growing our own food, foraging for edible herbs and mushrooms, preserving food for winter--essentially homesteading in an apartment and a garden. Currently, I am restoring abandoned land to create an urban homestead of sorts.
:::

::: spoiler Kids
- ...
:::

::: spoiler Music
- AssortedTrance, Techno & Acid - Various mixes featuring Trance, techno & acid from the 90s to now.
- STREET SOUL - Hip-Hop Culture since 1994. Miracles Are Now Science.
- Fiddle Gika - Fiddle Player from Hamburg, Germany.
- Stephen Radnedge - Stephen Radnedge is a composer and an artist. His work is inspired by the nature of northern England.
- LilyBit – Music - Hi :​) I’m Lily (she/they), a musician, artist and tech nerd. I mainly make 8-bit NES/FamiTracker arrangements of nostalgic game soundtracks from my childhood like DPPt, PMD2 and HGSS, but I also want to branch out a little more to music from other games and media, media other than 8-bit like game soundfonts, high-quality instruments and fully hand-played on my keyboard, as well as original music.
- Organ music from various centuries - You will find organ music from various centuries in this channel. My main organs are a one-manual Keller organ built in 1858 and a two-manual Bernhard organ built in 1911.
- Forgotten Tunes - This channel is about preserving and sharing forgotten music (mostly soundtracks), that is no longer available for purchase or streaming.
- Billykaren Beaufort - Hi! Thanks for listening to my #music 💕! I love you ALL! 💕🤘🎤 ✊🇺🇸♾️ - I’m an MS-Fighter 🧡 (multiple sclerosis) and I have a cool cane! 🪄 - Music gives me self-worth and I enjoy the feedback I receive from those of you that enjoy some of my music. #MusicIsLife ~ #Billykaren
:::

::: spoiler News / Politics
- Surveillance Report - Weekly security and privacy news.
:::

::: spoiler People
- Russell Brand - On this channel my videos explore new ways to connect with ourselves and one another and how to elevate our consciousness.
- Lety Does Stuff - Hihi! I'm Lety! I do all sorts of stuff! This is my PeerTube account, where I post videos onto my PeerTube channels!
- Ashley
- Nerdy Keith - My name is Keith, l'm a video blogger from Dublin Ireland and I make videos about nerdy culture, human rights (including LGBTQ issues) and animal rights issues.
- Anubis2814 - I am a microbiologist and a former naval nuclear electrician. On this channel I discuss a wide range of topic, from religion, politics, science, skepticism, economics and labor, as wall are coping mechanism for Aspergers and tearing apart commonly held misunderstandings. Having been a former isolated home schooled young earth creationist Non-judgmental or non-pwning education is what my channel is about, while learning to find and block the trolls.
:::

::: spoiler Science / Technology
- The Linux Experiment - I'm Nick, and I like to tinker with Linux stuff.
- The New Oil - Practical privacy and simple cybersecurity for everyone.
- FUTO
- Geotechland - I make videos about foss, opensource technology, community funded projects, gaming, and everything linux.
- Linux Renaissance - Hi, I’m Darth! Welcome to my channel, where Free Software and Linux are front and center.
- VWestlife - Demonstrations, reviews, and tutorials about computers and electronics.
- Jan Beta - Hi I'm Jan. I repair/hack/make/destroy stuff on camera. Electronics, Repair, Tinkering, Retrocomputing, VintageAudio. As unprofessional as it gets.
- ctrl-alt-rees - I restore, repair, upgrade, modify and maintain all of retro computers and consoles in my collection myself and I'm keen to share not only the process but the end results.
- Flipboard Dot Social - Hosted by Flipboard co-founder and CEO Mike McCue, Dot Social is a new podcast and video series spotlighting leaders at the forefront of the open social web movement.
- The Linux Lugcast - We are an open Podcast/LUG that meets every first and third Friday of every month using mumble at 9pm EST. We encourage anyone listening to join us and participate on the podcast.
- root42 - I thinker with old hardware, homebrew hardware; I make Let's Code videos for teaching Oldskool demo effects and Assembly language.
- Fedora Project - An innovative platform for hardware, clouds, and containers, built with love by you.
- Eric the IT Guy - Fighting against the forces of burnout and poor work-life balance, The IT Guy stands for DevOps, Open Source, and an endless supply of energy!
- Veronica Explains - I'm Veronica! I love Linux, old computer hardware, and explaining things. Some folks call me the Linux Mom, and that works for me. I'm a former "legacy systems" sysadmin who's posting fun content about cool things you can do with Linux, as well as some fun retro tech stuff I come across!
- More Fun Making It - Join me as I fumble around the innards of 40-year-old tech. Relax, put your feet up and watch me build and fix stuff.
- Tech Savvy - Microsoft Windows know-how, tutorials and fixes from Tech Savvy Productions. Visit the Tech Savvy website at techsavvyproductions.com/*
- Simple DIY Electronic Music Projects - *You'll also find a few relatively simple videos to accompany my Simple DIY Electronic Music Projects blog that exist simply to demonstrate some of the projects and tutorials I talk about on my blog. For more about me and my blog, visit diyelectromusic.wordpress.com/…
- Independent Creator Podcast - *Exploring the world of alternative platforms and services for the independent creator. We take on the mission to find those nuggets of information many of us look for as we journey on our path to being truly independent creators.

:::

::: spoiler Sports
- 3MoreReps - Yoga & Fitness - Fitness, Yoga Trapeze, Stretching and Flexibility Workouts.
:::

::: spoiler Travels
- Sustainable Sailing - Dave and Jane's journey towards live aboard sustainable sailing on a 1977 Rival 38 Centre Cockpit Yacht.
- Big World small Sasha
- SV Seeker - I am the builder and owner of Sailing Vessel Seeker. We are the boat the Internet built. Hundreds of folks worldwide came to my front yard in Tulsa Oklahoma and helped. Dream Big, Work Hard, Stay Focused, and Surround Yourself with Good People. -- Doug Jackson, Cpt SV Seeker
- Stop us if you can(Original title: Stop nous si tu peux) - We would like to make you aware of alternative travel. Our principle? Travelling soberly, promoting meeting, exchanges and mutual assistance. Equipped with a backpack, cameras, and a dose of good humour, we bet on the benevolence to get housed, move and feed.
- hikingdude - Hiker, cyclist and landscape photographer, loving the beauty of nature and sharing the hiking experience with you!
- sarah.louise - Travel, art and other things... a jack of all trades
:::

::: spoiler Vehicles
- Transport Evolved - Welcome to Transport Evolved! Join us every day for content from Nikki Gordon-Bloomfield, Kate Walton-Elliott, Erin Carlie and Michael Horton as they explore and explain the world of cleaner, greener, safer, and smarter transport.
- Shifter - A channel about urban cycling, bike commuting and the ways we get around our cities with author, journalist and creator Tom Babin.
- Transit - Ever wondered why your city's transit just doesn't seem quite up to snuff? RMTransit is here to answer that, and help you open your eyes to all of the different public transportation systems around the world!
- Oh The Urbanity! - Oh The Urbanity! traverses cities by foot, bike, and public transit and aims to make informative and (hopefully) entertaining videos combining streetscapes and demographic data.
- Rally & Racing - Hi! I’m Harry and I’m one of the mods for the Gamer’s Tavern, but also have my own channel here where I create and stream mainly rallying and racing content. I don’t post new videos every few days like a YouTuber, I maybe post at best once every few weeks, at worst once a month. I won’t spam your feed with crappy shouty videos haha!
:::

in reply to Meldrik

Can I throw my channels in the mix?

Ozoned Games - games obviously - video.firesidefedi.live/c/game…

Ozoned Tech - tech obviously - video.firesidefedi.live/c/tech

Fireside Fedi - podcast with folks from around the Fediverse so I've been putting them under People - video.firesidefedi.live/c/show

Edit: formatting

This entry was edited (2 months ago)
in reply to MyNameIsRichard

anyone who thinks web tech is best practice on the fucking desktop should be expelled from the whole field

said ford would consume way too much gas and produce way too much noise, among other things. but what's the problem with the current installer? that it doesn't have curly corners, and that it has too many options which is confusing to those with no reading comprehension?

This entry was edited (1 month ago)

[Answered] Most customizable desktop environment?


Edit: Yep KDE is the most customizable full desktop environment. I gave Gnome a shot but like KDE A lot more with desktop effects and kwin scripts.

What makes Linux appealing to me is the extent of customizability, but I didn't find many answers when looking up with desktop environment is them most customizable. Some say KDE is most customizable than say, Gnome, but doesn't Gnome support CSS customization while KDE doesn't?

This entry was edited (2 months ago)

[Answered] Most customizable desktop environment?


Edit: Yep KDE is the most customizable full desktop environment. I gave Gnome a shot but like KDE A lot more with desktop effects and kwin scripts.

What makes Linux appealing to me is the extent of customizability, but I didn't find many answers when looking up with desktop environment is them most customizable. Some say KDE is most customizable than say, Gnome, but doesn't Gnome support CSS customization while KDE doesn't?

This entry was edited (2 months ago)

[Answered] Most customizable desktop environment?


Edit: Yep KDE is the most customizable full desktop environment. I gave Gnome a shot but like KDE A lot more with desktop effects and kwin scripts.

What makes Linux appealing to me is the extent of customizability, but I didn't find many answers when looking up with desktop environment is them most customizable. Some say KDE is most customizable than say, Gnome, but doesn't Gnome support CSS customization while KDE doesn't?

This entry was edited (2 months ago)

German state gov. ditching Windows for Linux, 30K workers migrating


Schleswig-Holstein, one of Germany’s 16 states, on Wednesday confirmed plans to move tens of thousands of systems from Microsoft Windows to Linux. The announcement follows previously established plans to migrate the state government off Microsoft Office in favor of open source LibreOffice.
in reply to psud

found this update from 1 month ago:

euro-stack.com/blog/2025/3/sch…

what the actual amount of progress is seems to be buried under bureaucracy-speak but I got 3 useful sentences out of it so far:

Configuration via group policies

MS Office can remain installed in parallel, until October 2025

Goals for october 2025: LibreOffice should be the sole standard office software on around 70% of the state administration's IT workstations


so to me it seems they're currently slowly doing a MS office -> LibreOffice transfer, but they're still all using windows (as the use of "group policy" implies)

This entry was edited (2 months ago)

Peertube video recommendation program


thinking about making a program that recommends videos that are on peertube. likes, titles, descriptions, and even closed caption can be collected locally and compared to the local users liked videos and watch time to rank videos the local user would like to watch.

later on there could be a server that people can willingly choose to send their data to build a better recommendation program.

I'm still in the research phase of this, but from my experience even implementing basic concepts would be effective

I know there is an anti algorithm crowd but this is opt in so this should be fine

Linux Bluetooth adapters


I need a Bluetooth adapter for my laptop that has Linux mint on it. I just need it to connect a BT speaker for watching YouTube and netflix. The adapters I looked at on amazon all say they aren't compatible with Linux. I was hoping I could get some recommendations that work with Linux. And preferably one that doesn't require drivers from some sketchy site, Thanks!

EDIT: thanks everyone for the recommendations!

This entry was edited (2 months ago)

German state gov. ditching Windows for Linux, 30K workers migrating


Schleswig-Holstein, one of Germany’s 16 states, on Wednesday confirmed plans to move tens of thousands of systems from Microsoft Windows to Linux. The announcement follows previously established plans to migrate the state government off Microsoft Office in favor of open source LibreOffice.
in reply to Meldrik

The most important parts are at the end of the CPU and GPU performance sections. They performed the same across all desktops. On most modern systems the desktop you use is not going to have any significant impact on your performance, when software you're running requires resources, they will be directed towards it.

Also, low RAM usage is massively overrated, especially by Linux users. Your RAM is there to be used, leaving it unused is a waste. It is good for your desktop to be caching a lot of data in RAM when it is otherwise unused. It's only an issue if its still utilizing an excessive amount of RAM when other apps need it more.

This entry was edited (2 months ago)

What is the best setup for Wayland + Nvidia/Intel Laptop (Alternative to Reverse Sync)?


Not sure if this is a good place to ask for help, but I have scoured the internet and no one has a solution, so hopefully this question helps me as well as others.

I'm trying to get my computer to run at its best when on Hyprland.
I have an MSI Raider GE76 which has an Nvidia GTX 3080 Mobile and an Intel Tiger Lake CPU with integrated graphics.

I typically have an external display over display port, an Ultrawide 3440x1440@60Hz, and the internal laptop display is on eDP at 1920x1080@360Hz.
Note tho that while I often have the dual screen setup, I do need to be able to go to just the Intel display.
The Nvidia GPU drives all outputs (DP, HDMI, Thunderbolt) EXCEPT for the eDP which is connected to the Intel card.

On X11, I could use reverse prime sync to use the Nvidia card for everything and just have the Intel card draw whatever the Nvidia card renders. This worked well.
Unfortunately there isn't anything like that for Wayland, and I don't have a hardware switch to put the eDP on the nvidia side of things.

This means that I have to use the default prime modes to run stuff on the nvidia card which makes the second screen incredibly laggy.
Now, I can disable the i915 module and the external display becomes buttery smooth, but I can't use my built-in display (which means I also can't use the display when I'm not connected to the external monitor).

How can I get both to work well on Wayland?

Can I run the external display exclusively on Nvidia and the internal on Intel with Prime?
That could work, but idk if that's possible.

What's the optimal way to set up an external display on Wayland with and Nvidia hybrid-graphics laptop?
Bc right now I'm thinking of just going back to X11 and praying it gets enough support to live until I can get a decent Wayland config.

in reply to KindaABigDyl

I don't have such a laptop, so I can't really speak for experience, but I can tell you what I know.

You definitely can use prime to render a program on the dgpu and display it on the igpu, this requires basically no configuration at all on wayland, I even did it on my desktop computer when Wayland didn't run on Nvidia. But I don't know if you can or why you would use the dgpu for everything instead of only selected programs (games).

What you really need is a compositor that properly uses both GPUs and can use the ports of both at the same time, hyperlaneld might just be bad at that. Gnome should be in a better position so you can start from here and see if gnome behaves better.

Also, are you sure you want to use a tiling compositor on a gaming laptop? Wouldn't it be a better experiment to just go with gnome? It's visually polished and goes well with trackpads.

in reply to edinbruh

Also, are you sure you want to use a tiling compositor on a gaming laptop


I can't go back to moving windows around by hand. It's so tedious. I can't stand it anymore. Even on Windows which I use for work I always install FancyWM to achieve some sense of tiling. It's just imo a superior way to use a computer.

That said, GNOME has the fantastic Pop Shell 2 which functions similar to Hyprland or i3, so that's fine on GNOME. Honestly, I'm hopeful for COSMIC and plan to try it out once it gets out of Alpha.

The problem I have with GNOME is I always end up breaking it in a way that I can't restore it. Some extension or GTK theme tweak or something, even when uninstalled, always seems to get it stuck in a bad state. It doesn't like customization. KDE does, but it doesn't have as good tiling support (there's Polonium, which is... okay).

Perhaps I'll try it again tho. I've used GNOME for several months at a time before, but I had problems when switching to Wayland a couple years ago initially (which I'm sure are fixed now).

in reply to KindaABigDyl

A couple years ago it could never have worked properly, Nvidia drivers didn't support Wayland. Because Nvidia refused to implement drivers that followed the Linux semantic (which admittedly was outdated). About a year ago, after many years of work, they published a new semantic that Nvidia was willing to implement. Alongside that, a new Wayland protocol was added so that compositors could opt-in the new semantic when the driver supports it. So, to use Wayland with Nvidia you need both a recent enough Nvidia driver (I think anything after last July) and a compositor that implement the linux_drm_syncobj_v1 protocol. I'm not even sure hyperland supports it, so you should also look into that before continuing.

P.s.: gnome's mutter, and kde's kwin (which are the name of their compositors) both supported that protocol since the very day after it was released, so those are guaranteed to work if they are recent enough, unless if you are on Ubuntu lts which stripped it out for a pet peeve about adding features to lts releases.

This entry was edited (2 months ago)
in reply to edinbruh

Yeah, I may just go back to Gnome/KDE.

I recently switched OS from NixOS to Arch which is why I wanted to give Hyprland a try.

I was on KDE before with not a ton of issue, but well, the tiling options on KDE are few and limited, so I wanted to go back and retry a dedicated tiler. I was on i3 before switching to Wayland, then I was on Hyprland for a while, then switched around a bit, and then settled on KDE once I discovered Polonium which I could live with.

I'm gonna give GNOME a shot for now, and just try not to tweak it too much (other than Pop Shell)

This entry was edited (2 months ago)
in reply to KindaABigDyl

Yes most tiling solutions on KDE are half-baked even the new built-in (at least the last time I tried) but Krohnkite is really solid. It was forked to Bismuth, then that one got defunct after a major kwin update. But it's back again as Krohnkite (infinite thanks to the maintainers). It's rock solid and even has a B-Tree Layout now. I'm on X11 but the last time I tried it also worked nice with Wayland.
This entry was edited (2 months ago)
in reply to KindaABigDyl

Splitting the thread here. I personally used i3wm for more than a year and became white fast with it, then I had to use windows for a month and when I went back to i3 it was a pain, I couldn't do shit. It was at that moment I decided "why can't I just stop forcing myself to this PITA and just use the mouse faster?" And I never used a tiling VM again, personally I use kde on desktop and gnome on laptop.

But, I can see the appeal of automatic tiling, so I raise you this: scrollable compositors. You get both the benefits of automatic positioning and oc moving things in and out of the way, without keeping track and managing 10 virtual desktops

in reply to edinbruh

why can’t I just stop forcing myself to this PITA and just use the mouse faster?


You know that i3 has support for mouse, right? Really good support in fact.

I use the mouse all the time in tiling window managers, not exclusively keyboard shortcuts, especially for well, window management. Win + Right Click and drag to resize and Win + Left Click to move a window into place. However, unlike traditional desktops, when I move the window, it snaps to a reasonable and consistent tiling location instead of just left/right snapping, a random place it can get covered up, or tiled using some awful extraneous system like KDE's tiling system or some of the Windows little GUI popups. I also sometimes use floating windows.

The nice thing about tilers is they can do traditional usage well whereas traditional desktops cannot do tiling well. Heck, dynamic tilers can't even do tiling well.

I often make use of very complex layouts like this:

--------------------------------------
| Win A              | Win B         |
|                    |               |
|                    |---------------|
|--------------------| Win C | Win D |
| Win E              |---------------|
|                    | Win F         |
--------------------------------------

That many windows with different priorities and visible at once is just not possible to do in traditional desktops or even in dynamic tilers like DWM or KDE's Bismuth plugin.

I need something that makes window organization EASY, and that is manual tilers.

I'll have to look into the scrolling compositor. That does sound interesting.

without keeping track and managing 10 virtual desktops


Also, I don't understand what you mean here. I'm very curious to what troubles you had with workspaces.

What is there to manage? Do you not use virtual desktops at all anymore? I use them even in traditional desktops (including Windows).

It's just a place to put more windows when you run out of room on a screen or when doing a different task, what's the difficulty there?

Did you always use all 10? I don't usually need more than 2, and if I do, then I don't usually need more than 4

This entry was edited (2 months ago)

Insurrection act — April 20th. Pls read!


Insurrection act — April 20th. Pls read!

Discussion
I really wish there was a way to get this into the hands of every American before April 20th.

FROM THE MEDIUM:

Part 1: On April 20th, 2025, the United States may Cross the Point of No Return.


It sounds wild. Maybe even crazy. But every step is already in motion. I’d be happy to be wrong. But if this is correct… you’ll be ready.

On April 20, 2025, the United States may initiate its final steps into authoritarian rule.

That’s the day Donald Trump’s advisory committee is expected to release its findings on whether he should invoke the Insurrection Act — a move that would allow him to deploy the military domestically and allow Trump to impose martial law. (San Francisco Chronicle). Given Hegseth and Noem are the main “advisors”, the conclusion is foregone.

And as his two months in office has already shown, he won’t stop at just a legal opinion.

Expect an executive order even that same day or the next, officially declaring the Insurrection Act, restricting freedoms in the name of restoring control of the border and perhaps in blue-state cities, and setting the larger plan in motion.

Of course, this won’t be framed as an attack on democracy. It will be packaged as a necessary response to crisis — as authoritarian takeovers always are.

But once it happens, there’s no going back.

THIS WILL BE THE POINT OF NO RETURN.


The roadmap for overthrowing a democratic government isn’t new or theoretical — it’s a well-worn playbook, tested and repeated across history by those who crave power more than liberty. After rejecting it initially, being incredulous, I have realized there is too much evidence suggesting this may be what’s happening now to remain silent.

Telling other people what may be happening, so they can recognize it and maybe together we can stop it, is my entire purpose here.

This is Part 1 of what has turned into a series: Their Coup Playbook: How They Quietly Kill the Constitution in the Coming Weeks and Months

THIS IS HOW DEMOCRACY ENDS: HERE’S THEIR PLAYBOOK


It won’t all happen in one night.

Instead, the process will unfold in stages, each step making resistance harder.

Free elections, a free press, and the right to protest will disappear one piece at a time, until there’s nothing left to save.

My entire goal here is to make people aware, so you can recognize it, if it really is what’s happening, and maybe together we can help stop it. It’s all I, personally, can do.

Here’s how it will happen, step by step, after Trump invokes the Insurrection Act with an Executive Order:

  1. “Resist!” Demonstrations Grow — Just As Planned Left-leaning and even more centrist people will be alarmed. Peaceful protests will be organized nationwide, as they already have been being organized now, with growing numbers of people joining protests each week.

The calls to “Resist!” will grow louder, and large-scale demonstrations will begin forming in major cities. This is exactly what Trump wants. He didn’t invoke the Insurrection Act sooner because he needed his opposition to gather first — so he could use them as a tool for his next step.

He also waited 90 days, instead of invoking it on Day 1 as Project 2025 recommended, so he would have his people in place, and remove those who would oppose them in the government, military, courts, and civil positions.

His cabal is waiting for a strong reaction — they want massive unrest. They need a justification to kick off the next steps in their plan.

  1. The False Flag Crisis: Turning Protest into “Terror” The protests will turn violent quickly. Maybe in a day, maybe during the next big protest the following weekend.

They will turn violent not because of the protesters, but because they will have been infiltrated by agents provocateurs, from militia groups like The Proud Boys, whose goal is to escalate as quickly as possible and give Trump and his cabal an excuse to trigger the next stage.

Expect “terrorist” bombings, targeted assassinations, or high-profile acts of violence, either staged or exploited, to justify the crackdown.

There may even be an extremely high profile assassination of a leading right-wing leader that changes everything in a moment… and the “woke radicals” will be blamed, and the country will rally around more extreme measures to bring back order and control.

The media will be flooded with images of chaos, pushing the public into a state of fear. Calls for “order” will follow.

  1. Trump Declares Expanded Martial Law — And Calls for Militia to assist the police and Military

Trump has already invoked the Insurrection Act — so now he now declares even more extensive and repressive martial law, and orders troops into major US cities where most oppose him, branding protesters and opponents as “seditionists,” “traitors,” and the “woke mob”.

He will call on “good Americans” to grab their guns, like the patriots of 1776, and join the militias forming to “restore order” and “take back control” from the leftist threat. Using militias also gets him around resistance from military leaders who might oppose his orders. The militias already exist — the Proud Boys, Oath Keepers, Three Percenters, and others— and they are not some distant fringe. They were at January 6. The most extreme and radicalized are all released from prison now.They are ready to roll, and to answer Trump’s call, which they were waiting for four years ago.

The militia members are your neighbors. The difference between them and you? These neighbors own and have been training with AR-15s. You and your friends? Not so much.

This will be framed as “helping the police” and “keeping order.” Law enforcement will quietly welcome them — or, in some cases, will deputize them, with Trump’s support.

  1. Mass Arrests of Opposition Leaders Journalists, Democratic officials, and activists will be arrested under charges of sedition, terrorism, or “inciting violence.”

Expect Mark Milley, Liz Cheyney, and Adam Kinzinger to be arrested quickly and with great press coverage. How long the show trials take is probably a good measure of how much control Trump has established over the courts.

Key Democratic governors and attorneys general will be removed first, ensuring no state-level resistance. Law enforcement and military ranks will be purged, with loyalty tests ensuring only Trump-aligned officers remain.

  1. Military & National Guard Take Over Major Cities Expect deployments in Washington, D.C., New York, Chicago, Los Angeles, Philadelphia, and other blue-state strongholds.

Curfews and lockdowns will be imposed, justified as measures to “restore peace.”

Checkpoints and military policing will become the new normal. Expect them in particular along major highways going to Canada or Mexico, and in red states — to identify and detain seditionists, traitors, and people of questionable loyalty.

Trump’s building of detainment centers in Guantanamo, and expansion of the 106 other ICE detention centers, was not actually intended for illegal migrants. And just a few days ago, Blackwater founder and Billionaire Erik Prince offered to help Trump “privatize deportation camps” as has been being done with prisons per Trump’s Day 1 Executive Order. So now Trump has an extrajudicial place to store the disloyal and those who resist, in for-profit camps guarded by militias and loyal military. Until he decides what to do with them.

  1. Press Censorship & Total Media Control Independent news outlets will face shutdowns or takeovers. Those that resist will see their journalists arrested or harassed.

Mainstream media will be forced into compliance. Blackmail, corporate pressure, and legal threats will ensure they toe the line.

Social media platforms like X (Twitter) will amplify the official narrative, drowning out opposition.

Other social media and lines of communication will be turned off. The Internet will be monitored, people identified from this monitoring for arrest, using Palantir technology. Peter Thiel, who I’ve written about before, is co-founder of Palantir. We will fully enter the surveillance state.

  1. Borders Close & Dissidents Are Trapped Inside Passports will be revoked for critics and opponents. If you’re on a list, you’re not leaving. Especially if you’re of Draft age.

No-fly lists will expand to include activists and journalists.

ICE and DHS will be weaponized — not just against immigrants, but against political enemies.

  1. Elections Are “Postponed” Indefinitely

The 2026 midterms will be suspended under the excuse of national security concerns. Red-state legislatures will eliminate Democratic-leaning districts, ensuring permanent Republican control.

By 2028, Trump (or his handpicked successor) will run unopposed. Elections will be a formality, probably still held. But rigged.

PROJECT 2025 AND THE INSURRECTION ACT: THIS WAS ALWAYS THE PLAN


This isn’t speculation.

The Heritage Foundation’s Project 2025 lays out a detailed strategy for permanent right-wing control. It openly advocates using the Insurrection Act to crush opposition and dismantle the administrative state. Trump isn’t improvising — he’s following a script.

We Can’t Wait — The Time to Act Is Now

We can’t sit back and wait for Trump to fire the starting gun — because once he does, it will already be too late.

We need to prepare now.

We need to plan now.

We need to dismantle his plans before they begin.

We have one month.

That’s it.

The Only Way to Stop this Coup is by Exposing It


The only way I can think of to stop this conspiracy, which is in final planning stages, is through exposure. If people see the playbook in advance, they will be less likely be manipulated when it happens.

They might question the narrative. “Wait. This is what they said would happen. I thought it was crazy. But maybe…”

We need to spread this narrative far and wide so that when the moment comes, no one can claim ignorance.


Maybe we will be proven wrong.

Maybe we will look silly.

Or maybe… we will have derailed the plan, by telling people what to look for, to recognize the playbook steps as (if) they happen.

Here’s what we must do before April 20:

Empower the press, law enforcement, military, and elected officials to recognize the game that’s being played. They need to understand what’s happening before they are pressured to go along with it.

**Share this post, or write your own. Do your own research. Don’t take my word for it. Talk with your friends and family about this crazy conspiracy theory that can’t rally happen… can it? ** So if and when the steps actually happen, people recognize it for what it is.

Prepare the public so they don’t take the bait. Trump and his cabal want protests to explode into chaos.

They want violence in the streets to justify their crackdown. We must be ready to outmaneuver them — to refuse to be used as pawns in their game.

Stand up to the militias — and stop friends and family from joining them. The Proud Boys, Oath Keepers, and other armed groups will be mobilized as Trump’s shock troops. They will be framed as “restoring order” and “helping the police.” We need to be ready to counter this, to make sure our neighbors, friends, and family don’t get sucked in.

Inoculate our fellow citizens against the propaganda. Most Americans are good people — but good people can be misled. They can be scared into compliance. Our job is to make sure they see what’s happening before it’s too late.

The only way to stop this plot is to expose it, reject it, and make it unmistakably clear to every American what is happening. We must stop these malign forces from enacting their will on our country, the world, and each of us and our families.

WHAT IF WE DON’T STOP IT?


If it is not stopped, and Trump enacts the Insurrection Act, at that point we probably only have 48 to 72 hours to try to stop everything from happening after the Executive Order.

Once martial law is imposed, there will be a tiny window — no more than three days — before resistance becomes nearly impossible.

Stopping it before it happens is the best option.

But what if we don’t?

In my next post, I’ll outline peaceful, strategic ways to resist — while we still can. And what our reduced options are if it still happens.

If we don’t act before April 20, then by April 23, it will already be too late.

in reply to BmeBenji

Yeah I’m inclined to agree. There is a lot of “this isn’t speculation”, yet there’s a lot of speculation. A source on where it says this in Project 2025 would be handy.

Edit:

No.

Shut the fuck up.

I’m sick of your doom-screaming without source. Provide sources.

The rhetoric in this post could kill people. ACTUALLY FUCKING KILL PEOPLE. Fuck me for wanting some assurance before I panic.

This entry was edited (2 months ago)

Beckn Protocol


Ok so I don't know if this protocol has got anything to do with Federation, but it's an interesting protocol regardless

It's used mostly for logistics. I'm interested in your thoughts
becknprotocol.io/

This entry was edited (2 months ago)

don't like this

[solved] I'm having audio issues with Linux and while I have a temporary solution, I'd like to have a permanent solution if possible.


Final update (hopefully): It seems that I have been able to fix the issue. I'm not sure what exactly caused the problem but either removing fluidsynth or installing the wireplumber ppa fixed the issue and I have working audio again. I've also removed pulseaudio as I only installed it as a temporary solution and it's no longer necessary.

For the past three days, I've been having this issue where my computer starts with no audio and the only sound device listed is a "dummy output" device. I've tried looking online for solution but the only solution I found has to be redone manually every time I start/restart my computer. It also seems like this issue is common with and possibly specific to the sound card my computer has, which is an "Intel Sunrise Point-LP HD Audio".

The solution that worked for me was to add blacklist snd_soc_avs to the modprobe blacklist and then run the two commands sudo alsa force-reload and pulseaudio. Adding snd_soc_avs to the blacklist permanently brought back my actually audio devices but it didn't fix the audio nor did it remove the dummy output device. The two commands I listed do restore the audio and remove the dummy output device but they only work for the current session and I have to run them again after starting/restarting my computer.

I have no problem doing this if there isn't a permanent solution but I would like a permanent solution, if possible.

This entry was edited (2 months ago)
in reply to gnuhaut

Ok, even though I said I'd wait until tomorrow, I decided to try it again. It seemed to boot more or less normally but I did try someone else's suggestion and it got audio working again. I did undo the edit I made to the modprobe blacklist and I did keep fluidsynth and pulseaudio uninstalled but I tried using the wireplumber ppa, like someone else suggested and my audio is working again. Granded, I have no idea what actually fixed the issue, so I don't know who to fully credit but thanks for helping.

Getting ready to switch to Linux full time


But I've got two doubts remaining.

Currently, I'm running Windows 11, but I'd still like the ability to dual boot for certain games which don't necessarily work with Linux for various reasons. Is it possible to move a windows install to a different drive and then install Linux on the main drive instead?

If yes, how do I do it?

Second doubt is if I'll have many issues daily driving Linux if I have an Nvidia card

in reply to Focal

nvidia these days has little to no issues with games, I've personally had very little.

The biggest problem I've had is with video decode/encode acceleration, because nvidia doesn't provide vaapi drivers and Firefox doesn't enable vaapi by default. there is a solution that works but you need to do some tinkering.

this isn't a huge problem though, modern cpus are pretty fast and software decoding is fine for the most part

This entry was edited (2 months ago)
in reply to Focal

I'm not so sure you're to the getting ready to switch to Linux stage as you think you are. Also, cloning & moving drive partitions are pretty elementary concepts. Not that people shouldn't help but many people on Linux don't realize encouraging people to switch too soon, often results in that person actually hurting the Linux community because they had a relatively productive setup before & now everything sucks to them. Having a dual boot partition or drive is helpful but you should also have some strategies to switch back if needed as your primary OS until you feel more confident & productive.
This entry was edited (2 months ago)

Lemmy vote aggregation idea


Alright, this one will be weird but I’m coming to accept I might be way further on the spectrum than I thought. Reader beware, it’s probably dumb but kind of amusing and fun to think about.

We are currently dealing with various kinds of vote manipulation and that affects visibility of things even if we don’t care about imaginary points. As long as they are used for sorting they’re not that imaginary because I can sort by new but most will not have time and will want to peek. Now, the main issue here are the extremes - instances used to flood votes or weirdos stalking other users.

Currently Lemmy/Piefed/Mbin create a federated network but votes are still kind of a direct democracy. What if that democracy was federated too? One can think of this as federating consensus. There are two approaches to implementing this but the idea boils down to either outside instances aggregating votes made on their side and sending final voting result on a scale -1/0/1 or alternatively this aggregation could be done by the hosting community.

What this solves:

  • Flooding is harder because you need to keep on making instances.
  • People have more motivation to join smaller instances because that way their vote matters more.
  • People have more motivation to join interest / theme / location based instances so that their vote is aggregated with similar people.
  • Weirdos will set up their own instances meaning even more decentralisation.

Mastodon to Lemmy post formatting rules questions


Hi all,

This is a continuation of this thread around Mastodon/Lemmy integration.

I am trying to understand the formatting rules around Mastodon to Mastodon/Lemmy posts. My Mastodon instance is www.mstdn.games.

I was able to get this point:

Mastodon input:

Lemmy crosspost:

Let me walk through the key points.

1. Thumbnail

This works really well. You attach an image on Mastodon and it outputs the correct thumbnail on Lemmy (it even works across instances, I know there are issues with LW vs other instances in custom thumbnail attach).

2. Markdown Formatting

Doesn't seem to work on the Mastodon side. Not a big deal, the only somewhat relevant piece is the markdown URL syntax, but I can just use [Text - URL] style formatting.

I read that Mastodon is supposed to support markdown, but it seems to not be the case. Doesn't matter, but if someone has anyone info on this, I would appreciate it.

3. Mastodon to multiple Lemmy communities

I tried adding both !testfediverse@jlai.lu and !test@lemmy.ca. It seems only the first Lemmy community URL gets crossposted (I was able to post to !test@lemmy.ca when it was the first Lemmy URL).

Again, this is manageable. I can crosspost (within Lemmy) from my Lemmy account.

4. Direct URL Lemmy link with Text Heading

This doesn't seem to work. This is really annoying.

I can get text heading working on the Lemmy side, but the Lemmy URL always points to the Mastodon post URL:

Is there a way to define the URL on the Mastodon side so that Lemmy understands that the post must point to a specific URL (while having a separate Lemmy text heading and not having the post look like shit on the Mastodon side).

The last piece is critical for me. I don't want to post links to Mastodon in the !tycoon@lemmy.world community.


Lemmy Mastadon (automated crossposting?) interaction issue.


I am a mod/curator at !tycoon@[url=https://lemmy.world/]Lemmy.World[/url]. We cover tycoon game (Project Highrise, Transport Fever) etc.

I also have a Mastodon account:

mstdn.games/@Landgraab_Industr…

I typically only post releases or major stuff (not demos, or smaller early access titles) on the Mastodon account. I also add screenshots and tags for visibility/UX.

Today I clicked on the #tycoon hashtag on Mastodon and to my surprise it turns out my posts on !tycoon@[url=https://lemmy.world/]Lemmy.World[/url] are being automatically propagated on Mastodon:

When I started !tycoon@[url=https://lemmy.world/]Lemmy.World[/url], I was actually considering creating an automated Mastodon account, but it turned out to be more difficult than I anticipated (or I don't know what I am doing).

I am curious how this automated propagation got enabled. It wasn't there a week ago. Is this tied to my mstdn.games Mastodon instance? What's going on here?

I am also not sure I like the current automated propagation method because:

  1. It links only to the Lemmy URL, it doesn't include the post URL (e.g. steam/gog page) which is IMO more important.
  2. Does not include a screenshot of the game (critical for micro-blogging IMO).
  3. Does not include additional tags.

Is there a way to "control" the parameters of this automatic propagation on Mastodon? E.g. by manually adding a "Thumbnail URL" on the Lemmy side, adding an additional post URL and hashtags in the Lemmy body post?

At this point, it almost looks like I am spamming the #tycoon tag. I would much prefer if there was a way to propagate my Lemmy posts on Mastodon using my manual Mastodon template (e.g. mstdn.games/@Landgraab_Industr…).


This entry was edited (2 months ago)
in reply to Agent Karyo

Lemmy and Mastodon have somewhat different purposes and integration between them is never going to be perfect. :/ Ultimately you'll always get better results if you post to the platform you mainly want to target; posts sometimes being visible on the other one too is a side effect.

What would probably be useful for purposes like yours is to have some kind of software that allows the creation of arbitrary or near-arbitrary ActivityPub objects with arbitrary audiences which can include one's followers or any number of groups. I don't know how feasible this is or whether someone has already done it.

A few months ago I saw a post on a relatively large Lemmy community that had clearly been intended for the author's Mastodon followers, but they tagged that Lemmy community (it had a name relevant to the content) apparently not knowing this would publish it to Lemmy. As I recall, this got >100 upvotes on Lemmy, but the Lemmy community's mods deleted that post after a few hours. (Maybe some readers of this saw it too, it was to a "Europe" community and its content was something like "musKKK get the fuck out of EU politics".)

in reply to schnurrito

I get that. I would argue the use case I described is basically the bread and butter of Mastodon <> Lemmy integration (if you don't want your posts to look like shit on either Mastodon or Lemmy).

The critical drawback for me is that you can't have hardcoded URLs/images/headings across both Mastodon and Lemmy posts.

If you can't do that, you severely restrict the scope of integration between the two platforms. This is a net loss because the content I post on !tycoon@lemmy.world is arguably relevant for both forum style discussions and micro-blogging.

This entry was edited (2 months ago)

Is Libreoffice a good Microsoft Office substitute?


Hi. So my girlfriend wants to try out Linux (Elementary OS, she thinks it looks pretty) and needs my help setting everything up (she’s not that good at tech). I’ve never use Linux before. From what I’ve read MS Office is not supported on Linux, but there’s Libreoffice. My gf uses a lot of MS Office for high school (Word & Powerpoint mostly), so I’m curious if Libre is a good substitute? As in compatibility, features, etc.?
in reply to bigsleep

One thing to make your girlfriend's transition easier: you can reconfigure the UI to be more similar to more recent versions of MS office. The first time you open it, there will be a popup that brings you directly to the relevant settings menu. It's not one to one but the major options are going to be in similar places after you changed the UI.
This entry was edited (2 months ago)

2 Instances are being used for coordinated vote manipulation, and should be defederated. chinese.lol lemmy.doesnotexist.club


cross-posted from: lemm.ee/post/60715570

cross-posted from: hackertalks.com/post/8713785
The instances being used are
  • lemmy.doesnotexist.club
  • chinese.lol

Here is an example of the coordinated downvoting hackertalks.com/post/8692093

Of course its a controversial user who got someone angry enough to automated downvoting @DonaldJMusk@lemmy.today

But you can see every post they make gets 53ish downvotes from these two instances, plus some organic ones after a few hours.

Current downvoting Accounts
:::spoiler bot-list

LightIsland@chinese.lol
MagnificentRow@chinese.lol
FondKnowledge@chinese.lol
SillyTowel95@chinese.lol
HelplessDear@chinese.lol
SomberBrain@chinese.lol
InexperiencedCloset@chinese.lol
NecessaryPerson11@chinese.lol
ClosedEmployment@chinese.lol
CoarseHair420@chinese.lol
BurlyChampionship49@chinese.lol
ZigzagNatural@chinese.lol
QuestionableDirt@chinese.lol
ProudDeparture@lemmy.doesnotexist.club
JoyousDouble@chinese.lol
UnitedPatience@chinese.lol
MajesticArea@lemmy.doesnotexist.club
SinfulConference@chinese.lol
MoralDivide96@chinese.lol
LeadingCarry65@chinese.lol
FrillyOpinion38@lemmy.doesnotexist.club
LimitedDiscount49@lemmy.doesnotexist.club
ForkedScreen@chinese.lol
MediumChemistry13@chinese.lol
xXxLawfulGrassxXx@lemmy.doesnotexist.club
VisibleSentence@chinese.lol
AcidicLawyer90@lemmy.doesnotexist.club
PriceySink14@lemmy.doesnotexist.club
ExcellentBeach@chinese.lol
VivaciousNews@lemmy.doesnotexist.club
LankyIndependent32@lemmy.doesnotexist.club
SpeedyFault@chinese.lol
ConcreteHall89@lemmy.doesnotexist.club
WorthyPoint12@lemmy.doesnotexist.club
SurprisedAdult99@chinese.lol
FlashyCrack@lemmy.doesnotexist.club
MasculineBeing@chinese.lol
RichWeird@lemmy.doesnotexist.club
DryCash97@lemmy.doesnotexist.club
AuthorizedChair@chinese.lol
SlimKiss@lemmy.doesnotexist.club
AromaticRoof78@lemmy.doesnotexist.club
BewitchedInterview@lemmy.doesnotexist.club
ImaginaryDraw@lemmy.doesnotexist.club
PertinentGround@chinese.lol
SinfulAssumption@lemmy.doesnotexist.club
AwkwardAnybody30@lemmy.doesnotexist.club
UnwillingRestaurant@lemmy.doesnotexist.club
InsubstantialOven@lemmy.doesnotexist.club
:::

A individual user airing their personal biases and manipulating lemmy isn't good for the community, regardless of how you feel about their target. This is a really bad thing (tm)


in reply to irelephant [he/him]🍭

You are literally linking to the post I crossposted.

Do some lemmy clients not distinguish crossposts?

Edit: I’m wrong, see comments below.

This entry was edited (2 months ago)

don't like this

Lemmy Mastadon (automated crossposting?) interaction issue.


I am a mod/curator at !tycoon@lemmy.world. We cover tycoon game (Project Highrise, Transport Fever) etc.

I also have a Mastodon account:

mstdn.games/@Landgraab_Industr…

I typically only post releases or major stuff (not demos, or smaller early access titles) on the Mastodon account. I also add screenshots and tags for visibility/UX.

Today I clicked on the #tycoon hashtag on Mastodon and to my surprise it turns out my posts on !tycoon@lemmy.world are being automatically propagated on Mastodon:

When I started !tycoon@lemmy.world, I was actually considering creating an automated Mastodon account, but it turned out to be more difficult than I anticipated (or I don't know what I am doing).

I am curious how this automated propagation got enabled. It wasn't there a week ago. Is this tied to my mstdn.games Mastodon instance? What's going on here?

I am also not sure I like the current automated propagation method because:

  1. It links only to the Lemmy URL, it doesn't include the post URL (e.g. steam/gog page) which is IMO more important.
  2. Does not include a screenshot of the game (critical for micro-blogging IMO).
  3. Does not include additional tags.

Is there a way to "control" the parameters of this automatic propagation on Mastodon? E.g. by manually adding a "Thumbnail URL" on the Lemmy side, adding an additional post URL and hashtags in the Lemmy body post?

At this point, it almost looks like I am spamming the #tycoon tag. I would much prefer if there was a way to propagate my Lemmy posts on Mastodon using my manual Mastodon template (e.g. mstdn.games/@Landgraab_Industr…).

This entry was edited (2 months ago)

mysql


@EDIT | don't follow!

standard mySQL procedures and comands

Change from standard SSH root user to enter mySQL management as root
rootname@VPShosting:~# mysql
create a DB with user and paswordMariaDB \[(none)\]> `CREATE DATABASE friendicadb;` MariaDB \[(none)\]> `CREATE USER 'friendica'@'localhost' IDENTIFIED BY '';` MariaDB \[(none)\]> `GRANT ALL ON friendicadb.* TO 'friendica'@'localhost';` MariaDB \[(none)\]> `FLUSH PRIVILEGES;` MariaDB \[(none)\]> `EXIT;`