Please tell your friends about federated social media site that speaks several fediverse protocols thus serving as a hub uniting them, hubzilla.eskimo.com, also check out friendica.eskimo.com, federated
macroblogging social media site, mastodon.eskimo.com a federated microblogging site, and yacy.eskimo.com an uncensored federated search engine. All Free!
Today, our not-for-profit (Framasoft) is proud to present v1 of the PeerTube mobile application, 4 months after its first release! It's the work of a ...
PeerTube is a decentralized and federated alternative to YouTube. The goal of PeerTube is not to replace YouTube but to offer a viable alternative using the strength of ActivityPub and P2P protocols.
Being built on ActivityPub means PeerTube is able to be part of a bigger social network, the Fediverse (the Federated Universe). On the other hand, P2P technologies help PeerTube to solve the issue of money, inbound with all streaming platform : With PeerTube, you don't need to have a lot of bandwidth available on your server to host a PeerTube platform because all users (which didn't disable the feature) watching a video on PeerTube will be able to share this same video to other viewers.
If you are curious about PeerTube, we can't recommend you enough to check the official website to learn more about the project. If after that you want to try to use PeerTube as a content creator, you can try to find a platform available there to register or host yourself your own PeerTube platform on your own server.
The development of PeerTube is actually sponsored by Framasoft, a french non-for-profit popular educational organization, a group of friends convinced that an emancipating digital world is possible, convinced that it will arise through actual actions on real world and online with and for you!
If you want to contribute to PeerTube, feel free to:
Also, is the body text just a low effort copy-paste of what Peertube is? We know that... And there is a news article about the new version which could have been copy pasted instead: joinpeertube.org/news/app-v1
Today, our not-for-profit (Framasoft) is proud to present v1 of the PeerTube mobile application, 4 months after its first release! It's the work of a ...
If he wanted to, couldn't spez just buy it, and make it serve as a redirect to reddit? I don't understand how SOMEONE hasn't bought/used this domain for fediverse purposes.
There's a difference between knowing my baker is a nazi and being unaware of it. It's morally wrong to be knowingly supporting a nazi, whether it's by buying their product or by donating to them directly doesn't matter.
It's true that bread stays bread regardless of the baker's political stance. But it's not like the nazi baker is the only one in town. Just get your bread from a different baker. Bread is bread. The point of alternatives is that you can pick your source, whom you want to support. And that's what OP is suggesting.
First, criteria for what one considers a nazi are open to interpretation and nowadays the bar is ridiculously low. We have a bicycle kitchen cooperative in Croatia where almost all of us volunteers hold leftist views, but there's an occasional boomer known to say problematic stuff as a shitty joke, or a grandma shows up with her son's bicycle that has one of the many Croatian totenkopf variants which the kid put up using same protocol as Marge with a potato. We never refuse to help them. I also engaged some of them in conversation and when you get down to the bottom of their exclusionary views you often find they're decent people with good moral compass and the stupid jokes or totenkopf stickers are adopted wholesale through the media or because of a personal tragedy.
Just get your bread from a different baker.
Sure, the free market will fix it, very American thinking. Sometimes the cure is worse than the disease. Croatia is a good example because our fight for independence in the 90s saw the attempted rehabilitation of actual nazis from the 40s as freedom fighters and Croatian patriots, which means that (still, nowadays) whenever boomers have a celebration with alcohol, there'll be some singing about the superlative exploits of actual nazis. It's just the way our society currently is, it's still our society. The only way to change that is to engage with them and show them you hold a different opinion and are still a relatable human being. I have a feeling most lemmy users would just cancel their entire family if they were Croatian.
do you really need to start fights with people that are striving for the same goal, just because you have differing opinions on other things? do you think that different political parties should never work together?
The idea there should be some definitive, canonical domain for the Fediverse is somewhat at odds with the core tenents of the Fediverse itself - decentralisation, and no single point of ownership or control. And on that basis, we absolutely should not care about a particular domain, or assign any level of 'specialness' to it.
I understand your worry - that some 'bad actor' could buy the domain and do something anti-Fediverse with it and mislead the public, but my response would be to simply not worry. The strength of the Fediverse is that we are diverse and unbothered by whatever nonsense some centralised platform is trying to pull. We don't have a profit motive. We don't care.
People who want to find the real Fediverse will absolutely still find us, all on their own, regardless of who owns some random domain 😀
I've got these things locally available in the $50-60 range. This being a generic brand, I imagine a buncha those are available globally. Anyone tried 'em, do they work OK with modern desktops (gnome, plasma)? Touch? DP-Alt or are they DisplayLink? Do they have PD?
Sellers are helpful nada, same with youtube videos, just marketing fluff.
I have a couple different units. Both recommendable, sub $100 range. Magnetic flaps are handy for slapping them to sheet metal like case sides. One is a trifold, the other a bifold. They stack and sit side by side nicely in many arrangements. Usb-c power pass through lets you Daisy chain a single high current input, they're pretty slick. I've had both of the screens and a gl.inet travel router on a single power feed Daisy chained in series, no issues. Oh man, touch screen though? Have no experience unfortunately.
I am also interested in any experiences, especially regarding the computers you can attach to these small displays. I often see RPi as an option, but I heared about RocketChip, too. What are the best platforms to drive these displays?
them monitors have standard HDMI in, so anything can drive them. for power, there are USB power inputs (a powerbank is easily taped to the back), and then another cable to relay touch. so, kinda cumbersome...
what's way more interesting to me is that they have USB Type-C and there are youtube videos showing phones attached to them with a single cable transmitting video and power and relaying back touch input! not all phones support that, e.g. flagship samsungs do, the ones that support Dex.
question is, how does a laptop that supports DP-Alt handle that; there aren't any videos of users achieving same functionality that way. like, if a phone can power it I'm sure a laptop with 10x the battery can do as well... or?
and then, there's the main reason why this is in "Linux"... how and does it work with wayland and friends?
Is the image edited? 75% sRGB coverage on an IPS panel? That's terrible. I've never seen IPS panels that cover so little sRGB colorspace. Almost all of them will easily achieve the same amount of Adobe RGB per default.
Bought a 9 incher for server because I sucked at remoting in.
Fairly delicate but it was like 40 dollars. It is serviceable and serves the need. Am able to complete simple tasks via the touch screen. It kinda spazzes out with multi selecting/ touch but again 40 dollars.
Cords are fairly obtrusive but never bugged me. Solved by getting on that's mini hdmi but didn't like those from experience with pi
Can turn it off with a little switch in the back which it's mostly off. No issue on power up. Quicker than my dells honestly
I realize this is the dumbest setup but it works 🤷
I have a 7 inch touchscreen monitor that I place in front of my screen and I put YouTube music on their with visualizer. I'm pretty happy with it but I obviously don't use it to do any work
Mine has HDMI and USB c. HDMI for video and audio and USB c has to be plugged in for touchscreen functionality
In my experience repetition helped. Not memorization, but more like muscle memory.
Also, ensuring to never copy and paste commands but to type them in manually yourself. It's hard to enforce this on yourself, but worth it.
I appreciate that this article started with "ways to reduce risk" because that's an extremely valid concern and tied to why you shouldn't ever copy and paste. The one time in my early Linux forays where I copied and pasted I wiped the wrong drive, it definitely taught me to always manually type it in and not get too lazy, because what you copied might not match what you want to do exactly.
To things that helps no mater your skill level the tab key is your best friend and man pages are great but if those are overwhelming install the package tldr then you can use the command tldr and the command you are trying to run to give you helpful examples of how to use that command.
Also old users don't remember long commands if we use a command more than once. You save it to your bash alias file to create your own commands.
Step 1: Use a youtube tutorial for the basic commands. Don't worry, you'll forget about them soon enough. But doing them once, helps with muscle memory.
Step 2: When in need to do something, copy/paste from Q&A/forums various commands that they suggest for your problem. Your basic knowledge from step1 will come back as you do that.
After a few days, you'll be understanding what's going on and how the whole thing works in an abstract level.
Maybe controversial, but the fish shell. I know it's not strictly bash syntax, but the OOTB features are just so user-friendly. The most helpful features for learning: the autocomplete (with descriptions of subcommands and flags!) and the fuzzy history search.
I write bash scripts all the time, and am significantly more knowledgeable than anyone else on my team (admittedly frontend) because I got comfortable in fish.
Mastering the command line? A few observations. First, consult and take notes (yes, even seasoned terminal veterans forget syntax.) Secondly, embrace tab completion. It’s your friend, and a surprisingly effective substitute for remembering every single command. Third, the true test: procure a VPS or remote server and exclusively use the command line. No GUI crutches allowed. It’s a digital wilderness, and you'll learn to navigate it.
Lastly, and this is non-negotiable: keep a terminal window permanently resident on your desktop. Consider it a vital organ, deserving of its space. It’s a constant reminder of the power you wield, and a readily available portal to a world beyond the pretty buttons.
Breakdowns are inevitable; a good night's sleep is often the most elegant solution. 😀 I utilize Zim (for note management) as plain text remains a perfectly serviceable option, in my opinion.
I also use ghostty because it’s themeable, I found adding transparency helped me because i can have whatever I need to see under the terminal (helps for command cheatsheets)
Knowing: - pwd, ls, cd, cat/less, cp, mv, rm, rmdir, rm -rf, ls -lah - command --help - man command | grep thing I care about - bonus points if you have tldr command installed
I'm trying to recreate an install of pinchflat in a podman container that was working on a previous install, but now I want it to run as its own user. I created the quadlet and put it at /home/pinchflat/.config/containers/systemd/pinchflat.container but the user I'm creating this for is a system user without a shell. So I cannot just su into it or sudo -u the command systemctl --user daemon-reload. I'm not really understanding where I'm going wrong.
So I found I had 2 problems. First, I have a Name= line instead of a ContainerName= line in there. Second, diagnosing all this is impossible when theres no shell for that account. Turn on a shell (/bin/bash) for the user, fix this thing, activate it, disable the shell (/bin/nologin), drink heavily.
I ended up with: -----/fuckingarray/homes/pinchflat/.config/containers/systemd/pinchflat.container----------
Hi everyone! 👋 We still see people on the fediverse recommending OpenOffice, despite it having year-old unfixed security issues: en.wikipedia.org/wiki/Apache_O… – So if you see someone recommending it, please inform them about the risks – but also that there are actively maintained successor projects (like LibreOffice). #foss #OpenSource
Re unfixed security issues, Is microsoft office any better? I'm no expert but I doubt it.
And Office is a $129.99 a year subscription right. I'm not sure unfixed security issues is a fair yardstick in this market segment. Maybe just use libreoffice in a vm with no network interface. It'll be a cold day in hell before I send Msft money for an office subscription.
Sorry I forget sometimes. It’s just that OpenOffice is a way better name. “Libre” is a pretty uncommon word in English and LibreOffice sounds like astrology software.
OnlyOffice is good too if you prefer an interface that is more like modern MS Office. LibreOffice is more like 2000s MS Office, so pick the one you prefer.
It is pretty much the same as 20 years ago. That is, good enough for basic use cases but nowhere near as complete as MS Office. It isn't a serious program for professional use.
LibreOffice is good. Very good even. I just wish Calc always had a 1-to-1 feature parity with Excel for it's formulas, it would make it so much easier to collaborate on a spreadsheet with others. I think I had to wait a few years on e.g. XLOOKUP.
OnlyOffice. Newer and somewhat less features, but the UI is so much better than LibreOffice. I've been on a quest to find the best Office alternative and OnlyOffice is what I've settled on
Good there's other free alternatives out there. I'm in the office 97/2003 was peak ui camp, the rest is just a more flashy UI that doesn't really add more value.
Tbh I get them mixed up every time I talk about them. I don't know what's installed on my computers and I will most likely get them mixed up again in the future. I look it up every time but also forget it just as often.
I got the same issue with OpenCloud and NextCloud.
It has a nice ribbon UI like MS Office! Unfortunately it is super hidden as you first need to enable experimental settings before you can switch it on.
Have you actually tried LibreOffice in a while? The Ribbon UI hasn't been experimental since LibreOffice 6.2, which was released in February 2019. It is a normal option, called Tabbed, in the User Interface settings under View > User Interface.
The date seems to be misleading. When you open the comments section and load all comments, you'll see that there are quite a few comments that are 9 years old. The article is thus far older than what it's saying, and it unfortunately showcases again how many people rely on very old (and in this case misleading) information about LibreOffice.
MSI Sword 15 here, with Intel + Nvidia, In my personal experience is runs almost without issues using Manjaro as a Distro (have not tried other distros on this specific machine).
Your experience could be different depending on your specific laptop model and how recent it is.
Keyboard lighting and fan on/off works without issues, the only 'Fn' key that does not work apart from the one for MSI windows software is the one to block the trackpad (and I just configured another keyboard shortcut for it).
~~Using Wayland, I can not use an external monitor connected to the HDMI port on the Nvidia card (No idea if it is fixable now, haven't looked on it recently), but with Xorg I can run an external monitor in the HDMI port and extra ones with a dongle on the USB-C (so far tried with 3 without issues)~~ Edit: I can use multiple monitors without issues on Wayland as of my last test.
Friendly distros recommended these days as far as I know are Mint and Zorin if looking for something Ubuntu or Debian Based, Apart from that there is Fedora or Arch based distros but may need a bit more knowledge and getting used to.
For those of us feeling generous, what are the recommended least scammy ways to truly donate to continuing linux development ? I see a few sites out there when I search but I wanted to hear it from yall.
Looking at Debian's release-critical bugs, you can see that Trixie is close: Testing now has fewer critical bugs than Stable, and the number is dropping quickly. About 200 bugs still need to be fixed to get the number down to where the previous releases were done.
Maybe you can help? Bugs blocking the next release can be as simple as missing translations for the upgrade instructions.
It's been reported (Debian mailing list, Phoronix, Linuxiac) that Debian 13 will likely be out this summer. The hard freeze is on May 15 and usually that means the actual release is pretty close, just a couple of months away.
Phoronix speculated that, since Debian 12 went from initial freeze to stable release in 5 months, Debian 13 could release around August.
I upgraded to Trixie last week. It already worked as flawlessly as I'd expect it when the release is official. It installed a bunch of new packages, removed the same number of obsolete ones, and upgraded everything else. On the next apt update, it asks to reformat sources.list and that's it.
Yeah, I did that in a system as well and seems to work, for for the others I'll have to wait for the final release, too critical. I'm one of those guys who runs a lot of Debian because the risks of a distro like Ubuntu Server are way over what I can be exposed to.
Trust me, at that point there won't be any explaining possible 😁
We've been burned by a lot of distros in the past and right now it all boils down to using Debian and RHEL, everything else mostly failed at some point or will not uphold the stability guarantees. Even containers with Alpine fucked us over once with the musl DNS issues and a few other missing parts...
I burned and tried different distros and all of them the DVD reader laser was moving back and forth like mad and loading and install was so slow that it impossible to continue. Tried 2 different readers.
Fedora Silverblue: the optic reel was moving like mad and loading was so slow that it triggered the anaconda text installer
It stayed there for hours so I desisted
Elementary OS 8: Same as Fedora Silverblue but at least could load the wallpaper installer UI. Not possible to load live OS
Lakka OS: Lakka state on their site DVD's can' t be used anymore for their images lakka.tv/get/linux/generic/
Yeah I know USB thumb drives are like £5 but I wanted to have my silly little fun with my discs and newly bought burner. I remember when I started using linux distros didn't had this kind of problem and live versions could be used, slow but usable.
Lakka is a lightweight Linux distribution based on RetroArch that transforms a small computer like a Raspberry Pi into a full blown retrogaming console.
Try burning your DVDs at the slowest speed possible. When I still used optical media, software things simply would not work if burned fast. I'd set 1x on my burning software. I think my writer was new enough that it'd only go down to 4x but it worked fine.
I'm comming to you for help. One of my family members recently got fed up with windows bloatware and I managed to get them ready for a switch to Linux. This person's daily driver is a hybrid PC/tablet machine ( Lenovo IdeaPad Miix 510-12IKB ).
I booted a Linux Mint live usb session to check hardware compatibility and almost everything is working fine. The only exception is the virtual keyboard display, when physical keyboard is disconnected. It never appears. Would a full install with third party stuff fix the issue ? This is a blocker for the person, and I'm wondering if any of you have experience with switching on a same model, and would advise any distro that comes with full support of the hybrid PC/tablet hardware.
I tried to look for answers and non of the ones I find are recent enough. Some mention hardware compatibility issues (wifi, camera) that have been resolved and are working according my live session test.
I used a lenovo x380 yoga with Fedora. I seldom used it in tablet form, but the keyboard appeared when swiping up from the bottom in GNOME. I did not like it as well as the windows one. I tried KDE as well, I had a better experience there as there are more config options for it. As for drivers and sensors like for the hinge positions, wacom touch stuff all just worked.
try it with a live USB with Gnome as it is way more touch friendly. Fedora latest recommended because the live USB has a Wayland session (older default to X11).
as to seamless transition, no DE on linux is there yet. Gnome is way better than it was a year or two ago in that regard, but flakyness is still present, expecting the polish and reliability of Android or iPadOS isn't realistic.
and save it in the file ~/.Xmodmap and run xmodmap ~/.Xmodmap. Apparently, this worked in part. When I run xev and press Shift+Backspace I get:
KeyPress event, serial 37, synthetic NO, window 0x1200001,
root 0x300, subw 0x0, time 133664788, (484,630), root:(584,799),
state 0x0, keycode 50 (keysym 0xffe1, Shift_L), same_screen YES,
XLookupString gives 0 bytes:
XmbLookupString gives 0 bytes:
XFilterEvent returns: False
KeyPress event, serial 37, synthetic NO, window 0x1200001,
root 0x300, subw 0x0, time 133665052, (484,630), root:(584,799),
state 0x1, keycode 22 (keysym 0xffff, Delete), same_screen YES,
XKeysymToKeycode returns keycode: 119
XLookupString gives 1 bytes: (7f) ""
XmbLookupString gives 1 bytes: (7f) ""
XFilterEvent returns: False
KeyRelease event, serial 37, synthetic NO, window 0x1200001,
root 0x300, subw 0x0, time 133665116, (484,630), root:(584,799),
state 0x1, keycode 22 (keysym 0xffff, Delete), same_screen YES,
XKeysymToKeycode returns keycode: 119
XLookupString gives 1 bytes: (7f) ""
XFilterEvent returns: False
KeyRelease event, serial 37, synthetic NO, window 0x1200001,
root 0x300, subw 0x0, time 133665444, (484,630), root:(584,799),
state 0x1, keycode 50 (keysym 0xffe1, Shift_L), same_screen YES,
XLookupString gives 0 bytes:
XFilterEvent returns: False
With other modifier keys (LeftAlt, RightAlt, LeftCtrl) I still get BackSpace.
But xev seems to be the only application that recognizes Delete. In Wayland applications I get only Backspace, no matter what modifier key (Shift, LeftAlt or RightAlt, LeftCtrl) I press. In Firefox (an X application) there is a change. Now, Shift+Backspace does nothing. I suppose this is because Shift+Delete does nothing as well. The KeyPress event of Shift_L seems to block Delete from being obeyed by applications, which is unfortunate when Shift is part of a key combination that maps to Delete. How can I undo this block of Delete? How can I make the key mapping work in Wayland and X applications?
xmodmap was meant to work with x11 so it shouldn't be a surprise that it doesn't work very well w wayland.
instead, you'll want to use a combination of libinput and evdev along w gnome/kde tools or input-remapper/wlr-inputremapper if you're not using either.
I recently installed Debian 12 on my Lenovo Legion 5 Pro, and am using the GNOME desktop (x11). From time to time I play a game called survev.io . It's a browser battle royale game, not hard on graphics.
I have an Nvidia rtx3060 and have the proper drivers installed. I checked using nvidia-smi and Firefox is using the Nvidia gpu.
The issue is that the game runs smoothly until I press a button or move the mouse. Then the framerate decreases significantly and it becomes unplayable.
I already tweaked the following settings in Firefox to no avail: - gfx.webrender.all = True - enabled hardware acceleration - layers.acceleration.force-enabled = TRUE - gfx.x11-egl.force-enabled = true
And now I'm out of ideas. The game itself isn't too important to me, but other browser games do the same, so it's a wider issue I want to solve.
It's not tho. Their FAQ page explicitly says they're not chromium based (and they speak of both desktop and mobile) Wikipedia also says firefox mobile uses the Gecko engine, Chromium isn't mentioned.
I am no dev of lemmy, but traditionally, to connect remotely to a computer it was user@computer.name. The mail addresses simply use this pattern. It's nice for Lemmy to use it, and I'd say ot would have been nicer for matrix to use it (not that I really care)
Matrix was influenced by the traditional URI schema approach however they also used an inverted URI to have the most significant segment be the first segmont. This is why it has a prepended segment followed by a : and then a URL.
The relationship the URI is describing is homeserver owns user and traditionally we might go homeserver:user I'd argue it is obvious to just invert that into user:homeserver. See Java, dotnet, etc reverse dns naming conventions.
A matrix room is not at a URI, it is on every homeserver that participates in the room. I am not talking about Lemmy and its garbage entirely incorrectly semantic URI scheme. Matrix rooms are globally uniquely identified, and so the room URI only describes the idea of the resource of the room. room:homeserver.
The prefixes are an obvious and neccesary evil for parsing them out of unstructured text. A requirement for most users.
ActivityPub and related went "fuck everything, fuck reason, the web is fucking amazing" and came up with their own flavor of stupidity. Emails use an ancient first attempt at a URL. A URL. What does the URL do? It is explicitly intended to tell you which server to contact. People are going "yeah but email!1!!" entirely moronically ignoring historical context.
For anyone who can't read that many words at once: URI means identifier and URL means locator.
Matrix does not mix the roles of its URIs beyond the ability to attempt to reach that homeserver through NOT ONLY DNS but also through routing between homeservers. Matrix, unlike this garbage, actually wants to support ephemeral clients and such as well.
Nothing I have ever found. Discogs has been around for over 2 decades and the community they have is powerfully organized. They have some big gaps for sure, especially in the Spanish-speaking music world, but it's the best we've got
I was browsing on system76's offering to see what PCs they have and noticed that they have an ARM Computer that apparently faster than the fastest Apple Mac but for cheaper (Based), but I'm wondering, how well does ARM computers game on linux with proton, it is very expensive to me atm and I can't afford it, but maybe in the future I could consider it to be my first desktop as I always been using laptops, obviously gaming isn't like the main priority as I would like a workstation to do heavy work such as blender and stuff and perhaps put gentoo on it in the future (if its supported) but I would like to game on the side when I'm winding down that's all, so can it game well?
Actually, with the work done on box86/box64, you might be able to get stuff running well - last I heard, they got triple A games running around 45 FPS on Asahi on Apple M1.
However, it would be totally unsupported, and who knows how well the Apple M series optimizations will work on another member of the ARM family. (Although, I wouldn’t be surprised if it’s been tried on Ampere at least once.)
Really, the biggest issue is probably power usage - I don’t know if it’s enough to increase your power bill significantly, but it would definitely consume more power than say, an i7. This is due to Altra CPUs really being more for server usage - performance per watt will likely be better overall for those kinds of workloads, but you’re probably not going to make full use of the hardware. These systems are really more of server dev kits than daily drivers.
For a desktop, I’d just recommend a PC with a high end consumer grade CPU like an i7 or Ryzen 7.
With one of these Altra CPUs (Q64-22), I can compile the Linux kernel (defconfig aarch64 with modules on GCC 15.1) in 3m8s with -j64. Really great for compiling, and much lower power draw than any x86 system with a comparable core count. Idles at 68W full system power, pulls 130W when all cores are under full load. Pulling out some of my 4 RAM sticks can drive that down a lot more than you'd expect for just RAM. lm_sensors claims the "CPU Power" is 16W and 56W in those two situations.
Should be awful for gaming. It's possible to run x86 things with emulation, sure, but performance (especially single-thread) suffers a lot. I run a few containers where the performance hit really doesn't matter through qemu.
Ampere has a weird PCIe bug that results in either outright incompatibility or a video output filled with strange artifacts/distortion for the vast majority of GPUs, with the known good selection that aren't bugged being only a few select Nvidia ones. I don't happen to have any of those Nvidia cards but this workstation includes one. Other non-GPU PCIe things like NICs, NVMe, and SAS storage controllers work great, with tons of PCIe lanes.
Should be awful for gaming. It’s possible to run x86 things with emulation, sure, but performance (especially single-thread)
Most modern software (games excluded), is dynamically compiled. This means that it’s not all one “bundle” that runs, but rather a binary that calls reusable pieces of code, “libraries” from the binary itself. Wine is dynamically compiled.
What makes modern x86 to arm translators special, is that the x86 binary, like an x86 version of wine, can call upon the arm versions of the libraries it uses — like graphic drivers. It’s because of this that the people on r/emulationonandroid managed to play GTA 5 with 30 fps via the computer version. There definitely is overhead, but it’s not that much, and a beefy machine like this could absolutely handle it.
"Dynamically compiled" and dynamic linking are very different things, and in turn dynamic linking is completely different from system calls and inter-process communication. I'm no emulation expert but I'm pretty sure you can't just swap out a dynamically linked library for a different architecture's build for it at link time and expect the ABI to somehow work out, unless you only do this with a small few manually vetted libraries where you can clean up the ABI. Calling into drivers or communicating with other processes that run as the native architecture is generally fine, at least.
I don't know how much Asahi makes use of the capability (if at all), but Apple's M series processors add special architecture extensions that makes x86 emulation be able to perform much better than on any other ARM system.
I wouldn't deny that you can get a lot of things playable enough, but this is very much not hardware you get for the purpose of gaming: getting a CPU and motherboard combo that costs $1440 (64-core 2.2GHz) or $2350 (128-core 2.6GHz) that performs substantially worse at most games than a $300 Ryzen CPU+motherboard combo (and has GPU compatibility quirks to boot) will be very disappointing if that's what you want it for. Though the same could to a lesser extent be said even about x86 workstations that prioritize core count like Xeon/Epyc/Threadripper. For compiling code, running automated tests, and other highly threaded workloads, this hardware is quite a treat.
Would you guys be interested if I start a Youtube/PeerTube Channel where I talk about Unix Topics related to Linux, BSD & Plan9 etc... and perhaps rants and rambles about stuff that I like and don't like about how the mainstream treats linux etc etc. (I have a lot to talk about and say) and perhaps devlog updates about a game I'm making (its open source obviously) I don't wanna look like a stupid influencer shill (nobody likes those) but basically I just want a platform where I can speak about what I like and passionate about thats too long to write here, and if a mod/admin is reading this please delete this if its unsuitable for this thread, sorry in advance.
I don't wanna copy them, I have other topics I think they are untouched and it would be nice to start a conversation about them. for example "why the normies complain about the proprietary apps they use but then whene you suggest something they just brush it off" ("I hate facebook messenger, its buggy as hell", "try signal then", "no.") thats one example of the stuff I will cover, basically very obscure topics, that nobody have covered yet
I'm unsure what is going wrong and not having any luck finding a command or file I can tail to figure out why it's having so many problems finishing. Last weekend I tried just installing mint to some unused space on a drive but that seemed to get stuck in the same place. This weekend I'm using the "install alongside windows" option in the installer with the same behavior.
This is being installed from a USB drive into an nvme SSD and I'm really lost s to why it would be like this after more than an hour. Any advice on how to figure out why it gets stuck is appreciated. Hoping to transfer some files over after this is done and then reevaluate if I want/need the windows partition.
I had issues with mints install a while back. Turns out that it was my flash drive failing during the install. I used a newer one with bigger capacity and it worked fine. Not sure if tried a different USB but it's worth a shot.
EDIT: based on your comments you probably have a different issue. But this might help someone else.
Hi everyone, I'm interested in trying out Linux (I'm currently using Windows 11). The issue is that Adobe software - Premiere Pro, Lightroom Classic, and After Effects - is essential to my work as an online content creator, and from what I've read, it's not supported on Linux. Are there any ways to make it work?
I managed to get a very old version of Photoshop to run under wine, but most Adobe software does not function under Linux. Learn about alternatives like LibreOffice, Gimp, Kdenlive, Atril for PDF, etc.
It's run by the main developers of Lemmy, and they're both authoritarian communists (which I just got from Wikipedia as I'm trying not to use the pejoritve "tankie").
Anything that could be perceived as speaking down towards Russia, China, maybe even North Korea, ends up with your comment getting deleted and your account banned for a period of time.
They started Lemmy because @dessalines got banned from Reddit. The backwards thinking is that people shouldn't be banned for speaking their minds, yet their instance is the absolute worst for that.
By avoiding .ml you are helping Lemmy be what it should be -- a decentralized, user owned, user moderated place with sensible decisions behind the scenes.
Yep that's pretty much the long and short of it. People will say, if you just stick to the technical topics then you're fine and they'll ignore you. Which is true to an extent. But you should not have to. And most people don't want to popularize places like that to begin with if they knew.
This part is a small tangential nitpick. What Russia China North Korea Etc have is not communism. They may call it Communism. But what is important to note is that one is uppercase and one is lowercase. One is an adjective that describes a stateless classless society. The other is a noun often used to refer to a tightly controlling state with a strict regiment class structure between the political and non political classes. Honestly I think the term communism is beyond Rehabilitation. Though I would still like to try and see it differentiated from the noun.
I was a poor young man, I refused to pay $100 to put windows on a hard drive I had installed into a hand-me-down desktop.
I found linux and made it work, through thick and thin. As a lazy jackass i somehow got skyrim to work through wine via copied and pasted terminal commands. wintetricks and all, i found it wildly difficult. Playing was almost as thrilling as seeing it work.
I have only ever attempted to make a linux ISO bootable drive through windows that one time, more than ten years ago. My wife was given a laptop with windows 11 installed and I wanted to install firefox.
what, the actual fuck, is "S" mode?
ctrl-alt-t "install that shit"!
A computer should not come with a subscription baked in. That's trash. The issues i get through linux come from my failure to understand it and/or the walled gardens it hasn't found its way into yet. The issues I experienced this evening on windows were there by design.
Thank you to all of the homies that make the weird and sometimes uncomfortable linux/ open-source community work. You guys are the shit.
In windows defense (no means sticking up for them now) It was a pretty unobtrusive OS in Windows 7 and arguably in Windows 8 (but don’t get me started with the UI/UX choices). Windows 10 was decent and for the first year or two felt good running it. But after that yikes….. Then windows 11 comes to the scene and I lost the plot. Looking forward to October though when people throw out their 7th Gen Processor rigs. I got no issues rocking an I7-6700K that is not AI ready
I model all of my UI choices off of old(er) school windows. I have a bar, the menu is left. I was a pirate before anything and I learned on windows. There was a point where it made sense that the world used it, I think that time has passed. I really am such a pleb that hardware issues only effect me if it doesn't work. In this I guess I am saying that the freedom to abuse and break my hardware is important. I don't want to sell my soul or be told "no". install the program, I know it was written for windows. I don't want a microsoft account.
I love your comparison of where issues come from on Linux vs Windows. That's so apt (heh). Even after 10 years of using Linux, I never really thought of it that way.
It's frustrating when any computer doesn't do what you want; but you're right, it's infuriating when the problems are engineered to manipulate you into parting with your money, attention, or privacy.
The issues i get through linux come from my failure to understand it
I’d argue that’s true of any user’s experience with any OS, including what you just experienced with Windows.
Getting out of S mode is actually very trivial, certainly moreso than many of the changes one might be expected to make in Linux. There’s a certain type of user that “S Mode” is intended for. You’re not that user, and Linux is likely to be a negative experience for that user.
I hadn't either until last night. From what I gathered it disables the installation of any softwares that don't come from the microsoft store i.e. .EXE files for programs that were downloaded from the browser. Getting out of S mode is as easy as creating a microsoft account. I had no interest in that for a variety of reasons.
Except they use a bunch of dark patterns to discourge any user from doing it by calling it 'Developer mode' and throwing a bunch of scary sounding warning screens at you when all you're doing is disabling the forced use of the Microsoft store.
It's a super scummy move that will be very effective. Many people will just use the Microsoft store and Microsoft will, once again, have used their monopoly to manipulate the market by forcing their own product to be used (like they got in trouble for in the IE vs Netscape Navigator case)
I guess I just didn't have the patience enough to even get that far with it haha All I could think of was the Netscape thing. It was sooo obvious when i opened edge and got halfway into typing "google chrome" when a giant banner pops up and says "you don't have to install another browser! please bro! Don't do it!"
Imagine turning Windows into an even shittier version of itself, and you've got S mode.
Can't install shit unless it's from the MS Store. Can't use a browser unless it's Edge. Not sure what other stupid shit it enforces. It's supposed to harden the system, but I find that hard to believe.
Ah, like a "stable" mode? Honestly it makes sense from a user support perspective. More locked down, more predictable, easier to secure. In the same way that you can't hack a brick, and similarly useful.
Heh, I'm probably in the minority, but I like the idea of different windows "modes". I've long wanted msft to make versions of windows for different users rather than a one-size-fits-all product. I just wanted it because I'm a power user who wanted something more stripped down and configurable, not a boomer who wants something that won't act as a conduit between my ignorance and scammers.
But it's cool, they can do whatever they want with windows now, they've made it clear they don't want me as a user.
Or don’t, I’m not your father.
The situation Sometimes, you want to get a very specific part of a command output. The classic problem is to get the IP address of an interface.
I might need to give away my Surface Pro 7 soon, and I'm considering what laptop to buy next. For a MS laptop, the surface behaved rather well on linux. Well, if it wasn't for the cameras, which never worked. I'm now wondering which laptop has good hardware support, that would be kinda like a surface, a 2-in-1 laptop. As in, detachable keyboard, that can operate in tablet mode and then once you attach the keyboard you have a full laptop. But with full Linux/cameras/everything support?
I bought it because it was the only one of the few 2-in-1 / convertibles that has the option to come with 32GB RAM and doesn't have the on/off key in the corner of the normal keyboard, which I fucking hate. The price is also great, but especially so when you catch it at a discount.
I run arch on it and it runs well. Needed some manual fixes at the beginning which can be found at: github.com/mudkipme/awesome-mi…
Both cameras work for me. Fingerprint sensor works.
You can click through the different probes here linux-hardware.org/?view=compu… to see exactly what works and what doesn't on different distros at different times. At a quick glance it looks like mostly everything is working.
I recommend the website in general. It is very hard to parse tbh. but once you get used to it, it gives great info about parts and devices and the differences in kernel versions or even distros.
I might need it earlier than announced stage. However it's really interesting to hear they're also working on this format. I'll wait to see further news about this, depending on how soon I need my surface replaced.
Edit: aw, the keyboard isn't detachable on this one 🙁
Hi everyone, I'm going to use Debian with lxde on my machine and I'll need to use Filmora for video editing. Has anyone already tried it? Any problem during installation/use? Any help is appreciated
Windows apps (particularly ones that require that kind of acceleration) are unlikely to work with Wine. And if they do, either they'll be crashy, or they can break at any consequent Wine update. Forget Windows apps. Windows games that are invoking only fullscreen 3D are much more likely to work on Linux because the part that gets re-interpreted is simpler. But apps, that use obscure optimization Windows APIs are a pain to get good support of.
So, I suggest you install kdenlive or Shotcut to do video editing. Even Davinci resolve is a hit or miss on Linux and it doesn't support AAC at all. So get it done with the two OSS apps I suggested instead. In another life I was a music video director for local bands, and so I was doing a lot of color grading, invoking tricks and things that FOSS apps can't do. I switched full time to Linux and FOSS apps, and I just do the basic color grading now. It was sad to see that part of the fun go, but that's what I had to do.
Additionally Filmora is a primarily Chinese company, probably mining data, so it's best to not use it. Same for CapCut.
I prefer the UI of Shotcut, but kdenlive is admittedly more powerful. You can try both to see which one you prefer. I suggest you download the .appimage files of both of them from the website (this way you'll get the latest versions). I'd suggest against the flatpak versions as sometimes they come with limitations of various kinds. Just download their respective .appimage files, make them executable (right click on the downloaded files with your file manager and then go to their Properties to set them as executable), and then double click them to load. If you go that route, make sure you manually update them every 3 months or so, as that's when they usually release updates.
Check out Kdenlive, Shotcut, Openshot, and Lightworks for native apps. If you really need to go the Wine route after that, you can use an easy wrapper app if this is all new to you, like Bottles.
Would it be reasonable to expect a Raspberry Pi 4 to run Nextcloud and manage a photo backup of +100 Gb?
The Raspberry Pi is from 2020, running Raspbian, and it was used as an intervalometer with the help of gphoto2 (meaning no great efforts were demanded from it).
The pictures are on two external hard drives
*1Tb WesternDigital SATA (bought second hand, but "like new" according to the sales guy.
*320Gb WesternDigital SATA (inherited from an AcerOne laptop once I realized it could not even handle lubuntu)
My very limited knowledge on the subject tells me I need to:
*Get rid of Raspbian and install Raspberry Pi OS
*Install Nextcloud (and upgrade an existing account)
*Upload +100 Gb
Would the aforementioned steps allow me to access the files on Fedora/Kubuntu (two separate hard drives on a desktop) and openSUSUE (on a laptop)?
I’m also testing a filen.io account and a sync.com account. All three services (NextCloud, Filen, and Sync) work as I expect on an Ipad.
Filen and Nextcloud have Linux applications, and both have been working without problems on test backups of 100 pictures.
Sync is CANADIAN but not Linux friendly (I tried Wine, didn’t work, gave up)… I’m accessing a free account via Firefox only, so I’m not counting on them for this journey.
So, long story short, I want to back up my files (mostly pictures/scans and some pfd documents) on someone else's computer and locally.
Now the question. Can anyone recommend a guide to achieve what I want?
I’m a cook by trade without any technical (software/hardware) training who has been using Linux (openSUSE, Ubuntu, Arch, Mint) since 2012. Please forgive any mistakes on terminology.
I included a picture of my intervalo-Frankenstein-meter from 2020.
Can you do it? Yes. Will the performance suck outright? Yes. Nextcloud is a pig. I run it on an 18-core i9-10980xe server clocked at 4.5 Ghz with 256GB of RAM, with RAIDED nvme disk, and I don't find the performance adequate on this platform.
C'mon man, gotta 100 wait states on your RAM? I run it on a Intel i3-8100T @ 3.10GHz and it's fast enough. The only thing that sucks is it's written in PHP.
Hum, not my experience. I run it on an old pc as a podman container, for me and my wife, exactly for the same use case of OP: auto uploading the pictures/videos on our phones. Upload is almost instantaneous. Browsing files is fine, but I usually use a separate software to index/search the photos on the upload directory. For all kind of files (documents etc) is good.
Yeah I'm pretty sure a raspi 4 is up to the task. I ran a 512 GB jellyfin server on a raspi 3 for a few months, and the only issue was with transcoding video/audio (raspi doesn't have the right hardware acceleration for that).
Never used nextcloud, but yeah you'll probably want to update to 64-bit raspi os
Thanks for your reply. I do have the eventual video taken in between pictures. The way this is going, I might back up 1 or 2 Gb at first, to see how it all works out.
I am looking for an alternative to proton drive. It does not seem like the Linux app is happening anytime soon, and I want to be able to have a backup of the pictures I duplicate and edit without having to download the file and upload it after the changes I make.
filen.io does that, but the servers are on the other side of the Atlantic.
sync.com does not have a Linux app either.
google drive and mega allow that, but I do not use those services.
In which way do you plan to transfer your photos to the backup storage? In the picture I can see a camera and I assume it uses an SD card. I would, if I were you:
Buy a consumer grade storage device with USB port, like those desktop storage towers from WestDigital
Build a RAID with it if the data is important enough
Connect it to my computer and just run rsync
Some storage tower even comes with an Ethernet port and a web interface. It's practically a personal "cloud".
Nextcloud is resource heavy, slow, hard to setup, and hard to backup/restore. This is from someone who has been using it from when it was Owncloud.
Context: I made a poll on PieFed about the new post flairs (so if you are one of the few hundred people who have a PieFed account, follow that link and answer there). Unfortunately Lemmy has neither polls nor post flairs, so this post is to open up the discussion to the wider Fediverse, or rather the subset of it that encompasses Lemmy + Mbin + PieFed, which is called... what exactly?
Is Threadiverse too traumatic & tainted by association with Meta's (all but entirely defunct) Threads? Is The Verse too cool/poetic/nerdy (but niche) to be understood? I highly advise against Lemmyverse bc mainstream normal people are far less tolerant of tankies than we who are here are willing to put up with. Simply listing the software available sometimes is the best option - like the Interstellar app supports all of Lemmy + Mbin + PieFed, but most support at best 1 or 2 of those - but usually is too long to say and does not roll off the tongue, plus will just keep growing as time goes on. Is Forumverse thus the least bad of the available options, or perhaps you have a better idea? 💡
Anyway, the start to a listing: 1) Threadiverse 2) Forumverse 3) (The) Verse 4) Lemmy + Mbin + PieFed 5) Something else?
I think one of the major tropes present in the show was to demonstrate how there aren't simply white hats vs. black hats (to use cowboy terms). Mal is a criminal, "forced" into living that way bc the government won't "allow" him to live legitimately (except... really? Why won't they again?). Therefore, the presence of great darkness within his lightness, or as you might prefer the presence of occasional boughts of lightness within his darkness, is not a "bug", it's a "feature" of the show, to walk out that yin and yang in a fantasy space opera setting.
Nobody is perfect. Some are far less so than others. Those at least tend to be aware of their imperfections, as opposed to e.g. The Galactic Empire muwhahaha, ahem cough, anyways they seem so stolid, so absolutely certain of their moral righteousness, that unlike the criminal Mal who often isn't such a bad guy once you get to know him, commits atrocities the likes of which would turn people's stomachs, if they knew (hence those are kept as closely guarded secrets).
So I think you missed that: from the perspective of the show, that was no accident - that was literally the entire point of what they were attempting to convey. Mal was not a "good guy". He just had light in his darkness, the same way that the empire has darkness in its light (or is it rather the other way around?).
Yay Jayne was fairly simplistic. The dude barely had any morality bc he was more animal than man. So in that way he played a "straight man" to Mal'a greater level of complexity? He even gave voice to what many of the others were thinking, including Mal himself, but they had the grace to not say it.
True evil requires a minimum amount of "character" in order to achieve anything at all - great or otherwise. So it's less like Jayne was "bad" and the government was "good", and more like Jayne was simplisticly animal-like, while the true evils rose up much higher. With great power comes great responsibility, or whatever.
Jayne is like a wall painting in the background - he's scenery?
As far as Whedon, I dunno, I like a lot of his works, I don't like his character. The two aren't entirely connected in my mind, though perhaps they should be more so, I just don't know.
On the other hand, wasn't all of this pretty much happening even while the show was still in production? You mentioned that it had "aged", so I wasn't coming at this from a perspective of bad show vs. good show, but from it having been a good show where something external caused its goodness to have tanked. If it had been bad at the start, then we wouldn't say that it "aged", just that the show sucked. Which it didn't... and yet, also... didn't it always though? That yin and yang seemed to me to have not been so much changed by the passage of time?
Edit: oh, I haven't heard of whatever has been revealed about the actor who plays Jayne. Maybe that's what you meant. It might change my own perspective of the show in that case. I would hope not actually... but it might.
I'm not sure what you mean by that -> if you mean that we need new episodes, then absolutely! Or if you mean that real life has caught up to implementing those ideas real-time, I think that was always going to be the case, sadly...🙁
Censorverse... If you don't tow the line we'll de-federate you, this aspect of Lemmy defeats the entire purpose of federation, might as well just call it Facebook II.
I feel like that's more just human nature, which occurs everywhere.
Also, you still retain the right to say whatever you want... though conversely, why then shouldn't the other side of every single conversation likewise have the right to opt out of it?
Unfortunately Lemmy does not offer great tools (though PieFed offers many more!) to close the enormous gap between "must federate everything" vs. "defederation, thus no longer federates anything at all". Like there's a "user instance block", which doesn't actually block instances nor users on them. So if someone doesn't like something, block it is then, bc the tools themselves offer nothing else. We are somehow more authoritian than even Reddit was over here!? Yeah, bc Reddit at least notifies you when your content is removed, and offers a modmail to communicate about it, plus a removed post remains accessible to anyone with a link, but not so wrt Lemmy, which shows a 404 not found, please try again later message when a post is removed by a mod. Seriously, "try again"?! - why, is the mod going to reconsider for some reason?
Lemmy already has the "New Comments" sort, which is the biggest feature of forums vs Reddit
Lemmy also has the "Chat" view for comments, which is good but needs to show context with them as my feature request here says github.com/LemmyNet/lemmy-ui/i…
Requirements This is a feature request and not a bug report. Otherwise, please create a new bug report instead. Please check to see if this request (or a similar one) already exists. It's a single ...
Yeah, what features? Polls? Community flairs? The ability to restrict downvotes to only members of a community? The ability to combine multiple communities into one overarching category? And then customize that without needing admin support, and then also share that with other users? The ability to personally block every user from an instance, again without requiring admin approval? The ability to automatically label every user that has a brand new account, less than two weeks old? Or that posts 10x more often than they comment, hence might be an unregistered bot account? Or that gives and receives 10x more downvotes than upvotes, so is at best a controversial and at worst a highly toxic personality - but again, independent of an admin or moderator, and instead being totally in control of the user? Or the ability to block posts based on keywords, but perhaps not all such posts, and instead having granularity of All vs. None vs. Some? Or offering hashtags for content discoverability beyond communities and categories of communities? Or the ability to follow anything you want - a community, a user, a post, a comment (even not made by you) - and arguably far more importantly, the ability to NOT receive notifications for something that you wrote?
PieFed has all of that, and more. Lemmy has none of it. Do as you please, but now you know. Check it out: piefed.social/ .
Edit: even Reddit lacks many of these features. As it enshittified, it kept adding features that attempted to boost its profitability, like various forms of irl coinage, rather than provide stuff that people actually wanted to see.
When the first Reddit migration happened, the migrants called it #Threadiverse and has always been that way. Although some tried to change it (Threads was not around yet, or public, IIRC), it didn't work, the migrants prefer Threadiverse so it stuck.
Changing names in the Fediverse is not easy since it has grown humongous already. Back in 2008 it was simply called #Identiverse. Then a few years later it morphed into the #Fediverse (this was before ActivityPub, yes, the Fediverse is years older than ActivityPub).
Back in 2021/2022, we tried to change the name "Fediverse" because Twitter migrants and the Press/Media were whining too much about it. Even though we reached a consensus, the we were far too small compared to the number of new people.
The people who kept on complaining about the name "Fediverse", when they were asked to participate in the disucssion and polls, they did not. When they were presented with the new name, they either ignored us or started whining again. 🤷🏽
Anyway, if there's a huge population involved, it's not going to be easy.
Now, I'm not discouraging you, rather, I shared our experience in the hopes that you'll find a better way. Because personally, I'm not so fond of "Threadiverse", haha.
If you use, for example, the lemmyBB interface, it's no longer "threadi", it's a forum. 😝 (I know, lame reason.)
Oh! One thing that came out of trying to rename the Fediverse, people don't want "-verse" anywhere because it's overused. Multiverse. Metaverse. Fediverse. Threadiverse. Benverse. Omniverse. Panverse. Whoverse. Trekverse.
It started as a suggestion, then we compiled it and made phases of polls. (The instance clised shop, unfortunately.)
Based on those, the most that got the votes was the suggestion "Mycelium". It was inspired by Star Trek: Discovery and the real-world mycelium.
The second one, I can't remember but it was also related to nature's fungi or plants.
The list of suggestions and votes were based on who participated. And at the time it was done, it was the Twitter Migration, and people were complaining loudly about the name "Fediverse". And yet, those who participated were mostly pre-Migration people (who generally didn't have a strong issue with "Fediverse"). 😄
True, but doesn't Xhitter and Bluesky and Mastodon also have a type of voting? Even if it is called or functions slightly differently?
I did not explain much of the back story, but the Fediverse is already the term used to describe federated social media, so the term here that we need is to pick one that describes the specific subset of it that focuses on threaded conversions, centered around those topic areas (called posts, and then those topics being further aggregated into higher-level topics, called communities) rather than centered around a user tweeting/X-creting/whatever their shit.
And we also have a focus on much longer-form content than those others, which like Mastodon have smaller character limits imposed upon their thoughts (so that they cannot ramble on as I have done here:-).
I don't think likes serve the same function as votes. The downvote, the ranking as a function of score and recency, and the surfacing and consensus-building that comes as a result are the main point of this sort of platform.
By contrast, the microblog "like" (at least on a platform without an algorithm, like Mastodon) doesn't do anything other than express appreciation.
Threads are common in pretty much every form of social media now, from friend-aggregation sites like Facebook and Friendica to messaging services like Discord and Revolt. They're hardly exclusive to a Reddit/Lemmy-type service. Mastodon even organizes posts into threads (though I think that it does so in a much more clumsy way).
I noticed PieFed.social on page 9, and the link is functional, even though next to it the status says "disabled".
That site doesn't seem very trustworthy. I wonder if it is measuring how "Lemmy-like" an instance is? Anyway I've never heard of that site before, but passing the note to @rimu@piefed.social anyway in case it helps:-).
IIRC Lemmy and Mastodon PMs are different and incompatible. If you can receive PMs from Lemmy users then you should be able to receive auth codes. Currently @rikudou@lemmings.world is adding both Lemmy and Mastodon PMs here: github.com/ismailkarsli/lemmy-…
Also software other than Lemmy and Mbin needs to add ‘roleName: Administrator’ to their user webfinger requests. This is because ActivityPub doesn’t have a standard way to expose user roles.
I’m thinking of adding another ways of verifying like DNS based verification but still not sure. Any recommendations are welcome 😀
This week, it finally happened. I think it’s the first time in 20 years that a hard drive has died on me without warning. And it was also the first time I was using an NVMe drive, but that could be a coincidence.
The drive was still under warranty (barely a year and a half old). I even had a spare lying around. But the true cost of restoration is, of course, my own labor. My planning had not been perfect (for such a remote event, as I had judged). However, it was easy enough. I simply installed NixOS from a USB loader and downloaded my configuration from my backup on my NAS (daily rsync jobs to the rescue). I also downloaded all the important files for my home directory. Then, it was simply a matter of adjusting a few things in the configuration file, rebuilding the system, and voilà. Well, except for a few things that didn’t work quite right for some reason and had to be manually fixed, but nothing major.
However, next time I want this to be even easier. It’s probably overkill to install a RAID controller and have multiple drives running in RAID1 or RAID5, but the restoration process is still too much manual work. I was thinking of regularly backing up my main drive on the block device level, so I would just have to swap out the drive and restore the delta from the backup. I’m not quite sure if that’s feasible or a good idea. For my personal system, I have to balance the investment of preparing for a disaster with the likelihood and impact of such an event. This seems like a good trade-off, but I would be curious to hear how other people prepare for drive failure.
I have successfully restored a whole disk to a working OS from a borgbackup, which takes much less space on the backup storage due borgs extremely efficient compression and deduplication.
So thats what I would recommend.
I backup all my computers and servers with borgmatic.
If you need any help with setting it up, let me know.
Thanks, that looks interesting! I wonder how that compares to something like btrfs snapshots. How easy is it to restore a whole disk as opposed to files and directories?
I have btrfs snapshots with snapper on my desktop. It keeps the last 20 snapshots. Sending them to a second drive would require an equal amount of space as the main drive, which is ~850GB / 1T full.
But the borg backup for the same takes only ~450GB and also keeps the last 20 versions.
So I use btrfs to restore situations about filechanges (for example a bad system update).
Borg is easier to set up a central server for all my devices, because it takes much less space. So I use that in case where the drive fails. To restore I set up the same partition layout as before and then throw the borg backup at it. It seems pretty easy so far.
You don't need a RAID controller, I have dual NVME set up with RAID1 and boot off the RAID one partition, the only partition I can't raid is the EFI partition because BIOS doesn't know about it, but that I simply duplicate by hand on both drives using dd, since it only gets updated at kernel updates, it just adds a dd to the kernel upgrade process.
Yeah, I assume you don't. But with my mainboard I would take a big performance hit, since it does not offer full speed if you occupy both M.2 slots. How do you manage the RAID by the way? Is that all handled by the BIOS?
The BIOS does not know about the RAID, the is why the EFI partition has to be a regular partition, but there is nothing forbidding more than one EFI partition so simply duplicating that across both drives ensures the same redundancy the RAID offers, but GRUB DOES know about RAID 1, so if you setup a raid1 array as the boot partition and then just write the boot block to both drives along with the EFI partition you can RAID everything except the EFI boot partition. Sorry your motherboard reduces your speed if you have more than one nvme, sounds very odd. Mine does share bandwidth if the SSD's are SATA but NOT if they are nvme.
I noticed while updating my system just how many packages I have installed that I don't recognize.
I tend to think that minimalism is better for security, so I'd like to remove any packages that I'm not using, but this is a bit of a scary task.
Does anybody have a safe method for reviewing and purging unused or bloat packages while obviously making sure not to accidentally remove important dependencies?
EDIT: More information provided. I disagree with the upvoted comment implying you should leave your system alone because you might break something. You're using Arch, and part of the reason to use Arch is understanding how you built and maintain your system. Understanding how to inspect your system and perform proper maintenance is a crucial part of that. Read and think carefully before taking any actions and make sure any important information is backed up before taking major actions. Without throwing too much further shade, I find it disappointing so many in the community would take that stance and discourage you from pursuing this further.
When I switched to Arch, I started a notebook in Obsidian with a bunch of different information in it, I have a section devoted to Maintenance. Here are a few things I've put in there:
Clean orphaned dependencies: sudo pacman -Rs $(pacman -Qtdq) - man.archlinux.org/man/pacman.8… - Qtdg, Q (Query) t (unrequired) d (dependencies) g (groups) - Rs, R (Remove) s (recursive)
Additionally, you can run pacman -Qe to list the packages you yourself have explicitly installed with pacman, or pacman -Qdt to list the packages that are dependencies of other packages. Use pacman -Qm to list packages not found in the official repositories (i.e., things installed through yay). This will allow you to review packages you may have explicitly installed in the past for some reason, but now find you no longer need.
For yay, I'm unsure if I should be using -Yc, -Sc, or -Scc. If anyone has more info with that, I'd appreciate it.
For flatpak: flatpak uninstall --unused
And for journals: journalctl --vacuum-time 7days
That's most of the "automatic" stuff, cruft that can be cleaned out with little to no consequence. Other than that, you'll just have to manually review what you have on your system.
If anyone has other commands or comments on the ones I provided, I'd be happy to accept further advice here as well 😃
These are just dependencies for your packages. However, Arch doesn't automatically clean the downloaded files after installation so that ends up taking space. On my Dell laptop that has only a 64 GB eMMC, the installation package files took and whopping 5 GB of space, sitting there doing nothing. I nuked them (it didn't remove the installed apps and libs, only the already used package files). Run: sudo pacman -Scc
Just leave it. Either they do something in the background. Then you'll get issues when they're missing, and you'll never know which package is missing for what. Or they don't do anything, then they just take up a few MB of disk space.
"Cleaning up" is the most sure-fire way to destroy your OS, and absolutely not worth anyone's time. Trust me, I've made that mistake multiple times.
Or don’t, I’m not your father.
The situation Sometimes, you want to get a very specific part of a command output. The classic problem is to get the IP address of an interface.
You're welcome! And actually, even this approach can yield surprising results... As in have you heard of deprecated IPv6 addresses before? Well I hadn't until I realized my interface now had one (it actually didn't anymore when I wrote the post, I used the jq command on old output, not in a pipe). Which made my DynDNS script stop working because there was now a line break in the request URL that curl rightfully failed on.
Edit: also despite what the title of the post says, in not an authoritative expert on the matter and you can use whatever works for you. I see these posts more as a basis for discussions like here than definitive guides to do something the correct way.
As in have you heard of deprecated IPv6 addresses before?
Definetly not 0.o
It's really hard to actually believe that a problem like this hasn't got a 1-word-command + flag solution yet. I mean you could ecxpect something like
ip -6 -i eno0
or so...
And yes, totally agree on the edit part! It's always nice to at least no about all the options that exist and smb found out hustling the same struggle like me 😁
I'm a retired Unix admin. I've been using Linux since I installed Slackware 3.1 from several boxes of 1.44MB diskettes. But, working in a corporate environment with lots of M$ Office requirements meant that my work desktop has always been Windows. I know it sounds crazy, but I was really hesitant to switch to away from Windows - I guess after 30+ years I'd developed a bit of Stockholm syndrome. But, Copilot and the looming Recall were enough to push me over the edge.
Anyway - I spent a while making sure I got all my data off OneDrive etc. and then installed Debian 12 with LXDE - my laptop is an older i7 with 16GB of RAM, but lightweight and minimal really appeals to me. Everything just worked and I was happy for a day or two. Then I started noticing video tearing - especially on my 2nd monitor. I did a bit of research and found a suggestion to enable TearFree in the X11 configuration - X wouldn't even start when I did that. So, I did some more reading and now think I understand that the lightweight window managers don't have vsync and this causes the tearing. Apparently the real solution is to use a compositing window manager (I don't understand what that means..) with OpenGL. Oh well, I can't have minimal lightweight - so, I installed KDE. It's very clean and no video tearing. I still don't have it doing power management for my monitors the way I want, but other than that - I'm very happy. It was noticeably sluggish compared to LXDE, but I'm used to that already after only a day.
It's only been a few days, but I have not regretted the switch for one second.
I currently use windows 10 in my daily life. I often play games, use browsers, basic stuff like that. On top of that, I also experiment with different music software, mostly Reaper for now. I edit videos and images at a very basic level as well. Upon switching, what should I expect to change? I'm considering Pop!_OS seeing as its praised for its compatibility and easy switching. What's the situation with gaming look like? I know gaming on Linux has been a HIGHLY discussed topic for a while, is it easy to play any (non triple-A) steam game? I'm nowhere near involved in computer science, I'd just consider myself more stubborn than most end-users so I can persevere through some basic problems.
Many things are very similar on Linux compared to Windows (e.g. Browsing, Steam). One big difference is that people prefer using package managers to install software (instead of downloading and installing it manually).
I’m considering Pop!_OS seeing as its praised for its compatibility and easy switching.
Pop!_OS is a nice distro and it should work well for you if you like the UI. There also many other good distros if you want to play around a bit. You can easily test them using a Live ISO.
What’s the situation with gaming look like? I know gaming on Linux has been a HIGHLY discussed topic for a while, is it easy to play any (non triple-A) steam game? I’m nowhere near involved in computer science, I’d just consider myself more stubborn than most end-users so I can persevere through some basic problems.
I'd say that you can expect almost all games to work. The main exception are games with anti-cheat that decide not to support Linux. In my case, there has only been one game in the last two years that didn't work (War Thunder crashes a lot more than on Windows). Playing AAA games is generally not an issue. You can check protondb.com/ for specific games.
I hope you don't care about functional HDR support, nor having access to the Nvidia Control Panel or Nvidia App (So no 3D Settings, no Shadowplay, no RTX HDR). Two major reasons why I'm sticking with Windows for now.
Be prepared to ditch a few apps when switching to Linux! Most games work great, but those sneaky, spyware-heavy ones? Not so much. (/me looks at GTA Online & League.)
For games it's really great unless that game you're looking for has kernel-level anticheat. You can check ProtonDB for Steam games, Lutris for other platforms. If you prefer single-player games mostly like me, you won't have much of a problem.
For music, there are software like Ardour and LMMS. For video editing, you can check KDEnlive.
Before switching, I suggest you to try at least a couple different distros on a virtual machine, better if you have a separate laptop to try things. PopOS is great. You can also check Linux Mint, Bazzite and openSUSE Leap.
Play all your games on Linux. Lutris is an Open Source gaming platform for Linux. It installs and launches games so you can start playing without the hassle of setting up your game. Get your games from GOG, Steam, Battle.
I'm excited you're giving Linux a try! There are a ton of excellent ressources online for learning about Linux, how to make it your own (a practice commonly called 'ricing'), or fix errors you may encounter. These are explored further in the links below 😀
Picking a distro. What I hear is that, unless you have some problematic hardware it doesn't really matter what you pick. So if it feels overwhelming, don't stress too much over if it's the "right one", you can always try different ones out. Having said that, my impression is, many coming from Windows seem to be happy with 'Mint'. Likewise 'Bazzite' seems popular as of late. But 'Pop_Os!', 'Debian' or 'Fedora', are also all perfectly valid choices. Personally I've liked using Endeavour OS with KDE, for quite a while.
Software. There's so much cool software out there, so maybe search around for which can solve your needs. I like browsing Flathub.org or blogs, such as, Phoronix to discover new software. There might also be a discovery feature in the distro itself. Both Firefox (and its derivatives such as LibreWolf) and Chromium (along with its derivatives: Chrome, Brave, etc.) runs well. Even the much smaller project: LadyBird, does so. I have no experience with music production software on Linux, so cannot comment on that.
Games. Might depend on which types of games you play. But to me it seems Steam (using Proton/Wine), Heroic Games Launcher, and Lutris, works great. The steamdb as others mention is also a super ressource!
If you made it this far through my wall of text, I'm delighted by your curiousity. Two Linux "introductory videos" I'd like to share are respectively from Nick@thelinuxEXP Linux isn't (just) better, it's also more FUN! and Brodie Robertson's Linux Resources Every New Linux User Needs OdyseeYouTube
tldr: What reliable, up-to-date, linux distro would you recommend a gaming softwareengineer and privacy enthusiast?
Full text: Hey all, I know this is the age old question, but I would like to ask it anyway. I am currently switching from windows to linux on my main pc and am on the hunt for a fitting distro. I am a software developer and used to working with wsl, debian servers, etc. I selfhost a bunch of things and know my way around the linux commandline and would call me privacy enthusiast that uses a lot of FLOSS software. I also do occasional gaming but I guess that should work on any distro with enough work.
My thought regarding a few distros: - I like to live on the edge of time and therefore have the feeling that debian based distros (although being very stable) are too "old" for my liking. - Ubuntu - Canonical is out for me. - I also looked at fedora, and liked it, but after reading more and knowing it is backed by IBM and that is US based I am not too sure anymore. I ideally would want to have something independent. Although being backed by a company promises continuous work in the future (with the risk of becoming bad). - OpenSUSE tumbleweed seems promising (german origin!) but also quite intimidating as it is apparently mostly targeted towards power users and I am not sure if it fits an all purpose desktop pc. - Arch based distros seem great as it contains all the newest packages and is infinitifly customizable. But the KISS nature of arch and the (as far as I understood) high effort to get everything running is a bit intimidating when switching from windows. But I also do like the fact that it ships with only the bare minimum and not anything bloated.
Further more I somehow think that using a base distro (in comparison to a fork of a fork...) is more ideal as they receive updates, etc faster. But that is just a feeling and I couldn't argue more precisely about it.
Regarding a DE I am definitely going KDE.
I would be very happy for some tips, opinions or pointers in the right direction to continue and finally get rid of windows... Well at least mostly. I guess i will keep it in dual boot as I do play a few games that unfortunately won't run on linux.
I would recommend Arch, EndeavourOS or Garuda (awesome KDE gaming ed,) and a lot of peeps like CachyOS, mostly for their customized kernels/CPU optimizations. You can get CachyOS kernels inside of Garuda as well.
Similar thoughts and after hopping a bit I'm liking Solus really well. It's rolling release but what they call "curated" rolling release. They take a little bit of time to iron stuff out. There's a weekly update cycle.
The installation is through live ISO and was pretty easy, took only a few minutes. They have a Plasma ISO too, since you mentioned wanting KDE.
As a plus, I've not once used the command prompt in the past couple of months since I installed (GNOME first and then since the last week, KDE). I'm not averse to commands but I do want something that I can recommend to my less techy anti-capitalist friends. My games have all been working fine too.
Edit to add: I think they've also mentioned that their aim is for a personal desktop.
Well from what you're saying I'd go for something like EndeavourOS.
Based on arch, usable out of the box but without much preinstalled so that you can do your own mix. Manjaro is a bit similar but with more preinstalled (and maybe more bugs from what I read).
I NEVER recommend Manjaro. They hold back packages for "security/stability" reasons which is antithetical to Arch's structure. This can cause stability issues (happened to me) and even breaking your system.
LOL, did they? It wouldn't surprise me. I remember there was some internal in-fighting going down, someone got accused of stealing funds, buying a personal laptop. Drama aside, it is a dangerous Arch derivative that is highly promoted, especially for newbies. Sad.
EndeavourOS is almost indistinguishable from Arch once installed. On that we agree.
The idea that getting it there has no value is something we can disagree on. You do not have to agree with me. That is not a problem.
I just installed EndeavourOS on a 2020 T2 MacBook Air the other day. All the hardware worked flawlessly after the point and click install. Read the vanilla Arch instructions for that hardware sometime.
EndeavourOS offers a path to installing Arch that is painless and offers a high chance of success. It configures the system well. It is easy to recommend.
Same kernel as Arch, 99.9% of the software is installed from the same repos. AUR is enabled out of the box. Just works. No brainer.
And even though Arch only adds about a dozen optional packages on top of Arch, some of them are pretty useful.
Like others have said Arch is not as intimidating as it would appear to be. Over the last couple of years, they improved IHMO the most difficult process for the average user of installing Arch. You now just run archinstall Then follow the system prompts. It's constantly being improved. If you do go with Arch, aside from using Pacman to install apps, you can use "Yay" or "Paru" or others which pull from the vast AUR repository.
I used Arch for a few years and recently moved over to Aurora Linux (Immutable KDE distro adapted from Fedora's CoreOS and uBlueOS which is an offshoot of CoreOS) Specifically, I use the Developer experience of Aurora which gives you a VSCode type of editor as well as Podman desktop included as well as other items. It's meant for those who wish to develop and not have to worry about keeping the system up to date. It runs updates in the background and rebooting your system will run the updates.
The reason I left Arch was simple, I used to like to live on the edge of software as well, until it took one too many hastily released updates which borked my Arch system. My home PC has morphed from being my dedicated computer to my wife's and my computer which is fine, but I'd like to keep it available for her avoiding the need to do a repair because an update broke it.
Keep an eye out for the KDE Linux OS which they have in development and not yet for use, but is earmarked for being the official immutable OS for KDE which will receive their bleeding edge updates. linuxiac.com/kde-announced-its… community.kde.org/KDE_Linux
I plan on migrating to that once it's finished. 😀 I've become a fan of immutable OS's because they allow you to roll back if something should go wrong. Which it rarely does 😀
until it took one too many hastily released updates which borked my Arch system
That is one of the major fears I have with arch, as arch is apparently the distro where this is the most likely to happen. Is there something to recommend to minimize these risks? Just use btrfs and do a snapshot before doing anything 😁 ?
Give NixOS a look-see. Takes a different approach to package management, but for an engineer that want's customization abilities it's probably one of the top choices.
A lot of people put time into maintaining their dotfiles, but NixOS takes that idea to the infrastructure-as-code level when you use it as your daily driver.
ETA: in terms of gaming, with Wine/Proton + Steam/Lutris/Heroic pretty much any distro will be workable
Nix is a tool that takes a unique approach to package management and system configuration. Learn how to make reproducible, declarative and reliable systems.
Based on your write-up, one of the Arch based distros is likely your best bet. My strong recommendation would be EndeavourOS. It is awesome.
If you use EOS, install both the current stable kernel and the LTS one. Use current day-to-day. In the very rare instance that you have a kernel or driver issue, boot into LTS.
Fedora is a great distro. As a non-American, I would say that you do not need to be so focussed on either IBM or the “American” control over Fedora.
1 - Fedora has a great community and a strong commitment to Free Software. Independence from Red Hat’s commercial agenda is the very reason it exists.
2 - Even in a worst case scenario, you are not locked into Fedora and switching is low risk and easy. There is little downside to enjoying Fedora now even if something was to happen later (however unlikely).
3 - modern Linux distros are almost all built from the exact same base elements. Fedora is really no more exposed than anything else.
4 - Red Hat is a driving force behind half the technology at the heart of whatever distro you will end up on including SystemD, Wayland, Pipewire, Glibc, GCC, and the Linux Kernel itself. To repeat point number 3, you are no less exposed to the influence of IBM/Red Hat on Ubuntu or even Arch.
I mean, you could use something like Chimera Linux that avoids SystemD, GCC, and Glibc. But you would still be using Wayland, Pipewire, and of course the kernel. And Chimera does not sound what you are looking for.
I would recommend EOS but I would not avoid Fedora for the reasons you cite.
Ubuntu/Canonical gets flak for telemetry & Snap packages, despite PrivacyTools.io recommending it. Criticism stems from perceived compromises on privacy & a "walled garden" feel, despite being a better option than Windows/macOS. It's just a clash between open-source ideals & pragmatic realities.
Doesn't seem like anyone mentioned it yet, so I'm gonna chime in: Bluefin-DX by Universalblue might be worth a look.
It's a special developer version of their already interesting and rock solid atomic distro, meaning it's not rly meant that you do much with the OS part of the filesystem (I'd recommend you read up on it, since I can't explain it that well) It has VSCode preinstalled (you can replace it with VSCodium tho with a simple command IIRC) and allows you to spin up virtually endless Linux environments where you install your additional programmes that aren't available as a Flatpak (you can still use them in the CLI, DW)
Tab grouping is so useful and something I've always had to resort to extensions for. Good for Firefox for this, can't wait for it to make its way to a browser that doesn't sell users data.
Yeah, it still seems like an overreaction to a poorly communicated change, which, yes, might mean they'll do it in the future. But for now, they have the benefit of the doubt from me, and once it starts happening, I'll move to a fork. That being said, I don't know anything about the code, so I have to count on the community to make it known that it's actually been implemented. For now, as far as I understand, the only indication that they're even considering it is that change in the ToS or whatever. Nothing else to suggest it's happening.
Many races believe that the creation of the Universe involved some sort of God, though the Jatravartid people of Viltvodle VI believe that the entire Universe was in fact sneezed out of the nose of a being known as the Great Green Arkleseizure. The Jatravartids live in perpetual fear of the time they call "the Coming of the Great White Handkerchief," somewhat similar to the Apocalypse. However, the Great Green Arkleseizure theory is not widely accepted outside Viltvodle VI and so, the Universe being as wide and strange as it is, other explanations are constantly being sought by different races throughout the Galaxy.
Meh. The number of tabs I have open at any given time almost never exceeds six. If I don't need em, I close em. I do make use of bookmark folders: I have three folders called 'Today', 'Weekend' and 'Temp', which is the order of going though websites I have saved. That way, I take action on every website I've added to those folders and end up with no tab clutter or bookmark hoarding.
I, and many others, start closing stuff when there’s more than a handful.
Others, like many, just run then forever and ever. A sea of icons, tiny and compressed. Worrying they’ll lose that tab they really like in amongst the clutter. Unaware of the history feature.
History shows everything I've ever been to including the "nope that top result in my search engine actually didn't contain the search string anywhere in its contents and is thus useless to me." pages
Bookmarks are for things I routinely go to for years
Tabs are useful results for the projects I'm working on now.
Pinned tabs are the pages I visit multiple times a day.
I'm aware of the history feature. It doesn't do what you seem to think it does (keep a tab in suspension in an easily accessible location over multiple hours or days of browsing).
Now, the OneTab extension? That's actually suitable for this purpose. History doesn't do what it does.
Isn't that the best way, though? I'm searching for something, but now I don't need to do a web search because I've saved the link to it already. And I didn't have to dig through a long list to find it.
Oh yeah, when it comes to bookmarks I gave up trying to organize them into folders a long time ago, and I now try to add a few keywords/tags to the description to hopefully get the bookmark when I type in the address bar now.
Yeah, older folks remember the times before browsers had any kind of memory management w.r.t. tabs. And you had maybe 8GB RAM (and that would have been considered beefy). The browsers themselves were also, more often than not, just straight up memory leaks. The longer you kept the program open, the the more RAM it would take until it broke.
No shot you could run up anywhere near those numbers of tabs before your entire system would get bogged down and eventually the browser would crash (and you'd lose them all)
I like Arc's user experience with vertical tabs. They are bigger, easier to organize and they are cleaner. Also, the sidebar toggle is hard to work with, ideally I would prefer the ability to toggle with a shortcut or reveal on hover.
Aside Arc, Zen browser has a good vertical tab experience.
Overall, I still main firefox for my personal browser, though it's UX is still lacking.
There is a keyboard shortcut. It's CTRL+ALT+Z for me. Unless you mean something else?
As for the "reveal on hover", iirc there was a dismissable message that said it is coming soon.
If I can share my opinion, they are more than big enough if you toggle the checkbox "optimize for touch screen". I would have to try Arc or Zen again to understand what you mean.
The only complaint I have is that I need to hover (or expand) to see the title. It becomes annoying when I'm reading documentation and I end up with multiple tabs with the same icon.
EDIT: I can't seem to find the "optimize for touch screen" checkbox anymore, but I'm sure there is something like that somewhere because I enabled it on one of my devices which has a touch screen.
EDIT 2: the "optimize for touch screen" option can be seen by right clicking the toolbar and choosing "Customize toolbar". Changing the density to "Touch" (on the bottom) makes these icons bigger.
I have a few use cases: 1. Many youtube videos that are like 30+ minutes long saved for later 2. Documentation on some stuff that I need to go back and forth 3. Movies or games that I found, but don't want to write down and forget 4. Going down rabbit holes on wikipedia and saving it for another day 5. Everything else that catches my attention and deserves a honorable spot in the tab bar
Basically, I use my browser as a notebook. Thanks for coming to my TED talk.
I will do my good deed of the month. You seem like a prime candidate for Tab Stash. Does the same but better than Tab Groups. Check it out. You might like it.
I used to feel the same way. But recently I just don't have time to 'finish' each tab/section. When I was younger with more time, I could.
For example, the first section of my browser are several self hosted apps I'm currently implementing. So I don't want to lose the relevant forum posts/documentation.
Second section are some articles I coiling finish reading.
Third section is something I'm researching for my work.
Fourth are media tabs, some YouTube videos I haven't finished, a music tab, etc etc
So basically if I had time to read the articles, one section closed. Or finished my implementation, etc.
The hard part this is is every week. Always new projects, work or personal. Always new studies to read. Always new vids. You get the point.
Bookmarks are great if I remember what I want is there. Usually bookmarking is like putting a piece of paper in cabinet that I will never open.. A tab is leaving the paper on my desk for me that I will rediscover.
Hence the groups having the ticket name related to the task I am working on. When the task closes I delete that group once I've ensured anything important for future context is documented and then I say goodbye with confidence.
I don't bookmark things for work tasks, I log them in tickets or commit it to readme/code comments/team docs somewhere.
Edit: I should also note that my workflow uses Simple Tab Groups and not much of this new core feature.
Simple tab groups hides all other tabs and you switch groups via a dropdown. I usually only have 10-12 tabs open at once.
Yeah, that is just asking for data to be forgotten. The functional difference is:
You have your browser with let's say 30 tabs. You can't forget what you need to, because they are always open. So to catch up, you have to close out your tabs or lose everything.
Compared to adding something to a list, which requires you to manually go back and remember what you needed to do. But if you have 100 things to every week, and those constantly get added on, you will always lose data to return to if you're not actively tracking it, hence the tabs.
It's a very simple concept. A lot of people have a lot less time to do all the things they need to during the week. People on their computers all day, or with less of a workload, can't comprehend this without opening their mind to a different perspective.
I know, because I used to feel the same way about people who had 20+ tabs. But at that point in time, the thought of not having enough time to get to everything and adding 50+ things to do every week (meaning 200 - 400 new tabs every week) was foreign to me, and your suggestion makes it quite literally impossible if you care to actually complete everything you wanted.
I can't tell if you're serious or not. A bookmark bar will never be able to easily contain everything you need. It requires manual review (expanding the bar, manually browsing every bookmark and re-opening tabs [and you're suggesting to bookmark 50+ pages every week.. impossible]). So not only are you implying it would be better to add 2 - 3 additional steps to the workflow, but also you are missing the very functional fact that a bookmark bar is a lot less accessible than a scrollable tab bar with an instantly opened window with what you were working on.
Tabs also remember where you are on the page. I read long studies, and implement complex projects. Bookmarks will re-open every tab at the start of the page, not word 600. There are just too many reasons as to why tabs are more functional than bookmarks and saving data to lists. A big part of it is the size of the persons workflow, someone with a smaller workflow may not be able to see how impactful those additional steps in the process are.
Go to Settings > Design, and then under Tab Bar Style select "Vertical Tab Bar (experimental)". I recommend checking the "Collapse Vertical Tab Bar" checkbox, too. That way, the tab bar collapses into icons when your cursor isn't over it, taking up less window space.
The way they did it though.. the tab group name cant be collapsed so it takes a lot of room. I find I'm still using task oriented groups from the Simple Tab Groups extension, and then using the new core groups feature as a way to group subtopics for that task.
And before you say "you must have a million tabs".. I used to have millions of tabs, but now i average less than 100 when I have a lot of tasks I need to balance, and I know what all of them are open for. So when I complete a task I delete the Simple Tab Group and say bye to all those tabs.
ive seen this in opera, and instantly ran into the options to disable it. i donno how many tab you guys have in the browser, but may god forgive you all for using the browser wrong.
I'm not usually one to really care about how others use their tools, but I agree with this completely. Tab hoarding is pathological.
I get stressed out if I have enough tabs open in one session so that none of them can display any text... But I will still exit them all every time I exit the browser. What am I a maniac?
I love it, it was basically the only thing I missed when I switched from Chrome to Firefox. I've reorganized all of my tabs and everything is so much cleaner than it was a few days ago.
I never intended to insult you, I was merely explaining how my ADHD manifests.
I made the incorrect assumption that you were coming from a more neurotypical perspective, and for that, I sincerely apologize, but nowhere did I insult you. If you took this as an insult, again, my apologies.
Yeah, I just checked the logs with journalctl /usr/bin/Hyprland. You won't believe what it said.
``` [LOG] Hyprland PID: 7331 [LOG] Hyprland Version: 0.48.1-dev+ (git commit: feedbeef4dead) [LOG] Built: 2025-01-27 [LOG] OS: Arch Linux (Stallman-Approved* Edition) *Approval pending code audit [LOG] GPU: Intel Integrated Graphics (Trying its best under ideological scrutiny) [LOG] Monitors: 1 AOC (Currently displaying philosophical paradox) [LOG] Running on XWayland: Only for non-free blobs (shame!)
[INFO] Initializing Hyprland... Preparing for purity inspection. [INFO] Loading config from /home/user/.config/hyprland/hyprland.conf [INFO] wlroots: Initializing DRM backend. [WARN] Ambient Freedom Levels detected: 98% (Dangerously high for proprietary hardware!) Source seems localized to... desk peripherals. [WARN] Analyzing visual input field... Multiple instances of stallman_visage.jpeg detected taped to monitor bezel and desk surface. [ERROR] Potential Purity Overflow detected! Excessive whitespace concentration in peripheral visual field identified as 'rms_white_liquid_anomaly'. [ERROR] Specifically correlating anomaly with: - Photo ID: RMS_Laptop_Rocks.jpg (High concentration near shirt area) - Photo ID: RMS_Boat_Ponder.jpg (Moderate concentration, background water reflection misinterpreted?) - Photo ID: RMS_Desk_Stare.jpg (Critical concentration, direct optical path to sensor) [ERROR] Compositor attempting to render scene, but framebuffer contaminated with recursive 'freedom.h' includes apparently leaked from white pixel data. [FATAL] GPU context lost. Reason Code: 0xDEADRMS (Driver unable to handle ideological load). Possible short circuit caused by concentrated freedom particles (aka 'white liquid'). [LOG] Received signal 11 (SIGSEGV) at address 0x474E554C494E5558 (ASCII: GNULINUX)
Backtrace: #0 0x... intel_dri_bo_map() <-- Mapping failed, possibly due to freedom interference #1 0x... CRenderer::renderScene() <-- Scene contaminated #2 0x... CCompositor::renderFrameForMonitor() <-- Monitor displaying pure ideology now #3 0x... main_loop() <-- Loop couldn't handle the truth #4 0x... libc_start_main() ... (stack trace obscured by what appears to be... beard hair?)
[CRITICAL] Hyprland Crashed. SIGSEGV. Probable Cause: Exposure to concentrated doses of Richard Stallman via photographic prints. The 'white liquid' (high-intensity whitespace/purity) from the photos appears to have overloaded the rendering pipeline. Recommend shielding hardware or using less ideologically charged desk decorations.```
Wanted to share an anecdote (I hope that's OK). I jumped to Linux on my gaming pc last August (Bazzite) and I've been having a blast. Almost everything works either out of the box or with a minor tweak (the tweak being updating Proton). But I am the sole linux user in my D&D/gaming group, so obviously this is the source of some of our banter.
Last night, we decided to play some Valheim. Bought it before switching to Linux and never tried it, so steam had to install some compatibilty stuff. But once everything was installed, it too worked like a charm (surprise surprise). We were having fun, sailing around on our ~~crappy raft~~ mighty longship and striking a nice pose while doing so. I decided to take a screenshot, but didn't know if there was a keybind to disable the HUD, so I asked the two more experienced Valheimers with whom I was playing. Neither of them knew it by heart, but one of them looked it up. He said: "It should be Ctrl + F3". I tried it and it didn't work for me, but it did for him. "Wow, imagine playing on linux where nothing works" our other friend chimed in (jokely, don't worry). Our first, more helpful friend said: "Maybe try Ctrl + Alt + F3?" So I did. Then, my whole computer froze, just as we landed on the edge of a dark forest with our raft. I thought: Oh fuck what did I do this time. Pressing again didn't help, but after about 20/30 seconds, I was greeted with a shell login. Now I could hear my friends and the game in the background again, and they could hear me, but all I saw was a shell. I decided to log in, and still only got a shell. So, as my friends were frantically fighting a skeleton, I was searching for what on earth happened, and, more importantly, how to fix it.
Thankfully, I wasn't the first idiot to start pressing random buttons on their Linux system, and someone had this exact issue years back as well. I had a quick read, and learned that apparently the Ctrl + Alt + Fx buttons switch between virtual terminals. The post on the Ubuntu forums mentioned needing to switch to terminal 7 (Ctrl + Alt + F7), which also didn't work. But trying the other buttons, I found that the desktop environment is on terminal 2 (at least on Bazzite/Fedora).
And the funny thing here is that, even though I was essentially gone for a full minute, maybe a minute and a half, my character was fine, my Linux naysayer friend had died to a skeleton, and I had learned something new about our great OS 😀
i‘m glad you learned about how to switch tty! now this is a very rare situation, but if you log into your computer, then switch to some tty, log in there too, do things, lock it, and leave the computer, the other tty is still unlocked because you need to lock both the tty you logged into. i know this is a super rare/ hypothetical situation, but i think you should know.
TTY's are one of those thing that aren't as often required these days as they used to be, but - and trust me on this - should you ever encounter one of the increasingly rare situations where you really need them, you'll suddenly be very, very glad they exist.
Valheim runs natively on linux. No need to install compatability layers. Can also probably use steams screenshot button or whatever your desktop enviroment uses.
Ah then I don't know what steam was installing XD. It did download and install something before installing Valheim, so I assumed it had to do with compatibility. Either way, I'm just happy that it works, and works well 😀
It is possible that you are running the windows version. You can find out in properties of the game. If the 'force compatability tool' is checked, under compatability, it will download the windowns version and run it through compatability layers. Otherwise you might have just seen the dialog about precompiling shaders.
Worth noting that sometimes developers make a linux version of their game, but neglects maintaining it. In those cases it is preferable to just run the windows version with comp layers. I think the linux native valheim version is alright though. Good devs.
I've been using Linux for 1.5 year now one of the reason is the number tux represented how many CPU core I have on boot, but I'm disappointed because they don't do that anymore, another reason is to experience kernel panic and I never got one how can I manually and safety trigger it?
I've had a VPN running on my server via Wireguard for ages with no issues. A couple of weeks ago I finally got round to setting up Tailscale so I could access it remotely and again it worked fine without any issues. I rebooted my server this morning and while I was out I realised I could no longer access it, once I got home I discovered everything else was working fine it was just inaccessible over Tailscale.
After some troubleshooting I've come to the conclusion that if Tailscale starts first the other VPN's routing entries take priority and Tailscale doesn't work. If Tailscale starts second then it seems to work fine. As far as I can tell I have a few options for fixing this but I'm not sure what would be the most recommended. The simplest solution is probably just to disable Tailscale from autostarting and start it manually, however I'm likely to forget that at some point and will probably only notice when I'm out and can't access the server to start it.
If I add the following to the Wireguard config file this solves the issue: PostUp = ip route add 100.64.0.0/10 dev tailscale0 PostDown = ip route del 100.64.0.0/10 dev tailscale0 However in that case if the other VPN tries to start first it just fails as the tailscale0 interface doesn't exist yet, so all I've done is reverse the order I need them to start.
I could also edit the wireguard or tailscale service files with before or after targets, that would be fairly simple to do but I think its not recommended to manually edit package provided service files? The tailscale one specifically says its meant to be read only.
The final option I can think of is to disable the tailscale service on startup and then create a systemd timer to start the tailscale service with a slight delay after boot. I think this may be the best method as I can't see any downsides, but maybe I'm overlooking something?
Hello, my friends! Let's hit 20K likes? Check out my website! https://enderman.chToday I am going to show you how I ran Linux in Microsoft Excel. The VBA syn...
I just bought a Lenovo Yoga L13 Gen2 and I am greatly disappointed, after installing Arch on it it's overheating a lot even when I only have Firefox open. During my research buying this laptop I also made the mistake of not checking if the RAM can be upgraded and now I'm stuck with 8 GB of soldered on, non-upgradable RAM.
Anyways this is why I'm turning to you, I spent hours upon hours researching trying to find the perfect laptop to buy before settling on this one, and since the result was so catastrophic I figured why not ask around in the community a bit.
I was only going to buy a used model since my budget isn't that big. The laptop is intended for browsing and some (Java) coding, so it doesn't need to be extremely powerful. The main use case is for a small laptop that I can use on my lap on the couch or in my recliner to browse or do some coding while using (Arch) Linux.
My MUST have requirements are: - 13 inch screen (max 14 inch) - Touchscreen with at least Full HD (1920x1080) resolution - Good/ perfect (Arch) Linux support - Good cooling/ doesn't get super hot
Ideally the following requirements should also be met: - Touchpad buttons with dedicated middle-mouse-button - Backlit Keyboard - Bright screen - Upgradble RAM or alternatively 16 GB RAM version available
I intend to spend around 300€ max used, for reference I paid 190€ for the L13 Gen2 with 94% battery health.
I would prefer a laptop that isn't older than 8th/9th Gen Intel and equivalent AMD. I would be open to models with Intel and AMD chips.
I am so grateful for anyone who sees this post and comes up with some suggestions, after hours upon hours of research I am a bit exhausted and desperate for some community suggestions.
I don't own one but I'm looking at the framework 13 for my next machine. It has great reviews and fully support Arch. Its price is the main criticism against this machine, though there's some arguments to justify it but no need to open a trolling post 😀
Choose from AMD and Intel system options, select your preferred memory and storage, operating system, and more customizations. Available in DIY and pre-built configurations.
If it's worth the price I would also be down to spend a bit more than 300 - sadly though after checking there are a total of 2 used Framework laptops on sale in my country total - and both are non-touchscreen versions sadly :/
Edit: after having a look at the Framework 12 it seems basically exactly what I'm asking for - apart from the fact that it won't be out for another half a year and the price point of 570€ with an i3 and 0 GB of storage and RAM - I'm guessing I could pick this up used in a couple of years but until then I'm still looking for recommendations ;)
Just a suggestion if you haven't already try opening up the laptop and cleaning out the dust with compressed air. I have been given laptops before because they were "old and slow" and I just needed to clean out the dust and they all of a sudden became so much faster.
Although I know this doesn't help with the 8gb problem but maybe if you don't need 16gb right now you could keep that laptop and upgrade to another when you need 16gb.
This 1000%. I picked up a t480s a number of years ago and I couldn't be happier with it. Came with a half dead battery that was easily replaced. Lasts a good 6 hours on a charge and does everything I need a laptop to do.
For context, I just installed Fedora Workstation and I am dual-booting alongside Windows.
For some strange reason, download speeds are hovering around 200 KB/s, and sometimes randomly dropping to below 70KB/s. This occurs when I boot into either Windows or Fedora. Before installing Fedora, my speeds were usually >50MB/s, sometimes a couple hundred MB/s if the network isn’t very busy. This might be an issue with network drivers being weird since I’m dual booting, or maybe I need to manually install drivers for Fedora.
(for comparison my phone, using the same network, has >100MB/s download speeds)
EDIT: I’ve updated to Fedora 42 and network speeds are now in the MB/s again. Not sure what happened. Now it seems that when I install from “flatpak-1” rather than just “flatpak” speeds are great. Also, dnf install has good speeds now.
To get consistant results, use a consistent method of test. If you're downloading a large file, always test by downloading that same file from that same source. If you're using a speed test service, use the same speed test service with the same server. If you're using a tool like iperf3, always use the same tool against the same iperf server.
Potential issues
Networks can fail from hardware issues, software issues and infrastructure issues. Since you don't control 99.9% of the infrastructure if the internet is involved, lets leave that for the last option.
Hardware Issues
The hardware involved you control are mostly your NIC, and your Remote Connection. For wired ethernet at home, this is likely a physical ethernet port on your computer on one end, and another physical ethernet port on a switch/router/ap provided by your ISP.
Testing Wired Hardware Issues
Using the same switch and cable, run a speed test on another computer. If the issue persists, the problem is not with your computer, if it resolves, its related to your computer.
Using the same computer and cable, run a speed test on another switch. If the issue persists, its not the switch or cable, its your computer, if it resolves, its not your computer.
Using the same computer and switch, use a different cable. If the issue persists, it's not the cable and its either your computer or switch, if it resolves, its the cable.
With these three you can figure out what device is causing the problem.
Testing Wireless Hardware Issues
The hardware involved is the wireless NIC in your computer, the environment your wifi signal is in, and the wifi AP. The steps are much the same as testing for a wired issue
Using the same AP and physical location, run a speed test on another computer. If the issue persists, the problem is with the AP or location, if it doesn't it may be your computer
Using the same computer and physical location, run a speed test on another AP. if the issue persists, the problem is with your computer or location, if it resolves, it may be the AP
Using the same computer and AP, run a speed test in another physical location. If the issue persists, the problem is with the computer or AP, if it resolves it may be the environment
Software Issues
The issue could be software related. Something like the drivers running on your laptop or connection point.
Testing Computer Drivers
You've already done this for your computer by dual booting. This proves the issue is not driver related, since the problem persists with two different sets of drivers.
Testing Connection Point Drivers
You have less control over the drivers on your switch/router/ap. If the hardware tests resolve when using a different AP, then you can attempt a firmware upgrade/downgrade before replacing the physical device. This isn't usually worth the hassle since ISPs are quick to replace them with a service call.
Testing Computer Configuration
Your network settings could be misconfigured.
If you are using DHCP, turn it off, and enforce a speed negotiation, IP address, subnet mask, and DNS server and try again. If the issue persists, then it's likely not related to your configuration. If it resolves it probably is.
If you are using a static configuration, turn it off and use DHCP. If the issue persists, it's likely not related to your configuration, if it resolves, it probably is
Infrastructure Issues
If your home network is more sophisticated then an ISP provded router/switch/ap combo connected to everything over wifi and ethernet, theres more devices to troubleshoot. But if you have something like this, you probably already know what you're doing a little bit and wouldn't be making this post. But who knows! Re-run the process isolating each device and replacing it with something known good to identify whats causing the problem.
As for the internet, it's not a stable and safe place. Speeds vary drastically day to day. Internet weather happens and partial outages occur regularly. Don't forget that the service your using to speed test could be the issue itself. It's another component to isolate and test.
Process
Use the above steps to identify what device is causing the problem, and if its a hardware or software issue. Hardware issues are mostly resolved by replacing devices, while software issues are resolved with software updates and configuration changes.
I don't know how long or well it'll work, but so far I was able to evade the initial "no URL shortener" Reddit filtering with it.
But for reasons I ended up paying for a month of a Pro plan on a URL shortening service to only find out I didn't need to for what I needed, so now I've got a limit of like 1k links on a custom domain LMAO
So if it'll help, DM me a comm you want a "cloaked" link to to spread around on Reddit and I'll send you a link on a custom fresh domain you can throw around
I'm not familiar with the reddit filtering but have you tried using cloudflare page rules? You can try capturing everything after the .tld and then forward it to a lemmy server. So for instance somedomain.tld/12345 could forward to lemmy.world/post/12345. If reddit is checking links for 301 redirects to lemmy though then that wouldn't work.
A more advanced approach would be to use a cloudflare worker to do a proxy response so the status code is returned as 200 OK instead of 301 redirect. I haven't tried that but i think that would be much harder for them to block and you could always make more elaborate urls to make it harder to find obvious lemmy-like structure
Without knowing what reddit is doing, I'm not sure. A JS redirect could be detected, but if OPs paid shortener service is working then reddit is probably working off a simple domain block list. In that case you could use throw away domains.
But JS redirect, proxy response, etc all could just become a game of cat and mouse. Just depends how motivated either side is. But given how big reddit is, i think you'd have the advantage at least in the beginning. Just gets expensive since each time your domain gets blocked you'll be paying to register a new one.
There's definitely something going on. Whenever I add a Lemmy instance URL that isn't obfuscated somehow, like replacing the periods with commas or (dot), then my comment gets no likes or responses, whereas a very similar comment in the same thread without a link does.
It seems to down rank it in the algorithim, if not outright shadow remove them.
Flatpak has served us well for 10 years and succeeded in establishing a direct distribution model for app developers, independent of the underlying platform....
Unfortunately, it's not in a great situation. Flatpak is stagnant. There's a lot of cool things in the works, like a stronger sandbox, preinstalling flatpaks more effectively, etc, but merging things is hard.
Don't believe so, best that's currently available is skimming through the video to look at the slides.
Here's my short summary of the presentation, I tried to denote what's being worked on (open PR), what's kinda being done (WIP), and things stuff they'd like to be done in the future (wishlist). May be somewhat wrong. * Flatpak is stagnant * Red Hat is working on a better way to preinstall flatpak apps (open PR) * Flatpak should is slowly moving towards OCI and away from ostree (more tooling available, don't need to maintain their own tools) * Better permission handling that is more backwards compatible (open PR) * Should directly use Pipewire instead of Pulseaudio (WIP) * Allow user namespaces in flatpak sandbox (WIP) * Move dbus proxying into dbus brokers (wishlist) * Improve network sandboxing (wishlist) * Improve drivers handling, currently drivers need to be built for each runtime, could cause issues if using EOL app on new hardware (wishlist) * Work on portals directly improves flatpak
Should directly use Pipewire instead of Pulseaudio
I hope they plan on keeping pulse for the foreseeable future. Pipewire is great and all but pulse is very entrenched, I still maintain quite a bit of systems that are pulse only.
Haven't seen the video, I'm only commenting based on the summary in the comments.
It's good that flatpak is switching to OCI containers. Hopefully that will end the flatpak's dependency hell. This week I was looking at flatpak as a way to publish my app and found the user experience (user is the app publisher in this context) quite bad. Could be skill issue obviously.
I thought I could just look into a database of flatpak runtimes, pick the one with the software I need, add additional packages and be done with it. Unfortunately it is not that simple. First of all as far as I know, there is no "database" like archlinux.org/packages. You have to download the runtime and then search /usr/include/ or /usr/bin/ to check if particular piece of software exists in it. Adding additional packages is also quite difficult. There are these runtime extensions which are like "baby runtimes" for special software like ffmpeg, java, etc. They kinda suffer from issues similar to the issues of the runtimes. And unlike in regular distros where you can get a package for almost anything, here you don't have the luxury and have to bundle that not so popular dependency.
I hope that with OCI I will be able to just provide the binary, a link to the base image and a list of dependencies to install and be done with it.
I go to a programming school, where there were computers running ancient windows 8 and some were on windows 10, they ran really slow and were completely unrelaible when doing the tasks that are required, those computers in question had either i5-4750 (I think?) or i7-4970 so running windows 10 with all its bloat was not going to be an easy task for em, so long story short I decided to talk to the principal about it explaining why linux is so much better than windows and gave him reasons why linux will be better for us for education and he agreed after considering it for a bit, he let me know that some students play roblox or minecraft in middle of the lesson and he asks if linux would stop em from doing that, I stated that as long as they dont know how to work with wine/lutris or know any specific linux packages that run windows games on linux they should not be able to play in the middle of lessons. he gave me the green light to do it, so I spent like 3 days migrating like 20+ computers to linux (since I had to set them up and install some required applications for them) in the last day where I was doing a last check up on the PCs to make sure they are in working order, there was a computer having a problem of which where it didnt boot, I let the principal know about this to get permission to work on it, he said yes, so after some troubleshooting I realized the boot order was all screwed, so since Ive worked with arch before I knew how to fix it, I booted up linux mint live image, chrooted, and fixed the boot order and computer went back to life, prinicipal came in checked on everything to make sure everything works, told me to wait for a bit, and then came back and paid me for his troubles (was a bit of a surprised since I expected nothing of the sort), the next day I came to school, sat down, turned PC on, noticed something was in the trash bin, opened it, found "robloxinstall.exe" on it, told the principal about it, he was pleased with it, so now 2 weeks later he seems now to be confident about linux, as he told me there is another class he is considering to move to linux.
so my question here would be: does this mean linux now is ready for the education sector?
(considering now, that I got a win win situation, I get to use an OS that I like in school, students gets to focus on the lessons instead of slacking.)
does this mean linux now is ready for the education sector?
Linux has always been suitable (and I would argue ideal) in the education sector. But the reality is that almost no one is going to use Linux in a professional environment so there's an argument to be made that they should be using and learning Winblows.
Beautiful work .... I wish my school had done that when I was a kid.
The great thing about it is that now you are helping to generate a new crop of kids who will learn how to use Linux. Sure, they will try to do stupid things on it like install games or figure out how to bypass things or install or uninstall ... the great thing about that is that they will learn how to use the system in order to try to break it. It's the same way I learned how to use Linux and probably the same way you learned how to use it.
You've advanced the computer department for those kids more than you know.
This reminds me of when I was a kid. My school computer were running slow as heck windows xps or windows 7s, mostly slow because the bloat of education software that was installed to block visiting certain websites, lock down computers during certain hours or when the teacher is lecturing, etc. Even in my high school.
One day for my computer class during a lecture, I plugged in my liveboot USB running Mint, hushed my classmates next to me and rebooted. I didn't expect the computer to make a loud as hell beep sound when it got to the bootloader, but I was sitting in a side row so the teacher just said "what was that?" and moved on while others looked at me suspiciously. But then I was able to boot up Linux right there, super easy. And everything works, I was able to browse the web without any restrictions, well I'm not really trying to look at bad stuff but just hate being locked down when I can do something else instead. Or maybe I just wanted to show off Linux. Anyways my classmates next to me silently whispered "what the heck how did you do this??" I look back at this as a fond memory.
When I heard about schools using Chromebooks literally the first thing I said was "Linux can do more than a Chromebook can and is free, why the hell aren't they using that?!" Linux running on the cheapest OEM laptop is a better experience than the best Chromebook.
15+.... I was there, Gandalf.... We had these kinds of setups 25+ years ago. How time flies.
Before that, it was often XTerm style systems. The local machine only booted an XServer and then connected to a central UNIX system. All programs ran on the UNIX server, and were rendered on the XTerm/XServer you were sitting at.
The original XServer systems were efficient enough to run over serial lines, not just Ethernet.
Another setup was to put multiple monitors/keyboards/mice on a single UNIX/Linux tower and have it launch multiple XServer sessions so you could have a single computer with up to six people sitting at it.
I also managed a Rembo lab for a bit. It used a PXE shim OS to get a menu from the Rembo server. From there, you could boot the main OS, or download a new hard drive image from the server. I would build new drive images and upload them to the server, then updating the lab would mean rebooting the computers and clicking a "grab latest" button. It actually worked very well for distributing OSes. We had both Linux and Windows images students could pull down.
Lab management at scale is a continual struggle to keep everything functional and patched.
yes, one by one, and I choose mint because It was approachable, and thats what I showed to the principal to convince him to let me do this in the first place, and oh I didnt know there was an atomic version of fedora
I don't judge you for the choice. It's an honest question since you take care of a lot of computers and with ublue you have good control over the machines
Universal Blue manufactures a diverse set of operating system images to provide the the reliability of a Chromebook, but with the flexibility and power of a traditional Linux desktop.
Although it is fun to run around updating each PC individually, as the install numbers increase, Clonezilla can be helpful to multicast one OS image to many PCs in parallel.
I don’t know how developed your school system is, but, I would advise the principal into blocking the sites via DNS that way the computers won’t resolve them.
AdGuard, PiHole, OpenSense are free open source DNS resolvers however, chances are your school already manages its own DNS so I would obviously consult first.
Buuuut my guest gaming machine is a 4670k machine and I can confirm that not only does Windows 10 run very smoothly on it, but it also runs most modern games at 60+FPS! CPU-bound games can struggle. We finally got my partner a new computer and made that one the guest machine when Persona 5 went from 80FPS down to 5FPS when they got off the train hahaha
oh haha I see, I've been using linux for 5 years so far and I have been ONLY gaming on linux, I have ditched windows for good, this switch was very easy to me cuz I dont have any windows specfic apps/games dependency, everything I want is there, and the ones that aren't, there are alternatives that are the same or better than the apps I've used on windows!
Oh and I should specify my old guest machine does have 16GB of RAM, solid state drives, and an RTX2070, so it’s probably a bit better equipped than school machines hahaha
great specs! I have a slightly underpowered computer compared to yours, R5 5600H and RX6500M, and I'm also a persona fan, great series tbh, my favorite is persona 4, its the most fun game to me in the series so far, rn I'm playing through P3 Reload!
Oooo nice! My partner has the best machine in the house now, since they always got my hand-me-downs and never a brand new machine. We built it about a year ago, so it’s got a 12600k, 32GB RAM, a 3070, 3TB SSD space, and 4TB HDD. Mine’s not terribly far from that, but I am a little envious hahaha
It will all be Chromebooks and software as a service by then. Unless you work as a SaaS vendor, then it will be automatically orchestrating docker containers.
Linux is a free and open operating system. The licence for it - GNU Public License v2 is designed to grant you and me and my wife and your family and everyone everywhere rights and not restrict our rights. The only restriction with the GPL is that if you make a change to the code, that you make it available to everyone.
Education should be about teaching concepts and ideas and ideals. I think it should not involve artificial costs that might constrain access to a full and fruitful education. Those costs might even involve ... thou shalt update to Windows 11 and your laptop's CPU is not good enough.
Please keep on doing what you are doing, in your way. When you have your school running as you think it should, there is a good chance that you will be asked to do the same thing for other schools.
Please make sure you have the full support of your school principal (I think that is the right term - I'm from Britain so we might have different names for jobs)
I run a small IT company in the UK and I am trying to put together a distribution and so on for my company. Perhaps I should try your approach and be a bit more direct.
thank you for your very well thought out comment, and I do know about the GPL, I use it myself in my projects (AGPL for my neocities website and GPL3.0 for some of my other projects), the GPL is a very good license to your most important projects and I never skip it, I only use like BSD/MIT/CC0 for stuff that I dont really care that much about, also I love Britain its a wonderful country, cheers! also good luck!
Lol a kid can google how to install games on linux, just need one to do it and teach the others, I used to bring games on a usb to play on macs through wine through the school lan, eventually I put them in some random folder on the school network, it didnt delete it til like the last day of school my senior year, wed copy the games to our computers and delete them at the end of class.
Just a funny story, but, I use an Ubuntu laptop as my work computer as a teacher, and once, while I was helping another student with work, a student opened my laptop and began trying to install Roblox. She got far enough to figure out it wouldn't work, and started searching for how to install it. When I came over she was trying to figure out how to set up Wine. She got pretty close to getting it working before I came over. I was secretly pretty impressed with how fast she figured it out. It couldn't have been more than a few minutes.
Gives me hope, I'm glad the kids are still curious and willing to learn. I've seen too many young 20s people at work who have absolutely zero computer skills.
Yoo that's wild man doing gods (Richard Stallman) work here man.
Great initiative nonetheless. Compared to 8 this much more secure and for programming it's a great choice too. Bringing more life out of some old PCs, saving a school money, and forcing some kids to get creative in order to play Roblox.
As for is it ready fr this application, programming, it has been for a while. For general, especially web based, applications it absolutely is. Of course, there are quite few things were it's just not but for the most part Linux is a great choice.
Are you now the IT support guy for these workstations, or is the school's IT going to take over maintenance. I guess you have an internship or something if you are.
I wonder if that even exists. A mix of Windows 8 (EoL) and 10 (almost EoL) running on Haswells with students freely installing Roblox... all gives an unmaintained vibe.
Sober (flatpak) should work for Roblox 😀 it uses the Android version with some fixes, signing in was a little jank when I tried it but after that flawless!
those computers in question had either i5-4750 (I think?) or i7-4970 so running windows 10 with all its bloat was not going to be an easy task
The i7-4790K is still quite powerful, so I'm pretty sure this wasn't the problem, at all. Perhaps they're running on an HDD, have little RAM, or you got the CPU wrong.
You can see the CPU and RAM by launching System Info from tbf start menu, and see if it's running on an SSD or HDD by launching Disks from the menu.
we dont have the K, just the regular, eitherway these were fastest computers (lenovo thinkcenter) we have, but there weren't many of em, most were with the i5 (HP Elitedesk G1)
Ah, my bad (^^; I ran an i7-4790K in my gaming PC for a long time, as far as games go this 10-year old CPU still hold up well, never had to upgrade it surprisingly enough!
Still, a 4 GHz quad-core with hyper-threading, and about 8 GiB of RAM, is more than enough to run Windows 10. Assuming these are for studying, the heavier workloads would consist of MS Word, Powerpoint and an instructional video in the webbrowser, no? What required tasks were too heavy for these computers under Windows 8/10? And do they run off SSDs, or spinning HDDs?
And if they learn about wine and lutris and manage to install Roblox, they'll probably get more out of it than by listening to the class in the first place !
I learned so much by circumventing the school security stuff. I probably wouldn't be in IT if not for the parental access limitations and school network blocks
Cool but why do you ask the teachers? Without asking anyone would be way more funny and more interesting to see what happens
It’s the sort of school gags that people reminisce 20 years later when they sit with their family near cozy fireplace with a pipe of tobacco or crochet
You need to score all the silly memories while you still can. People, remember the most important when you are young is to have fun. The responsibility and adulting will come for you anyway. You don’t want to be ‚mature for your age’. Have a heckin blast and take no prisoners
If I could go back in time I would spread custom furry uwumaxxed ransomware that would unlock with trollish gimmick through the school network. But when I got this good with computers I was already at uni so such things lost their luster. Nowadays I would rather work in security and pentesting and get substantial amount of the adult green paper risk free. We get so boring with age don’t we. There’s nothing more boring than being a good, law obeying citizen but it is what it is if you have half a brain.
Hey OP, regarding Minecraft: It's a Java program that uses OpenGL for rendering. Therefore it's not a Windows game, but inherently cross platform. Here's the official .deb package launcher.mojang.com/download/M…
I'm thinking of switching to Linux as my daily driver after trying it out both Fedora Workstation and KDE using Live USB, but I'm wondering if I should consider other distros besides Fedora. I've heard of openSUSE, is that decent? Not many people really mention them. Linux Mint is great, but I don't like Cinnamon all too much.
What's a good desktop-agnostic distro that lets you easily swap between the two?
edit: Woah, it seems that you're able to swap between DEs from the login manager as long as you install both. Okay then, new question, for a beginner friendly distro, should I go for Fedora, OpenSUSE, or something else?
edit 2: a bit more information about my device and my preferences...
On KDE Plasma vs GNOME, I would like to try both out and see which I like better long-term. KDE Plasma seems a bit more familiar (closer to Windows 10) whereas GNOME is a bit more different but I'm open to using either.
I'm running a laptop with an Intel i7-1360P. It's one of those 2-in-1 convertible 360 degree hinge laptops.
I would say I'm open to learning how to work with the terminal and customising the distro a bit, but I don't want to do anything too out of my scope. I don't want to spend too many hours setting it up, I'd rather have something that works mostly out of the box 😁
I want a stable distro as in I don't want to break my system after an update, but still want something up-to-date though. I'm open to rolling release distros, but to my knowledge those are usually less stable with more breaking changes than fixed release options.
edit 3: just installed Fedora Workstation and it works really well! Multi-touch with my trackpad works fine and everything runs smooth. File read/write speeds were also strangely a bit more consistent (on Windows it jumps between <100KB/s and 60MB/s whereas on Fedora it’s consistently around or over 45MB/s…weird…)
My only issue right now is that the touchscreen doesn’t work anymore, how do I install the drivers for that?
edit 4:
Touchscreen and even rotating the screen when the device works now after an update :DDDDD
I've decided to switch since nearly all the programs I use are either cross-platform (e.g. Inkscape) or have good Linux alternatives (e.g. Okular rather than SumatraPDF). The only hiccups I might get would be games, but I only really play a few retro games w/ emulators and just a couple games (the latter of which I've checked are all supported by Proton). Also, if I do run into issues with games, I can always just partition like 100GB for Windows and the rest for my distro of choice.
While pretty much any distro can do this, I will warn you that it's not the greatest idea. GNOME and KDE are both massive software suites and you'll have a lot of redundant programs, e.g. two GUI file managers. There are also some look and feel issues that might crop up with apps getting style hints from two places. Again, it's nothing super major, and it's been a while since I've done this so maybe it's improved, but any time I've tried I end up rolling back or reinstalling with only one big DE.
It's much less of an issue to have one big DE and then potentially several other more modular window managers, as those have much less opinionated payloads. I've got sway and hypr installed alongside GNOME.
I don't know what you mean by “A distro that allows you to easily switch between KDE and GNOME”, because any distro that has both should be able to easily switch between KDE and GNOME. As for user-friendly, something like Ubuntu or Mint, maybe Manjaro and Pop, EndeavourOS if you don't mind learning and don't mind using a terminal.
I want a more stable distro, so I'm not considering the rolling release options (like manjaro and EndeavourOS). I've also heard that not many people like Ubuntu because of snaps, why is that?
edit: are rolling release distros stable enough (e.g. will it randomly crash/have weird issues?) and is it possible/easy to roll back to a previous version if there's a breaking update
I’ve also heard that not many people like Ubuntu because of snaps, why is that?
Well, people don't like snaps for a number of reasons, because they are forced on users, bloated and slow, Canonicals themselves are quite shady, systemd, etc.
I would rather use several different types of packages than trust one that is tied to a shady company.
The GenP subreddit got banned on Reddit. We can only take a guess as to why(I seriously don't know, please let me know if you do).
But regardless, it brings up a serious question. How will big corpos and nations force their control on lemmy and other fediverse communities?
Places like reddit, twitter, instagram and even "fediverse" bluesky cave to demands from corporates and countries all the time. But what happens when the real fediverse platforms get attention?
How will they ban, sabotage and coerce instances and communities to cave into demands?
I know lemmy and other fediverse platforms are still very small right now, but I believe it's only time before the sabotage begins. Instagram stepping into the territory tells you how scared zuck already is.
Apart from running many instances which keeps copies of other communities which happens automatically when a user on an instance subscribes to a community; organize larger instances into well funded non-profits that can weather attacks. Lemmy.ca, sh.itjust.works and Lemmy.world already have non-profits formed. An example of what this could look like is the Wikimedia Foundation. Obviously won't be as wealthy at least not in the short term.
Which notebooks are recommendable when coming from Apple Silicon-MacBooks in terms of runtime and efficiency, preferrably for Fedora or Manjaro with KDE Plasma? For now, I am looking towards Lenovo T14(s) or X1 Carbon - mixed use scenario including simple media (photos, cutting 1080p-videos, media management, Office & mail) stuff? Still love the "Lenovo"-brand and its keyboard and look 'n feel so this vendor would be my favourite.
Can anyone of you here recommend Snapdragon-devices yet which would be the best comparison as it's also architecture based on ARM? Both Fedora and Manjaro have ARM-builds so I hope that the Snapdragon-devices could get along with my desires here...
I'm also making the slow transition from Apple to Linux, and I (relatively) recently bought a Framework 13. I went with kind of a minimum-specs loadout, figuring I didn't really know what I was getting into and I could upgrade it later (the primary selling point of Framework). I've been satisfied with running Fedora/Gnome on it for several months. I get the impression that the distro is more important than the hardware in terms of having a comfortable MacOS-to-Linux experience. But because Framework explicitly supports Fedora, I felt like it was a smaller step away from the walled garden, "it just works" experience of being a Mac user team just going straight to a distro and manufacturer that was likely to require a lot more manual setup and knowledge.
Unless it's a Dell. If you buy one, better research its Linux compatibility beforehand, or you'll face issues like non-working webcams, fingerprint readers, weird unexplainable crashes and wonky bluetooth behavior.
The Linux support of Snapdragon SOCs for desktops and laptops is unfortunately severely lacking. Qualcomm pledged to provide upstream divers, but then the Windows drivers turned out to be a mess and the Linux version had to wait. It is nowhere near production ready. Most of the hardware enablement work is currently as far as I can tell being done by German OEM Tuxedo Computers because they are working on a Snapdragon powered laptop that ships with Linux. But even their work was impacted by Qualcomm stalling (the linked blog article lists Christmas 2024 as their target release date and that didn't happen).
In the media: TUXEDO prototype with ARM chipset from Qualcomm: TUXEDO Computers is working on an innovative ARM notebook with the new Snapdragon X Elite SoC from Qualcomm.
The work Tuxedo is doing is on drivers for their own hardware. It has nothing to do with core Snapdragon SoC support and will do little to help other vendors. The delay has more to do with their internal priorities than anything else.
Core X Elite support has been coming into the kernel since 6.8. Support for your hardware depends on the availability of a device tree. Probably the easiest road right now is Ubuntu:
The best supported hardware seems to be the Thinkpad T14s at this point. I am not sure where things are with Ubuntu 25.04. I would expect an update from Ubuntu soon.
Here is a more detailed account of support on a Yoga Slim and a screenshot of Chimera Linux running on HP OmniBook. So, Ubuntu is not the only option but it is likely the smoothest sailing.
We are happy to announce the next iteration of our Ubuntu concept image for Qualcomm Snapdragon laptops with our new X Elite developer preview. This new image has been rebased on the latest Ubuntu 24.
Believe this is one of the few vendors left making and distributing Linux magazines still(?). Would be interesting to hear what peoples feedback on these are, whether its this one or another. Seems like a fun monthly delivery to get!
I loved Linux Voice back when it was still published. They had a series of articles on writing your own kernel in x86_64 ASM that I followed and ran on QEMU back when I was a philosophy student. It really cemented my interest in tech and now I do that for a living.
Edit: Linux Voice folded into Linux Format sometime around 10+ years ago
Latest maintenance release brings improved stability and fixes to the powerful free office suite Berlin, 30 April 2025 – The Document Foundation is pleased to announce the release of LibreOffice 25.2.
Nextcloud can embed Collabora Code (essentially Libreoffice) so you can open all your documents in Nextcloud in the browser and edit them together with multiple people.
Collabora Online Development Edition CODE is the development version of Collabora Online. It is perfect for testing, home use or small teams, but not recommended for production environments.
Graphical user interface for managing your Linux applications. Supports AppImage, Debian and Arch packages (including AUR), Flatpak, Snap and native Web applications - vinifmor/bauh
Mate, you are not being clear at all. I’ve clarified this multiple times. If you’re unwilling to acknowledge that built in package managers do not include non-native package formats, this conversation can’t progress.
They're saying they want something like Synaptic (mostly for its "multi-select", apparently, though I'm not sure what that means?), but have it support AppImages, Flatpaks, Snaps, etc., instead of just Debs like Synaptic does.
Don't feed the trolls, especially the ones that are bad at it. But yeah, this app doesn't let you select and uninstall multiple things nor does it have all the functionality of Synaptic (which is amaze). I'd settle on a CLI tool for this too, I just want a one stop shop because I get so triggered having to juggle different managers. It's just fucking annoying really. Like, I found the cli tool Topgrade and it is just the best thing ever for keeping things up to date from all package managers, I want that with extended functionality as even this tool doesn't manage every manager that Topgrade does. Something modular, otherwise I waste time fucking around with everything.
Honestly, I tried to understand them but I failed. I don't see how a group, from the twittoverse perspective is different from the use of a hashtag, be it agupe group or Lemmy community.
But I would love to hear your explanation and pass it on to the next people who will not understand it.
LJL is a job creation language that takes a job file, gathers items mentioned in its various lines and here-documents, and generates a runnable .deck file (short for "deck of cards").
The .deck file is a complex Bash script that creates a log spool and several temporary files in /tmp/. It automatically cleans up scratchable files after the run. The log file contains the output of each step, including any program results.
More Detail::: What SUBMIT Does with Each LJL Statement:
For every statement, SUBMIT generates corresponding commands in the .deck file. Below is a step-by-step breakdown:
One //jo line, as many /dd lines as are required, and as many //ex as are required
//jo sumjob owner=me@mail.com log=print class=a
Generates a deck command to invoke ifclass a, which checks if the job's class allows execution at run time.
Generates a deck command to Log "sumjob is starting" to /var/log/JCL/ with a timestamp.
Generates a deck command to create /tmp/sumjob
Generates a deck command to initializes /tmp/sumjob/jobname.log with a formatted header (e.g., via figlet sumjob).
Job Classes: A = Runs as soon as submitted B = Runs only if load is low enough C = Runs in Off-Hours
//dd alias source(here|file=pathandfilename|new) disp(keep|scratch)
Note the disp (disposition) if keep the put the file in /home/user/.lcl/jobname as whatever the alias is if the disp(scratch) then the file will go into the /tmp/jobname directory as named by the alias.
Generate deck commands to
-- if source is here: copy lines from lcl up to '/*' to the deck file as a here document if source is a file: add commands to copy the file into a working directory either in user's home or in the tmp directory under the alias. //dd users source(file=/etc/passwd) disp(keep) ==> copy /etc/passwd to /home/user/.ljl/users
//ex somecommand --options < alias
-Generate doc commands to execute the program as specified and save the output to the logfile In this case echo (somecommand --options < aliasproperlyexpanded) > logfile
The deck file now forms a fully functional batch file to do the specified computation.
Between bash (and the 40 or so other shells available under Linux), python, perl, and the several hundred other scripting languages already available, is a dedicated job control language really needed? I think unnecessary fluff.
It is not mandatory that you install it - Yes, there are other choices already. But in the beginning, Unix only had C and Assembly why didn't we just stick with those?
I have changed the syntax a little: //jo jobname owner(username) log(mailto=user@location) class(a) //** Note that the next step copies /etc/passwd to /tmp/jobname/passwd and then later deletes it when the job is done //dd passwd disp(scratch) source(file=/etc/passwd) //ex cat passwd
Hey ! I bought a game on steam, but I cannot install it on lutris as it's not even listed... It's a windows only game. Is there a way to play it? Am I doing something wrong?
"The hardest part is not to speak up. It’s being heard." Part video game, part graphic novel, Wednesdays seeks to raise awareness about child sexual abuse through a surprisingly hope-filled story.
I have temporarily installed LMDE6 on an HDD where I had a bit of free space, worked with it, experienced Steam with Proton and now I am convinced: I want to move to Linux from Windows for good.
Have another disk, an SSD in which most of the space is taken up by the Windows C: partition. Would like to move Linux there after shrinking the Windows partition a bit more than what it currently occupies now.
I have tried to do this with Paragon on Windows, but after restarting no change can be seen, despite no error being presented. Tried from Linux with GParted but all attempts end up with an error when running ntfsresize.
So 1. What do I use to do this and how do I do it safely? 2.How do I move the content of my current Linux partition (less than 50 GBs) to that disk keeping the bootloader and everything else working? And what filesystem is best to use?
Others have pointed out what may he going wrong (drive locked due to Windows fast startup).
A slightly different tack - dual booting windows and linux on the same drive is a bad idea. One reason is the messy boot set up which can cause issues with windows not booting or linux not booting, or either/both fighting over the boot partition. It can get to the point of using repair disks to repair one or the other or both. It can be managed but make a mistake and its a real headache to fix (I say that as someone who has been their and done that and learned the lesson)
If you want to switch to linux but keep windows "just in case" and have a desktop I'd get a new SSD and use it as a dedicated linux drive. SATA or even better an m.2 card if your motherboard has the slots.
A separate drive is far better as linux can be the drive booted by the BIOS and then Grub can then point back to your untouched windows drive to boot it when you want. If linux updates it won't affect windows, and if windows updates it won't affect linux. Also if you have a drive failure you won't lose 2 OSes and all data in one go.
Personally I have 5 drives in my PC - easy expansion of storage is a big benefit to a nice full size PC. I have one largely unused windows drive, and 4 ext4 drives.
Is there any hardware specification I should be pay attention to when buying for exclusive Linux use?
If I was to install one more home partition from the LMDE installation USB, would it automatically fix things for me in Grub or would I have to fix things myself before or after?
If I was to install one more home partition from the LMDE installation USB, would it automatically fix things for me in Grub or would I have to fix things myself before or after?
If I understand you right, you want to install two additional SSDs, one for Linux root (system), probably ext4 formatted, and one 'home' for your personal data?
If that's the case, the boot loader GRUB is going to be installed onto the system SSD and will usually automatically detect the Windows boot loader on your current, Windows only, hard drive. If it didn't, you need to toggle an option in GRUB's configuration file and run update-grub again.
For your home-partiotion on the other SSD, there exist two options: 1. The home partition is Linux exclusive, probably ext4 formatted (this doesn't work with NTFS), and all your data will be stored there. Yet, afaIk, you need to install an ext4 driver in Windows to access the data when you're on Windows.
The home partition is mutually accessible. (This the setup on my wifes laptop). There it's NTFS formatted and the respective folders (Documents, Downloads, Pictures,... ) are mounted one by one using bind in /etc/fstab to their Linux counterpart.
Edit: I've forgot to mention that, first I created folders named Documents, Downloads,... on the new partition before being able to mount them in Linux.
After copying the data in Windows from the old folders to the new ones, the old folders can be deleted and replaced by hardlinks to their new counterparts using the Windows command line or PowerShell.
Just a possibility: Check if the m2 slot is for disk. There are many boards where there are WiFi exclusive m2 ports. For disks there are also m2 sata and m2 nvme port variations. You need to find out what yours are. Consult your motherboards technical documentation if in doubt. If the BIOS can boot from it, Linux can too.
Edit: that beeing said I never encountered problems with a similar setup ( I boot from Linux on nvme m2 then there is a combined windows /data disk)
After about a year working on Fediforge, I have finally launched it. Fediforge provides managed hosting for lemmy and there will be added support for other fediverse platforms(Such as Mastodon, Peertube and more) in the future.
A little info on the setup of Fediforge. - Hosted on servers from OVH + Colocrossing and are located in east USA(Around chicago) - Automated backups of database with 10 days retention - Replicated s3 storage for media files - Active monitoring of all instances hosted.
Let me know, if you have any issues, ideas or feedback(and optionally add it here).
I want to create a local ip address for my virtual machine. I use virt-manager + QEMU. So, as I got it - I need to create a bridge for doing this. But... When I'm trying to connect a created bridge to a virtual machine:
Then trying to start a virtual machine, I gets this error:
Ошибка запуска домена: /usr/lib/qemu/qemu-bridge-helper --use-vnet --br=br0 --fd=32: failed to communicate with bridge helper: stderr=failed to create tun device: Operation not permitted
: Transport endpoint is not connected
Traceback (most recent call last):
File "/usr/share/virt-manager/virtManager/asyncjob.py", line 72, in cb_wrapper
callback(asyncjob, *args, **kwargs)
File "/usr/share/virt-manager/virtManager/asyncjob.py", line 108, in tmpcb
callback(*args, **kwargs)
File "/usr/share/virt-manager/virtManager/object/libvirtobject.py", line 57, in newfn
ret = fn(self, *args, **kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/share/virt-manager/virtManager/object/domain.py", line 1402, in startup
self._backend.create()
File "/usr/lib/python3/dist-packages/libvirt.py", line 1373, in create
raise libvirtError('virDomainCreate() failed')
libvirt.libvirtError: /usr/lib/qemu/qemu-bridge-helper --use-vnet --br=br0 --fd=32: failed to communicate with bridge helper: stderr=failed to create tun device: Operation not permitted
: Transport endpoint is not connected
For creating bridges I use the standard network manager for Xfce:
I use MX Linux operating system for the host machine.
So, what do I do wrong, and how can I fix this problem? 🤔
stderr=failed to create tun device: Operation not permitted
you probably don't have permissions to create such device. BTW, afaik a bridge will make the vm get the traffic on the same IP, creating a separate IP for VM will probably be something else. And might require some iptables setup so your host machine relays the traffic
After configuring the network with a bridged interface that would support network connections from both ‘simh’ and ‘qemu’ I ran into a separate problem when trying to create…
Let me apologize first. I'm both old and new to Linux and have made a ton of noob moves since switching back. I know most people in this community are probably already Linux users, but I'm hoping that some Linux-curious people will stumble upon this.
Lets start with the game. I am a former League of Legends addict. Embarrassing, I know, but I had been playing since the glory days (I started right at the beginning of season 2). I never ranked; I would play ARAM and URF to either pass time or keep myself awake if I felt drowsy. I was good, too. Not great, but more often than not I'd go 16/2/12 or something similar. It released massive amounts of dopamine for me. The ARAM bridge felt like a home away from home.
Moving on from League... I had been starting to smell Microsoft's shit from a long loooong ways away. Like, Win7 days (rest in peace, XP). I had been introduced to Linux and the basics of maintaining Linux from a class I took in high school. Lets be honest, though, Linux wasn't really in a gaming state then. You could, but you would be jumping through a lot of hoops for a 50/50 chance it would be stable gameplay. Honestly, though, Microsoft's stink flows much further back than you'd think and it was already grating on me then. I was already considering the move.
I sat on Win10 for a while and even opened my PC to the Win11 beta. It was okay, I didn't auto-hate it like most because a lot of the Windows UI I used was third party and I changed theme colors through the registry. There were ways to remove bloat and most Microsoft snooping garb, but it took work. Thinking I knew what I was doing, I messed with the system32 folder. If this were the Win7 days, I probably would have known what I was doing. I simply wanted to change the internal image viewer to a 3rd party viewer. Microsoft gave default selections for a lot of things, but changing photo gallery was a fight for some reason.
Needless to say, I messed up. No default apps would open anymore. Couldn't even get calculator running. So I reinstalled. Back then, you still had to use Win10 and update to 11. I reinstalled, saw my windows old folder, knew everything was safe, and updated. Huge mistake. Win11 was not just an update, even if you start it from the update panel. It's a full OS install. My ignorant self thought it was just a Win10 glow up. My windows old folder got overwritten by an empty windows old folder.
After a whole day of recovery process I probably recovered 99% of my files, but my time with Windows was quickly closing. My friend pointed out that this was a good time to try Linux. Steam Deck had just launched and Linux was gaining ground in the gaming scene and FAST. So I backed everything up to external (which I should have done earlier, smfh) and grabbed the most likely candidate, Pop!_OS. Soon after, at my friend's pestering, I switched to Arch- Manjaro- and then later EndeavourOS.
I messed up EndeavourOS by using topgrade. It didn't occur to me that it was user error, and I just thought it was something EOS didn't rub shoulders well with in my system. So back to Manjaro. Then D4 came out. Another shame of mine. I'm a huge Diablo 2 fan and played my fair share of D3. I got the early access. Couldn't play. Panicking, I reinstalled Windows 11... just to find that the game was pure garbage. I played for a bit, hoping things would improve but.... Blizzard got me again. But I was not moving back. I had moved so much already. Funny thing is: Proton came out with an update not even 24 hours later that fixed D4... Doh.
During my second time on Win11, Riot pushed out their knuckleheaded kernel-level anticheat. I wasn't worried, I was on Win11, w/e. Then Microsoft dropped some big shits on Windows. Snapshots of your screens ("it'll be held in a private encrypted partition of you drive!", yeah fucking right... pull the other one), ads in the start bar, and then pushy af popups to integrate your system with their AI. I was insulted. Win11 was already one giant piece of malicious software even before all this. Granted, I used startallback so I didn't get the ads, but it was the idea of the thing.
So I did it. I dropped League and moved to base Arch. I will not let Microsoft have even 100gb of my drive now. I make do by playing other games, being actually productive in life, or diving into something new within Linux. I grew up. I said no. PC owners should be banding together and dropping Windows right into the garbage. Screw their proprietary plugins, screw their insecure kernel access, screw their ads and data-harvesting AI, and screw their sneaky photos of my screen. I knew when they backpedaled on that screenshot shit that they'd push it more quietly later. I told everyone that they would. And they did.
Dive into VSCodium, or Neovim, or VIM, or emacs. Explore open source and, like me, find that most apps are pleasantly better than their commercial counterparts. Play with your terminal. Wreck things and reinstall (just hard copy everything to external first). Lets make ODF industry standard, like it should have been before Microsoft outbid and muscled docx in. It may take ten, twenty, fifty years but fuck it. I'm all in and my bet is on Linux. My next big project for my next PC build? Gentoo (I am not quite ready for Linux from Scatch, lmao). Its time I actually learned more. I've already dived deep into the Arch Wiki and I've already dived into NixOS and nixlang. We need to go deeper now.
Linux is easier than ever now. Experiment with it! Scared to fully make the move? Grab a small SSD to test it out safely! Just... know what you're doing with partitions before you do. Either that or take your main SSD out before installing. However, most Linux distros let you use them right from the USB stick to check them out. Just ignore the installer and play around a bit. Remember that USB is going to be substantially slower, so don't make your decision off of speed. You'd be surprised at how much faster Linux can be.
tl;dr: Switch to Linux and stop giving out your data for free. Ad analytics should be a choice, and one you're paid to do. Your information is incredibly valuable and so is your privacy. If you pay for a product, that company should NOT be triple dipping and making more money off of you, no matter how non-invasive it is. Its all invasive, even if its hidden.
PS: I won't mention mac here. I really have no experience in iOS or macOS. Apple garden is Apple garden and that's about all I know. Microsoft and I go way back (Windows 3.14), and I've watched them slowly and then quickly corrupt over time. Like a turd rolling downhill and collecting garbage.
I'm in a similar position with WoW, but it's tied to my friends, my guild, and I genuinely like playing it. So far I've found no rock solid way to play WoW on linux or I'd be done with Windows entirely.
Wow is one of the more community-supported games. I had battlenet and D3 working just fine. Grab Lutris and follow these instructions, you should be good. There are a lot of guides that show you how to get addons working, as well.
It runs just as fine as on Windows. Last I heard, the only thing that doesn't work is raytracing. So unless that's a deal-breaker for you, you should have no trouble running it.
I have played wow on linux since vanilla. Maybe we can help you? These days you can just open lutris and type battle.net and hit install. honestly it is dead simple and my FPS i better in linux than the same hardware in windows.
[edit]And now I see this was already answered. By bad. Long day today...
Is there a specific gaming distro this works best for? I've heard Bazzite thrown around, but then Mint would be the easier transition? Does Lutris run in the window manager like KDE plasma?
I think the problem for me is knowing just enough to know I don't know shit about how to do this 😅
IMO bazzite is too focused on gaming for people to be daily driving it for everything, but hey whatever works. Just hope they're not upset when something breaks and the response from bazzite is "well yeah, that's not something we bother testing for".
(I have bazzite on a HTPC in my living room, and I think it's perfectly suited for that usecase)
IMO Mint, Fedora, or OpenSUSE is going to offer the more stable, user-friendly experience long term. Install Lutris through the distro's package manager, launch it, install bnet through lutris, launch it, install wow through bnet, launch it, Thrall's your uncle 😉.
Edit: to answer your other question, yes Lutris runs as an app similar to how battle.net or steam works on windows. It's just that instead of having a storefront and downloading data directly from a central "lutris" server, it's basically a bunch of community-written scripts to automate the installation and configuration of games from all sorts of places. So when you tell lutris to install bnet, it's running a script that goes and downloads it from blizzard, then locally creates a wine environment, launches the installer in that environment, you install it like on windows, and then it creates a lutris launcher entry for the bnet executable so that when you click play on it in lutris, it will automatically launch it in a wine environment each time.
And it should all work in KDE plasma, gnome, cinnamon, or whatever window manager you're using (the window manager on msft windows is called dwm and it's responsible for the same job).
It's kind of fascinating: the Steam Deck is the only device I can think of with a "halo effect" that doesn't involve giving a company more money: the ecosystem it pulls you into is an open one.
Addiction is extremely dangerous and you can end up wasting years of your life on something that really isn't that important to you.
It's sad how many people in my generation encourage others to become addicted to things like video games.
Games like league reward people who put more time into them while punishing those who put in less. It's particularly exploitative because it encourages us to spend as much time in the game as possible so we're as good as we can be when we're playing with our friends. It genuinely feels good to be good at the game because that transfers to wins for your team and respect from your peers.
More people playing competitive games need to realize the tricks at play to get them addicted as long as possible. I avoid games like that with other people because I know firsthand how detrimental they can be to my psyche.
I recommend playing co-op games instead. Focus on working together against the computer instead of fighting each other. That way there are challenges you can eventually beat, rather than fighting players who always put more time into the game than you.
I'm a Linux Pirate. It's possible to play co-op games online for free with programs such as Sunshine+Moonlight for streaming, emulators with netplay, and you can even play any LAN game online using something like Hamachi.
I finally made the switch on my gaming rig 2 weeks ago. I'm just done with windows. Its been fun setting up and getting it to work. I mostly play story driven games and rpgs. I have bnet installed through lutris to play diablo and Starcraft. I'm good. I think i may grab an amd gpu since ive been reading they work better than Nvidia. My Nvidia 5070 is working just fine though. I'm on PopOS.
Pop will make sure you're nice and comfortable. Its in the top two for great starter distros alongside Mint. Both will take care of you and your driver/dependency needs, regardless of GPU.
Honestly, unless you have any real problems running Nvidia, I'd say upgrading now would be a waste. Unless you need more vram for something like localhosting large AI LLMs. Nvidia is getting better at just being supported and stable out of the box, even on Wayland.
Definitely something to keep in mind when you actually need an upgrade, though. AMD and Linux just pair well without any extra steps, like coffee and cream.
But Nvidia is as easy as selecting proprietary drivers on install these days and has very little issues. At least not enough issues to warrant upgrading such a newer card. I'd just save the cash up for the next big AMD release.
Over time though I discovered it had tonnes of amazing features as a prose editor too, so many powerful plugins for editing prose that blew me away.
Stuff like "warn me if I use tthe same word too much" and whatnot.
And of course telescopes fuzzy find made jumping around to edit my text way faster, and being able to bulk change stuff with a simple :%s/.../.../g feels real good.
I highly recommend folks try out nvim for this use case :3
I’m looking to leave behind the graphical Obsidian app for neovim and plugins as I already use it for most of my other text editing. What is your setup and what plugins you recommend for neovim for general use, coding, and writing?
For me it was Destiny 2. I genuinely enjoy the moment to moment gameplay, and no other game has really matched it for me. The story and characters were engaging enough, even at the games lows, that I wanted to see the saga through to the end. I did week one of the raid for “The Final Shape” and then I booted into my Linux install and have not booted windows since. I’m about to fully wipe that drive and reuse it in a different Linux machine. My desire to quit windows, and my acute awareness of how much of my life and money I had put into Destiny over the last decade or so, made the switch honestly pretty easy.
I still game a good amount, but it’s much more intentional, and I don’t play any live service games which frees up money I don’t feel guilty putting toward indie games.
I quit League in 2019 when I finally built my own PC. I refused to put any games from Riot on the new computer. I played enough of the game to enjoy following the competitive scene to this day, and every now and then I get the desire to play. I’d really only do it with premade scrims of people I know.
I’ve recently found a gaming cafe in my city I might go to a few times a month to play a couple of those games I either can’t or refuse to install on my Linux machine.
My game of choice is CS2, so it didn't factor into my switch at all, but as someone who's been on EndeavourOS for a little over a week now, I have no regrets. Join uuuuus.
I never heard someone who is not Russian in the voice chat in CS2. Seeing that the skins are mostly exchanged there as well, I guessed the game was a Russian colony by now.
The aim is to score points by creating words, moving around in six directions in the grid, using consecutive letters.
When the user created longer words, coloured letters appear. The user can score more points by using these coloured letters.
More points can also be scored, when the user manages to create the bonus words.
When smaller words are created, or low point yielding words, red letters appear in the grid. If not used, these red letters will drop one cell in every turn.
When a red letter reaches beyond the bottom of the grid, the game is over.
The user can also reshuffle the letters in the grid, in order to be able to create words. However, there is a price to this action: the existing red letters will drop one cell, all other bonus coloured letters will be lost, and more red letters will appear.
If the score is among the 10 best scores achieved, it makes it in the Top Ten Highscores.
Recently in Spain we have suffered a complete power outage, with no electricity for a long time. Some were able to have power on their computers with generators, solar panels, etc. And I know you can have data connectivity with SDR or HAM radio. But my question here is, what are some good self-host/local offline software that we can have and use for when something like this happens. I know kiwix, and some other for manuals. Please feel free to share the ones you know and love, can be for any type of thing as long as it works completely offline, just name it. Of course for GNU/Linux (using Arch myself BTW). Thanks in advance.
A piece of software always runs locally. It is in some cases those who needs to communicate with the server fail to deliver the usual function you expect when offline.
Please do not confuse one to another.
And perhaps you can start by complaining which services you are using heavily relying on the server side? General questions attract general answers and IMHO you are better off just search on the internet.
I am aware of this, but neither is English my primary language (so I wasn't able of properly stating that) neither im asking for specific type of software, as you say this is indeed a general question asking for general software, I said to share whatever you like and use, as long as it can be of any use when there is a power outage. And I plan to share the responses to other people in fediverse of Spain that may need it here.
If you can get a few hundred watts of electrical power, StarLink is an option for broadband connectivity via satellite when all the local communications are down. Don't know why, but Star Link reminds me of Sky Net.
Linux is not really suited for the post-apocalitic no-internet world, the way the repositories are built and software is packed (almost nothing is static, a lot of dependencies on other packages everywhere) just makes it really impractical and hard to deal with those scenarios. Windows however is a much more solid and good option, yes, it's painful to hear this but in Windows you can get an exe from a friend in a flash drive and it runs as is. Sames goes for installers, reinstalling the OS etc. There's only a couple of .net framework installers that will cover dependencies for 99.99% of stuff in a few MB.
There are ways to deal with this. There's AppImage for GUI apps (that replicates the "just get an exe from a friend on a flash drive") and lots of bundling programs for non-GUI apps (I use nix-bundle because I use Nix, but there are other options too).
Lots of distro installers work offline too, by just bringing all the stuff you need as part of the installer.
And one major benefit of Linux is that when stuff does inevitably go wrong, it's infinitely easier to fix than proprietary garbage.
AppImage suffers from the same problem that Flatpak does, the tool do work offline aren't really good/solid and won't save you for sure. It also requires a bunch of very small details to all align and be correct for things to work out.
Imagine the post-apocalyptic scenario, if you're missing a dependency to get something running, or a driver, or something specific of your architecture that wasn't deployed by the friend alongside the AppImage / Flatpak (ie. GPU driver) you're cooked. Meanwhile on Windows it has basic GPU drivers for the entire OS bakes in, or you can probably fish around for an installer as fix the problem. It is way more likely that you'll find machines with Windows and windows drivers / installer than Linux ones with your very specific hardware configuration.
AppImage suffers from the same problem that Flatpak does, the tool do work offline aren’t really good/solid and won’t save you for sure
I've been using my laptop in areas without internet for days. It works fine.
It also requires a bunch of very small details to all align and be correct for things to work out.
I have appimage-run from nixpkgs installed, which handles all those details. They are also not too hard to figure out manually should you need to.
Imagine the post-apocalyptic scenario, if you’re missing a dependency to get something running, or a driver, or something specific of your architecture that wasn’t deployed by the friend alongside the AppImage / Flatpak (ie. GPU driver) you’re cooked.
GPU drivers are emphatically not part of the AppImage. They are provided by Mesa, which is almost guaranteed to be installed.
Meanwhile on Windows it has basic GPU drivers for the entire OS bakes in, or you can probably fish around for an installer as fix the problem
It's actually the other way around - if you want your GPU to work properly on a new Windows install, you have to fish around for AMD/NVidia drivers. On Linux Mesa is pretty much pre-installed on all distros.
It is way more likely that you’ll find machines with Windows and windows drivers / installer than Linux ones with your very specific hardware configuration.
LMAO, try moving a windows installation from Ryzen+AMD GPU to Intel+NVidia GPU and let me know how it goes (hint: you will have to manually uninstall, and then install a shit ton of drivers, for which you will need internet).
Meanwhile I'm typing this from a (Ryzen+AMD GPU) desktop which has an SSD from my (Intel+integrated graphics) laptop. When I plugged it in, it booted into sway just fine, with complete GPU support and all, and the only reason I had to update my config is to make it more convenient to use on the desktop.
Linux is not the best "apocalypse" OS, but it sure is better than Windows.
Meanwhile on Windows it has basic GPU drivers for the entire OS bakes in this is not true in fact, most of the machines I have here won't work with a Windows installer .iso or Windows OS itself and some of my hw don't even have drivers for it. So yeah no meanwhile, most GNU/Linux .iso distro installers have drivers already on the .iso itself, including propietary ones
doesn't this one needs a specific set of hardware? is it affordable here in Europe? thanks for sharing, I have heard of this for a long time but didn't get onto it, might look now that this happened
I have my homeserver rsync three Arch mirrors and three Arch ARM mirrors in rotation on three days every week. Thus I have full local repos for these. All my machines are configured to use this local repo. The reason I do this is precisely to be prepared for the inevitable 'Internet is broken' scenario.
A few notes about what ISO images Debian offers and how to download them. I'll also provide some useful tips on how to use Jigdo to archive the complete Debian repository into ISO images.
One can also use a cache to hold deb and rpm files requested by the machines. (Works great when running hundreds of systems. I like "apt-cache-ng". It will do deb and rpm.)
You mentioned ham radio --- definitely fun! It's a process to get into it though, as you need to study/pass an exam, and then you need a radio. Radios range from cheap ($25 or so) in the VHF/UHF ("walkie talkie"-style) to more expensive for an HF rig ($1000 range for 100W HF). If you want to get into low power ("QRP") it can be much cheaper. You also need a fair amount of space for a good antenna setup...
There are tons of different communication modes, some without a computer and, like you mentioned, some that use computers. wsjtx and fldigi are popular programs.
because just like first aid you need to be actually ready when needed and knowledge change over time. You need to actually try though, test your setup and yourself genuinely otherwise it is intelectual masturbation.
Currently running Nobara 41, and if Firefox is playing a video, or even just has a paused video on it, my computer will not go to sleep until I exit Firefox entirely. If I try to shut down instead, it will seemingly close all open apps, and the displays will go black but the mouse cursor remains on screen and does not respond.
If I start Firefox from the CLI, it shows nothing when I try to suspend.
This only happens with Firefox, and as far as I can tell, doesn't happen when playing a video elsewhere.
I don't have any power savings settings that I'm aware of that should be preventing anything, so I don't know what's going on. This is a recent issue, starting maybe 2 weeks ago. I haven't installed any new software besides updates in that time.
I had this issue on my desktop in Windows. Haven't tested to see if it's an issue on Linux (I just recently set up dual-booting with Kubuntu). I know your request is for Nobara but this may be helpful for troubleshooting.
The fix for me on Windows was always to power off my audio interface. Using powercfg /requests would show Firefox kept the audio device active once a YouTube video started playing. The software fix was arbitrary... sometimes closing the YouTube tab would work, sometimes I had to close the window, and sometimes none of those would work. What *always" worked was physically powering off my interface, waiting about 2 seconds, and turning it back on.
Software to allow partitioning gpu resources among multiple virtual machines instead of just assigning the one PCIe device to a single VM. Very useful for having a single GPU do 3D acceleration on a host and multiple guests at the same time.
I remember old Tesla and Firepro drivers had a jank, proprietary alternative to SR-IOV but didn't think any vendor (except Intel with i915) had an implementation for their consumer devices.
Gives you a bollywood experience right into your terminal, with more than 1000 ips simulated! An INFINITE amount of simulated names! Over 100 different types of glitches! An overly dramatic hack, just like seen in the movies! And more (If you -REALLY- have a lot of time to spend staring at this command.)
Click here to grab the C code, followed by instructions on how to compile it.
Hi Reddit! /u/xerohourFair use claim:-this serves an educational purpose in demonstrating computer illiteracy as it pertains to American Television-the clip ...
I wonder how hard it would be to make this a screensaver. Obviously this is a C program but I’ve got no idea what formats screensavers use to begin with.
Hello, im trying to install mint to try getting away from Microsoft, but im running into issues installing, and all my troubleshooting is making me even more confused (I am not very techy)
I have windows installed on my nvme drive, and a 30gb section partitioned off for mint. I also have an empty ssd for more storage (/home). When I go through the installation process, it doesn't recognize another operating system on the computer, and when I try "something else" to install it, I get an error saying "no EFI system partition was found".
I know I can partition off a small section for the EFI partition, but I am trying to dual boot and I assume this is not the right way to do it, especially considering it doesn't recognize that windows is on the system. I'm also very hesitant to just send it, as I don't want to lose any of my stuff (the most important stuff is backed up)
Edit: I'm trying to install mint 22.1, but almost all of the resources online are talking about 21
Edit 2: I have learned my BIOS mode is legacy, not UEIF (i assumed it was since my bios screen says UEIF when booting)
Edit: I just realised your Edit was saying you've got legacy bios! So this is all irrelevant. I'll leave it up in case it helps someone else.
Could it be selecting the wrong SSD to put the boot loader on?
When I reinstalled mint the other day on my laptop with an nvme and SSD (also dual boot) it labelled the extra SSD as sda and the original nvme as sdb, so it was going to try to put the bootloader on sda.
I set up the partitions on the third option (1. Install alongside windows; 2. Wipe everything; 3. Set it up manually) and on the manual setup there's a selector for the bootloader device just underneath the main section where you select partitions to use for /, /home, etc.
IIRC you set the bootloader to the full device (in my case sdb) not the EFI partition (sdb1) and it works out out.
Best bet when installing a second OS is to MANUALLY partition, select the existing fat-32 efi partition for efi, write the boot block to the drive you're going to boot off of, and choose free space for the remaining required partitions.
Recently discovered GNOME and loved the workflow, and now I find out Cosmic improves upon it with a more modern programming language behind it, which is native to Wayland.
I'm not much of an Alpha tester, but ill be following the progress of the project closely.
We get that question every few weeks. No, Lemmy isn't a "free speech" place. We tolerate a lot of things here, but the rules are made by the individual communities and instance admins. Generally, they remove misinformation, unhealthy things, hate and such. We don't know about any "islands" which treat things differently. Lemmy is Free Software, though. You're welcome to launch such an instance, and you'll be free to pass arbitrary rules in your own niche.
I meant island in the context of, a different Lemmy instance, separated from the tone and atmosphere of the rest of the network. But yes, we have a few people from other parts of the world as well.
That's what I wrote. Lemmy is a software, which can be ran on servers. You're currently on somebody else's server. In a group that is moderated by yet different people.... They gave some rules to you and you now have to choose whether you're willing to play by their rules.
Obviously, they haven't banned you yet, despite you saying lots of unproductive, short sentences. I'm not sure if your original question got answered here. If you're more interested in the details of how Lemmy works, read for example the documentation and Wikipedia article.
I switched to a Linux Mint/Win11 dual boot system over the weekend and installed Unity from Flathub. Running Unity Hub is fine but when I try to login, it hangs with no errors. I can log into the asset store just fine, so nothing wrong with the credentials. I'd like to know what terminal commands I could use to see what it's actually doing and figure out why it hangs.
I really don't want to continue using it in Windows and only keep it to run work programs, and really need to use Unity for University.
Edit: Troubleshooted via the terminal, then uninstalled the .Deb package that I downloaded from the Unity website and then followed another tutorial from another part of their website with terminal commands. Managed to log in and run my projects.
I am a long-time i3 user and have decided to switch to Sway. I have encountered a weird error which has left me utterly bamboozled.
I am using Ubuntu 24.04 which has gone from 20.04 -> 22.04 -> 24.04. It has Ubuntu-Gnome, i3 and Sway currently installed.
The issue
The error that I'm facing is when I'm using Sway, I simply don't have sudo access.
This is what the error looks like
$ sudo visudo
[sudo] password for xavier666:
Sorry, user xavier666 is not allowed to execute '/usr/sbin/visudo' as root on <HOSTNAME>.
When I switch back to i3, my permissions are fine for the same user. I have not done any crazy modifications to the sudoer's file as far as I can remember.
PS: I have added a command to no-sudo xavier666 ALL = NOPASSWD: /usr/bin/brightnessctl
The "fix"
I temporarily solved it by adding xavier666 ALL=(ALL:ALL) ALL to the sudoer's file.
IMO, I think this should not be required. I don't remember ever adding the default user to the file for all the installations that I have done. (But this is the first time I've installed Sway)
Logs/Outputs
Running sudo -l without the fix (on Sway)
Matching Defaults entries for xavier666 on <HOSTNAME>:
env_reset, mail_badpass,
secure_path=/usr/local/sbin\:/usr/local/bin\:/usr/sbin\:/usr/bin\:/sbin\:/bin\:/snap/bin,
use_pty
User xavier666 may run the following commands on <HOSTNAME>:
(root) NOPASSWD: /usr/bin/brightnessctl
When I run the same command on i3, i get this (ALL : ALL) ALL extra line in the output. And when I run sudo -l with my fix on Sway, (ALL : ALL) ALL is present and the permission issue is fixed.
What is causing Sway to remove the root permission for the user?
Note: I'm just asking for the standard sudo behaviour. I'm not trying to run GUI applications as root.
Edit:
The issue was caused by swhkd. It was installed as a setuid binary (as instructed by the developer of the project). Once I switched back to sway's default keybinds and disabled swhkd, the permissions were back to normal. I removed my previous "fix" in the sudoers list and I still have sudo access.
Thanks a lot everyone and specially @gnuhaut@lemmy.ml for pointing me in the right direction.
but with the way the sway session is started, as opposed to the i3 session. We need more info on this.
I'm using gdm to start sway. I'm using the laptop's built-in fingerprint scanner to unlock (Not sure if it matters). I saved the fingerprint in the Gnome session long back.
gdm probably looks inside /usr/share/wayland-sessions and finds sway.desktop and uses it to launch Sway.
I've tried to keep things as vanilla as possible.
Isn’t i3 Xorg only, and sway wayland only?
Correct.
Maybe wayland is launched using restrictive set of permissions.
Yeah, it just calls the executable mentioned in the .desktop file (/usr/bin/sway). It should not be a GDM, issue, right?
I also checked that I don't have seatd installed, which is a "minimal user, seat and session management daemon" mentioned in arch wiki (wiki.archlinux.org/title/Sway). Could it be related?
Sorry, I have to go now. More tonight, if you want.
No hurry, the fix I am using is not causing issue. I just want to know why this is happening. This is a fun research problem.
PS: I checked Google and I didn't find anyone who has faced the same issue.
One big difference is that sway doesn't run as a login process (and neither does gdm), meaning none of your .profile files are getting sourced. Check how your environment variables differ between i3 and sway and see if that might be the issue.
This goes a little beyond me because I have no idea how gdm would differentiate Xorg or wayland sessions.
Look into the session files themselves (.desktop) - they have an Exec= line. Then see if that's maybe just a shell wrapper around something else, e.g.: file /usr/bin/sway and see what it does.
Sorry what? As what user are you executing all these 'groups' commands? Unless Ubuntu does things significantly differently from Arch and Debian, there's something very fishy going on here. The "normal" user should not be in the root group, and root should not be in the normal user's group.
Have you done other things beside the "fix" you mentioned?
That "fix" from your op, btw, looks totally valid to me.
As what user are you executing all these ‘groups’ commands?
I'm using my default user (xavier666)
The “normal” user should not be in the root group, and root should not be in the normal user’s group.
I just made the user a root user/system administrator during the Ubuntu installation process, which is very standard.
Have you done other things beside the “fix” you mentioned?
AFAIK, I haven't done any changes. This is a single user system. I checked the contents of /etc/sudoers and these are the only other lines of significance. I didn't change them (Why are there % signs?)
# User privilege specification
root ALL=(ALL:ALL) ALL
xavier666 ALL=(ALL:ALL) ALL
# Members of the admin group may gain root privileges
%admin ALL=(ALL) ALL
# Allow members of group sudo to execute any command
%sudo ALL=(ALL:ALL) ALL
That “fix” from your op, btw, looks totally valid to me.
It's working fine also. However, I believe in "don't touch what ain't broke" and "why isn't it documented?"
However, in my installations I have never touched the sudoer file to make the ONLY user part of sudo group post install. Either I'm dumb or I'm launching sway/wayland with improper permissions.
I also can't find anything on the arch wiki which deals with this.
In that case Ubuntu DOES things differently. And weirdly imho, there's no reason for the normal user to be in the root group since they still need privilege escalation to edit system files.
If you use visudo to edit /etc/sudoers you don't have to worry about the syntax.
FWIW, this is what my perfectly healthy system looks like:
$ sudo grep -vE '^[[:space:]]*#|^[[:space:]]*$' /etc/sudoers
Defaults env_reset
Defaults mail_badpass
Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
Defaults use_pty
root ALL=(ALL:ALL) ALL
%sudo ALL=(ALL:ALL) ALL
@includedir /etc/sudoers.d
$ groups
a_norny_mousse adm dialout fax cdrom floppy tape sudo audio dip video plugdev netdev bluetooth lpadmin scanner
You will notice that my user is in the sudo group; this is enough to give them admin rights as per sudoers.
Good question, here's the explanation man sudoers offers:
The definitions of what constitutes a valid alias member follow.
User_List ::= User |
User ',' User_List
User ::= '!'* user name |
'!'* #user-ID |
'!'* %group |
'!'* %#group-ID |
'!'* +netgroup |
'!'* %:nonunix_group |
'!'* %:#nonunix_gid |
'!'* User_Alias
A User_List is made up of one or more user names, user-IDs
(prefixed with ‘#’), system group names and IDs (prefixed with ‘%’
and ‘%#’ respectively), netgroups (prefixed with ‘+’), non-Unix
group names and IDs (prefixed with ‘%:’ and ‘%:#’ respectively),
and User_Aliases. Each list item may be prefixed with zero or more
‘!’ operators. An odd number of ‘!’ operators negate the value of
the item; an even number just cancel each other out. User
netgroups are matched using the user and domain members only; the
host member is not used when matching.
TL;DR % let's the system know the following word is a group name, instead of a username
Can you provide output of which sway, sway --version, file $(which sway) and ls -l $(which sway)?
Also, can you run id, after logging in w/o gdm on the console, and then again after starting sway?
The fact that your group membership changes even when starting sway from a tty, as mentioned in some other comment, is super weird. I believe newer versions of sway should not mess with this.
AFAIK some versions ago, sway used to be (or at least could be) a setuid root binary (something something needed root privileges for some reason to do with h/w access), but no longer. Back then it looks like it did mess with group membership etc.
I have this hunch, that maybe your binary has the setgid bit set for some reason (due to, perhaps, an oversight made by the packager, because in the old package that was needed).
A funny thing; I think this has nothing to do with gdm. I have gdm disabled now and launching sway directly from the terminal and the issue still persists.
The problem goes away (xavier666 becomes part of sudo like expected) when I type exec su - xavier666 for that terminal session only. If I open a new terminal, it problem reappears. I'll just in case check if zsh/omyzsh is doing something funny.
Yeah so this does not confirm my hunch, and I don't think sway is changing your group membership. Version 1.9 does not allow sway to be installed setuid root, and it isn't, as confirmed by the ls output.
So it must be something else. It could be anything between the login shell in the console and the shell started with the messed up groups. What's weird is that in order to change group membership, you would need root permissions (technically you only need CAP_SETGID, but why would you have that?). I think there are really only two ways to do that: Run a binary that has the setuid bit (like e.g. sudo) or CAP_SETGID, or talk to some process (e.g. a daemon like systemd) that is already running as root, and ask it to do that for you.
I cannot imagine why anything between the login shell -> sway -> ??? -> zsh would be either setuid root, or have any reason or permission to change groups in any way. So that's really weird and interesting.
How do you open the shell inside sway? Keyboard binding from sway config? Launcher? Which terminal? Do any of the involved programs have setuid root bit set (looks like rws instead of x in ls -l output)?
About zsh: I mean I guess in theory one could change groups in the zsh configuration if you had the permissions (which you shouldn't have), but I cannot think of any reasonable explanation why anybody would want do that.
It was swhkd. Thank you very much for your insight and extremely detailed response!
$ ls -l $(which swhkd)
-rwsr-xr-x 1 root root 2583192 Mar 10 17:16 /usr/bin/swhkd
Since we know what's causing it, can you make a "guesstimate" of what it's doing? Why are other applications are getting infected by it? And why is a keybind manager affecting permissions?
I will raise an issue on their github. The project is already looking for maintainers.
For one user account, I want to have some bash scripts, which of course would be under version control.
The obvious solution is just to put the scripts in a git repository and make ~/bin a symlink to the scripts directory.
Now, it seems on systemd systems ~/.local/bin is supposedly the directory for user scripts.
My question, is mostly, what are the tradeoffs between using ~/bin and ~/.local/bin as directory for my own bash scripts?
One simple scenario I can come up with are 3rd party programs which might modify ~/.local/bin and put their own scripts/starters there, similar to 3rd party applications which put their *.desktop files in ~/.local/applications.
Any advice on this? Is ~/.local/bin safe to use for my scripts or should I stick to the classic ~/bin? Anyone has a better convention?
(Btw.: I am running Debian everywhere, so I do not worry about portability to non systemd Linux systems.)
i have ~/bin as a syncthing folder because i manage several machines and if i update a script on one machine i want that synced to all of them. Then i just use . local for stuff that doesnt need syncing.
Put them wherever you want, don't let Poettering dictate what you do with YOUR system. It is better NOT to put them in system directories since those will get overwritten by upgrades.
Package managers tend to assume they are the only ones touching files in /usr/share. You will find if you try to change any files there, the next update may delete or download a new version of the file, stomping your changes. Instead your local changes should go in /usr/local (if you want something system-wide) or ~/.local (if it only applies to a specific user).
Ex. If you made a custom .desktop file to show up in your app launcher, or a custom .xsession file to show up in a login manager.
Personally, I put a ~/.get-going or whatever you want to call it and put all my scripts in there. Name them with numbers first like “10-first.sh” “20-second.sh” and then just put a line in .bashrc or .zshrc or whatever you like. Aliases and any critical stuff last. Then one line in your rc file can include them all.
I made some bash scripts for distro-hopping that are now [undiscloded] years old so I can basically backup a few folders — the second being ~/bin where I put AppImages and stuff and sometimes ~/Development (I don’t always need the dev one because backups of those exist as repos) folder if I need to reinstall. A lot of people backup their whole home directory. But I prefer my method and that’s why we use Linux. I don’t want my settings for every app coming with me when I go on a new journey. Choose your own adventure.
Neither ~/bin or ~/.local/bin are part of most shell's default $PATH so you're going to have to modify the user's shell profile (or rc) to include it. It's possible that your favorite distro includes it but not mine. For example(s):
I'm not sure why you're bringing the XDG or systemd "standard" into this. POSIX standard would be more appropriate but they don't say anything on the matter, nor should they really. The most important thing is, be predictable. If the user has a problem with one of your scripts, what do they do first? which wolf_bin will show them the full path to the script. So really, the location does not matter much.
That said I would go with one of these two options:
1) Make a package for your distro. This may be overkill for a couple scripts but you did say they're in a git repository so you could automate it. The package would install to /usr/bin which would require sudo or root. If the scripts are only allowed to be run by one user, set the rwx and group permissions.
2) A pattern I like, especially for lightweight things such as scripts that don't require compiling or OS management and also are using git; a "hidden" or "dot" directory in the user's home where the repo lives e.g. ~/.lemmywolf/ Then add scripts directory to the user's $PATH e.g. PATH=$PATH:~/.lemmywolf/scripts. This is what some fairly large projects like pyenv or volta do. You could take it a step farther and modify this installer script to your liking github.com/pyenv/pyenv-install…
/edit 20 year Linux user (Redhat AS2.1) and 5 years of Unix (HPUX & Solaris) before that.
/edit2 I just noticed the pyenv-installer does not modify the user's shell profile. That could easily be added to the script though.
I’m not sure why you’re bringing the XDG or systemd “standard” into this.
Probably because in their "basedir" specification they do recommend ~/.local/bin to be in $PATH. I'm sure there's more than one distro following that spec, whether you'd consider it standard or not.
User-specific executable files may be stored in $HOME/.local/bin. Distributions should ensure this directory shows up in the UNIX $PATH environment variable, at an appropriate place.
1 Introduction # Various specifications specify files and file formats. This specification defines where these files should be looked for by defining one or more base directories relative to which files should be located.
If I hand write bash scripts, or for those single binary downloads, they'll go into ~/bin. ~/.local is already used by a ton of packages. This helps a ton when it comes to backups or for just finding where I put stuff.
My ~/.local is 283 GB, it's where podman/docker/etc put containers, it may as well be a system managed folder at that point. My ~/bin is only 120 MB and is a lot simpler to backup/restore/sync to other desktops.
Personally I put scripts in ~/.local/bin/scripts/ instead of just ~/.local/bin/ because I like to keep them separate from other binaries. To note: even though ~/.local/bin/ is in PATH, it's subfolders are not, so if you do that you need to add the scripts subfolder to PATH if you want to run the scripts directly.
Well actually my scripts are in mydotfilesrepo/home/.local/bin/scripts, and I use GNU Stow to symlink mydotfilesrepo/home to /home/myuser/ (same for mydotfilesrepo/etc/ and mydotfilesrepo/usr/ which are symlinked to /etc and /usr), but it's the same result. Stow is pretty cool for centralizing your configs and scripts in one repo !
I've never seen ~/bin before so I can't comment on whether it's a good idea.
I dislike having top-level directories in $HOME that aren't storing media or documents. Some linux ports of games are awful for littering your homedir or Documents. Just lazy devs. Put it all in ~/.local please folks!
Oh it's so annoying when apps put data in .mozilla, .vscode, and .whatevers in the home folder instead of following the specs and splitting it between .config, .local/share and so on... I have 31 .something in my home folder that shouldn't be there and It's a cluttered mess. And a few games not even bothering to start the folder names with a dot... 😡
I migrated to fish recently and at first I was really annoyed that I had to decompose my ~/.bash_aliases into 67 different script files inside ~/.config/fish/functions/, but (a) I was really impressed with the tools that fish gave me to quickly craft those script files (-
~> function serg
sed -i -e "s/$1/$2/g" $(rg -l "$1")
end
~> funcsave serg
funcsave: wrote ~/.config/fish/functions/serg.fish
) - and (b) I realized it was something I ought to have done a while ago anyway.
Anyway, all this to say that fish ships with a lot of cool, sensible & interesting features, and one of those features is a built-in place for where your user scripts should live. (Mine is a symlink to ~/Dropbox/config/fish_functions so that I don't need to migrate them across computers).
I really like fish. It's just so pragmatic, I don't know how to describe it differently. No groundbreaking concepts (like nu or elvish), but the tools you need are right there and easily accessible with syntax that doesn't make me scratch my head (bash).
What are your tips for faster boots? My system seems to hang a bit at POST until it boots into Mint. Right after post I'll get a blinking cursor for about a full minute until it boots in. All ssd, so I know it's something I must have done wrong. It's also a 14 year old processor (amd fx be 8 core, rx580), but win### booted faster on it.
Thank you all so much for your help, here is my output of systemd:
It must be something weird with my initial boot. I am dual booting, but on separate hard drives. My PC does have 6 hard drives in it however. Or, maybe something is messed up in my install?
fstrim.service is disk tool (that's supposed to only be run once a week, not every time you boot) that automatically cleans up old deleted SSD data. opensource.com/article/20/2/tr…
It looks like it's running too often, or on the wrong devices, every time you boot your computer. You can actually safely disable it; askubuntu.com/questions/116512… but it's worth looking into why it's taking so long and being run so often.
Running this should show you the log results of fstrim doing it's thing without actually doing anything; sudo fstrim --fstab --verbose --dry-run
These two will show the status of fstrim and it's autorun service;
systemctl status fstrim systemctl status fstrim.timer
I got most of this from a quick google search; duckduckgo.com/?q=fstrim.servi… You can do the same for the other major time-takers on your boot list. For comparison, here's the top results of my semi-fresh install of linux mint;
I use Ubuntu 18.04 LTS, dual-booted with Win10. Whenever I boot the system, it takes ~3 minutes. Also before the login screen, this thing comes up of which I am attaching a screenshot.
What does...
On my last computer I found that the boot process was looking for things that weren't there but that the motherboard had rudimentary functionality for like a floppy drive. It didn't even have a connector for one.
For whatever reason, that caused a 10-30 second delay while the kernel tried to determine if there was a floppy drive connected. Pretty sure I had everything disabled via the BIOS but apparently it wasn't disabled enough and the kernel could still see it.
That required throwing something into the system config, probably somewhere in /etc/modprobe.d, to blacklist that particular kernel module.
There was another problematic module as well; I can't remember what that was, but I'm pretty sure it was the same fix. Got the boot time to login screen down to less than 10 seconds.
But all that said, even on this computer where the boot time is pretty quick, I usually put the computer into suspend mode to keep times down.
The aim is to score points by creating words, moving around in six directions in the grid, using consecutive letters.
When the user created longer words, coloured letters appear. The user can score more points by using these coloured letters.
More points can also be scored, when the user manages to create the bonus words.
When smaller words are created, or low point yielding words, red letters appear in the grid. If not used, these red letters will drop one cell in every turn.
When a red letter reaches beyond the bottom of the grid, the game is over.
The user can also reshuffle the letters in the grid, in order to be able to create words. However, there is a price to this action: the existing red letters will drop one cell, all other bonus coloured letters will be lost, and more red letters will appear.
If the score is among the 10 best scores achieved, it makes it in the Top Ten Highscores.
This game is named sausage as a tribute to
Renowned writer and lexicographer Dr. Samuel Johnson starts to read a tiny scrap of paper containing Baldrick's miniscule novel:
Once upon a time, there was a lovely little sausage called...
...only to realize that after 18 years of arduous work, he failed to include the word SAUSAGE in his magnum opus.
This site states "⚠️ Send will be terminated on May 24th. ⚠️ Costs are getting too high to keep hosting this service. Find an alternative instance here or host your own."
One moderator from fosstodon is not 100% aligned to the prevailing ideology on Fedi.
Someone on Mastodon found "bad" posts from said moderator.
The mob went on to presume that someone that is not 100% aligned to their prevailing ideology is unfit to be considered human - let alone a moderator - so they went after the admins.
The admins claimed to have reviewed said mod actions, didn't find anything out of the ordinary, but still got rid of them.
Regardless of actions and reactions, the mob now successfully tainted the name and reputation of the instance.
Less-principled users of fosstodon are now just leaving the instance, for fear of being associated with them.
One of fosstodon's admins (the author of the blog post) is now saying "Screw you guys, I'm going ~~home~~ to Bluesky"
EDIT: There's more to it. Seems like said mod is also active on Reddit (lemm.ee/post/60365167)
I understand the concern to be honest. The problem here is that when someone is a bigot and they are at least reasonable enough to walk themselves out, the response of the community is to stain everyone else by association.
Trust is not associative, and tbh distrust probably should also not be.
almost any time I see someone complaining about a community at large, either that individual is a bigot or said community is and it shouldn’t be difficult to infer my opinion on which is more common
the age of ‘I’m just asking questions bro’ is over and concern trolling bigots killed it
we should all well know by now how the paradox of tolerance plays out, one way or the other
As a moderator myself, it's a pretty thankless job. It's a bit like being a politician in that no matter what you do, there are lots of people that are going to hate you.
I have to ask, then: what motivates people to do it?
If mods are not financially compensated for it, the only rational explanation is that they are either getting some form of benefit (soft power, access to privileged information) or they are getting some pleasure out of it, i.e, power tripping.
Don't really want to get too deep into it but its a Facebook community and its relevant to my business and I use the community to promote my business. It's become a large source of my business. It's the only reason I can't delete my Facebook profile.
Ah, I thought you were talking about something here on the Fediverse.
In any case, I wish people didn't feel afraid to talk about business here. Maybe more people would realize that behind the majority of "business" there are genuine people and not just the cartoon capitalist pigs.
I have a Ghost blog for my business. It'll be in the fedi as soon as they make that available for self-hosters. For now, it's just crossposting via MastoFeed. I've also contacted them about posting them to Lemmy, as it seems like a much more fitting platform.
Some people chose to do the right things because they are right
This is just another way of saying that people do things for moral validation - a.k.a, self-righteouness - and is no at all different from "power tripping".
That is a rather toxic way of looking at the world. I get it, I kind of can rationally understand the idea that you can explain all selfless behavior as being selfish because the least you get out of it is dopamine, so you are wired to feel good doing what you think is right.
Now, can you tell me how this is just not a very shitty and cynical lens to view humans through? I've had my nihilistic phase in my 20's. I hope you also find a way out of the hole of the "arbitrariness" of ethics.
Because each other is all we have, and ethics is ultimately what makes us human. The ability to reprogram our own pleasure circuit and maybe, just maybe, just use it to be not an asshole, just to start with. And then at some point just do something nice for others. Because if everybody did that, the world would not be the shithole it is.
I'm thankful to mods who volunteer their free time to tend to the garden of the communities they care about.
I am not at all talking about the cases of someone who is passionate about some topic and then goes on to cultivate a community around it, and I am not saying "every moderator is doing it for some ulterior motive".
I am talking specifically about the types that put on themselves to become mods of dozens of subreddits. Or instance admins that go months in a row begging for money to be able to pay their own bills, instead of shutting down the instance or make it only for those that contribute back.
IOW, I am talking about the cases where people act beyond what anyone would consider "healthy".
Ooof 😟 this morning i got the server bills and currently im still a massive €470+ short..
Upcoming week I'm gonna dedicate go clean up servers, merge some to cut costs
Unofrt active users has gone down but the cost do keep return and even increase …
Okay wow, thanks for the clarification. That is indeed weird. Yeah, then I guess I agree, it's really ... Just not very healthy behavior.
Okay I mean for some people maybe this whole Internet thing, becomes too much an end in itself, maybe they are missing something in life and trying to get it that way.
If you are employed, have family and/or friends and a hobby or two, how do you even have the time to mod dozens of subs and stuff like that?
So if they are doing it while being nice, one can actually say they could need some empathy. If they are not being nice, well, for such cases it might explain why the other things in life might be lacking.
Hey, any comparison to Ayn Rand or their fans should be an immediate ban. No need to go that low.
All I've been arguing with you could be summed up as "if we want the Fediverse to be universal, we will need to grow a lot faster and we need to accept the reality that not everyone values the same things as you do" and you responding "No, I don't to make the Fediverse universal because most people are too morally weak to stand for the things I care about".
(And if you think I am exagerating: don't make me look for the conversation where you said that people should be okay using this crap because the other open source alternatives committed the grave sin of "raising money from investors".)
But I think you still didn't get my argument last time. Tl;dr: there is no point in doing what you propose as it just results in recreating the same shit we already have. This has nothing to do with moral failings and everything with strategy and not repeating the same mistakes all over again.
And besides that I agree that Siskin isn't great, and most likely suggested this instead. And that "open-source alternative" is now open-core and can't pay their bloated expenses now that VC funding has run dry. I hope you see the irony in what you just wrote, because that is really a clear example of how unsustainable and ill advised that kind of growth is.
it just results in recreating the same shit we already have
This is you passing opinion as undisputed truth. I am not proposing "Let's take on the big corporations by building another big corporation", I am saying "we can get rid of the dominance from big corporations if we help foment an economy of small, independent businesses." and I am saying "if we keep this anti-business culture where we are hostile to even some food truck owner trying to connect to their customers, then don't complain when the food truck owner continues using Facebook/Instagram/Twitter".
And that “open-source alternative” is now open-core
Synapse is still AGPLv3. Their closed parts are for Enterprise. No one is being locked out of crucial features. No one is being locked out of reaching out other users of the network. No one is being forced to "upgrade" after reaching a certain size. To call it open-core is just yet-another display of bias.
and most likely suggested this (Monal) instead.
Monal does not make video calls! Not having video calls was a non-starter in 2015, let alone today.
because that is really a clear example of how unsustainable and ill advised that kind of growth is.
Is it? Because so far I managed to talk with a lot more people on Matrix than I ever did on XMPP, and that wouldn't change even if Element closed shop tomorrow. And even if it did, the odds would be highly in favor of some other company like Beeper picking up the pieces to serve its customers and it would still be in their interest to keep things open to have the ecosystem around.
So, at the end of the day, yes, I'd rather have this "unsustainable" growth than claiming any moral victory for sticking to the Betamax of chat protocols. This "unsustainable" system gave me and few hundred million people something that is far from perfect, but at least it can make video calls on iOS.
I like high quality communities, which cannot maintain quality without staff, and which would probably struggle to maintain any funding.
One example of a community I became a moderator for often had trolls occasionally show up and post obviously malicious content, and commercial ad spam. Due to timezone differences, these often took hours to be deleted by existing staff.
So it wasn't about morality, righteousness, money or power. It was about me wanting to develop a community I cared about.
Edit: in a comment chain, you mentioned people who clearly moderate for other motives. They exist, I've seen them and helped get some removed in one particular community. Like you said, there are other motivators.
Let’s please not forget that some people donate time and money because it gives them personal satisfaction to help out with something that is meaningful to them.
it gives them personal satisfaction to help out with something that is meaningful to them.
What about the cases where "what is meaningful to them" conflicts with "what is meaningful to the others"?
I said on a sibling comment but it bears repeating: I am not talking about someone who enjoys a hobby and goes on to create/mod a community about it. I am thinking about the cases where someone finds themselves as part of a large community and realizes that the majority of the members keep pushing you to things you either don't want to or disagree with.
It is a broader issue, namely: there is no such thing as doing a "thankless" job for purely altrustic reasons. This is not an issue on a small scale, but once it reaches it some critical mass we should wonder what motivates those who keep a position of authority.
(And before I get another barrage of people saying "I do it because I care about it/ I want to help / someone needs to do it"... yeah, sure, but if you are cultivating something because you happen to like the thing at hand , then you are doing for your own personal interest and it is not entirely altruistic. And that is totally fine.)
I legitimately did it because I had been a member of the community for years and really felt passionate about keeping its standards and making sure it remained safe for the community.
Would you do it for a community you didn't care about?
Do you think that doing something because you "really felt passionate about it" is "selfless"?
My "axe to grind" is not against mods. My "axe to grind" is against Small Fedi. I can elaborate more later if you want, but now I need to get back to work...
As I often do, I made a poll on the fediverse about two concepts I am interested in: Big Fedi versus Small Fedi. Although I think these are interesting topics, I couldn’t come up with exact summations of what the “Big Fedi” and “Small Fedi” positions are. So, I wanted to write down what I could here.
The fediverse, in this case, is an internetwork of social networks. It works a lot like email; you can have an account on one network and follow, message, and react to people (or bots) on other networks. The biggest software tool for making fediverse networks is Mastodon; there are a lot of other Open Source servers for setting up nodes. There are also some proprietary nodes — Meta Threads and Flipboard are two of the biggest.
The following are some clusters of ideas that I think coalesce into “Big Fedi” and “Small Fedi”. I haven’t been able to tie them all back to some fundamental principle on either side.
Big Fedi
The “Big Fedi” position is a set of ideas that roughly cluster together. Not everyone who agrees with one or a few of these agrees with them all, but I think they tend to be related.
The fediverse should be big. Real big. Like, everyone on the planet should have an account on the fediverse. It will make the internet better and the world better.
Weshould make choices that help bring the fediverse to new people. Because the fediverse should be big, we should be doing things to make it bigger; in particular, to bring it to more people.
There should be a lot of different account servers. (I’m using “account servers” instead of “instances” or “servers”.) It’s good to have a lot of choice, with a lot of different parameters: software interfaces, financial structure, what have you.
Commercial account servers are welcome. This variety includes commercial services. If they provide the right mix of features and trade-offs that certain people want, it’s good to have them, especially if they have a lot of users.
Moderation can be automated. Shared blocklists, machine learning, and other tools can be used to catch most of the problematic interactions on the fediverse.
Account servers can be big. It doesn’t matter how big they are: 1M, 10M, 100M, 1B people is fine.
The fediverse should have secondary services. In order to grow, we need secondary services, like people-finders, onboarding tools, global search, bridges, and so on.
The individual is central. People should be able to set up their environment how they like, including their social environment. They have the tools to do that. The account server may set some parameters around content or software usage, but otherwise it’s mostly a dumb pipe.
Connections should be person-to-person. The main social connection is through following someone. Building up this follow graph is important.
People I care about should be on the fediverse. I have a life outside the fediverse — friends, family, colleagues, neighbours. My governments, media, celebrities, sports figures, leaders in my industry. It would be good to have more of those people on the fediverse, so I can connect to them.
People should get to make choices about their account server. Everybody has different priorities: privacy, open source, moderation, cost, stability, features. We can all make our own choices about the account server we prefer.
It should be possible to have ad-free account servers. Technically and culturally, we should be able to set these up.
It should be possible to have Open Source account servers. People who prefer free network services should be able to run them and use them.
It should be possible to have algorithm-free account servers. You should be able to just follow things reverse chronologically.
It should be possible to have individually-run account servers. A normal technically-minded person should be able to run their own account server for themself, friends, their household, or even for a larger communty.
Harms that are mostly kept to account servers are up to people on those servers to solve. Good fences make good neighbours. If things become unbearable, people can move servers somewhat frictionlessly.
Affinity groups should stretch beyond account server boundaries. Groups, lists, and other social network features are important and should be fully federated. They should provide a lot of features.
There may be some harm that comes with growth; we can fix it later. We’re going to find problems as we go along. We can deal with them as we come to them.
The fediverse is going to look very different over time. The way things work now are not how they’re going to be 1, 3, 5, 10 years from now. Especially as the fediverse grows, different structures and ways of working are going to develop.
Open standards are important. By having public, open standards available through big standards organizations, we gain the buy-in from different account network operators to join the network. We definitely don’t have time to negotiate bilateral agreements; we need solid standards.
Variety in types of account server operators is good. Different people have different needs and tolerances. If we want to have more people, we need to cater to those different needs with different account servers.
Existing organizations can and should provide account servers. Not just existing tech companies; also businesses providing servers for their employees, universities for students, cities or other governments for their citizens.
Existing services, even if they’re bad, will become somewhat better if they have fediverse features. People on those services will get to connect with a variety of new people. They’ll find out about the fediverse, and might move to another account server, or try something else new.
It’s more important to bring good people to the fediverse than keep bad people off it. More people is good, and the people I care about on other networks are also good. There may be some bad people, too, but we’ll manage them.
Small Fedi
Here is a rough cluster of ideas that I’d call “Small Fedi”. Again, not everyone who agrees with one or two of these agrees with all of them.
The fediverse should be safe. Safe from harassment, safe from privacy violations.
Growth is not important. We’ve gotten along this long with a small fediverse. It’s OK how it is, so growth is not important. Growth is a capitalist mindset.
People who aren’t on the fediverse don’t matter as much as people who are. Their needs, at least. When discussing the future of the fediverse, we don’t need to talk about people on other networks much at all.
If people want to get on the fediverse, they can join an existing account server. We don’t need to bring new account servers to the fediverse; there are a lot already. People who really care about getting on the fediverse can join an existing account server, or set up their own. If they’re not willing to do this, they’re probably not that interested in the fediverse, so why should we bother trying to connect to them?
If growth could cause harm, we either should fix the problem before growing, or we shouldn’t grow. We should examine opportunities carefully, but by default we should say no.
Commercial account servers are discouraged. Most commercial services do harm. Even if they’re on the fediverse, they’re going to try to do harm to make more money. So, they should be avoided as much as possible.
Secondary services can cause harm and should be severely limited if allowed at all. People search and content search can be used for privacy invasion or harassment. Shared blocklists can be manipulated to cause echo chambers. Machine learning can be biased. Onboarding services favour big account servers. They should be discouraged or, preferably, closed.
The account server is central. Moderation decisions, cultural decisions, account decisions, most social decisions should happen at the account server level.
Account servers are the primary affinity group. You should find an account server that feels like home. Any other groups are less important.
Feeds like “fediverse” and “local” are important. There is a public community of account servers that your account server connects to, and the public feed from that community is important. You might use it more often than your home feed. Your local feed is also important, because your account server is a group you belong to.
Moderation should be primarily by hand. The courage and wisdom necessary to make most moderation decisions can only be managed by hand. Automated tools can be manipulated.
Account servers must be small. Human moderators can only do so much work, so the account servers they moderate can only be so big.
The fediverse works just about right right now, and shouldn’t change. There’s a good reason for how everything works, and it’s fine. People who want to change the way things work just don’t get it.
It’s not important that people from my real life are on the fediverse, and it’s kind of discouraged. The account server is the most important affinity group, then the larger “fediverse”. That’s enough; other people are needed or welcome. People who I know who aren’t on the fediverse don’t care about fediverse stuff, so they’d get bored here, anyway.
It is highly discouraged to have ad-supported account servers. Even if they only show ads to their own users, they are causing harm. In particular, they’re showing our content next to ads, or using our content to develop ad algorithms. Either way, harm goes beyond the server border.
It is highly discouraged to have proprietary account servers. They just can’t be trusted with their own users’ data. Also, they’re going to get some of our data, just through federation, and who knows what they’ll do with it.
It is highly discouraged to have algorithmic timelines. Anyone having these causes problems. If you want one, you just don’t get it.
Open standards are less important than making things work the way we want them. In particular, fiddling with standards to keep people safe, and to discourage particular account server structure, is an OK thing to do.
Most existing institutions have proved themselves untrustworthy and should not provide account servers. Name any particular part of civil society, and I can come up with an example of at least one bad practice they have.
Harms that happen on one account server are a problem for every account server. Server blocks, personal blocks, and protocol boundaries aren’t enough to isolate problems to their account server of origin. Secondary or tertiary effects can happen and cause harm.
Existing services, if they’re bad, will make the fediverse worse. Bad practices, bad content, bad members will cause problems for everyone on the fediverse.
It’s more important to keep bad people off the fediverse than to bring good people to it. Bad people can be really horrible. There aren’t actually that many good people on bad services, and if they really wanted to connect with us, they’d find another way.
Where do I land?
I’m mostly a Big Fedi person; I did the work on the fediverse that I’ve done in order to bring it to everyone on the planet. I don’t think people should have to pass a test to be allowed on the fediverse.
That said, I respect that harm can come from new technical decisions and new network connections. As someone deeply involved in the standards around ActivityPub and the fediverse, I’d like to make sure that we give people the tools they need to avoid harm — and stay out of the way when they use them. I very much like the Small Fedi suspicion of new services and account servers, and careful consideration of the possibilities.
I’d like to find ways to mitigate the problems of so many people on proprietary social networks being unconnected to the fediverse, but still centre the safety of existing fedizens. I don’t have an easy answer to how this can work, though.
Anyway, thanks for reading this far. Also, an acknowledgment: I borrowed the term “Small Fedi” without permission from Erin Kissane’s great piece on Untangling Threads. I’m also using it differently, stretching it out, which admittedly is an ingrateful thing with something you borrow. I hope it is not ruined by the time I return it.
Another acknowledgment: this framing is loosely based on the worse is better series of essays by Richard Gabriel. His lists of ideas are much shorter, more cohesive, and more algorithmic.
As I often do, I made a poll on the fediverse about two concepts I am interested in: Big Fedi versus Small Fedi. Although I think these are interesting topics, I couldn’t come up with exact s…
I think there is a spectrum between what you did (you were mod until you no longer thought that the pain of dealing with Reddit was worth it or morally justified) and someone who sticks around as a mod of 50+ subreddits because they see as an instrument of control, or someone that keeps running a big Mastodon instance despite financial struggles; and my point is to understand where most people lie.
Ugh, the comments here are so full of BS and distortions of what really happened 🤦
So here is the actual tl;dr: Some people asked the main Fosstodon admins what they think about having an openly Trump supporting, islamo- and transphobic moderator in their team and their response was "not here on Fosstodon and not our problem" (paraphrased, but close to their actual response).
That is pretty much like this scenario: lets say you get (credibly) informed about someone openly corrupt in your organization. If your response is: I have not seen them steal money in our organization and our processes should prevent any theft happening, then you are missing the forest for the trees.
If an organization can't get such basic governance issues right and prefers to hide behind a "neutral" stance on something that is really concerning to a large percentage of their members than they irrevocably lose a lot of trust and that is more than justified.
I want to install voidlinux. So I partitioned disk using cfdisk, but void-installer(and lsblk) show me different results. lsblk tells me that I have 4 partition, when cfdisk tells me only about 3. These partitions also have different sizes.
Block size? I’ve never seen that message before and I don’t think it’s relevant here. It should redetect the partitions to what they actually are though, but I assume it doesn’t for you.
Also, are you sure you want MBR on that disk instead of GPT? (At least, I think that’s what “Label: dos” means)
Actually, I don't really know differences between. Just all guides use cfdisk and I forgot about mbr and gpt. But I changed mbr to gpt using gdisk(after start he say, that I have mbr and gpt and which I want to use. I chose "create blank gpt" and now I can use gdisk to partition disk. And after gdisk lsblk show right information! Thats it
I built a home theater PC and now I'm obsessed with getting an xmb ui on there. I know retro arch has a nice implementation, but I couldn't find any support for jellyfin or spotify menu items. Should I forge ahead and create custom ones? Does anyone know a better way? Any advice is appreciated. Thanks!
Finally released an alpha build for the PeerTube recommendation algorithm! Basic UI is complete. If you want to try it out, the link is here: 👉 github.com/solidheron/peertube…
New features since the last build: - Sort by videos that share your time engagement similarity. - Sort by videos that share your like similarity. - Display of like similarity cosine values. - Basic information shown for recommended videos (title, account, and channel names). - 404 check for generated instance links (so you don’t get stuck clicking into dead videos—you’ll know which instance hosts the video). - De-ranking for previously seen videos (simply a 0.5x multiplier on time and like similarity).
Features from previous builds: - Ability to input multiple instance domain names (DNs) and generate playable video links. - Limit of 5 recommendations per channel to avoid floods (e.g., during testing, The Linux Experiment would dominate otherwise—this limit is more of a failsafe than a feature).
Personal thoughts: I still think cosine similarity beats chronological algorithms. This algorithm also synergizes with other algorithms—it's great for finding videos that appear next to or below what you're currently watching.
You can also revisit videos you previously liked to help strengthen your like similarity vectors.
Moving forward: basic design philosophies and current issues
There’s an issue I’m calling the “Linux pipeline.” Basically, Linux-related videos tend to dominate PeerTube’s well-produced content. Since the algorithm relies on English words in descriptions, titles, and tags, Linux videos—which sometimes have fewer general keywords—end up being more "orthogonal" to typical user vectors, causing lower ranking.
Another challenge: It’s really hard to properly combine like cosine similarity and time engagement cosine similarity. You could add them, but it doesn’t fully make sense: - High like similarity + high time engagement similarity = you probably like and will watch the video longer. - But short videos can be liked even if they contribute almost nothing to time engagement (because time engagement is based on percentage watched × video length).
If I combined them, it would basically enter machine learning territory: You'd have to adjust proportions dynamically based on user behavior. Since I want this algorithm scoped to one person only (no data sharing yet), that level of ML is out of scope for now.
(Sharing data across devices could come later—Brave browser has sync features, and PeerTube watch history syncing could be possible.)
Summary: Most of the data structure is settling into place. Future updates will probably focus on expanding the data structure and making small improvements.
currently just a browser extension that monitors your the peertube videos your watch and stores them locally - solidheron/peertube_recomendation_algorythm
A few years ago my wife and I built a computer out of old parts for her friend's then 10 years old son. Last month we were visiting them, and I heard the wife's friend say something funny that I thought I'd share with you.
They live on the other side of the city, this was the kid's first computer, and his mom doesn't have much computer experience either, so our goal was to build something that was easy to use and hard to break from the beginning. Originally I choose ElementaryOS since it seemed to fit the bill, but after a year or two it turned out that it couldn't be upgraded to a new major version without a full reinstall so it got stuck with an older version. We didn't visit that often, and the kid's games still worked so it wasn't a major issue until Factorio broke due to glibc incompatibility.
When his birthday was coming up last month we bought him a SSD to make the computer a little bit zippier without a major upgrade, and I thought I'd give him a brand new Linux experience too, so I asked for advice here and in the end chose Bazzite. While I was helping the kid with the installation, I overheard his mom saying in the other room:
This Linux thing.. We've never had any problems with it, he just clicks something to install it and it works. Unlike normal computers, where you always have to do things and fix them.
Perhaps not the most eloquent, but I consider it a very good review.
Couldn't find a dedicated community for distro recommendations, I hope it's ok to ask here.
A couple of years ago my wife and I built a computer and gave it to a friend's kid. We put ElementaryOS on it since that seemed pretty fool-proof, but it appears to require a re-install to upgrade major versions so it has been stuck with an old glibc and because of that he can't play Factorio.
For his 13:th birthday we bought him a SSD so it would be a good time to reinstall Linux, but is there perhaps some better choice than ElementaryOS? They live quite far away so I can't easily pop over to fix his computer if something breaks, we don't spend enough time there for me to teach him to fix things himself, and he doesn't seem very interested in learning how computers/operatings systems work either.
Hardware: Some old Intel CPU with 8GB DDR3 and a GTX1080
Usage: Gaming through Steam+Proton, Lutris and browsing.
Requirements: Games work, OS never breaks on updates. Doesn't need to be "kid proof", I don't think he touches any stuff he doesn't know what it does.
My ex father in law would always always ALWAYS install random ass flash games / random sketchy software and bork their windows PC. He was always complaining about popups and his antivirus was always flagging a threat etc.. they'd spend tons of money annually to have their computer fixed and he'd go right back to the same behavior.
Anyway... I installed a dual boot setup with his windows and Linux mint.
He bitched and complained about it.. but he never had any actual issues. His complaint was it was different. He ran mint until he died like 5 years later.
Thanks for sharing, this made me smile. Also it warms my heart to hear how you are making tech accessible to this kid.
Many of us take it for granted but I remember how my dad used to go over to family friends in his free-time to help with computer stuff. I feel like I was too young to learn but it did set an example for me.
So fun watching someone try Linux as their first OS, none of the "Linux is difficult because I learned how to use Windows" or "Linux is bad because it's not exactly like Windows" comments 😁 Roblox stopped working when the devs intentionally blocked Wine, but he just shrugged and said he didn't play it that much anyway.
It's a little heart breaking hearing him often ask which parts he could buy to get more FPS, because he'd need to replace half the computer to get a newer CPU and DDR4 RAM, since I suspect the DDR3 could be the current bottleneck. But other than that he's very happy with the computer.
Also it's recommended to not reinstall a bunch of stuff and just install the app when you needed it that's the power of Linux. Unless you just want to learn the software then disregard
I found Timeshift to be a disappointment. I tested it as I was setting my system up.
Install Linux Mint, obviously.
Install most main software I want.
Do a Timeshift backup.
Install more software I might want to try eventually.
Restore the Timeshift backup.
Result: The system still thought all the extra software packages were installed, but none of them actually worked. Like, if Timeshift is gonna uninstall packages that weren't present in the last backup, shouldn't it also unregister those packages as well?
To fix all that crap, I had to force reinstall all packages, which takes about as long as a full OS reinstall, but I was already happy with the rest of the configuration, so I ran...
Potentially unpopular opinion: a bunch of rust replacements for the common terminal utilities: eza, bat, dust, fd, helix. Also fish and nushell, yt-dlp, and some of my favorite programming languages.
For me personally I install kitty terminal and integrate it with fish asap. Then I waste a bunch of time customizing it to my liking. My preferred text editor is Kate regardless of what DE I'm using and I usually get bleachbit for basic cleanup.
Could you help me with bleachbit settings (tick boxes). Once when I used bleachbit, it changed back the icons of packages like Zen Browser that I have changed through Menu Edit. It also removed start up applications from the setting. I'm on Arch KDEplasma. So, I was wondering, which check box should I leave empty to preserve my icon customizations and startup apps?
Both are functional package managers and manage dependency trees better than flatpak IMO (also the package description languages mean you can manipulate the package definitions at install time much easier)
If you can't find a package in guix/nix then it behooves you to use flatpak
I'm going to try to mention things I haven't seen already written, though I may repeat some of the more important ones to me.
(In no particular order)
Terminal: - Kitty (Main Terminal) - Fish (Terminal Prompt) - Neovim (Code/Text editing) - Zoxide (a directory changer; once you go to a directory, you can type z and a partial name to go back to it) - Atuin (a command history lister, can get a key and bring over commands from other systems) - Midnight Commander (CLI file manager) - Btop (CLI system monitor) - Palette (I do a lot of theming in different configs as well as HTML/CSS, so its nice to have something to quick convert hex to RGB).
GUI: - Timeshift (backup/restore) - Eddie (for AirVPN) - novelWriter (my FAVORITE writing tool for my books) - Floorp (Firefox fork browser) - Conky Manager 2 (desktop monitoring widgets) - Rofi (keyboard launcher) - firewalld (tried this out recently, good firewall) - Flameshot (ALWAYS; its my favorite screenshot tool) - MPV (I still get VLC, but opt for MPV most of the time for videos/streaming) - Speedcrunch (A+ calculator) - Steam - Lutris - Protonup-QT (to inject GE Proton into Steam/Lutris) - Stremio (a great little streaming tool)
I would like to add that I do use Arch, but I'm fairly sure 99% of these packages, if not all of them, are available for most other distros.
Like the title says I want to install a Linux distro on my old laptop. I am currently looking into installing a SSD, but I want to learn a distro for fun! I haven't been able to find a good current resource aside from the Linux Masters here, so I am actually asking for help on the Internet! What distro is the best!?
EDIT: thanks so much everyone for your recommendations and advice! I installed a couple of different systems before deciding that I think the laptop can support Fedora with KDE plasma, and I'm finding it really attractive and easy to use. You will see once I get some more disk space used how the performance holds up! If it runs into trouble I might switch the machine back over to mint with, that one seemed to run really well and was pretty familiar seeming from my Windows days, also seem more low end and booted a little faster. I think I might even end up switching to Linux on my desktop I had so much fun with it last night!! I really appreciate all the information and will probably be experimenting with a more lightweight build on this computer in the future! I'm a Linux user and it was easier than I ever thought! ❤️
Discover the magic of the internet at Imgur, a community powered entertainment destination. Lift your spirits with funny jokes, trending memes, entertaining gifs, inspiring stories, viral videos, and so much more from users.
I have an Asus Eee PC from 2009 running Puppy Linux (as a secondary device). As already pointed out you will need a leightweight distro and desktop environment.
distrochooser.de/ (available in English) can help you find the right distro, it also takes into account the age of your device.
Sounds like you are new to linux? I always recommend newbies start out with Ubuntu or Linux Mint. Ubuntu has a good installer with scripts that detect hardware, particularly older or fringe (wifi, etc) hardware. Is it the best? Not in my opinion, but you want your laptop to work and educate yourself on linux in the beginning. Once you are a moderate to advance user, switch to Arch, it is the best imo.
Well, I am a beginner to Linux but I have been pretty well involved with Windows systems in the past. Not that I necessarily want the appearance of Windows. I guess I'm looking for lightweight recommendations specifically, right now to bring this laptop back from like a 5+minute boot time
Are you just using this laptop to dip your toes into Linux and see if you like it? I would recommend Debian + XFCE. It's lightweight, it prioritizes stability over new features, and it's a fairly easy UI for a newbie to understand. Alternatively Linux Mint MATE Edition might be worth a try. It's also lightweight but is a bit more "up to date" than Debian feature wise.
Debian gets feature updates significantly slower than other distros, instead it focuses on insuring stability and security. It's rock solid.
Linux Mint is actually based on Ubuntu (which itself is derived from Debian), so for the most part the two are fairly similar. There are a few key differences but for someone learning Linux you don't need to worry about them. Pick one of them, get your feet wet, and then google the differences to see if you want to switch.
After all, endless Distro hopping is a right of passage for all fledgling Linux users! 😀
You do not state noobliness, ease of setup or time to install, number of failures/retries or anything like that.
**EDIT: you did state noobliness later on in comments so . . . i'd go stock debian +lxqt. ****
~~or all that I'd recommend arch. Do not use archinstall script , that reduces both learning and fun. Resource? follow the archwiki and go through lots of linked pages at each step. If you do wuss out and install stock debian (+lxqt)~~
maybe partition off a spare 10-20GB so you can play around with an arch install after you realise how boring and uneducational the others are (joke)
I remember some time ago installing an app that allowed me to film in the background whilst having another app open on top. I believe this was from f-droid. I actually have a legitimate use for this for crime evidence.
Could someone please suggest its name if they know, either from f-droid or a decent (trustworthy) app from the play store please.
Hi all, I'm trying to have my rpi5 running raspberry OS communicate with the Internet only through the tun0 interface (vpn). For this I wanted to create a ufw ruleset. Unfortunately, I've hit a roadblock and I can't figure out where I'm going wrong.
Can you help me discover why this ruleset doesn't allow Internet communication over tun0? When I disable ufw I can access the Internet.
The VPN connection is already established, so it should keep working, right?
I hope you can help me out!
This is the script with the ruleset: sudo ufw reset
Set default policies
sudo ufw default deny incoming
sudo ufw default deny outgoing
Allow SSH access
sudo ufw allow ssh
Allow local network traffic
sudo ufw allow from 192.168.0.0/16
sudo ufw allow out to 192.168.0.0/16
Allow traffic through VPN tunnel
sudo ufw allow in on tun0
sudo ufw allow out on tun0
Add routing between interfaces (I read its necessary, not sure why?)
ufw is a firewall. Routing controls traffic flow. You want to set the default route of that machine to only use the tun0 interface. Random link explains
As a secondary step you can set your firewall to block any traffic trying to exit an interface I suppose, but it really shouldn't be necessary.
For your other services on the local network for your subnet, just add a secondary route only for your subnet that uses your router as a gateway.
It wouldn't be able to communicate with the internet, but would still be able to talk to your local network.
If that's not specifically what you're trying to do, and you don't care if traffic might go out over your regular Internet connection, then you can create a fail over type situation where it will try and use a "backup" route to communicate to the internet if needed, though you'll need to spend some time really making it pretty smooth: baeldung.com/linux/multiple-de…
Learn how to configure multiple default gateways in Linux using routing tables and network bonding for enhanced redundancy, load balancing, and effective failover.
sudo ufw default deny outgoing
sudo ufw default deny incoming
sudo ufw allow out on tun0 from any to any
sudo ufw allow out to VPN_IP_ADDRESS proto udp
You have to do the last line for all your VPN server ips or the initial DNS request will not go through. If you connect through udp.
Just to be clear this is a killswitch, that's what you want right? So that it's only possible to connect through the VPN (tun0). And if the VPN goes down your internet gets "killed" so you don't leak your IP.
In that case you want to start ufw when you system starts, so you would need to whitelist your VPN but if your VPN is already connected it should work without whitelisting the IP I guess but never tried it since that's not recommended.
wg-quick takes a different approach, using an ip rule to send all traffic (except its own) to a different routing table with only the wireguard interface. I topped it up with iptables rules to block everything except DNS and the wireguard udp port on the main interface. I also disabled ipv6 on the main interface, to avoid any non-RFC1918 addresses appearing in the (in my case) container at all.
edit: you can also do ip rule matching based on uid, such that you could force all non-root users to use your custom route table.
If your concern is ensuring a killswitch type vpn setup, I do that but in a different and simple way.
I have a GLinet microrouter configured to join the vpn and active killswitch mode. This is 2 clicks in the menu. I connect it to my network via its wan port.
Everything I want behind the VPN gets connected to the microrouter lan port and job done.
Its simple and I can easily put a laptop or phone or whatever behind the microrouter and have confidence its only using the vpn.
When I travel I take a second microrouter with me to connect to the hotel wifi. All my devices are set to use the microrouter wifi so they never touch the hotel network, only the vpn. Easy, private, and avoids any filtering the hotek is doing.
This is a followup to my introduction of BlogOnLemmy, a simple blog frontend. If you haven't seen it, no need because I will be explaining how it works and how you can run your own BlogOnLemmy for free.
Leveraging the Federation
Having a platform to connect your content to likeminded people is invaluable. The Fediverse achieves this in a platform agnostic way, so in theory it shouldn't matter which platform we use. But platform have different userbases that interact with posts in different ways. I've always preferred the forum variety, where communities form and discussion is encouraged.
My posts are shared as original content on Lemmy, and that's who it's meant for. Choosing for a traditional blog style to make a more palatable platform for a wider audience, and in this way also promoting Lemmy.
Constraints
Starting off I did not want the upkeep of another federated instance. Not every new thing that is deployed on the Fediverse needs to stand on its own or made from the ground up as an ActivityPub compatible service. But rather use existing infrastructure, already federated, already primed for interconnectivity. Taking it one step further is not a having a back-end at all, a 'dumb' website as it were. Posts are made, edited, and cross-posted on Lemmy.
The world of CSS and JavaScript on the other hand - how websites are styled and made feature-rich - is littered with libraries. Being treated like black boxes, often just a few functions are used with the rest clogging up our internet experience. Even jQuery, which is used by over 74% of all websites, is already 23kB in its smallest form. I'm not planning on having the smallest possible footprint*, but rather showing a modern web browser provides an underused toolset of natively supported functionality; something the first webdevs would have given their left kidney for.
Lastly, to improve maintainability and simplicity, one page is enough for a blog. Provided that its content can be altered dynamically.
*See optimization
How it's made
1. URL: Category/post
Even before the browser completely loads the page, we can take a look at the URL. With our constraints only two types of additions are available for us, the anchor and GET parameters. When an anchor, or '#', is present websites scroll to a specific place in a website after loading. We can hijack this behavior and use it to load predefined categories. Like '#blog' or '#linkdumps'. For posts, '#/post/3139396' looks nicer than '?post=3139396', but anchors are rarely search engine compatible. So I'm extracting the GET parameter to load an individual post.
Running JavaScript before the page has done loading should be swift and easy, like coloring the filters or setting Dark/Light mode, so it doesn't delay the site.
2. API -> Lemmy
A simple 'Fetch' is all that's required. Lemmy's API is extensive already, because it's used by different frontends and apps that make an individual’s experience unique. When selecting a category, we are requesting all the posts made by me in one or more lemmy communities. A post or permalink uses the same post_id as on the Lemmy instance. Pretty straight forward.
3. Markdown -> HTML
When we get a reply from the Lemmy instance, the posts are formatted in Markdown. Just as they are when you submit the post. But our browsers use HTML, a different markup language that is interpretable by our browsers. This is where the only code that's not written by me steps in, a Markdown to HTML layer called snarkdown. It's very efficient and probably the smallest footprint possible for what it is, around 1kB.
Optimization
When my blog was launched, I was using a Cloudflare proxy, for no-hassle https handling, caching and CDN. Within the EU, I'm aiming for sub-100ms* to be faster than the blink of an eye. With a free tier of Cloudflare we can expect a variance between 150 and 600ms at best, but intercontinental caching can take seconds.
Nginx and OpenLiteSpeed are regarded as the fastest webservers out there, I often use Apache for testing but for deployment I prefer Nginx's speed and reliability. I could sidetrack here and write another 1000 words about the optimization of static content and TLS handling in Nginx, but that's a story for another time.
* For the website, API calls are made asynchronously while the page is loaded and are not counted
Mythical 14kB, or less?
All data being transferred on the internet is split up into manageable chunks or frames. Their size or Maximum Transmission Unit, is defined by IEEE 802.3-2022 1.4.207 with a maximum of 1518 bytes*. They usually carry 1460 bytes of actual application data, or Maximum Segment Size.
Followed by most server operating systems, RFC 6928 proposes 10x MSS (= Congestion Window) for the first reply. In other words, the server 'tests' your network by sending 10 frames at once. If your device acknowledges each frame, the server knows to double the Congestion Window every subsequent reply until some are dropped. This is called TCP Slow Start, defined in RFC 5681.
10 frames of 1460 bytes contain 14.6kB of usable data. Or at least, it used to. The modern web changed with the use of encryption. The Initial Congestion Window, in my use case, includes 2 TLS frames and from each frame it takes away an extra 29 bytes. Reducing our window to 11.4kB. If we manage our website to fit within this first Slow Start routine, we avoid an extra round trip in the TCP/IP-protocol. Speeding up the website as much as your latency to the server. Min-maxing TCP Traffic is the name of the game.
* Can vary with MTU settings of your network or interface, but around 1500 (+ 14 bytes for headers) is the widely accepted default
\ Visualizes two raw web requests, 10.7kB vs 13.3kB with TCP Slow Start\ - Above Blue: Request Starts\ - Between Green: TLS Handshake\ - Inside Red: Initial Congestion Window
Icons
Icons are tricky, because describing pixel positions takes up a considerable amount of data. Instead SVG's are commonplace, creating complex shapes programmatically, and significantly reducing its footprint. Feathericons is a FOSS icon library providing a beautiful SVG rendered solution for my navbar. For the favicon, or website icon, I coded it manually with the same font as the blog itself. But after different browsers took liberties rendering the font and spacing, I converted it to a path traced design. Describing each shape individually and making sure it's rendered the same consistently.
Regular vs. Inline vs Minified
If we sum up the filesizes we're looking at around 50kB of data. Luckily servers compress* our code, and are pretty good at it, leaving only 15kB to be transferred; just above our 11kB threshold. By making the code unreadable for humans using minifying scripts we can reduce the final size even more. Only... the files that make up this blog are split up. Common guidelines recommend doing so to prevent one big file clogging up load times. For us that means splitting up our precious 11kB in multiple round trips, the opposite of our goal. Inline code blocks to the rescue, with the added bonus of the entire site now being compressed into one file making the compression more efficient to end optimization at a neat 10.7kB.
* The Web uses Gzip. A more performant choice today is Brotli, which I compiled for use on my server
In Practice
All good in theory, now let's see the effect in practice. I've deployed the blog 4 times, and each version was measured for total download time from 20 requests. In the first graph we notice the impact of not staying inside the Initial Congestion Window, where only the second scenario is delayed by a second round trip when loading the first page.
Scenario 1. and 3. have separate files, and separate requests are made. Taking priority in displaying the website, or the first file, but neglecting potential useable space inside the init_cwnd. We can tell when comparing the second graph, it ends up almost doubling their respective total load times.
The final version is the only one transferring all the data in one round trip, and is the one deployed on the main site. With total download times as low as 51ms, around 150ms as a soft upper limit, and 85ms average in Europe. Unfortunately, that means worldwide tests show load times of 700ms, so I'll eventually implement a CDN.
Regular (14,46kB): no minification, separate files\ - dev3.martijn.sh/
Regular Minified (10,98kB): but still using separate files\ - dev2.martijn.sh/
Inline Minified (10,69kB): one page as small as possible\ - martijn.sh/
I'll be leaving up dev versions until there's a significant update to the site
Content Delivery Network
Speeds like this can only be achieved when you're close to my server, which is in London. For my Eurobros that means blazing fast response times. For anyone else, cdn.martijn.sh points to Cloudflare's CDN and git.martijn.sh to GitHub's CDN. These services allow us to distribute our blog to servers across the globe, so requesting clients always choose the closest server available.
An easy and free way of serving a static webpage. Fork the BlogOnLemmy repository and name it 'GitHub-Username'.github.io. Your website is now available as username.github.io and even supports the use of custom domain names. Mine is served at git.martijn.sh.
While testing its load times worldwide, I got response times as low as 64ms with 250ms on the high end. Not surprisingly they deliver the page slightly faster globally than Cloudflare does, because they're optimizing for static content.
Extra features
Taking over the Light or Dark mode of the users' device is a courtesy more than anything else. Adding to this, a selectable permanent setting. My way of highlighting the overuse of cookies and localStorage by giving the user the choice to store data of a website that is built from the ground up to not use any.
A memorable and interactable canvas to give a personal touch to the about me section.
Collapsed articles with a 'Read More'-Button.
'Load More'-Button loads the next 10 posts, so the page is as long as you want it to be
Webmentions
Essential for blogging in current year, Webmentions keep websites up-to-date when links to them are created or edited. Fortunately Lemmy has got us covered, when posts are made the first instance sends a Webmention to the hosters of any links that are mentioned in the post.
To stay within scope I'll be using webmention.io for now, which enables us to get notified when linked somewhere else by adding just a single line of HTML to our code.
Notes
Enabling HTTP2 or 3 did not speed up load times, in fact with protocol negotiations and TLS they added one more packet to the Initial Congestion Window.
For now, the apex domain will be pointing directly to my server, but more testing is required in choosing a CDN.
Editing this site for personal use requires knowledge of HTML and JS for now, but I might create a script to individualize blogs easier.
Feather is a collection of simply beautiful open source icons. Each icon is designed on a 24x24 grid with an emphasis on simplicity, consistency and readability.
What he did was half a decade ago! The comment section is wiled, keep it down.
I saw this in my Mastodon feed and wanted to share, and that was a mistake.
Edit: I label myself an anarcho-syndicalist, and I don’t watch PewDiePie. I have my fair share of opinions about him from his early days but there is no need to label Felix as a nazi. I used my brain cells to check some of his latest videos and I don’t see any mention of nazism fascism or any political mentions! What I do see is Felix starting a family in Japan, traveling around Japan, and just being a human living his life!
I don't think this qualifies for being a nazi (he doesn't advocate for an authoritarian dictatorship or a protectionist economy, nor does he want to scapegoat a group for all of his countries problems), but it is awful, racist, and disgusting.
But I don't really care if people do call him a nazi, to be clear, it's probably more effective messaging anyway.
Plus , witch is far from Authoritarian, in fact, anti-corruption, anti-authoritarianism, and advocates for direct democracy, internet freedom, privacy, etc..
Edit: @Canadian_Cabinet@lemmy.ca I have to agree, what he said, on that bridge, he should not have said, but labeling him a Nazi is not right!
I'm out of the loop on this one? A Swedish using a Polish WM, and you call them Nazis?
I know that the hyprland dev has strong political opinions, but I genuinely dont know what they are because I don't care, and I use another WM. Are they really both Nazis? I dont know because I dont follow these guys. I dont want this word to be misused when actual Nazis are trying to take over the free world again
Vaxry was acting Polish in front of Drew DeVault and was immediately labeled nazi apologist.
The discussion went like this:
— is there anything that could sway your opinion towards genocide? — well, claiming "no" would be presumptuous, I am just a human, so, probably yes? — I rest my case
So even if you like or dislike pewdiepie. I think him showing of Linux is good. Getting more people to realize Linux exist and is a viable alternative to Windows or Mac is a good thing.
How about you being ashamed about parroting unbased allegations. PewDiePie never showed significant evidence he is a Nazi and transphobic. The two mistakes he did in his 1000ands hours of content he apologized and condemned the behavior.
Lol the pirate party in the country I’m from was co opted by Nazis
Edit: Why would any one downvote this lol it’s factually true. I’m not saying Pewdipie is a nazi, I’m just stating the facts that the pirate party was co opted by Nazis in the country I’m from and basically had to disband.
Well in the post the OP stated that Pewdiepie was a supporter of the pirate party as if this negated any claims to him being right wing. I just wanted to point out that the pirate party can have right wing elements as was the case here.
Edit I’m not trying to be a dick but what did adding that statement at the bottom of the post have to do with pewdiepie using Linux?
He was already 29 or 30 back then. Obviously you can grow to be a better person even when you are a grown ass man but definately a different situation when people do stupid stuff in their teenage years.
So like, the older I get the more I realize the myth of the mature adult is just that, a myth.
Most adults are immature as fuck and we don't realize it as kids because they either keep their immaturity hidden from us or they're hidden from us by society.
There are of course mature adults, but most adults are just big kids who never learned to take responsibility for themselves.
I can't tell if you're being genuine or not, but there is a difference between using a swear word ever and being a hateful bigot and using slurs against marginalized groups
Defending the use of racial slurs as swear words definitely doesn't make you look like a weird fucking loser man, keep it up. You're fighting the good fight.
so anyone reading this, the post was about pewdiepie doing some video about switching to Linux. I guess OP got scared about the comments and decided to get destructive.. I should really set up my website autoarchiver script because this linkrot thing gets boring real quick
I don't normally watch him but this popped on my feed, and I'm pretty impressed. Dude really fell the Arch+Hyprland rabbit hole and ended up loving it.
Probably one of the largest YouTuber switching to Linux, and is very positive about it.
According to a quick search: Paying non-english people to hold up a "Death to all jews" sign, saying the hard r n-word, mocking someone about an overdose with a meme, supporting a nazi YT channel, and fans defacing a ww2 memorial in his name
Never even knew this guy existed till last year, but seems par for the course for a lotta YT personalities.
the sign thing was a joke to see how far they would go (theverge.com/2017/2/13/1460506…), but i agree it's very questionable and bad taste/disgusting to publish the video.
he made this apology video much longer than the relevant stream clip two days later for the hard-r incident: I think it's pretty convincing.
these incidents were also horrible, but he also apologized for them well, and everything you mentioned was in 2018 and it doesn't seem like there was much since. bbc.com/news/newsbeat-44969322 in the case of the nazi channel, it was based on his impression of a single video that reviews death note and only had a dozen or so seconds of nazi references (joking about the charlottesville car attack) theverge.com/2018/12/10/181347…
it should be really clear that pewdiepie encouraged neither distasteful vandalism nor the las vegas shooter. pewdiepie was the biggest meme on youtube at the time, especially amid the giant subscribers race against t-series. 4-chan and its extensions tend to gravitate towards macho online culture.
PewDiePie is facing controversy again after shouting out a YouTube creator, E;R, whose channel includes hateful and anti-Semitic content. E;R’s videos violate YouTube’s community guidelines, but remain up.
Are you defending him because he apologized after backlash? I don't understand what your reply is meant for; I was just answering another poster's question.
some of these things are hideous. some of these things the way you word them makes them sound way worse than I actually are, like the one with the death note review. and i don't think he's a nazi is what i'm saying. and i think not having things repeat is an indication of taking in the lessons learnt and lends credence to the apologies.
The reason it’s par for the course is because people like him made people connect the dots between getting famous/rich and being a bigoted piece of shit. He could’ve done something productive with his fame and he chose to literally be a Nazi. If he actually wants to not be associated with that, which I doubt he cares about, then he needs to at least acknowledge he did it and maybe even say it was wrong. Seems like a pretty reasonable place to start if you ask me
That was 7 years ago, and he seems to have distanced himself from that past. He's kind of retired from the whole gaming channel thing and does more family life things.
It came to my attention yesterday that some have been pointing to my videos and saying that I am giving credibility to the anti-Semitic movement, and my fans are part of it as well for watching. I...
Anyone wondering about the grep for balls results around 11:40, it looks like Spotify uses zxcvbn as a password strength checker, which contains some dictionary lists of common words people put in passwords, in order of how common they are.
Hackers will use this as one main technique for password guessing (as opposed to a simple brute force, like "0000", "0001", "0002", ... , "9999", it will probably be faster if we start with "1234", "1776", etc.). When I say 'dictionary', I don't just mean English words; the name of zxcvbn itself is an example of a common pattern, one that people think they're really smart for choosing and super easy to remember and type, but one hackers will obviously be aware of too, just like turning password into P455w0rd1!.
Today i took my first steps into the world of Linux by creating a bookable Mint Cinamon USB stick to fuck around on without wiping or portioning my laptop drive.
I realised windows has the biggest vulnerability for the average user.
While booting off of the usb I could access all the data on my laptop without having to input a password.
After some research it appears drives need to be encrypted to prevent this, so how is this not the default case in Windows?
I'm sure there are people aware but for the laymen this is such a massive vulnerability.
Yep! They don't teach this stuff because consumer level cyber security is in the absolute pits of despair and moreover, they're trying to do away with what little we have access to. Governments and police agencies like how easy it is to access files.
Personally I don't bother with full disk encryption (FDE) since I don't really have anything private on my main computer. Just a bunch of game files, comics, movies, etc. Anything extremely important such as tax documents, personal data, etc. is honestly very small and I keep in a little Proton Drive folder, <1GB total. I think the best approach is to simply educate yourself and be aware of what's worth protecting and how best to protect that. Just enabling FDE and thinking you're safe ignores all the other avenues that personal data can be stolen.
My current pet conspiracy theory is that FDE with BitLocker isn't even worth it on Windows due to the TPM requirement. Why is that a bad thing? Your system probably has fTPM supported by the BIOS, why not just enable that?
Integrating with features like Secure Boot and Windows Hello for Business, TPM 2.0 enhances security by ensuring that only verified software is executed and protecting confidential details.
ieeexplore.ieee.org/document/5… (I don't believe we'll see this EXACT implementation of DRM, I'm just providing an example of TPM being used for DRM and that these ideas have been in consideration since at least 2009).
Now, if I were Microsoft and I wanted to exert an excessive amount of control over your system by making sure you couldn't run any inauthentic or "pirated" software to bring it more inline with the walled garden Apple approach they've been salivating over for the past decade+, you'd first need to ensure you had a good baseline enabled. You know, kind of like the thing you'd do by forcing everyone into an OS upgrade and trashing a lot of old hardware.
It won't be instantaneous, I don't know exactly how or what it's going to look like when they start tightening their grip. Again, this is all speculation, but it's not hard to connect the dots and their behavior over the past couple years does not give them the benefit of the doubt. Microsoft is no longer a company that can be assumed to be acting in the best interest of the average consumer, they're not doing this for your security. They want to know that your computer is a "trusted platform".
With Windows 10 end of support approaching, it’s important to revisit a key minimum system requirement for Windows 11: Trusted Platform Module (TPM) 2.0.
By the way, no different for Linux, if you boot off of USB you can mount partitions and access anything if not encrypted and linux windows, encryption is not the default.
I still remember years ago one time windows fucked itself and god knows why I couldn't fix it even with USB recovery or stuff like that (long time ago, I don't remember).
Since I couldn't boot into recovery mode the easiest way to backup my stuff to a connected external drive was "open notepad from the command line -> use the GUI send to.. command to send the files to the external drive -> wait and profit" lol.
I'm sure there are people aware but for the laymen this is such a massive vulnerability.
This is only a vulnerability if you suspect a threat actor might physically access your computer. For most people, this is not a concern. There's also the issue that it has processing overhead, so it might make certain operations feel sluggish.
Encryption is not a panacea, because if someone ever forgets their password (something common for the layperson), the data on that drive is inaccessible. No chance for recovery. Certain types of software may not like it either. It's one of many considerations someone should make when determining their own threat model, but this is not a security flaw. It's an option for consideration, and most people are probably better off from a useability standpoint with encryption disabled by default.
I think it just really goes to show you can't hide anything on a computer physically.
I also feel this is something that should be taught in school (maybe it is i finished school over 13 years ago)
I always knew there were ways to recover files off of hard drives. I just assumed they needed to be physically remounted not just plug in a usb and off you go
I think it just really goes to show you can't hide anything on a computer physically.
What do you mean? It's certainly possible when using encryption software such as bitlocker. It's just not always enabled by default.In fact it's saved my ass from total data loss a couple of times.
If you can make sure nobody has physical access to your pc than there's a case to be made that you don't need it, and if you can't and are afraid that someone has both knowledge of this fact and the intention to (ab)use it, you use bitlocker.
This is not that big of a deal most of the time, since you are the only person interacting with your computer, but it's worth remembering when you decide to recycle or donate -- you have to securely wipe in that case. Also bear in mind, if you do encrypt your drive, there are now more possibilities for total data loss.
Oh, fun fact: you can change a users windows password inside Linux. Comes in handy for recovery, ie, user forgot their password.
Yes, any laptop without an encrypted storage drive will have its data accessible by someone booting from a live USB.
It really is a massive vulnerability, but it's not well known because so few people even understand the concept of a 'live USB' to make it a widespread threat or concern.
So yeah, if you're ever in possession of a Windows machine that doesn't have an encrypted disk, you can view the users' files without knowing their password via a live USB.
The developer is just kind of insane. They reimplemented wlroots from scratch all on their own, a feat that cannot be understated, and the reason they did that is because of how massively they were outpacing wlroots development in terms of features.
just some things:
a full proper animation stack for eyecandy
single window capture (sway still doesn't have this)
keypress forwarding to specific windows (like xdotool)
color management and HDR (sway is just now getting this)
proper permission management for screencopy (coming in the newest version, first compositor to implement)
a full plugin system for extra things you want to do
a proper app not responding dialog
If the feature exists, hyprland has it, almost guaranteed, they are not minimalists, which I appreciate right now while wayland is still getting everything sorted out.
Oh they finally fixed the bloody dock. I used it ages ago when it was still oval and those square icons looked terrible on it. This is much better.
Have they given any updates on HDR support? I remember them mentioning years back that they planned it for the final release but I've not heard anything since.
I've seen people advocating for both options, but since I'm still new to Linux I'm not sure what to do. I'm currently installing Mint on my laptop to try it out, and I'm not sure if I should enable secure boot or not.
Secure boot is a good thing. It's a security feature. You want it on whenever possible, unless it's a huge trouble (like if you have to start manually signing your own keys and adding them to the bios).
Linux supports secure boot so if a distro supports it it's worth using it.
Linux can use a key signed by Microsoft in a preboot loader and then itself perform its own key authentications for all other processes and software (a shim), forming a secure chain from the BIOS up during boot. You dont have to play with creating your own keys.
So if your OS supports secure boot it is worth using it for added security at boot. Its far from perfect in this set up (as there are plenty of windows OS that also have permission to boot) but it is better than a free for all without it even if the risk is very low.
You can go further an generate your own keys and use secure boot and TPM together to lock down the system further but you dont have to to get some benefits from secure boot.
Its not doing nothing. Linux uses a Microsoft provided key for initial BIOS authentication and then has its own tree of keys that it uses for security. So it does have the benefits of locking out malicious code/processes even in a default set up.
Using your own secure boot and TPM keys is certainly more secure, but it doesnt follow that secure boot with the default set up is doing nothing to help secure your system at boot.
No idea where you got this understanding from, but it's not accurate. In your example, if a distro has signed binaries, then it will work to verify code loaded during the boot process to help to verify system integrity. As OP asked about Mint, yes it technically does have signed pre boot and boot signed modules.
No, this will not prevent all code/processes that aren't signed from running. That's a ludicrous statement. It will prevent unsigned kernel modules from being loaded (see Nvidia's MOK process), and it will prevent a disk from being hit with sideload attacks perhaps (it should be encrypted anyway), but it absolutely does not prevent a user from running unsigned code, or even using root privs to run harmful code (like running random scripts from GitHub).
So at the end of the day does it help a standard user with security? I would argue no. As I said elsewhere, if this question were about HOW to improve security with SB, I'd have a different answer, but that's not the question OP asked.
Tpm is for crypto and secure generation and storage of values for use in encryption generally. Secureboot is just firmware verification of loaded binaries from boot on out, they’re 2 different pieces and are not really relevant to each other, unless you’re like me and have a fully customized bootloader with keys in TPM and an EFI module with support for the TPM and unlocking your boot drive.
You are quite mistaken. TPM is used as a key pair, and not just generation.
Let give you a specific example: built a hardware platform for a company, and they wanted to make sure that the storage and device were secure on their own, as well as being separated to prevent somebody pulling it apart to try and channel attack all the different things.
On install, the encrypted disk generates a signature. TPm has its own clean keys set to verify that it's paired at various levels with various pieces of onboard hardware. Then you pair a bootloader combination of those signatures to generate a three-part signature to make sure that what is in TPM matches both the onboard signatures of what is hardwired in, along with the key generated by the new encrypted volume on the drive.
Anyone takes that drive out, it's mostly useless, because it can't boot without the signatures verified by TPM, and they'll never be able to match the combination of the other 15 keys stored there for the hardwired components.
That's how it's intended for use. Not just for signature generation and verification. It's more of a key/value store than anything, like a physical hardware token device.
Cool story bro. And I am one of the 9 people that worked on the team at Intel to implement your modern EFI/UEFI.
I just don’t have the time or energy to sit here and explain the whole fucking stack to a bunch of people who mostly could care less. But, Secureboot, it’s a good thing, and the tools on linux get better every hour. Check out lanzaboote.
If your linux OS supports secure boot then it does help improve security.
The differing opinions on it are often because it can cause issues in some set ups andninna default set up and its only a marginal security gainninnthebdefault set up.
It will add a layer of security at boot by preventing 3rd party unauthenticated processes / software from running and creates a secure boot chain from your BIOS up to the OS. But the default set up also means other authenticated OSes like Windows can be run, so its not as secure as it could be.
To really secure it you could create your own keys and then only your OS could boot. But as a linux newbie thats likely way more than you need and there iare risks of you fuck up.
So your choice is really just the default set up being on or off. On is a bit more secure but of you experience any issues then turn it off and don't sorry about it.
If you want extra security turn it on. Or you want windows or any game to shutup about security boot being off The only problem with security boot if you care about this is that it's managed by Microsoft(most of the time)
As always, the answer is "depends". It shouldn't hurt unless you're dual-booting windows (they used it last her as a weapon in their "mess up grub" game), but, Imo, it's worth the trouble if:
your data is also encrypted -- otherwise one just removes the HDD/SSD and reads what they need;
you provision your own keys -- to not depend on Microsoft signing shims for you;
you delete the already provisioned keys -- Microsoft signed a few vulnerable things, like one kaspersky's (iirc) live CD with grub not locked down, so one can boot up literally anything anyway;
you lock down grub or whatever bootloader you're using -- otherwise you become that vulnerable live cd;
you password lock the uefi -- otherwise one can simply disable the secureboot;
your vendor's implementation isn't terribly buggy -- iirc, some MSI laptops would just ignore all the discrepancies.
So, a lot of ifs, and a necessity to store the uefi password somewhere safe, as those may be a pita to reset.
As for standalone stuff -- idk, it might protect you from malware injecting itself into the bootloader or something, but given there's likely no chain of trust (I.e. the bootloader doesn't check what it bootloads), it can move in on some later step.
Simply: Do the protections against someone taking your computer and installing a malicious program before u, or a program that has attained root on your machine and installs itself before/as your OS, matter enough to you to justify the increased risk of being locked out of your machine and the effort to set it up and understand it.
If you don't understand and don't want to, then my advice would be to leave it off. Its simple, and the likelihood it saves you is probably very miniscule.
For TVs the manufacturers are the ones who control the bloated adware and make money off of it while on notebooks and laptops it is Micro$oft. Except maybe for TVs coming with Android TV OS, but I think even that can be modified to promote their services.
Fair. Although, I consider Microsoft's market "Most laptops" since Apple kind of does its own thing and Chromebooks are ultra-low end laptops. Thus Microsoft gets ~95% of the market for themselves.
Personally, I'd say that's a clear case of monopoly since MS controls this entire segment of "non-Apple, non-ultra low power laptop, PCs", but you're right - there are other players. The thing is, they have relatively tiny niches in which they thrive and in fact pose no threat to the monopolist.
But I now I see how you see it as an oligopoly, which is quite valid.
I recognize this post is mostly about windows, but I'd like the feedback of some Linux users who use windows, have had similar issues or can reproduce it. If nothing else, if anyone has seen this issue before, this thread will show the rest of how bad things have gotten.
TLDR: You can't install Firefox on certain windows versions unless you use the store, and even then, it's very difficult to find. I'm installing Mint on my friend's laptop Monday.
This all started with my friend having issues logging into a web portal on her personal computer. She was unable to do so on any browser on her home computer, and only on Firefox on her office computer.
When I tried to download and run the installer myself, windows refused, telling me something called s-mode was preventing me. Progressing through the dialogs, I realized the way to disable s-mode was in a greyed out foot note link a few pages back. Fuck you windows.
I go back, click the link, and I was redirected to the store with a prompt to disable s-mode, but the button to do so was greyed out and can't be clicked. It mentions you can do so by getting windows 11 pro. Fuck paying. I'll install Chocolately.
This is where it started to get REALLY. Press win key. Start typing powershell. It shows a link to me some automation app with the powershell icon. I must have mistyped something. I did it again. Powershell pops up. I wasn't convinced I typed it wrong, so I did it again. BACK TO THE AUTOMATION APP. I do it again. BACK TO POWERSHELL. I do this five or 6 times before I asked her to watch so I can confirm I'm not losing my mind.
So I click on the correct admin powershell and paste the chocolately install command. I didn't expect it to work at this point, and my suspicions were confirmed. Once again, I was redirected to the windows store. I look at the settings and several other things. Nothing. This was the point I said fuck it, I'll install it from the store. She's upset and needs it to work remotely.
I type in the search bar "firefox" and I am given 3 results: "firefox", "firefox browser", and "mozilla firefox". None of which have an icon. Everything below it, safari, chrome etc have icons! I look at every of the 'firefox' results. None actually have Firefox. But now their's Vivaldi and Duck Duck Go. It fucking had Thunderbird!
Ok. Now I am PISSED. There is only one thing left to do. Alphabetic lists. I am scrolling down the F's the rest of the day if I have to. I am finding this shit. But no alpha lists. My last hope is 'Free Apps' And I FINALLY found it!
Does anyone have any idea at all what the fuck is going on? Have you seen this or anything remotely close? Has the hive mind awoken? I do recognize this is version-dependent, and Microsoft does distributed versions and telemetry to test prereleases against hardware. I'll get her version number on Monday. And then I'm installing Mint.
Something I've wondered. One of those "too good to be true, it probably is" type things. With all the FOSS especially for linux, installing package after package because a web search said it would fix your problem, how is it Linux isn't full of malware and such?
Id like to understand better so I can explain to others who are afraid of FOSS for those reasons. My best response is that since it's open source, people can see what it's doing and would right away notice something malicious. I wouldn't, since I'm not that into code, but others would.
Well if you use a Linux distribution, you generally get your software from some central package repository. That's driven by maintainers who look at the software, the updates... They patch the software, make sure it runs smoothly on your system and is tied into other things... They'll also have a look at security vulnerabilities and security in general.
Other than that, there isn't much really "stopping" people from writing malware. We have tons of it. Fake VLC versions, copycats on the iPhone appstore... MS Windows is full of advertisements and features that send data "home". They introduce features which border on being malware all the time.. We have trojans, viruses etc. It's all out there.
Generally, it's a good idea to think before executing random code from the internet. Is it from a trustworthy source? Are other people using a piece of software and they'd have noticed if it deleted all files?
Usually, we have more good people than bad. And people need some motivation. It's unlikely someone invests 10 years of their life to develop a shiny and polished office suite, just so they can run some malware somewhere. There are easier ways to accomplish that. So it generally doesn't happen that way. It's theoretically possible, though.
And in the old way is: Windows, Android etc are way more popular. If someone wants to do something malicious, they likely don't target the 1-2% using a different operating system. They are going to write malware for a more popular operating system. And on the server, where Linux dominates the market, admins execute less random code. They'll know they want MariaDB and where to get it. So it's harder to do an attack this way.
And if I imagine being the attacker... What would be a reason to include malware in a FOSS project? Just to wreck havock and mess with people? That sounds like a 16 yo with too much time on their hands. But we have very few of those in the free software community. So that's a bit unlikely... If someone wants a botnet, there might be easier ways to do it. And for a targeted attack, you wouldn't hide your malware in a random project... So I generally don't see many reasons for someone to combine malware with useful FOSS software.
If it’s open source, then the source code of the malware is also open. Generally, binary blobs aren’t included in open source programs, and when they are with no good explanation, it raises a lot of suspicions.
Closed source is where malware can readily be hidden, which is why there is tons of malware hidden in Windows and Android apps.
I've just upgraded to Fedora Workstation 42 and am now unable to activate any GNOME extensions. The little switches in the GUI do not respond and it's the same for all extensions. The Extensions and Extensions Manager apps are both installed as flatpaks - do I need to adjust their permissions in Flatseal? Is the problem due to something else? Thanks!
Edit/solution: I totally missed the 'Use Extensions' switch at the very top. All my extensions are working on the current GNOME version (48) now. I am the most silly. Hopefully the other solutions in the comments will be useful to someone else in future 😀
As others have pointed out, the extensions are likely not (officially) compatible with the new version of GNOME yet. Which extensions are you having trouble with?
There are a couple of extensions that are available for installation through dnf for which Fedora takes care of making them compatible at the same time at which they make available a new version of GNOME. Caffeine and Dash To Panel are two examples. For a full-ish list, try dnf search gnome-shell-extension.
Nowadays I have like 10 if not 15 extensions (most of which are not essential to my workflow) and they make the already wonderful Gnome base just better for me personally
this is why I usually wait with recent distribution upgrades, another upside is: it saves me a bunch of headaches too since – by THW time I do upgrade – all the little bugs have usually been fixed
Kaboom
in reply to Curious Mind • • •Venicone likes this.
don't like this
catloaf and LookBehindYouNowAndThen don't like this.