TCB13

TCB13, 1 year ago

So the govt will know who and when watches porn. lol

TCB13, 1 year ago (edited 1 year ago)

A self-hosted or desktop Canva would be cool indeed.

There’s www.photopea.com that is very good and framagit.org/aktivisda/aktivisda that I’ve never used.

TCB13, 1 year ago

luckily you can switch the DE pretty easy

Yes XFCE ftw, until you install some application and it brings half of GNOME with it :)

TCB13, 1 year ago

It’s 2024, avoid Proxmox and safe yourself a LOT of headaches down the line.

You most likely don’t need Proxmox and its pseudo-open-source bullshit. My suggestion is to simply with with Debian 12 + LXD/LXC, it runs VMs and containers very well. Proxmox ships with an old kernel that is so mangled and twisted that they shouldn’t even be calling it a Linux kernel. Also their management daemons and other internal shenanigans will delay your boot and crash your systems under certain circumstances.

What I would suggest you to use use instead is LXD/Incus.

LXD/Incus provides a management and automation layer that really makes things work smoothly - essentially what Proxmox does but properly done. With Incus you can create clusters, download, manage and create OS images, run backups and restores, bootstrap things with cloud-init, move containers and VMs between servers (even live sometimes).

Another big advantage is the fact that it provides a unified experience to deal with both containers and VMs, no need to learn two different tools / APIs as the same commands and options will be used to manage both. Even profiles defining storage, network resources and other policies can be shared and applied across both containers and VMs.

I draw your attention to containers (not docker), LXC containers because for most people full virtualization isn’t even required. In a small homelab if you can have containers that behave like full operating systems (minus the kernel) including persistence, VMs might not be required. Either way LXD/Incus will allow for both and you can easily mix and match and use what you require for each use case.

For eg. I virtualize the official HomeAssistant image with LXD because we all know how hard is to get that thing running, however my NAS / Samba shares are just a LXD Debian 12 container with Samba4, Nginx and FileBrowser. Sames goes for torrent client that has its own container. Some other service I’ve exposed to the internet also runs a full VM for isolation.

Like Proxmox, LXD/Incus isn’t about replacing existing virtualization techniques such as QEMU, KVM and libvirt, it is about augmenting them so they become easier to manage at scale and overall more efficient. I can guarantee you that most people running Proxmox today it today will eventually move to Incus and never look back. It woks way better, true open-source, no bugs, no BS licenses and way less overhead.

Yes, there’s a WebUI for LXD as well!

https://lemmy.world/pictrs/image/9caa6ea8-17b1-48f6-a8c2-ff3f606f3482.pnghttps://lemmy.world/pictrs/image/a5a110b2-ed6f-431f-a767-0a21fb337a6b.png

TCB13, 1 year ago

It’s funny how conservative Windows is, it still has components from the NT.

That calling: ensuring things are compatible with old software and not fucking your users over. Just for fun I tried to install Photoshop 6 from 2000 on Windows 11 and it works just fine. Same goes for MS Office 2003.

TCB13, 1 year ago

Everything was fine until…

these are PCIe Gen3 x2 only

Fucks sake. I’ve seen ARM board with PCI better than that.

TCB13, 1 year ago

Is Ubuntu deserving the hate?

Yes.

Debian version is the only one that seems reliable enough but, again, it is Debian, the packages are “old”.

Install Debian, then install all the software you might need using Flatpak. There you go, solid and stable OS with the latest of with little to no effort. Bonus extra security.

TCB13, 1 year ago (edited 1 year ago)

“I’m not saying gnome is bad here”… but it lacks basic DE features, pushed useless crap like the activity view to people and slow animations that can’t be completely turned off. To top things they try to reinvent the desktop experience every 2 or 3 years and end up making things worse (like when they decided to remove the desktop icons).

All for a “design and usability view” that doesn’t amount to anything productive.

TCB13, 1 year ago (edited 1 year ago)

Well MS being anti competitive as usual. Side note, I like Tuta very much, finally an independent provider, but I would never use it as they don’t provide IMAP/SMTP.

TCB13, 1 year ago

What to do instead - be a normal human and create an account at the website.

TCB13, 1 year ago

This is a win indeed, but what people don’t see is that most times “exaggerated and abrasive” regulation like that is only proposed to hide up other clauses and proposals that are equally bad or even worse - get the public distracted and thinking they made a difference and that the EU listens to them.

At the end of the day they’re still pushing for installing mandatory SSL root certificates in browsers (allowing for traffic interception) as part of the eIDAS upcoming regulation.

Another thing that people miss, and that most Americans folks would lose their minds about while reading this, is the fact that eIDAS also brings an unique electronic identification for each European citizen company, “a digital solution for proof of identity of citizens or organizations” backed by asymmetric cryptography with the end game of replacing paper documents.

To be fair this isn’t a new thing, most countries in Europe already provide standardized smartcards as citizen identity cards that use asymmetric cryptography so you can electronically sign documents and login to gov services with them. Said signatures have legal value and in some cases - such as lawyers and doctors - you’re required to sign documents and prescriptions with the card. eIDAS just pushed it even further.

Just imagine the potential for a govt/EU to revoke your oficial / legal identity at any time :)

TCB13, 2 years ago

Bruh, you’re literally an ad-blocking YouTube frontend. What kind of mental gymnastics does it take to be facilitating ad-blocking and then at the same time shame the end-user for using an extension which simply automates seeking ahead in videos.

+1

TCB13, 2 years ago (edited 2 years ago)

Pixel because it supports GrapheneOS thus more secure and private.

Calyx isn’t as good as GrapheneOS, they do a lot of snitching on you (including to Google and Mozilla) and they overlook critical details such as this one allowing the OS to contact 3rd parties such as Qualcomm.

TCB13, 2 years ago

https://lemmy.world/pictrs/image/52becf7b-9b27-4b56-86e6-5bed7c670057.jpeg

TCB13, 2 years ago

I just don’t want my content scattered across different platforms in suboptimal quality and be forced to pay

That and also the fact that sometimes content vanishes from those platforms because of licensing agreements and/or get censored like many older TV Shows have gotten.

TCB13, 2 years ago

There’s a simpler option for those who like Transmission: lemmy.world/comment/5269089

TCB13, 2 years ago (edited 2 years ago)

You don’t need to switch to another client. Apparently Transmission can be set to bind to your VPN IP by editing settings.json:

bind-address-ipv4: String (default = “0.0.0.0”) Where to listen for peer connections. When no valid IPv4 address is provided, Transmission will bind to “0.0.0.0”.

bind-address-ipv6: String (default = “::”) Where to listen for peer connections. When no valid IPv6 address is provided, Transmission will try to bind to your default global IPv6 address. If that didn’t work, then Transmission will bind to “::”.

If you set those with your VPN IP and the VPN is down then Transmission won’t be able to communicate with any peers.

---

Another option, is to use systemd to restrict Transmission’s networking to your VPN IP. You can make an override of the default transmission daemon unit by using the following command:

<span style="color:#323232;">systemctl edit transmission-daemon.service
</span>

Then type what you need to override:

<span style="color:#323232;">[Service]
</span><span style="color:#323232;">IPAddressDeny=any
</span><span style="color:#323232;">IPAddressAllow=10.0.0.1 # --> your VPN IP here
</span>

Another systemd option, might be to restrict it to a single network interface:

<span style="color:#323232;">[Service]
</span><span style="color:#323232;">RestrictNetworkInterfaces=wg0 # --> your VPN interface
</span>

Save the file and run systemctl daemon-reload followed by systemctl restart transmission-daemon.service and it should be applied.

This will be safer than just doing bind-address-ipv4 and bind-address-ipv6.

• ctrl.blog/…/systemd-application-firewall.html
• freedesktop.org/…/systemd.resource-control.html#N…
• freedesktop.org/…/systemd.resource-control.html#R…

TCB13, 2 years ago

You most likely do not want to run a mainline kernel / system. Run Armbian instead, it is Debian optimized for SBCs, it has a very good track record and sometimes is the only option after manufacturers stop creating images for their old boards.

Generic images / mainline kernel might underperform in your board, the GPIO and other low level components will, most likely, not work and you might burn your storage as logging and other I/O intensive operations aren’t tweaked for SD/eMMC. Armbian aims to fix all those issues and provides continuous system and kernel updates long after the manufacturer stops doing so.

TCB13, 2 years ago

They can just do it like LibGen and post alternative domains and IPs on Wikipedia: en.wikipedia.org/wiki/Library_Genesis

TCB13, 2 years ago

For the 1000th time, those extensions aren’t even close to what something really native would offer. They fail in some circumstances like drag and drop to certain plains and behave inconsistently.

TCB13, 2 years ago

What’s the point of going against every tried and true DE experience. Why can’t we just have them, disabled by default so some people don’t freak out.

TCB13, 2 years ago

Sounds cool, however don’t forget this is under MatterMost Licensing:

A source available license gives access to source code, but places restrictions on its use. The Mattermost Source Available License allows free-of-charge and unrestricted use of the source code in development and testing environments, but requires a valid Mattermost Enterprise Edition License in a production environment.

docs.mattermost.com/about/faq-license.html

TCB13, 2 years ago

Still garbage. Why is it so hard for the KDE guys to actually design something simple that makes sense? Starting with proportions and spacing between elements that they seem to be unaware of?

TCB13, 2 years ago

Appimage and snap. Why no flatpak?

I know why. They’re most likely running into this scenario as well.

TCB13, 2 years ago

What about you all torrent the same file, hit play at the same time and use some audio / video chat for the rest? Discord, MS Teams (lol), Zoom, Skype, FaceTime, whatever is available…