linux

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

Static_Rocket, in Is anyone here using their hardware TPM chips for credentials?
@Static_Rocket@lemmy.world avatar

I use it for Data-at-rest Encryption. Not much else though.

Discover5164, in Is anyone here using their hardware TPM chips for credentials?

i use it to auto unlock luks. if someone messed with the hardware/ bios, it will ask for the password next boot.

ArbiterXero, in Is anyone here using their hardware TPM chips for credentials?

The problem with this is that the key would be “machine based” and not “person”

So it’s better for “service accounts”

NekkoDroid, (edited )
@NekkoDroid@programming.dev avatar

Having read poetterings blog posts a bit and he explains that the TPM2 based encryption is entirely just for system resources (basically everything under / with exception of /home). For home he still “envisions” (its already possible and not really hard with sd-homed) that the encryption is based on the users passphrase/key/whatever and not unlockable by anyone else than the users passphrase/…

So user specific stuff is tied to user keys while system stuff is tied to the system & OS.
If you wanna read the post: 0pointer.net/…/fitting-everything-together.html

filister, in NixOS beginner resources

This is also a pretty good one: nixos-and-flakes.thiscute.world just ignore the domain name, the guy is explaining stuff very well.

degen,

I learned a ton from this, it’s kind of “The Book” I guess. For OP, there’s a pretty massive series of blog posts I fumbled along with too, ianthehenry.com/posts/…/introduction/ though it’s a couple years old.

LunchEnjoyer,
@LunchEnjoyer@lemmy.world avatar

Thank you both ✨

aard, in What would be the best way for me to recover data from my old laptop's hard drive, which seems to have a bad superblock?
@aard@kyu.de avatar

First step, in case you didn’t do that yet: Create a disk image of the partition - you don’t want to try data recovery on the actual data. Easiest is just using dd to dump the disk to another drive.

Next try running testdisk on the image to see if it can find the backup superblocks - if it does you can feed that to fsck to restore the filesystem.

If you know the blocksize of the filesystem you can also run mke2fs with the -S parameter - this will just write the superblocks. Again, only do that on a disk image, not the actual drive.

vortexal,
@vortexal@lemmy.ml avatar

That’s one of the solutions I saw that I currently can’t do because I have no other device that I can use for that.

redcalcium,

You can decide yourself if the data in that disk is more valuable than the price of a new disk to store the backup image. If it’s not that valuable I guess you can one-shot it.

aard,
@aard@kyu.de avatar

You can do all of that on the device - but you only get one shot. If you mess up that’s it - so no sensible person would try any form of data rescue directly on the device. Storage is cheap, if you don’t have sufficient space on your computer just get another external disk.

vortexal, (edited )
@vortexal@lemmy.ml avatar

I know you wont understand where I’m coming from so I wont bother explaining it. If I need another storage device than I’ll just have to wait until next year to get another storage device.

Edit: I don’t understand why I’m getting downvoted but it proves to me that I made the right choice in not explaining my situation.

aard,
@aard@kyu.de avatar

In that case I’d recommend waiting until next year before attempting recovery.

olosta,

The target storage device for the image can be over the network if that’s an option for you.

I admit the downvote is weird.

vortexal, (edited )
@vortexal@lemmy.ml avatar

I don’t think I can use that mostly because my internet package has a data cap and I don’t want to risk exceeding that.

Also, I know it’s not really the time or place for this type of discussion but I’ve noticed recently (within the last few months) that for some reason the Lemmy community has changed. I don’t know if anyone else feels that way but it sometimes seems like some users are unnecessarily hostile/judgemental towards me. I wont say anything more because once again, this is not the time or the place but Lemmy wasn’t like this when I first started using it over two years ago.

moonpiedumplings,

By “network” they also meant you can export the disk image to another device on your local network, rather than over the internet.

OmnipotentEntity,
@OmnipotentEntity@beehaw.org avatar

If the disc is corrupted it may be failing, recommending ddrescue over dd is probably a better call not knowing anything else about this situation. Essentially, no reason not to use it.

noUsernamesLef7,

I swear by ddrescue. It’s a situation I strive to never be but i’ve been there before. I used it once to rescue an employees masters capstone project from their dead work laptop.

aard,
@aard@kyu.de avatar

After reading about it - true. Disadvantage of doing this stuff for a long time - you miss new developments. Only reason I’m aware of testdisk is that I lost the sources of my own superblock search tool, my old binaries broke with a newer glibc, and before reimplementing it I checked if sombody else had done that in a more usable form in the meantime.

franzcoz,
@franzcoz@feddit.cl avatar

Another tool that has helped me when the others couldn’t was RecuperaBit. It has the same restrictions though, you have to do it on an image of the drive.

cmnybo,

The hard drive should be connected by SATA or eSATA when making the image. Connecting over USB is just asking for more trouble when the drive is not working correctly.

aard,
@aard@kyu.de avatar

That has changed over the last few years - I’d prefer a proper usb3 to sata bridge over a shitty sata controller - and the quality of integrated sata controllers isn’t that great nowadays.

manito_manopla, in Why do you use the terminal?
@manito_manopla@lemmy.ml avatar

Because it’s fun

Merulox,
@Merulox@lemmy.world avatar

This and work are the only real answers

princessnorah,
@princessnorah@lemmy.blahaj.zone avatar

Hardly. I self-host a bunch of VMs on a home server. It would be a waste of resources having window managers running them just so I can click around once in a while. Also, it takes way more time to set up a container in Docker Desktop compared to just copying across a command to the terminal from a setup guide.

throwawayish, (edited ) in My Linux Journey

With the amount of different distros you’ve tried (though mostly derivatives of Arch/Debian), I’m actually surprised to see that you haven’t used any derivative of Fedora. Is there any reason in particular?

fortniteplaya,

I forgot to mention Fedora Silverblue. I’ve used it after Micro os and it was a better experience. Fedora seems to have a better out of box experience and had no issues.

throwawayish,

I’m not surprised to hear that you preferred Fedora Silverblue over openSUSE MicroOS. Don’t get me wrong, I think that openSUSE Aeon/Kalpa (current names for openSUSE MicroOS Desktop) have a lot of potential. However, as it stands, Fedora’s Atomic Desktops are just more mature.

gregorum, in Is anyone here using their hardware TPM chips for credentials?

Outside of Microsoft and Windows, what’s the application for it? Does Linux or UNIX have much use for TPM? Pardon, my ignorance, but I bet this is a good place to ask!

Kidplayer_666,

Hardware accelerated disk encryption if I’m not mistaken

penquin, in Is anyone here using their hardware TPM chips for credentials?

It scares me. What if the chip dies? How am I gonna be able to get my stuff? I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?

ipha,

What if the chip dies? How am I gonna be able to get my stuff?

You can have backup keys, but if you don’t have that then your data is gone.

I don’t fully understand how it works, but where is the encryption saved? On the chip itself or somewhere else?

Encryption key is stored in the TPM chip.

penquin,

Ok this is scary. Lol Unless you have those backup keys then it’s a bit better.

priapus, in NixOS beginner resources

nix.dev and zero-to-nix.com are the best resources imo.

technologicalcaveman, in Why do you use the terminal?

It's an one in all tool. I like that I can do almost everything through one program.

walthervonstolzing, (edited ) in D-Bus overview
@walthervonstolzing@lemmy.ml avatar

Skimmed over the whole article – I wish this had been available back when I was trying to piece together the basics from the documentation. There really needs to be a 2nd part, though, with some discussion of the GVariant signatures, which the author says were ‘beyond the scope of’ this article – which is true; nevertheless, understanding that syntax (and how to use it e.g. with gdbus) is an absolute requirement for using dbus properly; and as a silly amateur, I lost so much time over them.

technologicalcaveman, in What distros have you tried and thought, "Nope, this one's not for me"?

Debian, don't like apt.
Arch, breaks too much.
NixOs, just don't need the tools it provides.
Any fork of a mainline distro because it's never as good as the root.

I used arch for a while, but got sick of running repairs every few weeks. I use Gentoo now, it's stable and good. I have a fuck ton of ram and a good cpu, I also take advantage of binary packages from time to time. I don't really need to install new things that much after having done the initial install.

kattenluik,

For the record, Arch breaking at all is probably entirely on you.

technologicalcaveman,

The arch breaks were always related to keys. I would run an update and there would always be an error related to the keys. Never had a breakage due to confs.

noddy,

Usually you can fix that with


<span style="color:#323232;">pacman -S archlinux-keyring
</span>
technologicalcaveman,

I know that, but I still hate having to. Having that as a common issue is just dumb, to me.

steeznson,

I used to distro-hop until 2017 when I started using Gentoo as my main distro. I did not have the same experiences as you with Arch but I tended to avoid the AUR. Ultimately Gentoo has kept my attention by being more flexible rather than having negative experiences with Arch.

I suppose I still distro-hop a little bit on an old laptop I’ve got but that one alternates between Debian and OpenBSD; also its primary use is a terminal for SSH’ing into my Gentoo desktop from the sofa.

Probably the only distro I’ve had a truly bad experience with is Manjaro. The additional repo that it comes bundled with creates more problems than it solves. Also - although this never affected me personally - the story about developers asking their users to reset their system clocks to accept an expired PGP key is an absolute scandal.

lseif,

out of curiosity, what was breaking in arch for you?

Atemu, in NixOS beginner resources
@Atemu@lemmy.ml avatar

The best way I know of is to get yourself a VM and get into the weeds; try to configure a system to your liking.

Follow the NixOS manual. The Wiki is unofficial; often opinionated, out of date or just plain wrong. Take it with a grain of salt. The canonical source of documentation is the NixOS manual and it’s not nearly as bad as you may have heard.

Make extensive use of search.nixos.org/options or man configuration.nix. Finding and making proper use of options and the module system is the bread and butter of using NixOS.

Eventhough everyone and their mom will recommend them to you for nebulous reasons, ignore flakes for now. You will know when you’ll benefit from using them; namely when you need to use something outside of NixOS/Nixpkgs. You’re going to have enough to figure out with plain old NixOS on its own though; I don’t have external dependencies in my config to this day.

To wrap it up, make sure to ask the community if something’s not working as expected: github.com/NixOS/nixpkgs#community

LunchEnjoyer,
@LunchEnjoyer@lemmy.world avatar

Much appreciated dude 🙌

Resol, in What distros have you tried and thought, "Nope, this one's not for me"?
@Resol@lemmy.world avatar

As someone who hates Windows with a passion, once everyone recommend Linux Mint, I knew I had to try it.

I immediately had negative first impressions. I simply don’t wanna use something with a desktop environment that reminds me of something that I hate. I get that it makes transitioning a lot easier for many, but for me it simply looks too similar to Windows.

pixelscript,

I’m sure you know it by now, but Mint is the “I Can’t Believe It’s Not Windows!” distro very much on purpose, haha.

Liz,

As a person who doesn’t want to fiddle with my OS or the terminal, yeah, I love me some Mint.

Resol,
@Resol@lemmy.world avatar

It’s good for those that want it, but some would rather just having a completely new user experience.

pete_the_cat, (edited )

Swapping out KDE/Plasma for Gnome or anything else is dead simple most of the time. The DE isn’t locked to the distro, you can have multiple DEs and windowing systems (X and Wayland) installed at once. You can select them from your login manager.

Resol,
@Resol@lemmy.world avatar

I wish I knew about this sooner.

pete_the_cat,

Heh, no problem, never too late to learn. If you’re coming from Windows or OS X it’s easy to think that the WM/DE is tied to the OS but due to the way Linux is written, the entire GUI stack is separate from the base system. I use SDDM as my login manager and in the upper left-hand corner there is a drop-down to choose the DE and Windowing System.

Resol,
@Resol@lemmy.world avatar

Didn’t you already reply with a comment similar to this?

pete_the_cat,

Possibly, I reply to a lot of people and I’m on Mobile most of the time and lose track of what I type.

Resol,
@Resol@lemmy.world avatar

Looking at my comment history, I noticed that this ended up happening to some of my comments too.

pete_the_cat,

Heh, no problem, never too late to learn. If you’re coming from Windows or OS X it’s easy to think that the WM/DE is tied to the OS but due to the way Linux is written, the entire GUI stack is separate from the base system. You can have both the old school X Windowing system and the new Wayland installed at the same time, along with many different Desktop Environments and Window Managers. I use SDDM as my login manager and in the upper left-hand corner there is a drop-down to choose the DE and Windowing System.

Resol,
@Resol@lemmy.world avatar

That really is a lot to learn and get used to.

pete_the_cat,

No one ever said learning something completely new was gonna be quick and easy. Take it piece by piece and follow tutorials. Installing Arch Linux will give you a good idea how everything fits together instead of just “click, click, click, reboot” and it’s installed. You don’t learn anything that way.

Resol,
@Resol@lemmy.world avatar

I remember seeing memes about this all the time.

pete_the_cat,

I credit Arch with actually teaching me how to use Linux, even though I had already been using it for about 2 years at that point.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • linux@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #