linux

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

HiddenLayer5, (edited ) in Reminder to clear your ~/.cache folder every now and then
@HiddenLayer5@lemmy.ml avatar

I just map both the user cache and the /tmp directory to a RAM drive. I allocated 4 GB but in practice it never gets even close to that much, and Linux seems to not be reserving the entire 4 GB at boot so I would assume how much RAM is used depends on how much is actually in your cache.

It also defers cache and tempfile related problems to turning it off and on again.

bizdelnick, (edited ) in CLI Editors with Distrobox?

Neovim is not a CLI editor, it is a TUI editor. If you want a CLI editor, use ed or ex.

vox, (edited ) in Reminder to clear your ~/.cache folder every now and then
@vox@sopuli.xyz avatar

seems like a bug in one of rhe programs you’re using.
modt software automatically manages it’s cache…
are you using build caching tools such as Mozilla sccache? These tend to create 20gb+ cache directories, especially if used with debug builds

SteveTech, in OpenSSH is about to change. (For the better.)

Woah peertube federating with lemmy is actually really cool!

ademir,
@ademir@lemmy.eco.br avatar

right!? the fediverse is so cool!

LunchEnjoyer, in Switching from Linux Mint to OpenSuSE Tumbleweed very soon. Any advice?
@LunchEnjoyer@lemmy.world avatar

Don’t forget to install codes.

Try out opi for installing apps, otherwise zypper is also great!

Aatube, in Xenia wouldn't suggest that :c
@Aatube@kbin.social avatar

Your UserAgent string

not_amm, in Switching from Linux Mint to OpenSuSE Tumbleweed very soon. Any advice?

My only issue is software availability and management. I use the Packman repository to manage codecs and I avoid using the change vendor option; i used to change the vendor every time and ended up with a broken system, so I reinstalled and also resized my partition because I dual boot. I haven’t had problems at all.

You only need to pay attention for your needs, I recently installed systemd networking packages because they don’t come preinstalled, and YaST is very helpful in some situations like installing patterns (multiple related packages at once), mostly desktop environments. I gotta say that the openSUSE Wiki may not be enough to understand, but there is an official forum and you can also look at the Arch wiki.

Btw, GNOME is the official DE used by the developers, but KDE Plasma works very well, and all of them update constantly, you’ll have available updates every week.

mholiv, (edited ) in Bcachefs Lands Another Round Of Fixes For Linux 6.7

I haven’t used it yet personally, but I would bet as soon as Debian/Ubuntu LTS/CentOS/openSuse/other stable Linux distros get kernels new enough to it will be not just a btrfs killer, but a ZFS killer too.

The tiered write and read layers and SMR support put ZFS caching to shame.

lemmyvore,

Nobody uses SMR for live data anyway unless it’s in very particular circumstances.

Bcachefs is still at least a couple of years away from serious use. But sure, if it’s available and you have a good backup strategy you can use it today.

mholiv, (edited )

As for “years away” I agree. As my first post said people should wait till you can use bcachefs in the stable distros. Debian isn’t getting kernel 6.7 any time soon 😆. So years away is right in any case.

I think bcachefs addresses the reason why people don’t use SMR HDDs. (Aka changes resulting in cascading writes)

You could have a data pool with the following tiers.

Tier 1: SSDs

Tier 2: HDDs

Tier 3: SMR HDDs

With bcachefs you would only ever write to your tier 1 storage. In the background, as able, bcachefs would offload the data from the faster lower tiers to the slower higher tiers based on frequency of data access.

You would only ever read from the SMR HDDs and would never write to them. They act as a sort of async backing to your data.

Personally I would love a data pool with a few SSDs, backed by a few HDDs, backed by many SMR HDDs. You would save so much money just with good architecting.

Bcachefs should be a ZFS killer. All the features of ZFS with storage tiers being a superior version of ZFS’s L2arc with none of the DKIM kernel license incompatibility nonsense.

lupec,

Damn, I didn’t think to include SMR drives when it comes to bcachefs. Your whole comment made me appreciate the whole concept under a whole new light actually, thanks!

taanegl, (edited ) in Arch or NixOS?

Let me put it like this: it’s about learning curve. Arch is relatively easy to begin with, but NixOS gets much easier the more nix you learn.

What do I mean about that? Imagine having to patch something, which can be the thing. On arch you’d have to replace a package, which could lead to issues and conflicts, whereas NixOS gives you the option to keep two or even more versions of the same library, because it does not rely on your traditional UNIX path.

But with this super power comes a catch. You have to learn a programming language and learn how the nix store operates, which is a pretty high learning curve. Also, NixOS suffers from a governance issue and going by the documentation is like shooting in the dark.

That being said, the best manual for NixOS is GitHub, searching for anything and filtering by the nix language. You’ll see a ton of varying systems, be they workstations or servers.

And no matter what all the warnings say, no, flakes aren’t EXPERIMENTAL or UNSTABLE, but rather CONTENTIOUS internally. Again: I love NixOS, but they gotta fix their governance issues.

Mikelius, in Am I wrong to assume that docker is perfect for single board computers that relies on low life expectancy drives (microsd)?

I don’t use those two flags, but have several pis running docker with no issues. They’ve been running (almost) 24/7/365 going on maybe 2 years now with the same sd cards.

kool_newt, in OpenSSH is about to change. (For the better.)

In 2005, Curve25519 was first released by Daniel J. Bernstein.[5] (en.wikipedia.org/wiki/Curve25519)

DJB? Nice! Always been a fan.

rammer,
@rammer@sopuli.xyz avatar

Yeah, look at the curves on that guy.

NoSpotOfGround,

It says that

Starting in 2014, OpenSSH defaults to Curve25519-based ECDH.

So what changed recently? (I didn’t watch the video, in fairness).

domi,
@domi@lemmy.secnd.me avatar

ssh-keygen now defaults to ed25519 so you don’t have to do ssh-keygen -t ed25519 anymore. The default since 2014 is for key exchange when connecting.

NoSpotOfGround,

Got it, thank you!

RegalPotoo, in OpenSSH is about to change. (For the better.)
@RegalPotoo@lemmy.world avatar

tl;dw - ed25519 keys are now the default

MigratingtoLemmy,

Finally damnit

ultra,

Nice!

Grass,

From the thumbnail I was wondering if it was this. Thanks for saving me the watch.

Synthead, (edited )

Thanks for reducing the click bait.

WalrusByte,
@WalrusByte@lemmy.world avatar

Oh nice! That’s the key type I use anyway, so nice to know I don’t have to pass as many options in now

lntl, (edited ) in Reminder to clear your ~/.cache folder every now and then

$ crontab -e

      • */2 * rm -rf /home/lntl/.cache
lntl, in OpenSSH is about to change. (For the better.)

i don’t think I’ve created an RSA key since 2017

018118055,

I had to create one this year after discovering that connectbot (ssh client on Android) didn’t support agent forwarding otherwise.

lntl,

considered harmful

lemann,

Probably a good idea to look for a different client, call me tinfoil but I wouldn’t want to touch a very old mechanism that is supported/pushed by a very recognisable 3 letter agency

018118055,

Probably. It’s in f-droid but increasingly looking not quite unmaintained, but not developed actively enough.

LiveLM,

I’ve just started using SSH inside of Termux, got tired of all the weird pitfalls SSH Clients for Android usually have

lemann,

I delete them from the ssh config folder after installation, along with the DSA and ECDSA keys. No ed25519? No auth.

Also prevents a handful of bots from attempting SSH login into your cloud infra, a lot of them don’t support ed25519 kex

aard,
@aard@kyu.de avatar

A surprising amount of services (including Azure last I tried) can only handle RSA keys, so after trying ecdsa only for a while I ended up adding a RSA key again.

With that said - it’s 2023, in almost all cases you should have your keys in a hardware module nowadays, in which case you’d use a different command for keygeneration.

fossisfun, (edited )
@fossisfun@lemmy.ml avatar

Actually it is the same story with TLS 1.3 and TLS 1.2. A bunch of sites still doesn’t support TLS 1.3 (e. g. arstechnica.com, startpage.com) and some of them only support TLS 1.2 with RSA (e. g. startpage.com).

You can try this yourself in Firefox by disabling ciphers (search for security.ssl3 in about:config) or by setting the minimum TLS version to 1.3 (security.tls.version.min = 4 in about:config).

deepdive,

Strange enough TLS 1.3 still doesn’t support signed ed25519 certificates :| P‐256, NIST P‐384 or NIST P‐521 curves are known to be “backdoored” or having deliberately chosen mathematical weakness. I’m not an expert and just a noob security/selfhoster enthusiast but I don’t want to depend on curves made by NSA or other spy agencies !

I also wondering if the EU isn’t going to implement something similar with all their new spying laws currently discussed…

LaggyKar,
@LaggyKar@programming.dev avatar

AFAIK, they’re not known to be backdoored, only suspected

deepdive,

Yeah wrong wording, but the fact that we have to depend mostly on NSA’s cryptographic schemes makes it very suspicious !

lolcatnip,

Do you have a link for storing keys in hardware? I have no idea how you’d do that.

noroute, in Reminder to clear your ~/.cache folder every now and then

You can also setup a cron job to periodically clean oldest files for you.

Example: @weekly find ~/.cache -type f -mtime +7 -delete

This will delete everything older than 7 days inside your cache folder.

twei,

I guess you could also Mount a tmpfs to that directory

  • All
  • Subscribed
  • Moderated
  • Favorites
  • linux@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #