linux

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

PseudoSpock, in Fedora 40 Will Enable Systemd Service Security Hardening
@PseudoSpock@lemmy.dbzer0.com avatar

Cool, but why is it part of the init system?

NekkoDroid,
@NekkoDroid@programming.dev avatar

You misspelled “System and Service Manager”

Max_P,
@Max_P@lemmy.max-p.me avatar

Yeah, it’s not really advertised as an init system anymore. It’s an entire system management suite, and when seen from that angle, it’s pretty good at it too. All of it is consistent, it’s fairly powerful, and it’s usually 10-20 lines of unit files to describe what you want. I wanted that for a long time.

I feel like the hate always comes from the people that treat the UNIX philosophy like religion. And even then, systemd is very modular, just also well integrated together: networkd manages my network, resolved manages my DNS, journald manages my logs, timesyncd manages my NTP, logind manages my logins and sessions, homed mounts my users profiles on demand.

Added complexity, yes, but I’ve been using the hell out of it. Start services when a specific peripheral is plugged in? Got it. Automatically assign devices to seats? Logind’s got you covered, don’t even need to mess with xorg configs. VM network? networkd handles it. DNS caching? Out of the box. Split DNS? One command. Don’t want 2000 VMs rotating their logs at exactly midnight and trashing your ceph cluster? Yep just slap a RandomizedDelaySec=24h to the units. Isolate and pin a VM to dedicated cores dynamically? Yep it’ll do that. Services that needs to run on a specific NUMA node to stay close to PCIe peripherals? Yep easy. All very easily configurable with things like Ansible or bash provisioning scripts.

Sure it may not be for everybody, but it solves real problems real Linux admins have to deal with at scale. If you don’t like it, sysvinit still works just fine and I heard good things about runit too. It’s an old and tired argument, it’s been over 10 years, we can stop whining about it and move on. There’s plenty of non-systemd distros to use.

g5pw,

Saving this for all my future pro-systemd flames, thank you!

velox_vulnus, (edited )

“Hmphhh”, breathing heavily, one of your half-informed brethren approaches you. In front of you is a bizzare creature that spends day and night modding his kawaii, unproportionally large breasted and rainbow-eyed waifu desktop. On one hand is his aformentioned waifu pillow stained with, let’s not talk about that. On his legs are two large stocking-like socks, no pants and a shirt that says “I ❤️ Poettering”

“Akshually…”, and as he says that, you can hear the velled up mucus, ready to launch itself upon further tickle to the nose. Quickly, you hand this poor lad a box of tissue. Nodding his head, as to be grateful for your act of kindness, he empties all the air out of his lungs. “That’s a lot you’re holding in there”, you silently whisper.

“…As I was saying, systemd is not an init system, it is more than that”, smirks this weird man. As you try to process all of that, to your horror, you realise that you’re speaking to a modder, or as they call it in politically incorrect terms, a ricer. One of those people you’ve never wanted to meet in real life.

“But I do care about security, and the attack surface is now pretty larg…”, you say, to which the man interrupts, “Linux does not have any viruses, s…stop spreading FUD…banned, 1 day”. The last part doesn’t make a lot of sense, but you assume that he’s pretending this conversation to be on a forum, and he is a “moderator”.

“I do care about the basic UNIX philosophy, which is modulari…”, again, to which this gentleman in front of you interrupts, “If you want modularity, then start from making a micro-kernel. Banned, 5 days”, he scoffs and laughs at you.

“But Poettering left a mess behind that is Linux audio, atd you trust that guy? Also systemd is not as fast as he claims to be, how can y…”

“SHUTTTT UPPPP! IF YYOU THINK SOMEONE IS NOT GOOD WITH THEIR SKILLS, THEN MAKE ONE YOURSELF! POETTERING LETS ME CUSTOMIZE WAIFU DESKTOP WITH EASE, STOP ATTACKING LENNA-SENPAI! BANNED, 30 DAYS!”.

“Akshually…”, you mumur, as you leave the room, but the man heard you clearly. “…I am a big fan of Scheme, so I learnt Guile. Now I use GNU Shepherd”, you say, as you close the door behind.

“ARRRRRRRR! BANNED, 2 MONTHS! BANNED, 3 MONTHS! ARRRRRRR!”, you hear the noise behind, content that you’re not one the one following the herds to the cliff.

morrowind,
@morrowind@lemmy.ml avatar

Gorgeous

What’s poettering though

velox_vulnus, (edited )

Lennart Poettering, He Who Decides What Crap Features To Put In systemd.

Helix,

Just fork it and you can decide.

Helix,

Actually, I use systemd because it just works for me and operating systems aren’t my hobby. Linux is my job, and things that work well cause less overtime for me.

I’m very excited for Debian 13 :)

hunger,
@hunger@programming.dev avatar

The one thing you can learn from sysv init isnthat asking devs to pitncode into their programs or into starter scripts does not work. They will not bother: Those will notmworkmcross platform.

So you need to cebtralize that task. You can either write a wrapper program that sandboxes starts applications in a sandbox or do that whereever the programs as are started anyway.

A separate sandboxing app that starts services complicates configuration: You basically need to configure two things the starter and the service. On the up-side you have the sandboxing code separate. Merging the sandboxing into the program starting the service makes configuration simple but adds moremcode into the the starter program.

So it is basically a decision on what you value more. Systemd decided to favor simpler configuration. The cost for adding the sandboxing is small anyway: It’s all Linux kernel functionality that does need a bit of configuration to get rolling, with much of that code being in the systemd-init anyway: It uses similar functionality to actually separate the processes it starts from each other to avoid getting confused by programs restarted and thusnchanging PIDs – something still a thing in many other inits.

I am convinced that making sandboxing easy does a lot formits adoption. No admin will change the entire startup configuration to add a sandboxing wrapper around the actual service. It is way more likely for them to drop in a override file with a couple of lines and without any problems when upstream changes command line options.

superbirra, in How to run command or code in parallel in bash shell under Linux or Unix

xargs section is missing

itsaj26744, in How many of you run a Linux phone (Pine64, Librem etc) as your daily driver?
@itsaj26744@programming.dev avatar

I use Kaios , Another embedded linux

Helix,

Which phone?

itsaj26744,
@itsaj26744@programming.dev avatar

Jiophone F220b

MigratingtoLemmy,

Do you specifically use feature-phones?

itsaj26744,
@itsaj26744@programming.dev avatar

Life is nice this way, No bzz, Everything supposed to be done by a phone is handled perfectly by this small thing and for rest (like office,game and code) I go with PC

MigratingtoLemmy,

How do you do instant messaging? Isn’t typing with that harder than average?

itsaj26744,
@itsaj26744@programming.dev avatar

That’s also a thing but I use xmpp,matrix on pc (which I rarely do). BTW I forgot to mention I am full time student so…

MigratingtoLemmy,

Essentially, your usage of your mobile ends with calling?

Unfortunately, that won’t work for me since I need a browser to check my accounts and other needs on the move

itsaj26744,
@itsaj26744@programming.dev avatar

I have actually tied everything to my email so all updates are in my inbox. Calling + email,music,text,calendar,notes,todo and we have a brower for basic ddg searches

trivial_wannabe, in How many of you run a Linux phone (Pine64, Librem etc) as your daily driver?

I used a pinephone as my daily driver for about a month. Importantly, this was 3~4 years ago, things could be better now.

My take at the time: The battery life was bad, the phone was slow, MMS did not work, making a receiving calls was iffy at best.

I really really hope this improves/has improved over time. Android gets more and more difficult to de-google. A linux phone would solve a lot of privacy issues (not all, but some)

MigratingtoLemmy,

I hope so too. However, that doesn’t seem to be the case. The PinePhone Pro is still treated as a development device by PostmarketOS, for example

Pantherina,

It sucks that GrapheneOS supports only Pixels and nobody came along and ported it to other devices, although less secure.

But “Android gets harder to degoogle” is not true. Pixels are just way too expensive

MigratingtoLemmy,

I’m waiting for devices to get the 5.10 kernel or the ones after it, so I can run supported KernelSU builds and take my life into my own hands.

helenslunch,
@helenslunch@feddit.nl avatar

Pixels are just way too expensive

LOL what? The A series are some of the cheapest modern phones you can buy, and an incredible value…

Pantherina,

Yup then that is pretty messed up. I was used to phones not costing over 200€, maybe 300

helenslunch,
@helenslunch@feddit.nl avatar

The only phones that cost that much are either several years old (in which case you can include used Pixels) or are riddled with bloatware and spyware and the absolute cheapest of materials that won’t last long enough to make buying it even make any financial sense.

Pantherina, (edited )

Nokia 7plus back then. Great hardware, nice materials. Still working great but nearly no software updates. An indian guy develops LineageOS for Nokia phones though

MigratingtoLemmy,

And the commenter is lamenting how greedy companies are getting and customers agreeing to get themselves bent for these corporations. Apple started the pricing model and Samsung followed suit, and now everyone just takes it as default pricing. This is a pathetic state of affairs

helenslunch,
@helenslunch@feddit.nl avatar

and now everyone just takes it as default pricing.

Who does that? There are several great phones you can buy for <$400. The phones of yore were trash.

MigratingtoLemmy, (edited )

Which ones in that range, released in 2023 have custom ROM support?

helenslunch,
@helenslunch@feddit.nl avatar

I mean I’m sure there are plenty of others, but the one that comes to mind is the P7a

MigratingtoLemmy,

Just so happens to be the only one in the USA

Presi300, (edited ) in Looking to switch to Linux in the somewhat distant future
@Presi300@lemmy.world avatar

Here are some of my default choices: Linux Mint, Pop!OS, Nobara, MXLinux (if your PC is kind of a potato).

These distros should work regardless of your configuration with very minimal effort on your side.

filister, in Looking to switch to Linux in the somewhat distant future

93 comments after a post like this, are you guys nuts?

thespezfucker,

126 (or 127) comments now, why does this have 115 upvotes dear god

yetAnotherUser,

I guess (almost) everyone here wants to recommend their own distro

thespezfucker,

think that’s the case lol

toastal, (edited ) in Looking to switch to Linux in the somewhat distant future

Most distros are running the same software. The biggest difference is your package manager & community. Personal preference is NixOS but that ain’t beginner-friendly even if the rollbacks from bad states would help. Arch isn’t as difficult to set up as it used to be & has been more stable than a lot of distros in my experience so I wouldn’t discount it but .pacnew files can bite you if modifying in /etc instead of in the home folder (when possible). Of the things folks normally suggest as a first go, Fedora would probably be my pick (not yet had a problem) as everything Ubuntu-based still rubs me wrong for support & leadership.

Barbarian,
@Barbarian@sh.itjust.works avatar

I actually disagree on what the biggest difference is. For the average everyday user, the biggest difference is the desktop environment. Having a desktop environment that the user finds intuitive, easy, and is stable is by far the most important thing.

slacktoid, in How many of you run a Linux phone (Pine64, Librem etc) as your daily driver?
@slacktoid@lemmy.ml avatar

Does sailfish os count?

MigratingtoLemmy,

Is it for feature-phones?

TheBroodian, in Looking to switch to Linux in the somewhat distant future

Pop_OS. Everything just works great out of the box.

LesbianLiberty,

Alternatively, don’t use Pop_OS. I installed it on an ex’s laptop because it was easy but it’d have all the same problems as Ubuntu without the helpful diagnostic tools and extensive documentation. Hers messed up far more than my Arch install

bbbhltz, in What is a small .EPUB reader that is easy to install for my small Puppy remaster?
@bbbhltz@beehaw.org avatar

MuPDF mupdf.com It does PDF and Epub and is pretty light.

epy github.com/wustho/epy is a cli Epub reader

grey,
@grey@discuss.tchncs.de avatar

Also, are you banned? I can only see your post in my inbox, but not on the thread.

Vilian, (edited )

if he was banned you couldn’t see him anywhere, probably federation being funcky, or your app not updating both at the same time

bbbhltz,
@bbbhltz@beehaw.org avatar

Just checked the modlog. I don’t appear to be banned. Funky Federation stuff.

bbbhltz,
@bbbhltz@beehaw.org avatar

I have no idea how I would be banned, I’m not super active. How can I find out if I’ve been banned?

grey,
@grey@discuss.tchncs.de avatar

I didn’t realize MuPDF did both! That might be what I need. Thank you.

django, (edited ) in How many of you run a Linux phone (Pine64, Librem etc) as your daily driver?
@django@discuss.tchncs.de avatar

I used a pinephone for a week or so, but people got angry at me, because calling me was impossible. Apart from that it is a slow but very interesting device. Mine is broken now, because I somehow managed to fry the wifi chip. I used arch btw.

MigratingtoLemmy,

Thanks

mesamunefire, in What is a small .EPUB reader that is easy to install for my small Puppy remaster?

There’s a couple of command lines e-reader apps you may want to try.

Vilian,

less 😎

beerclue, in What is a small .EPUB reader that is easy to install for my small Puppy remaster?

As far as I know, MuPDF is not that heavy, and can view both PDFs and EPUBs (and others).

I personally use zathura, which is a very, very light weight document viewer, has vi style key bindings, and has plugins for viewing PDF, EPUB, CB, and others. Works pretty well in a keyboard centric desktop environment (I use Hyprland).

muhyb,

+1 for Zathura.

atomkarinca,

zathura is amazingly lightweight and does the job right. i even use that on my phone (which is not that powerful).

treadful, in How many of you run a Linux phone (Pine64, Librem etc) as your daily driver?
@treadful@lemmy.zip avatar

Would love to. Seems like the only real option is the Purism phone but I was burned pretty hard by one of their laptops. Don’t want to roll the dice.

MigratingtoLemmy,

Too expensive for me. Not considering

everett, (edited ) in What is a small .EPUB reader that is easy to install for my small Puppy remaster?

You’re going to have a web browser installed, right? .epub files are just zips with HTML/images/CSS inside. Just find the HTML file with named “toc” and go from there.

Pantherina,

I.e. install a Browser extension that does this

  • All
  • Subscribed
  • Moderated
  • Favorites
  • linux@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #