It would be if it wasn’t for NVIDIA, as usual. On Intel/AMD, you assign the seats, the displays light up and you’re good to go, pretty much works out of the box, especially on Wayland.
But for NVIDIA yeah maybe a VM is less pain since NVIDIA works well with VFIO.
Internally it’s even stored as a vote of either +1 or -1, so sending an undislike of a like probably also results in the vote’s removal. Lemmy just sums up all the votes and you have the score.
A like and a dislike activity are also contradictory, so even if you don’t unlike something, if you send a dislike it replaces the like as well.
I think the best way to visualize it is in terms of who owns what and who has the authority to perform moderator actions.
As a user, you own the post, so you’re allowed to delete it no matter what. That always federate.
An admin always has full rights on what happens on their instance, because they own the server. The authority ends at their instance, so it may not federate out unless authorized otherwise.
An admin can nominate any user from the same instance to moderate any of its communities, local or remote. That authority also ends at that instance. In theory it should work for remote users too, but then it’d be hard to be from lemmy.ml and moderate lemmy.world’s view of a community on lemmy.ca.
The instance that owns the community can also do whatever they want even if the post originated from elsewhere, because they own the community. That federates out.
The instance that owns the community can nominate anyone from any instance as moderator. They’re authorized to perform mod actions on behalf of the instance that owns the community, therefore it will federate out as well.
From those you can derive what would happen under any scenario involving any combinations of instances.
On Vista and up, there’s only the Display Only Driver (DOD) driver which gets resolutions and auto resizing to work, but it’s got no graphical acceleration in itself.
If you’re just using DHCP, you won’t. What Netplan does is take a YAML input file and renders it as a systemd-networkd or NetworkManager configuration file. It’s a very quick and easy way to configure your network, and even have a try command that auto reverts in case you get kicked out of your SSH session.
It seems like what they’re doing for the desktop is hacking up NetworkManager so that it saves back its config as Netplan configs instead of regular NetworkManager configs. That’s the part I’m confused about, because NetworkManager is huge and Netplan doesn’t support close to every option. Their featuresets are wildly different. And last time I checked, the NetworkManager renderer was the least polished one, with the systemd-networkd one being close to a 1:1 match and more reliable.
It made a lot more sense when it was one way only. Two way sounds like an absolute mess.
It still leads to unsolvable problems like, what is expected when two instances federate content with eachother? What if you use a web app to use a third party instance and it spits out unsanitized data?
If you assume it’s part of the API contract, then an evil instance can send you unescaped content and you got an exploit. If you escape it you’ll double escape it from well behaved instances. This applies to apps too: now if Voyager for example starts expecting pre-sanitized data from the API, and it makes an API call to an evil instance that doesn’t? Bam, you’ve got yourself potential XSS. There’s nothing they can do to prevent it. Either it’s inherently unsafe, or safe but will double-escape.
You end up making more vulnerabilities through edge cases than you solve by doing that. Now all an attacker needs to do is find a way to trick you into thinking they have sanitized data when it’s not.
The only safe transport for user data is raw. You can never assume any user/remote input is pre-sanitized. Apps, even web ones, shouldn’t assume the data is sanitized, they should sanitize it themselves because only then you can guarantee that it will come out correctly, and safely.
This would only work if you own both the server and the UI that serves it. It immediately falls apart when you don’t control the entire pipeline from submission to display, and on the fediverse with third party clients and apps and instances, you inherently can’t trust anything.
First step would probably be to decouple healthcare from being company, so people realize how expensive their health plans are and how much they pay for stuff most people don't end up needing. Pretty sure for most people it's more expensive than their single yearly checkup would be out of pocket.
Then, make state-wide and state-owned insurance plans that are capped in profits, so the rates have to match the true cost of things.
Let it simmer for a bit, get people to get used to the idea that the government provided service is actually good and cheaper for once.
Then make it mandatory for every state resident to be covered by it.
The big problem with universal healthcare in the US is the strong individualistic mindset, those that go "but I don't want to pay for other people's hospital bills". Ease all those people that think they'll suddenly be paying way more to subsidize other people's health care into realizing it ends up cheaper because the costs are amortized over way more people. It needs to be spun up as a benefit to them, they're getting a better deal on their health insurance. Because they simply don't care about other people's problems.
One thing that struck me living in the US is just how much distrust there is for anything government operated, even though it's usually the companies they love so much that nickel and dime them. Although seeing how the politics are going right now, I kind of understand that sentiment. And pretty much every company does try to squeeze you out of your money, which makes people want to screw the companies over. Land of the fees.
Apart from Debian, I guess Alpine. It's quite popular in containers for its small size. Even Arch will be much bigger in that case because the packages are much less granular and install development libraries and headers for about everything.
My network randomly drops. A restart fixes but I can't even download Cyberpunk with my 1GB connection before it crashes. Klogs showed something about the network manager successfully shutting down but I can't find much else.
Share the output of sudo dmesg logs as well as sudo journalctl -u NetworkManager | cat. The first is the kernel logs about what's going on with your connection, and the second one is from the utility that manages networking on most systems (there's alternatives but pretty sure Manjaro uses NM). It should give us more info as to the reason of the disconnections.
No Radeon software. I sometimes need to record clips/ stream so relive is nice but the biggest problem is my second 1080p monitor I Super Resolution to fit more programs on it. I can't find a way to replicate that functionality. I also do not know how to control Radeon anti-lag, chill, Smart Memory Access, etc.
Most of these things are more deeply integrated on Linux, so you don't need to worry about them for the most part. Some of them are also buzzwords for marketing purposes for features that really should be default on, which on Linux, when it's reasonable, do default to on. For example, you don't turn Smart Memory Access on: if it can use it, it will use it. Same with VRR, at least on Wayland: just on by default on KDE.
ReLive: you can use any screen recorder that will work on any GPU. Right now with the Wayland transition it's a bit weird and OBS is the better choice there, but on an Xorg session you can just use something like Simple Screen Recorder. On KDE, Spectacle, the default screenshot utility also has the ability to record short video clips but it can be a little buggy.
Super Resolution: just set the monitor's scaling to less than 100% in the display settings. It's technically probably better than Super Resolution for apps that supports <100% scaling, because instead of making a fake 4K display for example, it'll render everything at 1080p still but instead cause apps to render smaller, achieving the same result but with the potential of remaining pixel perfect. It won't be doing any AI scaling though, so YMMB.
Anti-lag: it's kind of a hack, and on Linux we're trying to get things right for the graphics stack with Wayland. But if you're running Wayland, KWin is already doing what it can to reduce lag on the desktop, and individual applications have to implement similar methods if they want to. Have you run into specific things where it's noticeable? Linux is generally pretty good when it comes to input lag already.
Chill: you can run games in Valve's gamescope wrapper to limit framerate. That's exactly how they do it on the Steam Deck. You can also use CoreCtrl to underclock the GPU.
Smart Memory Access: it's just marketing for Resizable BAR, and it's on by default. You can check with sudo dmesg | grep BAR=, if it's greater than 256M and equal to your GPU's memory size, it's working.
HDR controls. Nothing in the display settings so I'm lost
Yeah that one's still WIP unfortunately. It's technically possible on Xorg but you have to run everything HDR all the time and things break. It's coming along fairly well!
Alternative Software I haven't spent a lot of time looking but things like wallpaper engine, rainmeter, powertoys.
Wallpaper Engine -> KDE's desktop backgrounds have a lot of options to do similar stuff including animated wallpapers. Go to change your wallpaper, there's a button to download new modules and new backgrounds. For example: store.kde.org/p/1413010
rainmeter -> Conky, or KDE's desktop widgets. Right click on your desktop, add graphical component.
powertoys -> A lot of those have built-in and better equivalents. Fancy zones: we've had that as standard for a good decade here. You can also fairly easily make your own or use other people's KWin scripts, which lets you manipulate the desktop however you want. Here's some examples: store.kde.org/browse?cat=210&ord=latest
For maximum performance you probably want to skip virt-manager, virt-viewer has a hardcoded FPS cap.
If you use QEMU directly and use virtio-gpu paired with the sdl or gtk display, and OpenGL enabled, you can run Ubuntu at 4K144Hz no problem. The VM is near imperceptible, and it works out of the box, that’s not even touching the crazy VFIO stuff.
Security comes in layers, so if you’re serious about security you do in fact plan for things like that. You always want to limit the blast radius if your security measures fail. And most of the big cloud providers do that for their container/kubernetes offerings.
If you run portainer for example and that one gets breached, that’s essentially free container escape because you can trick Docker into mounting and exposing what you need from the host to escape. It’s not uncommon for people to sometimes give more permissions than the container really needs.
It’s not like making a VM dedicated to running your containers cost anything. It’s basically free. I don’t do it all the time, but if it’s exposed to the Internet and there’s other stuff on the box I want to be hard to get into, like if it runs on my home server or desktop, then it definitely gets a VM.
Otherwise, why even bother putting your apps in containers? You could also just make the apps themselves fully secure and unbreachable. Why do we need a container for isolation? One should assume the app’s security measures are working, right?
Yes but only if you use their Gapps packages unmodified or don’t use their services at all. They don’t look as kindly when it comes to microG and Aurora, or even ReVanced, and they still fight to make sure Google Pay doesn’t work through SafetyNet and Play Integrity, and you’ll only know at checkout too.
People have been banned for using Aurora. You can mess with the OS but they don’t want you to mess with their apps and especially not if it affects how much money they make off you.