knfrmity

@knfrmity@lemmygrad.ml

This profile is from a federated server and may be incomplete. Browse more on the original instance.

What's your experiences with Debian and Rocky as a homeserver OS? (external-content.duckduckgo.com)

Hello there lemmings! Finally I have taken up the courage to buy a low power mini PC to be my first homeserver (Ryzen 5500U, 16GB RAM, 512 SSD, already have 6TB external HDD tho). I have basically no tangible experience with Debian or Fedora-based system, since my daily drivers are Arch-based (although I’m planning to switch...

knfrmity,

I started my Linux journey with a Raspberry Pi and Debian based PiOS four years ago and I haven’t felt the need to mess with that. Since then I have added other machines running other distros, but the Pi running PiOS is always on and always reliable.

knfrmity,

A home is for living in. A person has one body, therefore one home per person/family unit is an appropriate number. Corporations have no bodies, therefore they do not need homes.

Not only is rent robbery, but private property in itself has its origins in theft.

knfrmity,

The EU regularly forces DNS server operators to remove entries or redirect certain domains. It’s super easy to circumvent but most users don’t know that.

knfrmity,

The sites I’m thinking of never had their IPs completely blocked, the DNS entries for the domains were just removed. If you were to switch to a non-EU or self-hosted DNS server you’d get to the site.

But the domains in question are generally ones the US/EU/NATO propaganda machine has told people are bad, so there’s no outrage when they’re blocked. In many cases there are often cheers.

knfrmity,

I user a terminal so that that everyone around me thinks I’m “hacking” when I’m just running updates or configuring something.

knfrmity,

You can use the container names to address containers. Whether this is a randomly generated name (docker run… with no --name flag), the compose working dir and service name, or the compose container_name var.

I also rarely use the container command. docker is sufficient, or docker compose … while in the working dir of a given compose stack.

knfrmity,

Nah, they’re dropping chat control for something bigger: breaking SSL.

last-chance-for-eidas.org

knfrmity,

Even if it’s as simple as choosing which Root CA’s we want to trust, how many people will know to do that and be able to do that? A couple percent at most.

Of course we need full ownership of our devices, and trusted computing has always referred to the trust of for-profit corporations, but this in itself doesn’t help the vast majority of people who either don’t know that they’re compromised, think they have nothing to hide, are unable to do anything about it, or a mix of all three.

Privacy and security are already a privilege. Proposals like eIDAS only make it even more unaccessible.

knfrmity,

Hetzner may have the thing for you. IIRC their VPS options don’t have that much storage, but their storage plans are super cheap and easily connect to the VPS.

Ending support for Windows 10 could send 240 million computers to the landfill. Why not install Linux on them? (gadgettendency.com)

With support ending for Windows 10, the most popular desktop operating system in the world currently, possibly 240 million pcs may be sent to the landfill. This is mostly due to Windows 11’s exorbitant requirements. This will most likely result in many pcs being immediately outdated, and prone to viruses. GNU/Linux may be...

knfrmity,

It’s clearly a move to gain control of what people’s computers will be allowed to run and what information they’ll be allowed to see.

There were already attempts to implement this at the start of the consumer internet days by Microsoft and others, which failed then because many early internet users were paying attention and knew what was being attempted. This time I’m not sure that we’ll be able to stop it without structural changes to society.

knfrmity,

As I understand it, it wasn’t arbitrary. Microsoft has wanted to require TPMs for two decades at this point. Once there’s high enough adoption they can roll out their version of trusted computing.

knfrmity,

The French had a pretty good way of shutting up insufferable rich asshats.

knfrmity,

A bullet is cheaper than food, healthcare, and education.

Austerity submachine gun go brr.

knfrmity,

My partner when I do updates from the terminal: hakcer

knfrmity,

Mint on my desktop, decided to try out Tumbleweed on a cheap laptop. KDE wasn’t for me / wasn’t reliable enough, but I’m happy with Gnome. I haven’t needed to use Flatpacks though.

Might try MicroOS on the servers, I like the idea of an immutable distro so less can go wrong during updates, and I run all services as containers anyway.

Signal Facing Collapse After CIA Cuts Funding (kitklarenberg.substack.com)

On November 16th, Meredith Whittaker, President of Signal, published a detailed breakdown of the popular encrypted messaging app’s running costs for the very first time. The unprecedented disclosure’s motivation was simple - the platform is rapidly running out of money, and in dire need of donations to stay afloat....

knfrmity,

Yeah, I got called an idiot for pointing out that connection here a few weeks ago.

How do I create a docker container with custom programs inside?

Hello! I have a free account at hide.me and would like to try to use it with my docker compose containers. The free plan does not give me the keys for openVPN of Wireguard configuration, but only through the official client. I’d like then to create a docker container that runs the official hide.me client inside, and exposes it...

knfrmity,

I didn’t even look to see if the one I linked was a fork. I’m glad it works!

A cool thing about Dockerfiles is that they’re usually architecture agnostic. I think the one I linked is as well, meaning that the architecture is only locked in when the image is built for a specific one. In this case the repo owner probably only built it for arm machines, but a build for x86_64 should work as well.

knfrmity,

Building images is easy enough. It’s pretty similar to how you’d install or compile software directly on the host. Just write a Dockerfile that runs the hide.me install script. I found this repo and image which may work for you as is or as a starting point.

When you run the image as a container you can set it up as the network gateway, just find a tutorial on how to set up a Wireguard container and replace Wireguard with your hide.me container.

In terms of kill switches you’d have to see how other people have done it, but it’s not impossible.

knfrmity,

Of course I should have done that too. Running one now, I’ll let it go for a few hours and see what happens.

knfrmity,

I linked the specific wiki page section in an edit to the main post. It’s in the troubleshooting part at the end.

I didn’t try the i8k module but looking at a couple things it looks like the issue was more apparent around Linux kernel 4.15 from a few years ago. I also don’t have any specific complaints with temperature control. The fans only ramp up in the 70-80C range which seems to be quite reasonable.

knfrmity,

Memory is fine. I ran a couple disk checks as well and it’s also fine. I was also using two SSDs during the process with no difference in the problems experiences.

knfrmity,

The RAM is fine (Memtest ran 4 times without faults), and cooling seems to work well enough. Storage is ok and I used two different SSDs through this whole process and saw the same problems on both.

I tried the previous known-good kernel options on the Manjaro install and it seems to be OK now. According to the Arch Wiki the Intel 8th Gen mobile CPUs and especially iGPUs are known to be a little problematic on Linux so the kernel options to disable some power saving options are basically non-optional. It’s weird though that it works now and didn’t on the Tumbleweed reinstall.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #