[-] 2xsaiko@discuss.tchncs.de 22 points 2 months ago

Try systemd-boot, it’s lightweight and well designed.

[-] 2xsaiko@discuss.tchncs.de 22 points 4 months ago

Every time I read something about Enlightenment I have to think about this post: https://what.thedailywtf.com/topic/15001/enlightened

[-] 2xsaiko@discuss.tchncs.de 20 points 4 months ago
[-] 2xsaiko@discuss.tchncs.de 19 points 4 months ago

I'm not convinced this is a good idea. Resident keys as the primary mechanism were already a big mistake, syncing keys between devices was questionable at best (the original concept, which hardware keys still have, is the key can never be extracted), and now you've got this. One of the great parts about security keys (the original ones!) is that you authenticate devices instead of having a single secret shared between every device. This just seems like going further away from that in trying to engineer themselves out of the corner they got themselves into with bullshit decisions.

Let me link this post again (written by the Kanidm developer). Passkeys: A Shattered Dream. I think it still holds up.

[-] 2xsaiko@discuss.tchncs.de 19 points 6 months ago

Are they implying the police are accountable for anything?

[-] 2xsaiko@discuss.tchncs.de 20 points 6 months ago

They used to have people who knew what they were doing: https://socket3.wordpress.com/2018/02/03/designing-windows-95s-user-interface/

Now their UI team seems to just be two guys shitting in a bucket (shamelessly stealing that expression from KiraTV).

[-] 2xsaiko@discuss.tchncs.de 22 points 9 months ago

day ruined

It's missing the Clippy button in the taskbar

[-] 2xsaiko@discuss.tchncs.de 21 points 10 months ago

Podcasts are distributed via RSS. Use any RSS reader instead of Spotify.

[-] 2xsaiko@discuss.tchncs.de 20 points 11 months ago

NFS v4 with krb is probably the best option of these if Linux/macOS is all you need to support because everything just works transparently with one system-wide mount. I had it set up for a couple years until recently (had to basically completely give up on my network setup including the box the KDC was running on for unrelated reasons recently and have still yet to set it up completely again).

Kerberos is pretty straightforward to set up if you know how it works, I think the main problem is lack of documentation and pretty awful NFS error messages (you pretty much have to enable nfsd/rpc debug kernel options if you want to even begin figuring out what's going wrong when your mount doesn't work). The first time I set it up it took me a whole day to get it to actually work, and in the end a reboot of the NFS server solved the problem I had.

Look at the Arch wiki article for Kerberos, I think that's what I used mostly. Feel free to ask if you need help setting it up.

(Unfortunately IMO all of these suck in different ways though: sshfs dies if your SSH connection gets interrupted, NFS v4 (v3 is unusable imo because it doesn't have idmap so you have to make sure your user IDs match on every machine) isn't supported by Windows and mobile devices, Samba doesn't map well to Unix permissions and I can't tell what its "unix extensions" are actually supposed to do if it isn't permissions. Integrating Samba with NFS, if you want to use both, also is pretty hard because while Samba theoretically uses Kerberos, it doesn't work with a normal KDC but needs Samba AD because Microsoft (I haven't taken a look at Samba AD yet). And forget integrating Samba with anything that isn't Kerberos-based entirely because NTLM is the only other auth mechanism and it's pretty much incompatible with anything because the client only sends the password hashed with a unique mechanism. So you're going to have a pretty bad time if you want to use a single auth mechanism for everything if SMB is involved, and that's pretty much your only option if you want to access stuff on a mobile device.)

[-] 2xsaiko@discuss.tchncs.de 21 points 1 year ago

Declarative configuration of services and the rest of the entire system, and everything that brings with it.

  • Want to test some new service, or make changes to an existing one, but don't know if you want to keep it? Sure, just temporarily switch to the new configuration, you can always switch back to the old one and everything will be back as it was.
  • Have multiple servers and want to share configuration between them? Absolutely, just import the same file from both. I have a git repo storing configurations for 10 machines and a huge part of it is shared configuration.
  • Want to use one service's endpoint (such as a socket path) in another? Sure, just use the socket path configuration option for the first service in the configuration for the second, such as here. This works since everything is a single tree of options which all the service configuration files are then generated from, so interpolate stuff as you wish.
  • Checks for configuration correctness during build of the system (NixOS options are type checked during evaluation, and then during the actual system build there's more checks, like nginx config has to succeed nginx -t, otherwise the system build fails and you can't switch to it)
  • Want to spin up a VM to test changes before putting it on the actual target? There's a builtin command (nixos-rebuild build-vm) that makes a script that starts a QEMU VM with your configuration running in it. It's as fast as building the real system, so a couple seconds if you're making small changes.
  • Setting up services is also often as easy as putting services.foo.enable = true; in your configuration. And, if you remove that line, the service is gone, so you're never left with "the random package or file you installed once to test something and has been forgotten about". That's the biggest thing it has over any kind of imperative solution IMO.

I feel like even if I want to distro hop again and end up putting something else on my desktop, NixOS is going to stay on my servers indefinitely. It's pretty much a perfect fit for servers.

[-] 2xsaiko@discuss.tchncs.de 22 points 1 year ago

Google, should be self explanatory, but for me specifically for pretty much making YouTube worse with every change they make since that's the only service of them I still use. And I'm not going to also pay them to sell my data.

Epic Games, for continuously fucking over Linux players and Unreal fans (and well players in general but specifically those two groups).

view more: ‹ prev next ›

2xsaiko

joined 2 years ago