• 6 Posts
  • 130 Comments
Joined 2 years ago
cake
Cake day: July 7th, 2023

help-circle

  • If in the future you think you might bring family/relations onboard to the password manager, it may be worthwhile to pay for a BitWarden family plan. BitWarden is really low-cost and they publish their stuff as FOSS (and therefore are worth supporting), but crucially you don’t want to be the point of technical support for when something doesn’t work for someone else. Self-hosting a password manager is an easier thing to do if you’re only doing it for yourself.

    That said, I use a self-hosted Vaultwarden server as backup (i.e. I manually bring the server online and sync to my phone now and again), and my primary password manager is through Keepassxc, which is a completely separate and offline password manager program.

    Edit: Forgot to mention, you can always start with free BitWarden and then export your data and delete your account if you decide to self-host.



  • GnuLinuxDude@lemmy.mltoSelfhosted@lemmy.worldWhat is Docker?
    link
    fedilink
    English
    arrow-up
    11
    ·
    16 days ago

    You might notice that your Windows installation is like 30 gigabytes and there is a huge folder somewhere in the system path called WinSXS. Microsoft bends over backwards to provide you with basically all the versions of all the shared libs ever, resulting in a system that can run programs compiled from decades ago just fine.

    In Linux-land usually we just recompile all of the software from source. Sometimes it breaks because Glibc changed something. Or sometimes it breaks because (extremely rare) the kernel broke something. Linus considers breaking the userspace API one of the biggest no-nos in kernel development.

    Even so, depending on what you’re doing you can have a really old binary run on your Linux computer if the conditions are right. Windows just makes that surface area of “conditions being right” much larger.

    As for your phone, all the apps that get built and run for it must target some kind of specific API version (the amount of stuff you’re allowed to do is much more constrained). Android and iOS both basically provide compatibility for that stuff in a similar way that Windows does, but the story is much less chaotic than on Linux and Windows (and even macOS) where your phone app is not allowed to do that much, by comparison.





  • I use Bazzite on my Steam Deck because I wanted to get LUKS encryption for the hard drive (and otherwise do not wish to manually maintain the computer). I cannot take what is effectively a general purpose PC out and about without encryption. Especially not with the current political climate in my country (USA).

    From dealing with SteamOS, I am already familiar enough with how to set up a full dev environment on the immutable distros. So while that is not a challenge for me, it is still a hassle to deal with. I’d rather just directly install my libraries and binaries rather than do workarounds in containers (and then remember the containers).

    I think we’ll truly be in the immutable desktop distro future when I can do something like install the base distro image AND simply dnf install something (e.g. nvidia-vaapi-driver or gcc) on top without having to layer it with rpm-ostree. That is, my dnf installs should transparently live on top of the base distro, and that way my base system will never break even if something on top of it does. The problem with layering with rpm-ostree is you are running the risk of a future failed upgrade. It would be like if your MacBook said “sorry, you installed a weird XCode library and therefore we cannot upgrade the OS” – and that should obviously never happen. Restoring my computer to a base state could be as simple as dnf remove * or a GUI option to “Revert to base + keep user files” and that should leave me with a functioning basic system.

    Anyway, even though I only use an immutable distro on one device I do see it as the future of Linux desktop computing. I am not up-to-date with the development efforts, but I think we’ll eventually reach a day when using and configuring it, even for advanced users, will be no more difficult than traditional distros. Maybe by 2030 that will be the case.

    I made my remarks w.r.t. rpm-ostree and the Fedora family of distros because that’s what I use. Obviously the other immutable distros have their own versions of these tools and their own versions of solving the problems related to them.








  • There is another issue on their tracker that was opened many years ago about relicensing to GPL, but it kind of became one of those things where a bunch of people came in and discussed it back and forth to death with no resolution.

    I remember the lead developer of the Rust version of Coreutils gave a talk about the project once and he addressed the licensing question by essentially saying (paraphrasing), “I don’t care about this. So I just picked one.” You’d think someone so involved with open source as that guy (seriously, he has a hugely impressive pedigree) would care, or would at least give a justification.





  • The VM is Debian Linux with a basic XFCE UI (for a system tray + notification widget) via QEMU/KVM which I run through virt-manager. Most unnecessary packages are removed or not installed in the first place. This is so that I can browse the sites, again, in a fool-proof manner. I share a directory from my host OS to the VM, which mounts it on boot in the fstab. This prevents me from downloading into the guest VM’s disk image and having to keep dealing with that file getting overly big. In the past I’ve done a Samba share but recently I’ve just been using direct shared memory/filesystem and that seems to work OK, too.

    As a bonus to this setup, I can use Microsocks in the VM to also proxy a profile in Firefox to get VPN coverage in a specific Firefox profile. I use this when watching on streaming sites instead of trying to watch within the VM, since there is considerable overhead to doing that.

    And that’s it, really. My VPN killswitches the VM if it ever experiences a connection interruption. And Qbittorrent is set up to use the VPN interface, as well. I use the aforementioned automatic torrents management feature to sort things when they’re done downloading.

    I should state that there are some obvious downsides to this setup. The first is now I have to overcommit disk space and RAM to keep and run a guest VM. You want enough to be able to run updates and the software in the VM without running into a wall. The second is that there does seem to be a CPU penalty when downloading files (maybe it’s because of the way I’m sharing the downloads directory into the VM with virtiofs?)


  • I have some beginner questions, for example: if I have the arr stack running in docker with a vpn, can I browse the internet non-anonymously on that same machine without compromising identifying details, assuming qbittorrent is configured to only move traffic through a VPN? (I’m wondering if I need a dedicated piece of hardware to run everything safely)

    The answer to this question is you can setup a docker system (or podman) so that all the traffic in that pod (don’t know the docker term for this) will route through the vpn. A good image to accomplish this easily and successfully is gluetun – and it will only affect the traffic in the containers, not the rest of your computer.

    Personally, my setup is much more like yours and it works fine for me, except I use a VM. So all the activity gets confined to the VM and that makes a bit idiot-proof. Using automatic management in the torrent client, completed torrents get put in the correct directory. You could combine this with Jellyfin if you desired.

    My own problem with Jellyfin is if I ever use it for anything I want direct playback on all relevant devices, because my computer is not good enough for transcoding (and why waste the energy and time on on-demand transcoding, anyway?) so it requires some massaging of the data to get everything right. I only use it infrequently, practically on-demand. I don’t use Jellyfin for myself.