If you are using only Docker, you don’t need a Linux distribution at all. Just install alpine slim, busybox, or any Kubernetes worker node build.
Flatpak, much like snap, appimage, and other programs trying to shove old, hole-ridden libraries down my throat under the pretext that “the build is too complex,” is not the kind of software I would welcome on my PC. I’d rather build the application by hand.
Not only with intervals but also with quite old software. Sometimes software versions are so old that they are no longer compatible with the upstream version. Although, to be honest, I haven’t used Debian for so long that I can’t even name the applications that lagged behind like that.
In general, Debian is indeed incredibly stable, but if you need to install it on the latest laptop (for example, Intel Core Ultra X9), it will be a real hell.
UPD: except perhaps for using sid. But then you lose the only advantage - stability.
I set the gateway to .1 and everything up to 100 I move out of DHCP into static pool for some nodes (speakers, servers, gateways, SIP phones, access points, switches, printers, vacuum cleaners, etc.). Simply because in this case, you have to type fewer digits to log into these boxes.
selinux relies on the basis of deny all, allow only ideas
Only in enforced.
but when you are troubleshooting issues, ,
Just set setenforce 0 for this
installing software or developing applications
for this see policy log and create selinux policy with generator if developer was lazy
it can hinder productivity by preventing the user from doing things
Highter productivicy before someone still all your code (like binance)
Just recently, someone wrote about https://github.com/stalwartlabs/stalwart here. It is literally an all-in-one server, so it’s quite hard to mess up.
Email itself is an unreliable delivery method, so usually, if a server cannot send an email to the recipient’s server, it puts it in a queue and tries again after some time. Therefore, a few hours of downtime won’t affect you much. Especially if you don’t need an archive of your correspondence.
So I still recommend trying to run your own full server with stalwart. At most, a couple of days of problems, and then it will work for years.
Not sure if I should write this, but here is a summary from Russia:
Everything is fine overall. There are some cuts (I work in a telecom company). Nevertheless, there are enough vacancies, and the only downside is the merging of positions from different departments in some places. At my last test interview sprint, I got a job in 3 days.
Fuel prices have almost doubled, so I’ve started driving less for non-essential matters. Small businesses have closed down in some places, so now there are only 3 snack bars in the neighborhood instead of 5. Inflation is felt unpleasantly; prices are slowly rising.
Nevertheless, I eat whatever I want, drink whatever I want, and buy electronics. Maybe I’m just lucky and things are worse for blue-collar workers.
Switching distributions should not be done just to follow a trend, but for real reasons. For example, if you have issues with the kernel or drivers, or if there is some reason you absolutely must use a rolling release, then it might be worth considering Arch. And this is on the condition that you do not want to or cannot solve the problem on your current distribution.
Personally, I switched from Ubuntu to Arch when Ubuntu first introduced snap and my old computers, which I use as servers, started to lag terribly. So, usually, a reason like that is needed. If it weren’t for that, I would still be using Ubuntu.
Unfortunately, I lost the section. But I’ve already been told that everything works correctly according to the tests, so I was just mistaken.
Thank you. Apparently, I misunderstood the documentation. I will try to deploy it anyway.
In principle, it’s a pretty good “all-in-one” server, and I even wanted to switch to them until I checked the documentation and saw that the Community version doesn’t filter From with valid authentication. This means that anyone who is properly authorized can send an email from any address on the server out of the box. In short, if I understood the documentation correctly, it’s a decent option for hosting your own mailbox, but for even small-scale mass use, postfix + dovecot still wins.
Anything I use less than once every couple of days, I simply remove from screen and use the global app menu. It’s easier for me to go there and use the app search. Things I use frequently, I keep on a couple of screens. If there are many similar apps, I keep them in folders with auto-sorting by last used, for example, messengers, pay apps, etc. The rest is just on the screen.
even if matrix isnt encrypted on all chats it wont be used by advertisers for a long time
Public chats are not protected from this regardless of encryption, because, unexpectedly, advertiser bots can simply join public rooms. On the other hand, private chats are almost nowhere used for advertising and spam as a private email.
UPD: especially since matrix is decentralized, and to receive a message as the author suggested, you wouldn’t just need to be registered, but to be registered on the correctly federated instance.
email isnt end 2 end encrypted
https://support.mozilla.org/en-US/kb/introduction-to-e2e-encryption If you don’t use it and big tech companies don’t present it that don’t mean that encrypt don’t exist.
is kinda easy for ads and tracking
To the same extent as any popular service. Even Lemmy tracks 200 bots a day on my tiny instance. =)
Email is not controlled by anyone. You can buy a VPS and a domain, and then set up your own instance completely freely.
Just like before, I update frequently. Although now I’ve switched to updating once a month instead of once a week. And I maintain an enforced SELinux configuration and some other tools. That’s all. I host quite a lot of services on the internet.
front: open-webui skill servers: dockling - docs parsing for llm, searxng - searchengine for llm, open-terminal - linux terminal for llm (inside container) base: llama-swap Inside llama swap: qwen3-14b-q5, translator-nemo-12b, tower-plus-9b, translator-gemma4-26b, qwen3.6-35b-a3b llama stack: ROCm
Hardware: RX9070XT for llama-swap .
UPD: if you want easy way and run all in oneshot use https://github.com/Niko1221/Strata
SSO doesn’t work like that. Conventionally, there is an sso ml provider, an sso world provider, and anyone else from the fediverse. Any server, for example lemmy, looks at the login domain during authorization and sends a request to the server along the lines of “someone is trying to log in, send the cookies and a redirect link”; someone is redirected to the SSO server, authenticates there, and then returns back to the original lemmy node. The registration endpoint can be determined by the domain.
Like, for example, lemmy.world login [email protected] -> redirect to lemmy.ml for password -> redirect to lemmy.world back. Or any another instance in fediverse.
Accordingly, this is literally no different from what exists now except for one nuance — I won’t need to go to my instance anymore, find a post mirrored from world, and write a comment there. I will simply be able to log in directly on world and write whatever I want.
And passwords are in the hands of the node admins anyway. This will literally differ from the current scheme in nothing except that potentially the owner of your lemmy account could hijack your mastodon. But those who actually think about this will just make 2 SSO accounts. But how easy that will be. No 20 accounts in 20 instances… And no one will have to explain why they need 20 accounts at all. And I’ll finally be able to watch pirtube, read lemmy, and comment on mastodon from the same username. =)
UPD: Especially tough guys will just be able to host their SSO node and not bother with password hijack.
Passport verification is a terrible idea. Instead of passport verification, the fediverse really lacks separating auth servers into a separate SSO component. So that you could log in to every fedi instance with the same account. It would be super convenient, and those who like to keep everything close together could just run two components side by side.
I realized I was manually maintaining too many packages in the AUR, so I built an autoupdate pipe. Decided to read the Shangri-La Frontier ranobe because the manga is at a pretty interesting point right now. But I got disappointed quite quickly. Was building another censorship bypass so that I could watch YouTube and use Telegram. Ordered a broken Mix Fold 4 from a local flea market to debug a LineageOS build before installing it on my main device. Can’t wait. I think it’s going to be the best weekend.