Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)M
Posts
21
Comments
418
Joined
3 yr. ago

  • Yes. My high school used to do this. UDP blocked except for DNS to some specific servers, and probably some other needed things.

  • Is this because of the xz utils thing? The backdoor was included into the tarball, but it wasn't in the git repo.

    By switching away from tarballs they pribably hope to prevent that, although this article doesn't mention that. It's possible this shift has been happening since before the xz utils.

  • Did you post this right as I edited the title? Lol.

  • Not really? From this page, all it looks like you need is a salsa.debian.org account. They call this being a "Debian developer", but registration on Debian Salsa is open to anybody, and you can just sign up.

    Once you have an account, you can use Debian's Debusine normally. I don't really see how this is any different from being required to create an Ubuntu/Launchpad account for a PPA. This is really just pedantic terminology, Debian considers anybody who contributes to their distro in any way to be a "Debian Developer", whereas Ubuntu doesn't.

    If you don't want to create an account, you can self host debusine — except it looks like you can't self host the server that powers PPA's. I consider this to be a win for Debusine.

  • I have a similar setup, and even though I am hosting git (forgejo), I use ssh as a git server for the source of truth that k8s reads.

    This prevents an ouroboros dependency where flux is using the git repo from forgejo which is deployed by flux...

  • Proxmox is based on debian and uses debian under the hood...

  • Care to elaborate? Proxmox's paid tier is long term support for their older releaes, and paid support. The main code is entirely free, with no features gated behind paywalls or anything like that.

  • I don't see any mention of games so far.

    A minecraft server is always a good time with friends, and there are hundreds of other game servers you can self host.

  • I don't know what the commenter you replied to is talking about, but systemd has it's own firewalling and sandboxing capabilities. They probably mean that they don't use docker for deployment of services at all.

    Here is a blogpost about systemd's firewall capabilities: https://www.ctrl.blog/entry/systemd-application-firewall.html

    Here is a blogpost about systemd's sandboxing: https://www.redhat.com/en/blog/mastering-systemd

    Here is the archwiki's docs about drop in units: https://wiki.archlinux.org/title/Systemd#Drop-in_files

    I can understand why someone would like this, but this seems like a lot to learn and configure, whereas podman/docker deny most capabilities and network permissions by default.

    1. Corporations really, really love being admin on everybody elses devices. See kernel level anticheat.
    2. I feel like people have gotten zero trust (I don't need to trust anybody) confused with "I don't trust anybody".
    3. I was listening to a podcast by packet pushers and they were like "So you meet a vendor, and they are like, 'So what do you think zero trust means? We can work with that'".
  • Languagetool's browser extension is no longer open source, which has me concerned. You can still point it at a local server, but yeah.

  • UWP 💀

    UWP is Microsoft's "new" app format, it's what the windows store and the xbox use.

    It also isn't compatable with wine, and my pet theory is that this was the entire point of it. Combined with Windows S mode, which doesn't let you install apps other than from the windows store, the goal was to lock down the windows ecosystem by having apps that can't be made to run on linux.

    I remember seeing a compatability layer for UWP apps a while ago, and I am pleased to see that it has come this far. Great work!

    Edit: wait this uses a windows VM. Still good though and lets people escape the windows ecosystem.

  • NSFW Deleted

    erwtrthrthrthnrth

    Jump
  • Why did you link to a knot that's not the ian knot?

    I used to triple tie my shoes, but they would keep getting untied. After I learned a balanced ian knot my shoes would never get untied again.

    Balanced friction > total friction

  • I don't really understand why this is a concern with docker. Are there any particular features you want from version 29 that version 26 doesn't offer?

    The entire point of docker is that it doesn't really matter what version of docker you have, the containers can still run.

    Debian's version of docker receives security updates in a timely manner, which should be enough.

  • You are adding a new repo, but you should know that the debian repos already contain docker (via docker.io) and docker-compose.