81
points
wooptoo
Joined 1,553 karma
wooptoo.com
radu @ domain_above
- wooptoo parentYou can actually get a prepaid travel eSIM before you leave on holiday.
- Systemd hardening is great, but each service needs its own bespoke config and that takes a bit of time and trial & error. Here's the override I've been using for Jellyfin: https://gist.github.com/radupotop/61d59052ff0a81cc5a32c92b3b...
Some references:
- https://docs.arbitrary.ch/security/systemd.html
- https://gist.github.com/ageis/f5595e59b1cddb1513d1b425a323db...
- I'm assuming the backup format uses a container (like Veracrypt volumes), which grows in size forever, and cannot be backed up incrementally. I ran into the same issue when backing up loopback LUKS volumes. An elegant solution in this case was switching to Gocryptfs which encrypts each file individually, but then can mount the entire folder as a whole with fuse. This means only modified files need to be synchronised to the remote.
- This article is already largely irrelevant. The GPL (and the FSF), whether you like it or not, always has been a political movement. The aim of the movement is to expand the pool of free/libre software and to disallow commercial entities from gaining an unfair advantage without contributing back. With the GPLv2 they already have, as it permits them to run the software in the cloud, with their proprietary additions, without contributing back. AGPLv3 closes that loophole that's why it's even less popular.
You can license your software as you wish, but in the long run the GPL has ensured that contributions reach back upstream for the common good, rather than for profit. The GPL gives protections for the people/end consumers, much like labour laws do in your own country. The GPL ensures that your contributions are respected, available to all, and not abused for profit (not always true, but tribunals have enforced the license terms before). The GPL has the effect of doing this globally while allowing contributions back from a global audience. It's genius and the companies absolutely hate it.
- There's also DSQ which uses SQL instead of its own language. https://github.com/multiprocessio/dsq
- This is very cool and definitely useful when you have a large screen at your disposal. I have a 27" screen which doesn't give you as much screen real-estate as yours. So what I'm using is a script which spawns a separate Xephyr window as DISPLAY 9, and puts a bunch of windows on that screen. https://gist.github.com/radupotop/d77a47767e2e65a7e7d40d1ea8... I use this as my demo environment.
- Isn't this what systemd run0 is now doing?
- https://mastodon.social/@pid_eins/112353324518585654There's a new tool in systemd, called "run0". Or actually, it's not a new tool, it's actually the long existing tool "systemd-run", but when invoked under the "run0" name (via a symlink) it behaves a lot like a sudo clone. But with one key difference: it's *not* in fact SUID. Instead it just asks the service manager to invoke a command or shell under the target user's UID. It allocates a new PTY for that, and then shovels data back and forth from the originating TTY and this PTY. Or in other words: the target command is invoked in an isolated exec context, freshly forked off PID 1, without inheriting any context from the client (well, admittedly, we *do* propagate $TERM, but that's an explicit exception, i.e. allowlist rather than denylist). One could say, "run0" is closer to behaviour of "ssh" than to "sudo", in many ways. - I've heard good things about atuin
- Actually leave html rendering to Servo https://servo.org/
- I would not trust that script. If Python is such a hassle then there is also Lego: https://github.com/go-acme/lego which supports tons of DNS providers and is very well documented.
- Then you'll love gron
- Just read an article about this a couple of days ago which went into more detail: