• 4 Posts
  • 228 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle


  • Interesting thoughts in this thread.

    I simply switched to having an unencrypted boot partition with the automount key on a flash drive. After it boots the server, just remove the whole boot partition. Physical separation is much much more powerful for smash and grabs, petty seizures, and evil maid than TPMs.

    The flash drive is stored securely when I am in the area. Flash drive can go in the machine if I am away for a while or have something critical.

    I go a step further and have password-only data drive description so I have to ssh in to set up the data drives again, but the principle would be the same.




  • I have tried openSUSE Kalpa for a few months and that would literally only boot 50-60% of the time due to not being able to mount volumes for some random unlogged reason, also RPM-ostree is better than the suse tool for it (from a layman’s perspective) and saving 10 or so system snapshots doesn’t make sense for my usecase because I would only notice something wrong from a bad update immediately or 4 months down the road lol.

    Steam being natively installed is a big one too because flatpak steam is simply riddled with bugs and problems. I couldn’t even launch any game at all until I found a command buried not in opensuse’s documentation but another. I think I ran into 4-5 major issues before they were all found out via the web. Definitely not an experience most people would want.

    Otherwise it is about the same except openSUSE had a high rate of updates silently failing with 2 RPM packages installed where bazzite has never failed.



  • Lol docker is literally the easiest and most user-friendly server program administration method… It is literally one user-readable configuration file and everything is automatic.

    Vm’s are more complicated and have you even tried managing many services on bare metal with conflicting libraries, database versions, etc…? That is truly arcane arts of programming scripts.


  • I’ll be honest. It was a hell of a time getting things working correctly due to the lack of documentation, but now I have everything except scanning and document signing working which I rarely use anyway. (Rocket league runs fine, just with half the fps I should be getting) I literally don’t have to touch anything anymore, it will just keep itself updated and working completely hands-off. That is what I want out of a system now that tweaking and debugging is a distraction from my other hobbies rather than a hobby itself.

    The biggest feature that I like is Linux without having any manual update intervention at all. It all just runs and updates itself and works.

    If something goes wrong in my software, I can uninstall and reinstall the flatpak delete remaining files, and reinstall with 3 clicks instead of having to search for where the hell this specific program decided to stash its files and configs and cache on my system like I had to with a traditional system. It takes the recurring annoyances out and trades them with 1-time annoyances.


  • I can attest to this. I daily drive bazzite exclusively now.

    Rocket league specifically only uses 40% of the GPU and 25% CPU and refuses to use any more at all. It is only a bazzite problem. Other distros are completely fine and other bazzite users have reported the same thing, regardless of settings, launch options, etc…

    It is hell when trying to do embedded firmware development. Pretty much everything has to be done through distrobox related to it because JLink needs to be accessible by NRF connect which has to be accessible by VSCode, etc… vscode and oss versions simply don’t work if you have to install more than the very basic UI extensions.

    Plus then you have udev rules that you have to manually place in the read only file system (recommended by a Bazzite maintainer on their discord) which they explicitly tell you never to do in the docs. There is absolutely nothing regarding JLink (the most widely used industry flashing tool for ARM) in any universalblue docs, even the bluefin and aurora versions “for developers”.

    Also, there is absolutely no known way to handle eID credentials, crypto keys, etc in order to digitally sign documents. Also key management and access simply does not work at all in flatpak.

    Network scanning simply doesn’t work at all (yes, saned is set up). It is completely nonfunctional, it can’t discover anything.

    Outside of those cases though, it works fine. Themes work, font installation works as expected: the firewall, KiCAD, freeCAD work, browsers, media players, etc… All work fine. Distrobox, while start menu applications via distrobox sometimes simply don’t start, they often work fine. However, I haven’t had to worry about updating my system in 4 months because updates are in the background and completely seamless and not a single thing breaks during updates which by itself is the reason I switched from arch.

    (Arch never became unbootable or seriously broken in 8 years, but I would have update problems and have to search for forum solutions to make a full update work every month or two)





  • I really miss Microsoft AD configuration GUI.

    Wait, no, that sort of group you have to make through Entra, formerly Azure admin center, wait no they actually wanted a SharePoint site for the group, wait no you can’t do that through entra even though you can see the groups, you have to do that through O365 admin center, wait no you can only make a SharePoint aaand teams group there, you have to click more -> SharePoint admin center and then create a new group there, but not the default, you have to click “show more group types”, but where can you modify the members of this group? Oh you can just go back to O365 admin center to do that. Now you want to make some small access changes to the force-created email for the group? Oh well you have to go to Exchange admin center for that. Wait, not Outlook admin center? No they are named different things just to make it easy.

    Now someone who made an event involving the group is on holiday so I have to remove it, I can do that from exchange admin center right? Well actually the easiest way to do that is to log into Exchange from a power shell terminal through the GUI pop-up and terminal commands. But wait, the search for the event actually doesn’t work there ever, even with the exact name? I guess I will give myself rights to the calendar, reboot Outlook, go to the calendar, remove the event, go back to the terminal, remove my rights to the calendar, restart outlook.

    Actually, I don’t miss Microsoft sysadmin tools.