hendrik

I’d go with the Full Disk Encryption. You can be sure everything is encrypted that way. Any additional complexity adds ways to mess up and compromise security. Entering the password is a bit cumbersome. But that’s part of the deal. I just carry my computer keyboard to my NAS and enter the password each time I need to reboot. Which doesn’t happen that often. There also used to be some tutorial somewhere on how to put a Dropbear SSH server into the initrd so you can enter the password over network.

I think Nobara is the other most(?) popular choice by gamers.

I don’t have much experience with gaming distros. I just think whatever it is, a computer shouldn’t bee too locked down for a kid so they can also install other things, try other tools like an office suite, video editing or content creator stuff and maybe even have the experience of messing up. Within limits of course.

That’s right. I don’t think there is a good way to do it. I just take whatever link is provided by the small Fediverse icon. But I don’t think it matters that much for your audience, they’re spread over several instances and it’ll be an external link for some of them, no matter what you do. I’m not sure whether we have the ambition to solve this. I don’t see anything the user could do. Either this gets handled in some way by the software, or it is how it is.

Right, I must have scrolled past it. I think linking posts is fine. I mean they’re public and this is social media… At least I do it somewhat regularly and I’ve never had anyone complain.

I don’t get the reference. This is the first time I’ve read that claim. But I’d certainly hope people know there is a difference between End Of Line and End Of File… I mean they’re alike, they both end something. But it’s not the same thing. The article explains the details how it’s handled.

inwx.de

I went with the option with keyfiles. I keep backups of LUKS headers and keyfile in case a harddisk gets damaged. Currently have that stored as a file attachment in my password manager.

I’ve been using it for quite some time now and I don’t see the issue. I mostly use Gnome and that’s kind of polished and minimalistic(?) looks very cohesive to me. But I believe the same applies to other desktop environments as well. My package manager mostly gets out of the way and I don’t have to pay too much attention to that. I even get browser extensions and all the stuff that ties into another from one and the same distro maintainers. I’ve tried other operating systems as well, but for the other ones I needed to install 50 small utilities to make it usable and those kind of fight each other as well. On Linux, I try to avoid Flatpak and I wouldn’t use Snap at all. We still(?) have most software available as proper packages.

I can see how image editing might be an issue. We have what we have and for the rest you need to get one of the commercial products running.

I use KaniDM and configured everything with OAuth2. That was the easiest and most straightforward I could find. But I don’t think they bothered implementing LDAP. Other platforms I tried are Authentik, Authelia, Keycloak, Zitadel… They’re all a bit heavier and have other/more features, but there wasn’t one I really fell in love with.

I’d say use something like zeroconf(?) for local computer names. Or give them names in either your dns forwarder (router), hosts file or ssh config. Along with shell autocompletion, that might do the job. I use scp, rsync and I have a NFS share on the NAS and some bookmarks in Gnome’s file manager, so i just click on that or type in scp or rsync with the target computer’s name.

I’m not sure about anything useful. Best thing would probably be to install Linux and donate them to people in need. For experimentation, sure, set up a Beowulf Cluster, learn FreeBSD, Orchestration, Kubernetes, Ansible… Use them to test your microservice architecture software projects, software-defined networking…

I get a lot of ads everywhere. And trackers. On most of the news sites, social media platforms, my email provider, .places where I look up information, … The majority of the internet is commercial and financed through advertisements. With few exceptions, like personal/indie blogs and places like this one. I mean if you read just blogs and Wikipedia, you might already be alright. But that’s not how 99% of people use the internet.

Yeah, Youtube ads won’t be blocked by a DNS blocker. You need a browser plugin for that. I use Firefox, uBlock and Sponsorblock. That removes most of the ads everywhere, including Youtube.

It means AI can recite information from a domain that PhD-level people are concerned with. This doesn’t mean it can draw correct conclusions, rephrase emails properly or do any heavy-lifting like come up with computer code beyond boilerplate templates and tech-demos. It’s mainly just hype. AI is useful. But not very bright as of today.

Well, it’s a mass-produced, embedded device, designed to do one specific task. I guess lots of the video related stuff is assisted by hardware and they usually strip down the embedded Linux to the minimum needed. Because every Megabyte of storage costs extra and they need to hit some 99,- or 89,- price point. Furthermore, they don’t want it to boot for 20 seconds, so these devices generally don’t contain any extras. Similar things happen on wifi routers, the ones below $100 usually contain similar amounts of memory (or less). At least the last time I bought one.

Google the product name and Linux. If nothing turns up, you need to find the name of the SoC / processor and google that. Find out if it’s supported by Linux and what other people did to install Linux. You might need additional hardware though, like a serial or JTAG adapter and a soldering iron. Plus the required expertise. And I must warn you, that thing has 1 GB of RAM and 256MB(!) of flash storage. You won’t be able to do much with those specs. Like a slow FTP server or one small website or a few other tiny services which don’t use a lot of resources.

I think Baikal or Radicale would be the usual contenders for that

I halfway agree, but the issue with that is, that’s not what happens in reality. In reality these things don’t run on renewable energy. And not utilizing datacenters at capacity is just a waste of resources. And they could find people who donate their voices, which would be fair… But they’re not doing that. So I think half the arguments still apply. It is innovation though, we shouldn’t be opposed just for the sake of it. It needs some proper argumentation.

SATA is more reliable than USB. And SSDs are faster, but more expensive than a harddrive. In the end all of this is possible. You need to see how much space you need and what you can afford. Unless you need it to be quiet/silent or super fast, a regular harddrive might do.

Nice that you were able to fix it. I think writing systemd unit files is a super useful skill. And systemd is a powerful tool. With the dozens of different things it can do and monitor for you.

I usually give each separate service its own user account. So teamspeak would get a teamspeak user and group and I’d write a system unit file to start it as User=teamspeak and Group=teamspeak. That’s also what you’ll find in most tutorials. But you can do it your way (as a user service), too. Whichever makes it easier to maintain and administer the stuff. I guess with the user sessions, you’d have to log in with that user(?) and the way I do it, everything runs completely unattended at system start and I never log in with those user accounts.

You don’t need to write any Before= or After= directives, unless you want to set up or tear down some environment for these services. Maybe have a look at an example for a service file for teamspeak, the arch wiki says there is some example out there. I don’t use it myself, as it’s not Free Software, but good luck convincing your friends to switch to Mumble😅

I think as written, I’d say these words are more FUD (fear, uncertainty and doubt)

And I’ve been running servers for quite some time as well. SearXNG seems rock solid. And it’s tested. And when I had security issues in general, it was because we didn’t do timely updates. I haven’t really ever been affected by zero days in my hobby linux endeavours. Okay, we had a few nasty things in some more fundamental building blocks and sometimes people using slower distributions had been fine… But I don’t think it applies here. With these kinds of things, the latest stable release is your best bet. Not a previous version with bugs in it, which have been fixed since. And especially not an unmaintained project.