Atemu

Atemu , 7 months ago

Check your nix.conf.

Atemu , 7 months ago

Who are your users? Where are they located?

Atemu , 7 months ago

I’d cross that bridge when I get there.

Are you expecting to have users in far away countries any time soon?

Atemu , 7 months ago

No. That’s quite literally the point of a proxy. If you don’t want to be proxied, don’t use a proxy.

I know this is the selfhosted community but if you’re new to this, you really shouldn’t be hosting email as it’s one of the hardest services to get “right”.
(Ideally no other public service either, they’re a huge liability. Start hosting stuff for local network use.)

Atemu , 7 months ago

I did not intend to be toxic.

Atemu , 7 months ago

I completely misread your post. Your issue isn’t outbound connections appearing as if they came from your VPS, it’s inbound connections to your local mailserver being proxied.

Atemu , 7 months ago

Why is this not being developed inside Mesa? There’s even precedent for it; gallium9.

Atemu , 7 months ago

Merging this into mesa would only bloat mesa while not really offering support for many applications at all.

But there already is a d3d9 driver inside mesa?

Atemu , 7 months ago

(Unless they have installed it onto their ASUS ROG Ally of course.)

Atemu , 7 months ago

There is no such thing as “directly” DX. The drivers of the major GPU vendors on Windows must also implement DX ontop of their internal abstractions over the hardware.

While Vulkan will theoretically always have more “overhead” compared to using the hardware directly in the best possible manner, the latter isn’t even close to being done anywhere as it’s not feasible.

Therefore, situations where a driver implemented atop of VK being faster than a “native” driver are absolutely possible, though not yet common. Other real-world scenarios include Mesa’s Zink atop of AMD’s Windows VK driver being much better than AMD’s “native” OpenGL driver, leading to a dev studio of an aircraft sim shipping it in a real game.

Atemu , 7 months ago

Looks like it: …x-plane.com/…/addressing-plugin-flickering/

Atemu , 7 months ago

VPN use will functionally make it like you’re on your home network. VPN access to your network should not be given to tons of people if at all possible.

Note that Tailscale does not give other users access to your entire home network but just specific machines and you need to explicitly share those machines.

Atemu , 7 months ago

Hm, in that case Tailscale isn’t quite what you want. It’s not about opening up to the internet but rather your own virtual private network (hey, a VPN) with manually approved devices.

They do have a new Funnel feature which allows exposing specific parts to the Internet via their proxy though: tailscale.com/blog/introducing-tailscale-funnel

Atemu , 7 months ago

Pushes Apache License

Atemu , 7 months ago

I’d also add a build machine to the setup. Building a modern desktop system on such a machine would take days.

Atemu , 7 months ago

I don’t want to do any sort of RAID 0 or striping because the hard drives are old and I don’t want a single one of them failing to make the entire backup unrecoverable.

This will happen in any case unless you had enough capacity for redundancy.

What is in this 4TB drive? A Linux installation? A bunch of user data? Both? What kind of data?

The first step to this is to separate your concerns. If you had e.g. a 20GiB Linux install, 10GiB of loose home files, 1TiB of Movies, 500GiB of photos, 1TiB of games and 500GiB of Music for example, you could back each of those up separately onto separate drives.

Now, it’s likely that you’d still have more data of one category than what fits on your largest external drive (movies are a likely candidate).

For this purpose, I use git-annex.branchable.com. It’s a beast to get into and set up properly with plenty of footguns attached but it was designed to solve issues like this elegantly.
One of the most important things it does is separate file content from file metadata; making metadata available in all locations (“repos”) while data can be present in only a subset, thereby achieving distributed storage. I.e. you could have 4TiB of file contents distributed over a bunch of 500GiB drives but in each one of those repos you’d have the full file tree available (metadata of all files + content of present files) allowing you to manage your files in any place without having all the contents present (or even any). It’s quite magical.

Once configured properly, you can simply attach a drive, clone the git repo onto it and then run a git annex sync --content and it’ll fill that drive up with as much content as it can or until each “file”'s numcopies or other configured constraints are reached.

Atemu , 7 months ago

I use the deutsch symbols messageease layout as it’s the only German layout with symbols on the main keyboard. There’s also deutsch multilingual thumbkey if you’re fine with {``^ etc. being on the numpad.

Atemu , 7 months ago

Me too still. It gets better though.

Atemu , 7 months ago

Being federated can allow us to encourage users to ditch Meta’s platform and join an open one (ex. Mastodon, Firefish, etc.)

What you fail to mention here is that this goes both ways; it also allows Facebook to “encourage” users to switch to Threads.

“All your friends are on Threads, why do you keep using that weird Mastodon thing?”
“Oh, Threads has this cool new feature where you can use (insert current NFT AI tech bro grift here) but it doesn’t work with Mastodon.”

But yeah you’re right, the last time a tech giant embraced an open federated protocol, everyone and their mom started using the open platform instead. No wait, XMPP is fucking dead after Google did the third E.

Don’t let them have a monopoly over the use of ActivityPub. Grow the other platforms: The extend stage only works when the platform gets a near monopoly over use of the standard. That brings up the first action. If there are enough users, services and resources on things like Mastodon/Lemmy, then Meta (or any other company) can’t just extend the spec without causing their users to ditch Threads to stay connected to the content they want to see.

How tf do you expect that to work when they will start out with a 98.5% “market share” in the entire AP network?

Might aswell call it “Facebookverse” at that point because the entire rest of the Fediverse as we know it would be a drop in the bucket.

That’s right, in a world where the broader Fediverse federates with Facebook, Facebook’s starting conditions would be market dominance; a monopoly you might call it.

As long as there is a healthy community away from Meta (ex. what we have right now), then they can’t extend & extinguish.

Good luck having a decent conversation with two people when there are hundreds of people screaming about irrelevant trifles in the same room.

Protect the Standards and share why it is important

• Share posts from experts about strict adherence to standards, support regulatory and legal advocacy (interoperability requirements > etc.), and educate other users about the risks.

Facebook: We will muddy the waters around this upcoming competitor that could destroy our entire business model and drown it in noise. Users: Share posts from experts about strict adherence to standards, support regulatory and legal advocacy
Facebook: Oh no, not the expert posts! Ok, we will stop.

the way that activitypub works, the outgoing data is publicly available. Defederating with Meta doesn’t prevent that, and federating doesn’t give them any more data than they could get otherwise.

It is not. It is only available to federated instances and even to those it’s almost always a subset because not every user/community is followed. Due to Facebook’s sheer size, they would probably receive pretty much everything from any instance federated with them.

If they were defederated, they’d have to scrape every instance’s API to actually export everything. Not a real blocker but much more difficult, expensive and legally questionable. (See the recent popularity in imitative statistical algorithms aka. “”“AI”“” or “Copyright condoms” as I like to call them.)
Additionally, this opens up Fediverse users to Facebook tracking in things like DMs. I’m aware they’re not E2EE and you should therefore not expect secrecy from them but putting them into a known bad actor’s hands is quite a lot worse.

It’s more of an issue when data start coming IN to Lemmy from Mastodon and Meta’s Threads.

…that’s precisely what defederation is about. You can’t stop someone from scraping your API but you can stop their toxic waste from flowing into your healthy platform.

All Fediverse platforms will have to work on content moderation and misinformation. Platforms like Meta, focussed on profit and advertising, will likely moderate in a way that protects their income. Those moderation decisions will be federated around.

Moderation is a problem with our Fediverse platforms already, how tf do you expect us to do the work for Facebook’s platform in addition to that when it’s like 100x the size of the entire Fediverse?

develop USEFUL but safe and open algorithms for the feeds

There is no such thing. The only reason our current feeds aren’t full of shit is because the general signal to noise ratio is still quite high. Refer to the conversation in the room example above.

Atemu , 7 months ago

Even if it’s a losing battle, it feels like we have a better chance if we keep the alternative available.

That’s precisely what the mass-defederation is intended to do. From my PoV, defederating Facebook is the only way to keep “the alternative available” as otherwise it’d be drowned in shit and/or EEE’d.

Atemu , 7 months ago

It’s not and it’s insane. TDP is a fucky “metric”.

Atemu , 7 months ago

Even has a KVM for emergency access ;)

Atemu , 7 months ago

Unless some sandboxing or other explicit security measure is in place, any software you run typically has access to your entire home directory, including .ssh/. If any one of those was compromised somehow, they’ve got access to your SSH keys.

That’s a gigantic attack surface if you ask me.

Atemu , 7 months ago

There’s only one route to an IP.

That’s not true. There’s an infinite numer of ways to route IP addresses on the internet in fact. Most of them are useless however.

your VPN server can try spoofing its outbound traffic to use the client’s IP, but it’ll most likely get discarded by the ISP because it only allows your IP to go out. But even if you can, the answer to those packets will go to the client’s IP, which will go directly to the client and not the VPN.

Mission accomplished? This may be what OP wants? Really not sure.

Atemu , 7 months ago

Not at all. A VPN can be used as a proxy but that’s not what they were intended for.

Atemu , 7 months ago

The hiding of internet traffic is also a proxy thing, not necessarily a VPN thing.

Atemu , 7 months ago

DHCP is a protocol where the “router” tells the devices that it is the gateway.

Atemu , 7 months ago

Note that what is typically referred to a “router” in a home setting is actually many different devices/services in one. It’s usually a combination of router, switch, firewall, DHCP server, DNS server, Wireless Access Point, modem and probably a couple other things I forgot.

Atemu , 7 months ago

Because it’s a laptop.

Atemu , 7 months ago

To use business lingo, blocking Linux support is just leaving money on the table.

And not even a little.

The current HW survery says that about 1.9% of Steam users are on Linux. According to 3rd party sources, there’s on the order of 120M to 130M people who used Steam this year. Extrapolating the HW survey, that’s about 2.5M Linux on Linux users.

Fortnite is leaving money from ~2.5M possible customers on the table because of stupid ideology.

Atemu , 7 months ago

It depends on what your motivation is. If your motivation is to criticise someone because of their heritage, it doesn’t matter what you criticise them for; even if that criticism is valid.

Atemu , 7 months ago

Definitive proof: cdn.kernel.org/pub/linux/kernel/…/english.wav

Atemu , 7 months ago

I can tell you that my Celeron J4105 (the N100’s predecessor) can run paperless and most other NAS/home server tasks just fine. I haven’t dabbled with Immich and its ML though. The 10W are pretty accurate. With hard drives, HBAs and PSU inefficiency, my home server comes out to about 20W from the wall under full load IIRC.

Also look out for RAM extensibility; you probably want 32GB in the not too distant future.

Atemu , 7 months ago

Well, according to ark the J4105 also only supports 8G and mine’s been running 16G ever since I got it.

Atemu , 7 months ago

Could you provide more info? On what grounds?

Atemu , 7 months ago

The e-privacy directive is not a thing yet.

Atemu , 7 months ago

They claim this one talks to Apple’s servers directly without proxy and therefore does E2EE.

See blog.beeper.com/p/how-beeper-mini-works

They do claim to use a custom-built proxy for push notifications (Apple’s push notifications obviously won’t work on Android) but that’s a helluvalot less critical than a message content proxy.

Given their previous behaviour, I’ll only believe that when an independent security researcher confirms that the app’s code actually implements the iMessage protocol with E2EE as they claim.

Atemu , 7 months ago

For myself, I just created a !lemmy custom bang in Kagi with this URL:

<span style="color:#323232;">https://lemmy.ml/search?q=%s
</span>

(URL encoding on.)

You can replace the domain name with your instance’s and it should work the same.

Kagi is great.

Atemu , 7 months ago

Correct. However, the instance will contain any federated content it knows of aswell. As long as there is at least one subscriber to the community from your instance, you should be able to find the community’s posts.

Atemu , 7 months ago

You’re basically looking for DRM and I’m not aware of any DRM system that you as a non-media-conglomerate can use.

I’m also not aware of DRM that is actually effective. It’s mostly snake oil or, at best, “please don’t steal”-signs.
The ultimate Achilles’ heel of any DRM system is the analog hole: As soon as the user has an image on their screen, they can take a photo of said screen and share that in any way they want.

As with multi-media piracy, you cannot solve this issue using technology.

Atemu , 7 months ago

If this is a VM, video playback stutters do not surprise me one bit. There’s many layers between the video and the image you see on screen here and they’re not optimised for viewing fidelity. This is likely not due to Linux but because you’re running this inside a with an emulated GPU. GUIs in VMs usually suck.

Optional codecs won’t help for Youtube since they serve royalty-free codecs such as VP9 or AV1 most of the time rather than patent-encoumbered codecs such as H.264 and free codecs are always installed.
That would also not fix stutters, only videos not playing back at all (because there’d be no decoder that could).

If this is a VM, installing the Nvidia driver also won’t do anything because the machine has no access to your host’s GPU. Not that the nvidia driver would change anything about videos since no sane browser supports their proprietary crap driver, so it’s software decoding either way.

You should try this on real hardware. You technically don’t even need to install as most GUI distros have a graphical installer with Firefox etc. pre-installed that you can use to test this.

If you have an Nvidia GPU, I’d recommend you to try !pop_os.

Atemu , 7 months ago

While this may be true today, note that European countries (well, the rich ones anyways) might just be behind the curve here. We’re certainly on our way towards a U.S.-style disaster.

It’s very hard to generalise this though as cultures here are very heterogenous here. You’d never in 100 years expect the Dutch to fall for the car industry’s strategy of getting everyone dependant on cars to anywhere near the same degree as the U.S. has while you absolutely couldn’t say the same about Germany; we love sucking on those exhaust pipes (especially our politicians).

Atemu , 7 months ago

This is a common misbelief.

There’s a small subset of U.S. citizens who do live in the middle of bumfuck nowhere and actually do need a personal vehicle to get around. The vast majority does not.

Atemu , 7 months ago

My argument does not hinge on any arbitrary state borders. Read again.

Atemu , 7 months ago

You should be spending very little time, if any, in that folder.

Hahaha, tell that to lemmy.ml/c/unixporn

Atemu , 7 months ago

See if you can get the memory upgraded. DDR3 SO-DIMMs should be dirt cheap.

I’d also get a cheap SSD aswell, especially if this is for a child who might not be very careful with the machine.

Atemu , 7 months ago

there’s a different nvidia driver for each kernel version. Already a stupid design

That’s not a stupid design at all. A nvidia kernel module artifact is only compatible with exactly one kernel ABI. Thus you need one binary nvidia package for each kernel you ship.

Arch also has one package for every kernel ABI they ship: nvidia and nvidia-lts.
Though it should be noted that their design assumes that these two ABIs are the only possible ABIs which isn’t strictly the case as the zen, hardened or RT variants may sometimes lag behind their regular counterpart. That’s a stupid design if anything as it increases the friction of kernel ABI upgrades as a kernel package maintainer.

We at NixOS also ship the nvidia module for each of our ~50 kernel variants; all major versions of the Nvidia module compatible with that kernel in fact.
The only possible way to access these nvidia kernel modules is via a certain kernel’s linuxPackages attribute set that contains all packages that rely on a kernel ABI such as kernel modules or packages like perf. That’s good design if you ask me but I’m obviously biased ;)

Atemu , 7 months ago

These aren’t all versions per se but mostly variants, versions and versions of variants. For example, we have packaged the xanmod kernel which is a modified kernel optimised for desktop use but it has two variants: Main and LTS. We have packaged both.

Here are the names of all of our kernels currently to give you an idea (as a JSON list):

<span style="color:#323232;">[
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages-libre"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages-rt"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages-rt_latest"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_4_14"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_4_19"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_4_19_hardened"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_4_9"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_5_10"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_5_10_hardened"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_5_15"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_5_15_hardened"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_5_18"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_5_19"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_5_4"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_5_4_hardened"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_6_0"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_6_1"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_6_1_hardened"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_6_2"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_6_3"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_6_4"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_6_5"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_6_5_hardened"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_6_6"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_custom"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_custom_tinyconfig_kernel"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_hardened"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_latest"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_latest-libre"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_latest_hardened"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_latest_xen_dom0"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_latest_xen_dom0_hardened"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_lqx"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_rpi0"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_rpi02w"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_rpi1"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_rpi2"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_rpi3"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_rpi4"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_rt_5_10"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_rt_5_15"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_rt_5_4"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_rt_6_1"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_testing"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_testing_bcachefs"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_xanmod"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_xanmod_latest"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_xanmod_stable"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_xen_dom0"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_xen_dom0_hardened"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"linuxPackages_zen"
</span><span style="color:#323232;">]
</span>

(Note that some of these are aliases; linuxPackages_latest is currently linuxPackages_6_6 for example.)

Each of these has the following nvidiaPackages (modulo incompatibilities):

<span style="color:#323232;">[
</span><span style="color:#323232;">  </span><span style="color:#183691;">"beta"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"dc"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"dc_520"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"latest"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"legacy_340"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"legacy_390"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"legacy_470"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"production"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"stable"</span><span style="color:#323232;">,
</span><span style="color:#323232;">  </span><span style="color:#183691;">"vulkan_beta"
</span><span style="color:#323232;">]
</span>

(Again, some of these are aliases.)

This is useful to have because users might have hardware constraints. It’s not hard to imagine a scenario where a user might have a WiFi chip that only works with kernel ABIs < 5.4 and require the 470 nvidia driver for their old GPU. Packaging just the latest kernel and just the latest Nvidia driver would make this user unable to use their system.