TCB13

TCB13 OP , 1 year ago to linux in Debian 12: How to setup disk encryption with TPM2

Yes, there are but they mostly assume the use of the SHIM. That was the reason why I posted this.

TCB13 OP , 1 year ago to linux in Debian 12: How to setup disk encryption with TPM2

The more pcr you add, the higher likelihood you need to re-enroll after updates

So that means if I run upgrades and forget to re-enroll I’ll get a broken system that I won’t be able to boot to and fix it?

TCB13 OP , 1 year ago to linux in Debian 12: How to setup disk encryption with TPM2

From what I can understand Debian uses a generic shim that is signed with Microsoft’s keys and then it delegates the rest to the system. Apparently this is a fast way to get secure boot to work but “SHIM only checks signatures of the boot loader and kernel, but not the GRUB config file or initramfs, which opens your machine to attacks”. This is why I was looking for a more detailed guide from someone who actually understands this from start to end.

TCB13 OP , 1 year ago to linux in Debian 12: How to setup disk encryption with TPM2

Most but not all :) Thanks.

TCB13 , 1 year ago to linux in Chinese distro (OpenKylin) made to provide independence from western technologies releses its first stable version

At least, unlike GNOME, they got the font rendering, the spacing across icons and the desktop icons right. lol

TCB13 , 1 year ago to linux in RustDesk (Open source TeamViewer / Citrix alternative) 1.2.0 released

• the inability to deploy to macOS with a custom server (they allow this for Windows with a renamed executable). rustdesk.com/docs/en/self-host/install/#put-confi…

TCB13 , 1 year ago to linux in RustDesk (Open source TeamViewer / Citrix alternative) 1.2.0 released

One more version without the obvious UPnP. At this point I think they’re not implementing UPnP in order to somehow profit from the lack of it in the future. Who on their right minds wants all traffic going over a server when in most cases you can simply use UPnP? This makes no sense.

TCB13 , 1 year ago to linux in LXD is now under Canonical

I also do playbooks to deploy stuff some stuff with LXD, but my end users only like Docker so, I kind of setup the infrastructure that allows them to deploy Docker on top of LXD containers that are deployed using Ansible.

TCB13 , 1 year ago to linux in LXD is now under Canonical

Not a correction, it has its uses :) I would never deploy a web app and its API, database etc. using LXD, makes no sense, k8s is way better for that.

TCB13 , 1 year ago (edited 1 year ago) to linux in LXD is now under Canonical

for any more complex orchestration I think you’ve moving to k8s or something more serious

I guess it depends in your use case. If you’re taking about “regular” applications LXD/LXC might not be your best fit. LXD/LXC seem to very good for the more low level infraestruture related solutions. In contrast, whatever is typically deployed with k8s that is mostly immutable very reproducible and kind of runs at a very high level.

LXD is more about what might power that “higher level” layer, more about mutable containers, virtual machines and very complex stacks that you can’t deploy with docker most of the time. As excepted people with those needs greatly leverage cloud-init and Ansible in order to get the reproducibility and the automated deployment capabilities that the Docker “crowd” usually likes.

TCB13 , 1 year ago to linux in LXD is now under Canonical

There you are, calling bullshit on my post while deleting your own where you clearly demonstrated close to no experience with LXD and its clustering capabilities. lol

The minimal interface that Ubuntu offers

Once again your ineptitude is palpable. Ubuntu doesn’t offer anything, the WebUI is a part of LXD.

And yes LXD’s WebUI released “yesterday” is objectively better than Proxmox and it does touch storage and clustering.

https://lemmy.world/pictrs/image/20e51c84-7d81-4188-93d1-f0404253188a.png

https://lemmy.world/pictrs/image/3818e1df-e194-4cd4-8429-7c39e59ab51f.png

TCB13 , 1 year ago to linux in LXD is now under Canonical

The point is that you want management, easy ways to create images, backups, move container between hosts, orchestration, network management and sometimes not only container but also virtual machines. LXD does it all very well and if you don’t want those resources you might as well use systemd-nspawn.

They’ve taken over Proxmox. Not sure if you’re following but they have now a WebUI and the entire solution is magnitudes better than the crap Proxmox has been offering.

TCB13 , 1 year ago to selfhosted in would it make sense to host something on my main machine?

No. It will become a pain. For 100$ you can get an SBC or, better yet, a second hand HP Mini computer with 6-8th gen i3/i5 CPU that is most likely enough for your needs.

TCB13 , 1 year ago to technology in Introducing the Orange Pi 5B: A Powerful and Affordable Single-Board Computer

Oh yes, PCI is just so good. The only thing I have against those boards is that if you go for the mid or high-end configurations + case + power adapter and other extras it becomes just cheaper to buy an HP Mini second hand with a much more powerful i3 or i5 CPU from 3 generations ago. Those computer are way more powerful, some have dual M.2/NVME, also come with wifi and everything out of the box and a much more powerful and stable CPUs. The power consumption of those systems isn’t a concern, a 8th gen i3 under low load will not consume much more than those boards.

It seems the business around SBCs is simply to make a board and then make it useless without a ton of extras that will run you close to the a second hand mini pc for a LOT less performance.

TCB13 , 1 year ago to linux in ZorinOS?

Why do you say that? It defaults to GNOME, that essentially had everything out of the box that those ones you speak about have. GNOME’s default theme is also finally something decent.

I’m not saying GNOME is perfect, far from it, but at least they’re no longer using brown+orange as their default colors. Now lets see if they can fix the font rendering once and for all.