TCB13

TCB13 , 5 months ago to selfhosted in Uncomplicated firewall rule set for a *arr stack.

Did you care to understand why at least? @farcaller @Fedegenerate the reason you were getting more ads was simple. If the ISP router was running DHCP and IPv6 then te the devices connected to the network got their IP addresses from the ISP router and it would also provide ISP DNS servers (or router IP) completely bypassing your pi-hole.

TCB13 , 5 months ago to selfhosted in Uncomplicated firewall rule set for a *arr stack.

I was starting to get annoyed by so much “*arrs” and dancing around the subject that I lost the motivation to type. Thank you for taking the time to type an answer similar to mine. :).

@Fedegenerate go read this.

TCB13 , 5 months ago to selfhosted in Uncomplicated firewall rule set for a *arr stack.

So you’ve set a static IP in your Pi? Something like 192.168.1.x? Second question, whenever you want to expose some service to the internet you’ve to go into your ISP and setup a port forward am I right?

TCB13 , 5 months ago to selfhosted in Uncomplicated firewall rule set for a *arr stack.

ISP modem.

Is it running as bridge? Do you get a public IP on your Pi or is it a NAT?

TCB13 , 5 months ago to selfhosted in Uncomplicated firewall rule set for a *arr stack.

Is your system running behind a ISP router / selfhosted at home or a VPS at some provider?

TCB13 , 5 months ago to linux in "Linux Sucks" Sucks. Here's Why

Lunduke may be correct about of things, but he doesn’t even touch the surface on the current desktop bullshit.

TCB13 , 5 months ago to linux in What is being done to make Flatpaks better integrate into the system

We’ll see about that graphics accelleration. The laptop doesn’t have a dedicated GPU anyways. Either QEMU/KVM does it or I can pass through half the intel iGPU or it’ll just be slow.

Assuming you’re a GPU supported by macOS you might be able to get good results by treating with like an hackintosh: dortania.github.io/OpenCore-Install-Guide/

I’m not sure how macOS plays with GVT-g / SR-IOV / sharing slices of hardware but this guy says he go it to work reddit.com/…/successful_macos_catalina_with_intel…. I personally never got macOS with GPU acceleration working fine on a VM because my host is NVIDIA and unsupported. However I did have very good results in HP Mini computers running macOS by following the links before.

Thank you for the Midtown Madness 2 link. I need that, too. Spent quite some time in that blocky version of San Francisco when I was a kid.

I believe the hacks work with other games from that time as well as it solves the DirectX and GPU issues nicely without permanente changes to your system.

TCB13 , 5 months ago to linux in What is being done to make Flatpaks better integrate into the system

See if there are cracked versions of MacOS that I can boot in a VM and see if I like it. I have to think about that.

You don’t need any cracks. The issue with running macOS on a VM is that the VM won’t provide a compatible GPU and it will lag a lot. Yes, it’s painful and there aren’t decent workarounds unless you can passthrough an entire GPU supported natively by macOS.

The whole thing looked completely mental (to me.) And I think there is something like that on Windows, too.

Yes, there’s vTask (proprietary) and AutoIt for Windows. The second one is very good and very reliable.

I can only imagine things like that break easy and you’re never able to change things if people actually rely on it. But I’m really not an expert on this. Might have valid use-cases. Or it’s just a silly way of doing things.

AutoIt doesn’t break as much as you think if the developer knows what he’s doing. “Unfortunately” I spent the better part of 2010 coding AutoIt to automate exporting data from a very proprietary Siemens software and after a few months you just learn how to it properly :P It can target the Win32 controls directly and you can bind code to UI events by their internal Windows IDs. Another interesting thing it can do (sometimes) is explore a program’s DDLs and internal funcional calls and call those directly from your code instead of button clicks.

What Apple does with AppleScript is a less advanced version of AutoIt, you can call their framework’s functions directly from it (hance the ability to build entire applications) and interact in robust ways with the GUI of some application. Applications can also load “plugins” into the editor and provide methods to do certain tasks the developer decided that might be important for someone.

Might have valid use-cases.

In the macOS land the use case is allowing anyone without much coding experience to be able to automate some GUI task. While not perfect this a large win for a lot of people, specially because you can just click “record” > do your repetitive task > “finish” and it will translate the task into code - the best part is that this “record” feature doesn’t actually record click positions, it will actually find out the IDs of the buttons and menus you clicked and write optimized and reliable code for the task.

In my case with the Siemens software the use-case was very simple: we needed access to data that was only made available either through their software that was about 300€/month OR with a special license and another tool (that provided a local API via socket with the data) that would cost around 50 000 €/month - when you see a price like that I believe it’s totally justifiable and okay to automate the UI. Note that this was in 2010 and from what I’ve been told my code is still running the same task today without changes (AutoIt is complied and they don’t even have the source). I believe this speaks volumes about how reliable AutoIt can be.

Something I don’t agree with is Windows and MacOS succeeding because of solid and stable APIs. Theoretically this might be the case for developers

And and developers create software that people use. Large companies, without being given stable APIs and good documentation won’t ever feel like developing for Linux. They couldn’t justify a very expensive development process with large maintenance costs for such a small market share. If the APIs were more stable and there were better frameworks it could be easier to justify.

So while in theory the Windows Kernel API might enjoy a good development model, it has little to zero effect on the end-user

It’s not just about the kernel, it’s about the higher level APIs and frameworks that make developers be able to develop quickly. It’s about having C# and knowing the thing is very well supported at any corner of Windows and whatnot. It’s about having entire SDKs with everything integrated on a IDE made by them where everything works at the first try.

re, I’ve tried. Installing the old dotnet or c++ runtimes and directx versions is a hassle, sometimes impossible. Some games crap out entirely. I can’t do it the other way around and install an old version of Windows on modern hardware.

It seems you’re picking the hard case - games. But for instance you can install Office 2003 and Photoshop 6 on Windows 11 and they’ll run without hacks - Linux desktop (not CLI) never offered this kind of long term support. Recently I had an experience with an old game on modern Windows that might interest you: lemmy.world/post/10112060.

Apple changed the entire kind of processor architecture, and then again. With them things also don’t stay the same. They solve that with other techniques. And a Macbook won’t be thrown to the garbage after a few years because it’s gotten so slow. I see people keeping them for quite some time. But they usually don’t run the latest version of MacOS any more. At least that’s what I’ve seen.

Apple simply obliterates the old and doesn’t care much about it, Microsoft usually is way better at this. BUT… still as you’ve noticed their Rosetta 2 compatibility layer allows you to run Intel software on ARM machines without issues, even games and heavy stuff.

But they usually don’t run the latest version of MacOS any more. At least that’s what I’ve seen.

Yes, they’ve restrictions because they usually want to cleanup their kernel and some system components of support for older hardware and this seems to be a big advantage when it comes to the performance and reliability of their OS. Either way those machines with older macOS versions keep working and getting at least most of the software for a reasonable time.

TCB13 , 5 months ago (edited 5 months ago) to linux in What is being done to make Flatpaks better integrate into the system

I’ve been using Linux for quite a while now. While not everything is perfect,

You don’t have to upsell me Linux, I’m already sold however I do use both Linux, Windows and macOS at work and home and notice the subtle differences when it comes to a polished experience and cohesion - Windows is the worst on cohesion as expected.

And which kind of cohesion on the desktop are you missing and I don’t? I mean sure, Apple has one big ecosystem with everything tied to it. It is convenient and easy as long as you’re within that one ecosystem. And Linux for example doesn’t sell an operating system and online services and software

I’m not talking about ecosystems, I’m talking about the small annoyances from icons that don’t have a consistent looking across apps on Linux to for instance whenever I want to add a VLAN instead of doing it on GNOME Settings (gnome-control-center) I’m forced to use nm-connection-editor that is a different application. Settings are kind of scattered around. The same happened with Wireguard VPNs for a while…

Flatpak isn’t something tightly integrated into the system and it isn’t Linux’s default choice

It does use a lot of the same containerization technologies that Docker, LXC etc. use such as cgroups, namespaces and bind mounts. To me it seems more like the higher levels are missing pieces to facilitate communication between applications (be it protocols, code or documentation) and sometimes it is as simple as configuration.

Additionally I have the command line where everything ties into another superbly. It follows the unix philosophy. That means I have tools that are supposed to do one task, but do that task well. And then I have a simple means of connecting them, concatenating them and it makes things really easy. I don’t know how Apple does stuff.

Apple also has it, macOS is a UNIX system for what’s worth and that’s the reason why a large number of developers use it instead of Windows. The cli tools you use under Linux are most likely available for macOS as well via brew.sh.

To be fair Apple actually does a decent job when it comes to connect things as they even created a programming language called Apple Script that as made specifically so you can automated macOS GUI applications easily. On Linux this can be done with strongwind (deprecated?), dogtail (dead?), xdotool but those tools are sloppy and hard to use.

In AppleScript you can access the native APIs of macOS GUIs and simulate a user clicking on buttons and menus, you can also tell it to record some action on the GUI and it will translate it to code.

Recently Apple even made their macOS GUIs automations available from JavaScript and you can do the exact same things you used to be able to do from AppleScript in JavaScript. They actually invested so much into that you can even build entire macOS desktop apps using the typical UI components and frameworks Apple provides with JavaScript.

a game that isn’t available for Mac or you’re forced to use Microsoft Access or other specific software for work? Or you want to watch Virtual Reality pornography and that happens to be something the app store cuts down on?

There’s a difference between macOS and iOS. What your described is what happens in iOS - you’re required to use the store and whatnot, but under macOS you can get applications from anywhere you want like you do on Window and Linux.

You just can’t compare specifically Flatpak to the way Apple does it. It is something that is focused on decoupling things from the system, not integrate them

Apple does enforce a LOT of separation. they call it sandboxed apps and it is all based on capabilities, you may enjoy reading this. Applications get their isolated space at ~/Library/Containers and are not allowed to just write to any file system path they want.

A sandboxed app may even think it is writing into a system folder for preference storage for example - but the system rewrites the path so that it ends up in the Container folder instead. For example under macOS apps typically write their data to ~/Library/Application Support. A sandboxed app cannot do that - and the data is instead written beneath the ~/Library/Containers/app-id path for that app.

And here’s how good Apple is, any application, including 3rd party tools running inside your Terminal will be restricted:

https://lemmy.world/pictrs/image/1d4655fa-f956-47fe-8797-130741a2e6bb.png

https://lemmy.world/pictrs/image/54effa3d-9f3b-48fc-a1a1-457d6d6b484b.png

I bet you weren’t expecting that a simple ls would trigger the sandbox restrictions applied to the Terminal application. The best part is that instead of doing what Flatpak does (just blocking things and leaving the user unable to to anything) the system will prompt you for a decision.

I would really like Linux to step up their game regarding a few things. Desktop application sandboxing and distribution is one thing. If you use Flatpak for this, the blame is on you. It is not the solution I’d like to see. And it is not the intended way of using Linux, so you can’t really complain. We need a proper solution instead.

But okay I see your point. Still believe that Flatpak could’ve done a few things better just by looking at what Apple does.

Half of the success of Windows and macOS is the fact that they provide solid and stable APIs and development tools that “makes it easy” to develop to those platforms. Linux is very bad at that. If major pieces of an OS are constantly changing and it requires large re-works of the applications then developers are less likely to support it. To be fair the Linux situation might be even harder than that - there are no distribution “sponsored” IDE (like Visual Studio or Xcode) and userland API documentation, frameworks etc.

If Linux is able to provide those things we may even get proprietary software like Adobe on Linux because let’s face it the lack of Adobe and others is also Linux’s fault, not only on those companies. It is really fucking hard to develop and support software for Linux when you’ve to deal with at least two major half-assed desktop environments (KDE and GNOME) and one of them decides to reinvent the wheel every now breaking APIs with little to no regard for software. To make things worse you’ll end up finding out that most of the time people are running KDE + a bunch of GNOME/GTK/libadwaita components creating a Frankenstein of a system because some specific App depends on said components.

TCB13 , 5 months ago to linux in Debian patching 32-bit builds to handle dates beyond 2038

Well then you may also like this comment here about the RPi’s lack of hardware innovation and features. And this one about how it is just a product that stays in between two very different markets and doesn’t really serve anyone.

TCB13 , 5 months ago to linux in What is being done to make Flatpaks better integrate into the system

Flatpak is a utility for software distribution and sandboxing. And that is what it does. Sandboxes are a means of isolating software from the rest of the system and each other. By using Flatpak to install software you deliberately choose not to choose the version of the browser that would have been tied into the rest of the system… And now it isn’t tied into the system…

This is “only on Linux that” part once again. I wasn’t comparing in the way you think, I’m comparing in the sense that cohesion and important details aren’t usually a thing when it comes to the desktop Linux experience.

Apple also has sandboxing on both iOS and macOS and this situations weren’t ever an issue because, back then in 2009, when they “developed” the technology they took their time to think about the implications and provide APIs and other ways to allow things to work. Flatpak is great, I use it and like it but it was also blunt “we just isolate things and fuck it” from the start.

TCB13 , 5 months ago to linux in When do I actually need a firewall?

[virtualized router/firewall] This is an intriguing idea. I hadn’t heard of it before.

• forum.opnsense.org/index.php?topic=31809.0
• docs.netgate.com/pfsense/en/latest/…/index.html
• sdxcentral.com/…/whats-a-virtual-router-vrouter/
• hometechhacker.com/how-why-i-built-virtual-router…
• …medium.com/pros-and-cons-of-installing-pfsense-a…
• openwrt.org/docs/guide-user/virtualization/qemu

Virtualized routers and firewalls are more common than you might think, specially in large datacenters and other deployments that require a lot of flexibility / SDN.

Other people just like the convenience of having a single machine / mini PC whatever that runs everything from their router/firewall to their NAS and VMs to self-host stuff.

But… at the end of the day virtualization is only mostly secure and we’ve seen cases where a compromised VM can be used to gain access to the host or other VMs, in this case the firewall could be hacked to access the entirety of your network.

TCB13 , 5 months ago to piracy in Only Soulseek through VPN?

Since you’re running on Linux you don’t need extra software like some suggested.

Systemd can be used to restrict a program networking to your VPN. The following is an example of how to it for Transmission and you can adapt it to any other service. It boils down to overriding the default daemon unit by using the following command:

<span style="color:#323232;">systemctl edit transmission-daemon.service
</span>

Then type what you need to override:

<span style="color:#323232;">[Service]
</span><span style="color:#323232;">IPAddressDeny=any
</span><span style="color:#323232;">IPAddressAllow=10.0.0.1 # --> your VPN IP here
</span>

Another systemd option, might be to restrict it to a single network interface:

<span style="color:#323232;">[Service]
</span><span style="color:#323232;">RestrictNetworkInterfaces=wg0 # --> your VPN interface
</span>

Save the file and run systemctl daemon-reload followed by systemctl restart transmission-daemon.service and it should be applied.

• ctrl.blog/…/systemd-application-firewall.html
• freedesktop.org/…/systemd.resource-control.html#N…
• freedesktop.org/…/systemd.resource-control.html#R…

TCB13 , 5 months ago to linux in Debian patching 32-bit builds to handle dates beyond 2038

@JustUseMint you should read this: lemmy.world/comment/7295421

TCB13 , 5 months ago to linux in Debian patching 32-bit builds to handle dates beyond 2038

I know the feeling, I also had to pay extra customs taxes because I’m in Europa and it was sold by an US company. :(