0
submitted 3 weeks ago by [email protected] to c/[email protected]

I am trying to create a KVM/QEMU/Virt-Manager VM without exposing my IP/internet connection to it. I pay for a VPN subscription, and I typically access it through wireguard configs that integrate with my distro (Fedora 40 Workstation) and DE VPN menus. From my understanding, as I have them set up now, I can enable one of these configurations in my settings, and all of my traffic is routed through the VPN, except for my local network.

I want this VM guest to have all of its traffic sent to the VPN as well, with the exception of some connection between it and the host, so I could still access it from the host for utilities like ssh.

Is it possible to achieve this? When I looked online, it seemed to require some CLI configuration of IP routes, and I didn't feel confident not understanding the changes I was making, as I want to make sure it is impossible to leak; it just shouldn't have any access to my normal network. If my VPN is disabled on the host, then it simply shouldn't be able to access the internet.

26
submitted 2 months ago by [email protected] to c/[email protected]

Hello. I recently acquired a Surface Go (1st gen, 4 GB RAM, 64 GB EMMC) and installed Fedora Workstation (and Phosh as a second DE). I do not have a keyboard for this device, so usually, I have to use the on-screen keyboard. Entering a sufficiently secure password whenever I wake it from sleep or need elevated permissions/sudo is not practical, but I don't think a 6-8 digit numerical PIN is sufficient.

The Surface supports Windows Hello, but neither the vanilla nor the Linux-Surface kernel currently supports the IR camera. On my main laptop, I use a fingerprint sensor. I must use my good password to decrypt the drive (though this is bypassed by TPM) and unlock the keychain on first boot or after logging out, but afterwards, I can use my fingerprint to unlock from sleep, run sudo commands, and elevate my permissions.

It seems like there are PAM modules for smart keys and TOTP 2FA, though the latter is more cumbersome, and I don't know if I can authenticate FIDO or U2F from my phone over Bluetooth. I asked on the Linux-Surface matrix, and someone suggested KDE/GS Connect, which allows commands, but I would want something I could do near-instantly, either with a prompt or homescreen shortcut plus smartphone biometrics, and I want to be able to authenticate while logged in, i.e. for sudo, not just unlocking the homescreen.

I am not an expert, and security is not something I really want to go in blind on. Does anyone have experience, ideas, guidance or an up-to-date tutorial? I feel this is an acceptable compromise between usability and security, and it would make using it casually much easier.

[-] [email protected] 4 points 2 months ago

Yup. I checked their webpage. Might help battery but I'll try vanilla first. Unfortunately, no dice with the secondary display thing. With RDP, the hardware cursor won't send, and I can find a way to use RDP over type c cable.

14
submitted 2 months ago by [email protected] to c/[email protected]

Hello, all. I just got handed down a Surface Go (1st gen, 4gb ram), and I want to use it as a note taking machine, document reader, and secondary display for my primary laptop (Framework intel 12th gen running Fedora GNOME).

I have a pen but no keyboard, so any config will be done with a usb keyboard, but usage will be like a tablet.

  1. I have heard I should install GNOME on a tablet. I am generally ok with the 'opinionated' design of GNOME, but does anyone know what performance to expect? Would I be better off with a lightweight distro and de?

  2. What apps can be recommended for stylus notetaking? Would prefer svg output, and simple workflow to export them to my main machine, where I can embed in markdown notebooks

  3. Finally, the secondary display usage. Is this feasible? I know GNOME has RDP support, but my uni's wifi makes that very difficult, and I'd prefer a wired connection if possible. I don't need the stylus to work.

BONUS: If anyone has experience with the proprietary Surface Connect port, can it be adapted to usb c on linux, so that I can transfer power and >= 5gpbs of data? I see usb c adapters online, but they don't mention data; only power delivery.

26
submitted 6 months ago by [email protected] to c/[email protected]

An aquantance of mine has a CD collection and wants to rip it. They don't want to stream it over a server but rather store it, say, on a hard drive connected directly to their speakers/receiver.

While they **don't want to stream ** it wirelessly to/from their phone, they do want to control selection/playback.

Kind of like a remote controlled jukebox or, well, a really big CD player.

I am thinking there's probably some raspberry pi project to play on-device music library that has a remote control library plug-in over LAN. I'd also like there to be a backup option, like a Pi GUI so they could see their library on the TV.

I'm envisioning an interface similar to the retro game players or kodi.

Does this exist?

[-] [email protected] 4 points 9 months ago

Looks nice, I'll check it out if I have to use Mac OS again.

[-] [email protected] 86 points 9 months ago

I much prefer Windows to MacOS. The fact it is missing decent tiling is a nonstarter. It's too inflexible for my workflow.

And sure, Windows can be maddeningly inconsistent, but what really destroys the experience is the constant ensh*ttification. I know a lot of people here hate everything about Windows, but for me, it only sucks because Microsoft designs it to suck.

Not only are there ads and (some) first party lockin, I cannot trust they will continue offering updates, paywall feaures, restrict more functionality, or insert stuff like AI to mess up my workflow.

I used to think reliability was just about stability and bugginess, but now I think it is about trust as well.

[-] [email protected] 6 points 9 months ago

“Exact quotes can be misinformation” I’m glad we agree. In all seriousness, it’s not exactly hard to intentionally or even accidentally mischaracterize a direct quote by taking it out of context.

As for the worst things, I think the Bangladesh genocide is not mentioned enough. Though if you type into google “Henry Kissinger [insert any country here]” you’ll definitely find something horrific.

[-] [email protected] 11 points 9 months ago

The “right” of this country hates the ADL as well. They’ve pretty consistently fought the American right and extremism in this country, from the red scare to the civil rights movement to LGBT rights to Trumpism, internet radicalization and the alt-right in the present.

What I would describe as the root of their hypocrisy is cowardice. That’s what I see when they give powerful people like Musk and Kissinger a free pass. It’s a short walk from cooperation and dialogue to outright complicity. To say it’s been ‘captured’ almost absolves it of responsibility; these are clearly choices made by the leadership, not puppeteered by outside influence.

[-] [email protected] 39 points 9 months ago

Quite frankly, the ADL commemorating him makes my blood boil. To be clear, they do some absolutely vital work combatting and monitoring hatred in the US, and I have been angered by the straight-up conspiracy theories about them. They are undoubtedly a scapegoat of a diverse swath of political movements. But between this (and Greenblatt’s recent defense of Musk), I cannot endorse them.

It seems like it’s easier to pick some prominent (often Jewish) person or organization to scapegoat than to actually confront the depths of American foreign policy, police brutality, etc. There’s no point to policing people’s anger towards Kissinger. He deserves much worse. But I cannot be fully comfortable with where it leads.

[-] [email protected] 8 points 9 months ago* (last edited 9 months ago)

So basically all those who used CentOS and did not contribute anything even though CentOS cried for contributions for years until Red Hat eventually bought them? (=Most notably Oracle.)

Not contributing is not necessarily freeloaders. Users have no obligation. That's the point of open source. Only building off of open code and the closing yours off is freeloading.

Oracle and others used the source code and publish their distro's source. Oracle not contributing is jerky, sure, but for them to be freeloaders they would have to use enterprise linux as a basis for a pay walled proprietary or restricted source OS. Correct me if I'm wrong, but their business model is using Oracle Linux in their cloud offerings.

Red Hat is still the biggest FOSS contributor. (I use openSUSE and SteamOS, btw, so I'm not even a RH product user.)

Hell, I use Fedora, so anything I contribute to is upstream of RHEL. I'm not saying RH socks. There are a lot of great people they employ and their business has been a huge positive for FOSS. But those (great) achievements were and are premised on community collaboration, and it's more than fair to raise a stink about it.

It's really not a loophole.

You're right about GPL. I have nothing against paid software. I was more describing the broader enterprise linux ecosystem. That is to say, RHEL's success is based on making it an open standard. The greater community can contribute either directly to the upstream or to the application ecosystem, with the understanding their work is applicable to the FOSS community. Closing the downstream is a loophole out of this system where they get to profit. It's a bait and switch.

Simply reusing Red Hat's source RPMs isn't an open ecosystem. All the EL downstreams finally collaborating is.

"Ecosystem" wasn't referring to the existence of clone distros but the development and adoption of enterprise linux they enable(d). The ecosystem is not only those directly contributing to enterprise linux but the developers targeting enterprise linux and the (IT/CS) user base familiarizing itself with enterprise linux. The market for a RHEL clone is not the market for RHEL enterprise solutions. As I said above, free availability of clones gets people into the ecosystem, and on the corporate end, as long as RH's offerings aren't enshittified, Red Hat converts these people into customers. It should be a win-win, but short-term profit maximization will hurt its trust and future growth.

[-] [email protected] 29 points 9 months ago

I have no love for oracle, but in general the only freeloaders in FOSS development are companies that use the work of a whole ecosystem of unpaid developers and then use loopholes to restrict access.

"Lazy clones" are vital to maintaining the interoperability and openness that make RHEL (or any other corporate distro) attractive and keep them accountable for anticonsumer practices, preventing enshittification. Only when the company starts actively harming their product, or trust is lost, will clones hurt sales.

If they want a proprietary OS, they can build it themselves. The value proposition has always been in the support and service ecosystem and infrastructure provided by the corporation. Only when the company starts actively harming their product, or trust is lost, will clones hurt Red Hat's business.

My university uses Rocky. If it didn't exist, they would probably just use debian. Because it does exist, hundreds of students will be exposed to and learn to use enterprise linux, and will likely contribute to its corporate user base at companies that require RHEL.

If they kill clones, they are killing the on-ramp and ecosystem that makes their paid offerings so dominant. Students will learn something else, developers would deprioritize rpm, making their paid products less attractive.

[-] [email protected] 83 points 9 months ago

No it's actually a 3 month overdue meme about them restricting the source code behind user agreements

235
RHEL 10 Leaked (lemmy.world)
submitted 9 months ago* (last edited 9 months ago) by [email protected] to c/[email protected]
14
submitted 9 months ago by [email protected] to c/[email protected]

I'm trying to connect a university ipad (air, usb 3 type c, not tb or lightning) to my laptop (Framework laptop, intel 12th gen) running Fedora workstation 39. On Windows, I used a nifty app called Duet Display. I just used a usb-c cable to plug the ipad into the laptop, launched the app on both devices, and windows would see an external monitor. Scaling and resolution worked fine, and latency wasn't perfect, but was more than enough for a secondary display. With settings tweaked, artifacting was minimal.

I know there are remote desktop protocols and apps, but I really want to avoid a wireless connection. Remote desktop over the internet is wasteful and unreliable, and as for local network, ,my university has some strict controls on its wifi network and I cannot reliably connect my devices. Even if I could, the reliability and latency are still bad.

Duet over usb always worked and didn't rely on a wireless connection, but it also is closed source and windows and mac only.

From what I can see online, the best way for an ipad to display content from another device is going to be a remote desktop protocol as it does not directly accept video signals like HDMI-in. The ipad can also connect to a network over usb c/ethernet.

It seems the best approach would be to create a local network on my PC and connect my ipad to it with the cable, and then use a remote desktop client on the ipad.

Is this a good approach? If so, how exactly would I make the usb connection share a local network connection?

Note I only want to connect the ipad to the laptop. I understand if the ipad will not connect to wifi while connected to ethernet, and I don't need to share the internet connection with the ipad. My computer still needs to be connected to wifi/ethernet to access my university network, however.

[-] [email protected] 16 points 11 months ago

Would that be better? If some Israeli Jew living in the US had been stabbed?

[-] [email protected] 10 points 1 year ago

Wonder how many workers in those towns lose their jobs to slave labor from prisons, blame it on immigrants, and vote for demagogues

4
submitted 1 year ago by [email protected] to c/[email protected]

Hello. I tried installing Lemmy.world as a PWA, but I got a really blurry icon. Is it possible to add a higher quality icon to the manifest? I decided to make my own from the official art in the meantime.

Note: This might just be a problem with the PWA for Firefox extension I used, since it is unofficial and can be janky.

[-] [email protected] 7 points 1 year ago

I miss some nicher subs, but I really appreciate it. It's a lot less janky than I expected, and it doesn't feel empty.

3
submitted 1 year ago by [email protected] to c/[email protected]

cross-posted from: https://lemmy.world/post/1100734

Hello, all. Does anybody have experience with the LibreCloud hosting service? It seems very attractive with reasonable pricing for a 1TB plan ($15/month) and United States servers close to my area, but I can find almost nothing about it, positive or negative online.

I really need to make sure my files are safe, and self-hosting isn't an option (at the moment) with my atrocious cable upload speed and data cap. Do any of you use it or could recommend an alternative? I am also looking into proprietary cloud storage, at least temporarily, like pcloud and icedrive.

0
submitted 1 year ago by [email protected] to c/[email protected]

cross-posted from: https://lemmy.world/post/1100734

Hello, all. Does anybody have experience with the LibreCloud hosting service? It seems very attractive with reasonable pricing for a 1TB plan ($15/month) and United States servers close to my area, but I can find almost nothing about it, positive or negative online.

I really need to make sure my files are safe, and self-hosting isn't an option (at the moment) with my atrocious cable upload speed and data cap. Do any of you use it or could recommend an alternative? I am also looking into proprietary cloud storage, at least temporarily, like pcloud and icedrive.

4
submitted 1 year ago by [email protected] to c/[email protected]

Hello, all. Does anybody have experience with the LibreCloud hosting service? It seems very attractive with reasonable pricing for a 1TB plan ($15/month) and United States servers close to my area, but I can find almost nothing about it, positive or negative online.

I really need to make sure my files are safe, and self-hosting isn't an option (at the moment) with my atrocious cable upload speed and data cap. Do any of you use it or could recommend an alternative? I am also looking into proprietary cloud storage, at least temporarily, like pcloud and icedrive.

view more: next ›

Adonnen

joined 1 year ago