No Children - The Mountain Goats
But not in a "fuck you world, I'll do what I want" kinda way. More of a "I wanna watch it burn" kinda way.
- Fedora has a major update every 6 months, and every version is supported for 2 releases + 1 week (= ~1 year).
Updates have always been pretty painless for me. Most of my problems during updates have come from NVidia drivers (on a laptop), but a fix has always been available from the community. - Fedora has auto-update systemd services for both DNF and RPM-OSTree (more on this later). IIRC it's just enabling a service and maybe editing a config file, but this is easy to search for, so I won't tell you stuff I might not remember.
- SELinux mostly just works, and if it doesn't it's probably a bug (if something is a package for Fedora, SELinux should work OOTB. Browse Fedora Magazine for the quirks you need to know how to handle.
- I have no experience with ARC GPUs but Fedora might have better support as it tracks the latest kernel release = latest driver (depends on what was actually the issue, of course)
Concerning you RAID, just make sure the installer doesn't touch it and mount it afterwards. You might have to do some kind of "restore" to give the files the needed SELinux metadata. The Discourse forum would probably be a good place to ask.
Now, a bit about DNF vs RPM-OSTree. Fedora with DNF is the standard distro much like most other distros. Use this if the next part doesn't sound useful to you.
RPM-OSTree is used in a new family of distro that work a bit like git for your OS.
Your system runs off an "atomic" image. Atomic means unsplittable in Greek. Everything you change on your system is applied to your atomic image, like a file is added or removed from a git repo.
This is nice because upgrading to the next major version becomes a simple matter of rebasing you changes on top of the new version, and likewise, rolling back (in case of issues) becomes a single command and a reboot.
Fedora IoT is the "Server" edition of the Atomic desktops. Fedora CoreOS is a more "immutable" approach.
Feel free to ask more questions if something doesn't make sense.
Yes it is (sadly) very different for phones.
When an the OS for an Android phone is created, the Linux kernel is forked, and the firmware/drivers for it's hardware components are laid on top (instead of being upstreamed to the kernel). When the manufacturer decides they no longer care about that phone, they stop updating firmware and that will no longer receive updates. You might use a rom that still updates everything else, but these critical parts won't get updated anymore.
The newer Pixel generations get 5-7 years of security updates (IIRC). I believe IOS devices get 5 years.
Android and arm has (/had? I might be partly out of date) a lot of out of tree (not included in the upstream Linux kernel) code which makes booting it on Linux a shit show.
This is also why so few devices are supported by the Linux-phone-OSs.
Oh how sweet is the irony of the bigots in this thread, who thinks the tag is there to "free" from them from seeing gay people holding hands and kissing, when it's actually there because bigots have outlawed being gay some places.
By "heavily homosexual", do you mean pornographic? Because that's a separate tag.
Edit: typo.
Thanks for the recommendation, stranger. I'm gonna watch that!
My favorite movie is probably Brazil (1985). It's a dystopian movie, but the population is suppressed by absurd amounts a bureaucracy (also the state surveiling and killing it's people). You need to fill out a form to fill out a form, and every screen is tiny, but magnified by a lens to be small instead.
But what I really love about it is the the "terrorist" Archibald Tuttle (who, very much, is not the protagonist); a repair man, who risks execution by the state, zip lining around the city fixing things like the protagonist's air condition.
I think we should all strive to be more like Tuttle in our daily lives.
No problem!
I hacked this together instead of going to sleep, so it might make your deck explode, but maybe it's a starting point for you or someone else:
# home-deck-mounts.mount
#
# Mount units must be named after the destination path, this / replaced by -, like above
#
# This is a template unit.
# That's explained here: https://fedoramagazine.org/systemd-template-unit-files/
# TL;DR: run it like this `netmount@linuxisos.mount` if you want to mount the subdirectory "linuxisos" from SHARE_PATH
[Unit]
Description=NetMount %I
After=graphical.target
# This is commented out, because it is implicit for network mounts https://www.freedesktop.org/software/systemd/man/latest/systemd.mount.html#Default%20Dependencies
# I keep it here as an example
#After=network-online.target
#Requires=network-online.target
[Mount]
# %i expands to what ever you put after the @ when starting/activating the service
What=10.10.10.99:/mnt/user/%i
Where=/home/deck/mounts/%i
Type=nfs
Options=exec
[Install]
WantedBy=default.target
I couldn't confirm if mount units are allowed to be template units, but if not, just duplicate the service for each path and replace %i.
Say the word if you run into issues!
Don't put yourself down! Using systemd wouldn't make it work "better", it's just more "proper" (and a great tool to know in general!)
Great job and keep going!
This is really cool!
Where did you put the service file?
I don't mean this as critique, but as possible next project, since your solution works perfectly fine. Systemd has some cool features that could make this project have a bit fewer moving parts:
- a .mount file could replace the mount and unmount script, and handle logging too! (I am pretty sure you would need separate files per mount, though, so "fewer moving parts" might be a bit of a lie, depending on your interpretation)
- that "After=" setting you used, can also be used to check for network connectivity. IIRC it's "networking.target" on Fedora, at least. You might want to double check the systemd docs if After is the right one for this, as I have a hard remembering the systemd dependency intricacies.
That way you would end up with a .mount file per mounted directory, with logging using journald, and no external scripts.
I really like systemd as it can be a great tool, when you start to break down the complexity of it.
I hope you get well soon and get the best you can from this time.
Cockpit is great.
It's pretty simplistic. It gives you an overview of your system ressources and handles libvirt VMs and Docker (i think. I used it with Podman, but in this context both should work).
My impression was that the container and VM interfaces were pretty simple, and I wouldn't have liked it as my main interface for those services, but it would be perfect for getting an overview and restarting them!
Grounded danish plugs don't fit Schuko sockets, but Schuko plugs fit danish sockets (but aren't grounded).
This leads to a staggering amount of ungrounded devices in Denmark, as most are imported and making a variant for such a tiny country isn't profitable.
Fun fact: the danish power plug was created by Lauritz Knudsen, a Danish company who had a monopoly. They are the reason Denmark uses this plug as the only country in the world, and Schuko only became legal to install in houses quite recently, so 99% of houses still use their standard.
LK has since been bought out by Schneider Electric but we are still stuck with our special plug and most imported devices are still ungrounded.
Thanks for listening to my Ted Talk.
I run the built-in automatic rpm-ostree upgrade service every 6 hours.
If you think that's too inefficient, maybe read the docs for shutdown.target and see if you can use that to run an upgrade service before shutdown?
I'm not too experienced with that part of systemd but it seems like it could be a "proper" way to run things on shutdown?
Use a passphrase (not a password) and a physical security key, like a yubikey. It also supports TOTP or whatever 2fa Proton uses, you just connect it with a laptop or phone and it gives you a key.
A physical key is much more secure than 2fa from a password manager (although both are probably fine)
Nextcloud doesn't verify your email and has tons of other nice features as well. ProtonDrive (/ProtonMail as another user suggested) probably doesn't or you could use your Proton address for that.
You mention allowing weak passwords are a plus. Please use a weak password, especially without email as 2nd factor.
Have you considered using mnemonics for your passphrase?
Generate a number (i would use around 5) of random words (EFF has a wordlist, humans are really bad at randomness) and link them together using silly images. For example:
- sparrow
- window
- automobile
First, you link sparrow to window: imagine a sparrow trying to break through a window, not just flying into it by accident, no, this sparrow is mad and is set to destroy it.
Second, you link window to automobile: imagine an automobile with huge windows. The car is completely normal sized except every window is at least 3 meters tall. It looks absolutely ridiculous and you feel embrassed that youvhave to drive it everywhere.
Repeat this proces for the rest of the words. It helps remembering them if the image makes you feel something, like making you chuckle or feel angry that you have to deal with this stupid contraption (only in your mind, hopefully)
Also, make sure each "link" is distinct. Eg. Don't make the second link an automobile driving into a window when the sparrow does the same. It will mess up the order and make you jump around between similar mental images.
I only tried running rootless when i set them up several years ago and i was completely green, so it was probably me who was the problem.
Regarding podman-compose, Fedora repos has a a package that aliases podman -> docker and the regular docker-compose package, which i used before migrating to podman+systemd. It worked flawlessly unless i did networking shenanigans because Podman and Docker differs (/differed?) in so some thing simply couldn't be brought over.
Edit: i found the docker-compose and Podman alias thingies in a Fedora Magazine post.
However, unless you use docker-compose a lot for other stuff, learning to use Podmans systemd integration (also called quadlet) is very much worth it. They're just a really powerful combo and systemd has a ton of nice features for making stuff run and keep running.
Podman is CLI and API compatible with Docker (except where differences in implementation doesn't allow it)
Running Podman as root is 99.9% the same as running Docker.
I have been running my homelab with Podman for several years and it is absolutely mature enough for a regular user.
Also, the docs are really good.
Oh, i did not know. Thanks!
"Katte-" as a prefix means relating to a cat. Eg. "Kattepoter" = "cats paws"
Gat means the cloaca on a fish or a bird (cloaca is the all-in-one hole on fish, birds, etc.)
I realize this is probably a very wrong interpretation, but in that case, i don't want to be right.
No problem! I'm glad you got it working!
I would just pull the first filament away from the bed and the rest usually follows along and you get a little birds nest.
Vladimir Putin’s unexpected address to the Russian military and state security apparatus cued a new round of myth-making around the failed insurrection, which was led, and then abandoned, last weekend by Wagner Group founder Yevgeny Prigozhin. Speaking in front of the Kremlin’s iconic Palace of Face...
Vladimir Putin’s unexpected address to the Russian military and state security apparatus cued a new round of myth-making around the failed insurrection, which was led, and then abandoned, last weekend by Wagner Group founder Yevgeny Prigozhin. Speaking in front of the Kremlin’s iconic Palace of Face...
The ‘Titan’ tragedy highlights the burgeoning trend of cavalier high-net-worth individuals exploring some of the most inhospitable places on Earth.
The Titan tragedy highlights the burgeoning trend of cavalier high-net-worth individuals exploring some of the most inhospitable places on Earth.
It was less than an hour off the coast of Greenland that Jules Mountain began to question his sanity. The British entrepreneur was completing the second leg of his eight-day attempt to become the first person to fly a Bell 505 light helicopter across the Atlantic. “I had to go over freezing fog at 14,500 feet or ice would build up on the vehicle’s blades,” he says. “It was -14 degrees Celsius and the high altitude meant I was gasping for air. And then I worked out I had 30 minutes’ worth of fuel remaining.”
Mountain was flying the helicopter from Montreal to Guernsey: a nearly 4,000-mile journey that included fuel stops in the frozen wastelands of Northern Canada, Greenland, and Iceland. He says he took on the challenge when he realized the helicopter’s range was 350 miles and that it could fly only three hours at a time. It meant his longest leg required pumping fuel mid-flight.
“My previous goal was to trek to the North Pole, but it felt too easy,” says Mountain. “It didn’t feel dangerous enough: You could get rescued at any moment. Whereas with this challenge, flying over icebergs and forests far from civilization, an engine failure might mean death. And that’s when the adrenaline rush hits—it’s when you feel most alive.”
'The Points Guy' Brian Kelly Answers Travel Questions From Twitter
Mountain, who has also summited Everest, is one of many businesspeople taking on extreme adventures around the world. British billionaire Hamish Harding and Pakistani British executive Shahzada Dawood were among the passengers aboard the Titan submersible that disappeared in the North Atlantic Ocean on June 18. Operated by OceanGate, a US company that builds and launches manned submersibles, Titan was part of a tourist expedition to observe the wreckage of the Titanic at a depth of about 12,500 feet.
On June 22, remains from Titan were located by a remote-controlled underwater search vehicle about 500 meters from the wreckage of the Titanic, roughly 370 miles off the coast of Newfoundland. The US Coast Guard believes all five passengers died following a catastrophic implosion.
The extreme tourism industry is niche, but growing. A swelling number of companies have emerged to facilitate dangerous adventures for the super-rich. OceanGate began offering trips aboard Titan to the site of the Titanic wreckage in 2021; seats on the latest, ill-fated trip cost $250,000 per person. However, safety concerns were raised as early as 2018, during Titan’s quality-control stage, including questions about the 6.7-meter vessel’s experimental carbon-fiber hull structure (typically, deep-diving subs have hulls made from metal) and lack of industry certification. Past passengers have also shared details of problems with communication, navigation, and buoyancy during their 12-hour round trip to the Titanic.
With such extreme adventures, the work of operators is naturally risky. Seattle-based mountaineer Garret Madison offers bespoke expeditions to unnamed, unclimbed Himalayan peaks through his company, Madison Mountaineering. He explains that the average Everest death rate is 1 percent—a higher figure than for US service members in recent conflicts. “It’s the exhilaration of being on the mountain and coming face-to-face with danger that’s so attractive.”
Since the pandemic, Madison has noticed an uptick in high-net-worth individuals booking out entire expeditions. “One client bought a whole trip to climb Mount Vinson in Antarctica for $200,000 last year,” he says. “It’s the latest trend: billionaires wanting their own private adventure with friends; they fly to Antarctica in a private jet. It’s next-level.”
Although his mountain expeditions are high-end, Madison says they come with minimum comfort. The greatest luxury he offers, he adds, is at Everest base camp: Warm showers, yoga sessions, and a dining tent with a movie screen are among the amenities on the $75,000 excursion. “The guys that come on my adventures ultimately want to suffer a little bit—that’s how they feel alive. Otherwise, they’d be staying at a Four Seasons five-star resort somewhere.”
However, a cottage industry of luxury extreme tourism also exists. White Desert Antarctica offers premium accommodation near the South Pole for $15,000 a night, replete with heated, opulently furnished pods and private chefs. Harding had also done that trip. “Hamish has been a true friend to White Desert for many years,” founder Patrick Woodhead said in a statement. “He has traveled with us to Antarctica a number of times, including with astronaut Buzz Aldrin when he visited.”
With these extreme tourism companies, safety generally comes with a high price tag. Madison says his service offers networks of expert guides and logistical know-how, as well as Western and Sherpa teams that coach, assist, and lead adventurers 8,000 meters above sea level. Extra oxygen, good food, and enhanced communications are also provided. “But you can do Everest cheaply and climb with your own tent and without a guide,” says Mountain. “There are plenty of operators that offer a rudimentary service—and that’s when it can get really dangerous. You’re left on your own.”
OceanGate appears to have had its feet in both camps. As the sole tourist operator providing trips to see the Titanic—and Titan one of only a handful of manned submersibles capable of reaching 12,500-foot depths—tickets weren’t cheap. At the same time, conditions inside the sub were far from luxurious, and the dive carried considerable risks. OceanGate’s waiver not only mentions death three times on page one, Titan was bolted from the outside—leaving those inside to survive on a finite amount of oxygen and rely on external support to get out of the sub, even after surfacing. The vessel was also controlled by a modified video game controller. “No one going on board would have been under any illusions that it was safe,” says Mountain. “That’s part of the appeal: The wreck is incredibly inaccessible, dangerous to visit, and steeped in mythology. And very few people have done it.”
Grace Lordan, associate professor in behavioral science at the London School of Economics, says these dangerous expeditions have superseded luxury items for thrill-seeking entrepreneurs. “Pleasure and purpose tend to determine happiness, and it used to be about material purchases and philanthropy. Over time, redistributing wealth still provides purpose, but pleasure is harder to attain.”
Ego is also a factor, says Lordan. “Luxury products are more available to the masses now. And we all want better dinner party anecdotes. So entrepreneurs, who tend to have a higher tolerance for risk, are increasingly desiring experiences that very few others have done.” They’ve already achieved the extraordinary feat of establishing major companies, Lordan explains, so now they want to push themselves in their personal lives.
These throwback explorations—climbing a mountain or crossing the ocean—are also a way for billionaires, many of whom have accumulated their wealth through digital transactions, to experience their physical limits in the face of mortal danger.
“The demographic is mostly men in their fifties and sixties, looking to feel alive,” says Madison. “They want to traverse the Khumbu Icefall or the northern ridge of Everest’s death zone, rather than just sitting behind a desk and watching their net worth accumulate on a screen. The closer you perceive death, the more alive you feel.”
Mountain completed his transatlantic helicopter flight in July 2020. It was a self-organized trip, during the height of the pandemic, arranged through the Canadian, Danish, and Icelandic authorities. As a pilot, he was exempt from Covid-19 restrictions. “It was a bonkers idea, but being an entrepreneur means being very driven: You want to push boundaries and prove you’re in a different capacity to others. And it was such a rush—when I reached Scotland I knew it was the home straight, I was celebrating.”
The Titan tragedy underlines the reality that, by their nature, these kinds of extreme adventures mean dicing with death. But therein lies the appeal. “These challenges will always come with risk,” says Mountain. “Otherwise, everyone would be doing them.”
