Totally.

Port knocking is one of those “of course someone did that” things to me too. A replay attack is enough to make it security theater.

An IP allowlist is a more useful addon.

We can go harder: port knock to open the port to a cert-only VPN (on top of all that)

https://wiki.archlinux.org/title/Port_knocking

887 thousands.

So, less than the Bronx (1.4M), but more than Staten Island (450k).

About the same as Indianapolis, IN, USA or Donetsk, Ukraine.

So, 1 medium city’s worth.

I would ask for a healthy margin above 100%, especially if you’re bringing an older PSU. There are a ton of variables for determining what is needed, but if your TDP on those 2 items is pushing 400W, we should be aiming for 500+ with an 80 Plus certification.

This definitely plays like a failing PSU to me as I experienced similar issues when mine started dropping on one of the 12V rails with similar hardware (fx8350, r9 290) several years ago.

Agreed! That would be a huge QoL improvement (and work just like the podman command does). Now I’m thinking about other commands that force this silliness, like pip.

The spec for quadlets has a few dedicated homes for the .pod, .container, etc. files. You can absolutely mount directories or files wherever (%h is $HOME for systemd unit files). See the Volume description for Container unit files: https://docs.podman.io/en/latest/markdown/podman-systemd.unit.5.html#volume

I’m now running quadlets on Garuda (my gaming/devbox), and Fedora. The impetus for this was needing to host service in an unprivileged way at work on RHEL9, so I got paid to do some learning with my own services.

My laptop is running Bazzite, but no services there. I’ll move the server to silverblue or another image based distro when I finish extracting the rest of my misadventures to containers.

I’m definitely interested in your experience and why you came to those conclusions because I’m not sure I can agree on the primary points.

But I have to give you the note. Root is also user space (if privileged). I’ve barely ever done anything actually in kernel space, so I guess it’s easy for me to screw that up.

I used podlet on my compose file. I was a little disappointed in the limitations, as a lot of things like variable interpolation isn’t available.

That said, the output made me wonder why I’ve waited! It was so much simpler than I imagined. It also helped demystify unit files a bit more.

I didn’t use that! I had a docker-compose file and used podlet to translate (which took a little massaging due to it not supporting interpolations).

/usr/libexec/podman/quadlet --user --dryrun was quite helpful though!

Reinventing the analog answering machine for the digital age.

I suspect there’s a few of us that remember letting calls go to the answering machine only to listen in and pick up if it was someone we actually wanted to talk to.

I’d love to think so too, but I think our echo chamber is pretty tight.

I certainly think they’re ready for mainstream usage (I have one Bazzite install myself), but I don’t think there’s significant awareness beyond the dedicated fan base.

There aren’t really any actually useful metrics that I know of, but the only one of the 3 I’ve mentioned that broke into distrowatch’s top 100 is Bazzite, and that’s only in the last few months.

And for legal threats: I doubt any court in any country will give credence to that. Fedora is MIT licensed.

That’s certainly part of the motivation (see the 4th paragraph).

Yes, image based. No, not Bazzite specifically, but silverblue (and kinoite) under the fedora banner directly.

But that’s not really the point of the article. In order for those to go mainstream, flatpak and especially flathub have a lot of maturing to do first, and the author lays out a pretty good roadmap with thorough explanations.

Looking at the very short script that powers the site, adding additional search engines is trivial (though at some point will make refactoring obligatory).

If you read the article or regulation, you’ll note that there are some ways to get around this by dividing the battery into cells.

Also, that is a fucking hilarious “phone.”

Effectively. Transportation safety with exemptions made for batteries under 20Wh.

It’s Nvidia that that jumps out in your question.

They are /were notorious for lackluster support on Linux and sleep/wake issues are /were significant.

IIRC you still need to configure a few bits to get it to work properly (maybe just a systems service enable?).

… And it looks like it’s still a constant issue.

Thread with various fixes and tweaks: https://gist.github.com/bmcbm/375f14eaa17f88756b4bdbbebbcfd029

Anti-clickbait title: the US federal regulation limiting cell phone battery capacity.

If you want to skip the click through: 20Wh maximum

https://www.ecfr.gov/current/title-49/subtitle-B/chapter-I/subchapter-C/part-173/subpart-E/section-173.185

My wife has an anaphylactic allergy to whey. I guess we’ll now be waiting for the day she has a reaction to “vegan” milk.

I think you’d be fine with Bazzite. I have it on my laptop and do more general dev and media things than gaming. I don’t boot to game mode (you can make this selection on iso download). It’s a typical KDE experience that encourages flatpack for apps instead of the traditional package manager.