[-] lancalot@discuss.online 11 points 12 hours ago

I wonder how long it will take before it will drop off the top 10.

[-] lancalot@discuss.online 2 points 12 hours ago* (last edited 12 hours ago)

I'm kinda familiar with that rabbit hole :P . Though, I didn't quite consider your 3rd and 4th methods. So kudos to you for that!

While writing up a draft, I actually stumbled upon an (unfinished) article that goes over this subject in way more depth than I could.

Though, the author doesn't mention NovaCustom that intends to combine Boot Guard, Heads and QubesOS certification on their devices.

[-] lancalot@discuss.online 2 points 19 hours ago* (last edited 19 hours ago)

Lovely collaboration! You just love to see it.

[-] lancalot@discuss.online 4 points 1 day ago

It was heralded as such a couple of years back. And while I'd argue it didn't manage to keep up the momentum since, this recent update has definitely reignited my enthusiasm towards the project.

Regardless, you should test out distros that interest you on a Live-USB. I'd recommend employing Ventoy to that effect as it allows you to simply stack multiple ISOs on the same USB. Furthermore, adding/removing ISOs is as easy as placing/removing it in/from the designated folder. In effect, it does a great job at streamlining the process.

As for which distro to use, consider making a dedicated post in one of the Linux communities with this inquiry. Consider mentioning stuff like:

  • activities on PC
  • what software you use
  • device specs

If you're not interested in creating a dedicated post, but would like a rundown/infodump instead, then consider requesting that in a reply to this comment.

[-] lancalot@discuss.online 6 points 1 day ago

I love both GNOME and automatic/dynamic tiling. So Regolith should have been a match made in heaven. However, unfortunately:

  • It's not found in the repositories of any major distro. You know it's messed up if it's not packaged as a nixpkg!
  • If you can look surpass that, it's still intended only on Debian/Ubuntu. While the AUR package exists (and even RebornOS -an Arch-derivative- offers it in their own repos), you're simply out of luck outside of that. So, as a Fedora enjoyer myself, this unfortunately applies to me as well.
[-] lancalot@discuss.online 7 points 1 day ago

Thanks for answering!

xubuntu

I've only started to use Linux after Snaps were introduced to Ubuntu. As the community has been pretty vocal in their disdain, I lost any inclinations to test out Ubuntu or any of its flavors from the get-go.

Though, I have used Zorin lite; which is Ubuntu LTS with Xfce by the Zorin OS team. Which is probably the closest I'll get to Xubuntu. From what I recall, it was pretty neat. I did use the terminal, but it was more out of convention. Therefore I don't really recognize myself in the following sentiment:

it still forces you to learn how to use it!

Would you mind elaborating?

[-] lancalot@discuss.online 18 points 1 day ago

Unsure if you're being serious or not. Or if this is just bait. So I apologize in case I just got whooshed.

There's a decent amount of distros that don't require you to ever operate a terminal. Updates either

  • happen automatically in the background
  • Or, you're prompted for an update and can choose to run it
  • Or, within settings or a dedicated app, you can press a button to initiate the process of updating

Furthermore, most distros that are recommended for beginners don't need regular updates anyways.

Updating isn't the only part that has been taken care of by this set of distros. Linux has become pretty smooth sailing overall.

Notable exceptions to the above are mostly tied to some janky/troublesome hardware setup. Or, if you'd like to run software that isn't easily accessible. In those cases, while a GUI-only solution may exist, it's simply a lot easier for all involved parties if a terminal solution is offered instead:

  • it works on most distros; irrespective of version, DE, base distro or whatsoever. So, the one providing a solution doesn't have to create over a dozen of distinct solutions to cover all bases
  • these methods tend to change a lot less frequently. Sometimes solutions are tied to DEs, and these may change how they organize stuff over time. So, terminal solutions have better longevity
  • instead of moving through dozens of menus/toolbars/buttons or whatsoever, you literally copy and paste a couple of commands and you're done. I would prefer the terminal any day

OP, you did get me curious, though. Which distro do you use?

[-] lancalot@discuss.online 2 points 2 days ago

It ain't perfect. But it's the best we got when it comes to a secure OS on x86.

The author is even quite explicit when they mentioned to use Fedora Silverblue for gaming.

[-] lancalot@discuss.online 2 points 2 days ago

I believe the author continues to make use of NixOS VMs withing Qubes OS.

[-] lancalot@discuss.online 2 points 2 days ago

Even if you're rightfully concerned, they become non-issues in the author's platform of choice: Qubes OS.

The reason (I think) they mentioned all of those explicitly Linux things, is because they've also stopped using OpenBSD VMs in Qubes OS.

[-] lancalot@discuss.online 4 points 2 days ago* (last edited 2 days ago)

Obligatory watch for those interested in buying a new laptop. TL;DW: the latest generation of CPUs is such an improvement over the last one, that it feels like you're seriously missing out if you don't buy one of 'm.

Assuming that Arm-powered Linux devices aren't 'ready' for your workloads, we're left with the latest by AMD and Intel.

However, it's noteworthy to mention that these aren't provided by traditionally Linux-first vendors like NovaCustom, System76, Star Labs or TUXEDO computers yet.

Heck, these are currently only found on laptops by ASUS, HP, Lenovo and MSI. And from within their offerings, none are sold with Linux OOTB yet. This isn't important for easy install (as I've yet to find one bundled with EndeavourOS anyways), but it is for proper Linux support so early into its lifecycle.

So, quite frankly, I'd suggest you to abstain from buying a device right now as it might lead to buyer's remorse. Instead, consider buying one at next year's Black Friday.


However, if you truly need one device right now, then I'd stick to one sold with an AMD Zen 4 processor. Furthermore, either ensure that the device is sold with Linux OOTB, or check out its ArchWiki entry to see how well-documented it is and buy accordingly.

For specific device recommendations, you seem to be particularly interested in making use of Black Friday deals, and thus I'd assume that price is an important factor. Unfortunately, most Linux-first vendors aren't particularly known for offering great buck for your money. This does make it easier to choose, though.

Taking all of the above into consideration, we actually arrive -perhaps unsurprisingly- at Lenovo's Thinkpad line of devices with AMD's Zen 4 processors.

[-] lancalot@discuss.online 48 points 4 days ago

So with the recent drama it looks like bcachefs isn’t going to stay in the kernel for too long.

That's way too doomsaying. Even after ReiserFS' developer was sentenced in 2006, it took till 2022 for it to be deprecated. And it has only recently been left out of of the kernel.

24
submitted 2 weeks ago by lancalot@discuss.online to c/privacy@lemmy.ml

Greetings fellow privacy enthusiasts!

I'm searching for a privacy-respecting media box that can run Android apps. The streaming device market features options like Shield TV, Chromecast and various Amlogic boxes. However, finding one that truly embraces FOSS principles while meeting essential needs has proven challenging.

Essential requirements:

  • Android app compatibility - specifically need to run certain apps
  • Strong privacy and security features
  • Reliable, long-term software support (I've grown weary of devices becoming obsolete within 2-3 years)
  • Budget-conscious: Aiming for under 150€, though I'm willing to invest appropriately for the right solution
  • Willing to invest significant time in initial setup, but afterwards it should "just work" with minimal maintenance
  • Timely and automatic security updates (ideally close to upstream releases)

My initial research suggests two potential approaches, though I'm not entirely certain about all implications:

  1. Mainstream devices (like Nvidia Shield) that can be degoogled through ADB commands
  2. Devices that are officially supported by LineageOS

While both paths seem promising, each raises certain concerns. For instance, degoogling might require ongoing maintenance, and running LineageOS could mean losing some device-specific functionality (as is the case with Shield).

The Raspberry Pi, with its open-source foundation and community-driven LineageOS development, seems interesting, though the lack of institutional backing raises some concerns about long-term reliability.

I'm still learning about the security implications of these choices. While I understand that phones running LineageOS don't match GrapheneOS's security standards, I'm uncertain how these considerations translate to a media box environment.

I'm open to exploring:

  • Custom firmware solutions
  • Alternative hardware platforms
  • Creative, FOSS-friendly approaches that preserve privacy while maintaining Android compatibility

Has anyone in the community successfully navigated these choices? Your experiences and insights would be invaluable, particularly regarding long-term viability and security considerations.

view more: next ›

lancalot

joined 3 weeks ago