[-] poki@discuss.online 2 points 4 days ago

Consider deleting this one if you will ;) .

[-] poki@discuss.online 2 points 4 days ago

I think you're right. Thank you!

[-] poki@discuss.online 14 points 5 days ago* (last edited 5 days ago)

Btrfs snapshots + Snapper have been (somewhat) pioneered by openSUSE Tumbleweed. Yet, they see value in developing openSUSE Aeon (i.e. their attempt at an 'immutable' distro); otherwise they wouldn't be putting resources into it.

Hence, Btrfs snapshots is (at best) only able to fulfil some aspects we've come to expect from 'immutable' distros. But there's more to it than that.

One of the most simple (and, yet, perhaps most defining) feature that 'immutable' distros come with is atomic updates; i.e. updates either occur or not, there's no in-between messed up state caused by energy outage or whatsoever.

There's a lot more to it than that. To mention a few more:

  • reproducibility
  • declariative system management
  • (some) prevention of cruft accumulation, bit rot and configuration drift
  • better security related to read-only part of OS
  • a lot less undefined/hidden/unknown state

Not all 'immutable' distros possess these qualities. Nor are they aspired by all of them. Hence, lumping them up together is actually a blatant oversight that's been committed way too frequently.

Regardless, if you're interested, consider trying out Fedora Atomic^[1]^, NixOS or openSUSE Aeon for yourself and see what it's all about.


  1. Either through Fedora's own images or the ones provided by uBlue.
[-] poki@discuss.online 2 points 5 days ago

We'd rather like to see that anyways 😜.

[-] poki@discuss.online 4 points 5 days ago* (last edited 5 days ago)

OP, it seems as if the fear mongering and misinformation may have reached you through your cautious disposition.

I've gone through every single comment found below your post and at times I've been dumbfounded and/or astonished by the ludicrous claims that are spouted.

FFS, someone even expressed a problem found on imperative systems... While Fedora Atomic can be made (relatively) declarative (i.e. the exact opposite of imperative) for over a year now.

I will leave you with two videos in which the recent conference talks by the very same people that work on Fedora Atomic can be found. Consider watching these if you're interested to know what they're actually currently working on. If you pay attention, you will even notice how they mention common misconceptions that have also been brought up here...

First watch this one. Then, watch this.

The only fair criticism that I've found is the required investment and effort to adjust due to the associated paradigm shift and learning curve. However, this is peanuts compared to Guix System or NixOS.

[-] poki@discuss.online 86 points 5 days ago

Even if that's the case, it's telling of Linux' maturity.

[-] poki@discuss.online 2 points 5 days ago

Thank you, once again, for the reply!

I just know that it is even “hard” to replicate the configuration of snapper on a system like Void Linux.

Yeah lol 😅. It's definitely a blessing when it's setup by default. For example, while Fedora Atomic does come with a built-in rollback mechanism through rpm-ostree, Fedora does actually not. Hence, Fedora users are often interested to set it up themselves. And then, they find this gargantuan guide 😂.

But that might also stem from my lack of knowledge. At least the guides I found didn’t provide the same result.

To be honest, I wouldn't be surprised if openSUSE Tumbleweed's implementation is simply better. At least, it would make sense if that were the case. So, I will give you that 😉.

but I think it has the disadvantage of not having such an amazing documentation as other distros.

Fair. Fedora's documentation isn't that great either 😅. Though, in that regard, I'd argue only Arch and Gentoo have excellent documentation. Granted, I suppose that's a prerequisite if the distro claims to be unopinionated; which both of them do while Fedora and openSUSE don't.

If you stumble upon something and are looking for a fix online, you won’t find as much resources for it as there are for debian based distros for example.

I agree. But, for Debian (and Ubuntu), I feel their documentation isn't necessarily better. Instead, their user base is simply more substantial. Hence, there's a pretty good chance that someone has experienced the same issues before you did. And thus, it's easier to find resources on the internet to help with troubleshooting.

All in all, I have to thank you for this amazing exchange.

I feel the same. Thank you! And I would also like to thank you for being patient with me 😅. I have got the tendency to write very long answers and not everyone appreciates those 😅. I even noticed how you weren't particularly appreciative in this interaction. So, to be honest, I was very happy when you messaged me back earlier today. I really appreciate you for that!

I think this is one of the most friendly and informative exchanges I had on lemmy so far. :)

Thank you for being you! I am really grateful for these wholesome and sweet compliments!

Sometimes, I question if it's worth pursuing these conversations. But, thankfully, exchanges like these make it worthwhile. My fate in humanity has just been rekindled. From the bottom of my heart, thank you 😊!

[-] poki@discuss.online 2 points 5 days ago

Maybe I’m already running in XWayland somehow?

That's definitely possible. Within Firefox, what does about:support reveal on this matter?

[-] poki@discuss.online 2 points 5 days ago
[-] poki@discuss.online 2 points 5 days ago

But to your earlier one, I can get the VPN client working outside of a container. There’s even an RPM file from the vendor, so installing it is just as easy as installing any other package.

Aight. You know what you ought to do then 😉.

I appreciate the input!

It has been my pleasure!

[-] poki@discuss.online 2 points 5 days ago

But I’m fully aware that my frustrations are atomic problems

Are these frustrations solved by layering with rpm-ostree? If so, just go with it. I've always layered over a dozen or so packages and it has worked out fine; it's defaulted to automatic upgrades in the background, so you don't feel much of it anyways.

I just recently learned that openSUSE users also have a lot of stability due to btrfs snapshots, so maybe that’s really the feature I’m looking for. I don’t know much about it, honestly.

I love openSUSE and what they do with Btrfs snapshots and Snapper.

However, in terms of 'robustness' and 'stability', I don't think anything currently out there can hold up to Fedora Atomic, Guix System and NixOS. This is just by design; the leap from traditional to atomic, then reproducible and finally declarative ensures that issues related to hidden/unknown state, accumulation of cruft, bitrot, configuration drift are left behind in the past. If Btrfs snapshots + Snapper would have been sufficient, then openSUSE themselves would never have desired the creation of openSUSE MicroOS (i.e. their attempt at an 'immutable' distro) in the first place.

[-] poki@discuss.online 6 points 6 days ago* (last edited 6 days ago)

If I understand it correctly, layering an application is no more dangerous than a regular install on a non atomic os.

True~ish.

There's an important caveat though; for whatever reason, rpm-ostree can outright fail to upgrade (due to conflicts related to layered packages) while an issue like that is more rare on traditional Fedora and dnf. Thankfully, I've never had a problem that I couldn't solve with rpm-ostree reset run on a (previously) pinned deployment (through sudo ostree admin pin <insert number>). However, when used irresponsibly, this (i.e. layering) can outright destroy your otherwise very robust 'immutable' distro.

It's easier to teach people to be cautious than to teach how they should act accordingly. Hence, uBlue's documentation tends to be more conservative in order to protect (especially newer) users from shooting themselves in the foot.

37
submitted 2 weeks ago* (last edited 2 weeks ago) by poki@discuss.online to c/linux@lemmy.ml

(More) Specifics:

  • Undoing the protection should include filling in a password.
  • The password should be different from the one used with sudo or any other passwords that are used for acquiring elevated privileges.

All (possible) solutions and suggestions are welcome! Thanks in advance!

Edit: Perhaps additional specifications:

  • With 'displace‘, I mean anything involving that resembles the result of mv, cp (move, cut, copy) or whatsoever. The files should remain in their previously assigned locations/places and should not be able to 'pop up' anywhere.
  • I require for the files to be unreadable.
  • I don't care if it's modifiable or not.
  • I don't require this for my whole system! Only for a specific set of files.
view more: next ›

poki

joined 3 weeks ago