thayer

joined 2 years ago
[–] thayer@lemmy.ca 1 points 9 months ago* (last edited 9 months ago)

You've clearly done your homework, and you've gotten a lot of good feedback already, so I'll just add a few points...

  • Storage options: Personally, I'd replace the existing drive with the highest capacity I could afford. In an ideal situation, I'd keep the host on another drive (NVMe or flash) and dedicate the large drive to a single partition of data storage.

    In my own mini-PC (8th gen NUC), I've got a smaller NVMe for Proxmox and a single 8TB internal SSD for data.

  • Encryption: If you're going to bother with encryption, I wouldn't half-ass it. Why bother at all if you're fine using auto-decryption or a weak password that will be guessed with any sizeable effort? Just lock it down with a strong password and decrypt/mount the data drive after any reboot; making a shell alias or script for this is trivial. You're likely not rebooting the server more than once a week anyway.

  • Budget/Specs: I get the sense you don't have much budget right now, but knowing your hardware would help in suggesting solutions. Do you have an NVMe slot? What is the make/model of the motherboard and case?

  • Filesystem: For simple storage, this really doesn't matter and Ext4 will probably be fine. It's a mature, robust, no-frills filesystem which is perfect for bulk file storage (docs, music, videos, etc.), but Btrfs would be fine too if you want more options.

  • USB Docking Stations: I've had really good experiences with USB docking stations like this one, and I currently use it for attaching my backup HDDs each month. I wouldn't want to rely on them for realtime data access, but they do work wonderfully for backups and one-off drive access.

[–] thayer@lemmy.ca 3 points 9 months ago* (last edited 9 months ago)

Amazon typically has a few vendors that specialize in refurbished Optiplexes and/or HP Elites in small or ultra small form factor sizes.

A word of caution about these refurbs though...the memory and storage they include are often dollar store brands (Kingfast) that I wouldn't even trust for a child's PC. It's worth purchasing your own after the fact.

[–] thayer@lemmy.ca 6 points 9 months ago* (last edited 9 months ago) (1 children)

Your options will depend on many things...

  • How much storage is needed?
  • Is RAID important to you?
  • Is power usage a concern?
  • Noise level?

I don't know how demanding photoprism is, but you could probably do fine with a refurbished i5/i7 Dell Optiplex or similar, with one or more SSDs added to it. If money is really tight and storage needs are high, you could go with mechanical drives instead.

The problem with enterprise servers is that are generally very loud and use a lot of power...not unlike adding a second refrigerator to your environment. In my opinion, they're not worth it unless you have a specific use case (training for a career, etc.).

[–] thayer@lemmy.ca 1 points 9 months ago

The dropbear method is more secure overall, and I plan to incorporate it as well when I find the time to wipe/reinstall my server, but it's arguably not as easy or simple, which is what OP requested.

[–] thayer@lemmy.ca 6 points 9 months ago (2 children)

As mentioned elsewhere, the easiest method is to encrypt only the data drives. This way you can secure shell into the server upon restart and decrypt the data. I've been using this method for years now without issue.

[–] thayer@lemmy.ca 6 points 9 months ago* (last edited 9 months ago) (2 children)

You'll need to provide specifics if you want solutions to many of these issues.

  • What exactly isn't working with your Yubikey?
  • Which bank apps? Did you check the compatibility list maintained by GOS?
  • Which apps aren't working without Google Play?

For the keyboard, there are several FOSS keyboards which support spacebar navigation, but you can also install Gboard and simply disallow any permissions, including network access.

Regarding Signal, this would be a reality for anyone with a non-Apple device. You may need to find a compromise and simply use SMS, RCS, or even just email when dealing with certain people.

There will always be one-off features available only on other devices or platforms. Only you can decide whether they are worth the cost of security and privacy.

[–] thayer@lemmy.ca 5 points 9 months ago (2 children)

If you're now getting I/O errors that won't even get you booted, it sounds to me like drive failure is imminent.

[–] thayer@lemmy.ca 3 points 9 months ago* (last edited 9 months ago)

For what it's worth, I've never had to change my io scheduler in the nearly twenty years I've used Linux. You can check your current scheduler with the following command: cat /sys/block/sda/queue/scheduler (change the block device to whatever yours is...sda, nvme0n1, etc.).

In my case, it was already bfq: one mq-deadline kyber [bfq]

[–] thayer@lemmy.ca 12 points 9 months ago* (last edited 9 months ago)

Distrobox will resolve your issue with VSCode and then some. Run archlinux, debian or whatever you want as a container. Then, install VSCode/VSCodium (and any other apps that Chimera lacks) inside the container OS. This will keep your development environment containerized and safely away from your host OS.

[–] thayer@lemmy.ca 3 points 9 months ago

Thank you, sebastinas and gang!

[–] thayer@lemmy.ca 13 points 9 months ago* (last edited 9 months ago) (4 children)

It definitely sounds like a hardware issue since it has survived multiple disk wipes and distro changes.

  1. Make and verify your backups now if you don't already have them
  2. Are you using the command line package manager or GUI?
  3. What is your current distro?
  4. Are you near capacity on your storage?
  5. Run a S.M.A.R.T. test and review the results
[–] thayer@lemmy.ca 11 points 9 months ago

I've been very happy with both Silverblue and Kinoite. I've installed it to all of my workstations now and can't imagine ever going back to a traditional distro.

Your comments suggest that you're already aware of distros like Silverblue so, if I may ask, how are these different than what you're looking for? Silverblue comes with several flatpaks installed, but you can easily remove these and you'll be left with a pretty barebones ostree image.

-11
submitted 2 years ago* (last edited 2 years ago) by thayer@lemmy.ca to c/jerboa@lemmy.ml
 

If Jerboa is the official mobile app for Lemmy, why not simply call it Lemmy, or Lemmy Mobile, or Lemmy for Android? It seems more practical to make use of the official platform name, branding and trademark.

Edit: Thanks everyone for the correction, I was under the impression that Jerboa was the official app because it's made by one of the two core Lemmy devs.

 

I'm hoping to start a dialogue about the current use of descriptive community names, usernames, lack of semantic URLs, and other usability issues on the Lemmy platform. I say dialogue because I am new to Lemmy and I can appreciate that some things may be done differently here for specific reasons.

This is not my sandbox but I'd like to see a castle here someday nonetheless, and I'm willing to help make that happen if there's an appetite to see these core issues addressed:

1. Community display names

Community display names should not be used in any meaningful way on the platform. They should not be displayed in the feeds, nor in community search results. Personally, I don't think they should be used anywhere except as a byline on the community's feed.

These descriptive names are not unique and it is trivial for anyone to create a community and change its display name to match that of another on the same instance. This clone will appear right alongside the legitimate community in search results, page feeds, and even moderator lists (such as those viewed on profile pages).

Many community display names are so long that they are truncated when viewed in mobile apps, adding to the ambiguity.

It is also impossible to know the actual community name until a link is hovered over (impossible on mobile) or actually visited (potentially dangerous).

2. User display names

Similar to community names, these descriptive names should not be used in any meaningful way on the platform. There is nothing to stop me from changing my display name to that of a site admin, moderator, or user, and then creating posts under the guise of that person. Again, there is no way of knowing the actual username without hovering over the link (impossible on mobile), or visiting the user's profile directly.

Another side effect of showing display names in the feed is that some usernames appear as single emoji or with emojis in their name, which is distracting at best and annoying at worst.

In my opinion, display names should be restricted to a user's profile page, similar to how GitHub implements usernames and full names. Post feeds, search results, and any other meaningful place should display the unique username only.

3. Semantic (clean) URLs

A GitHub issue discussing cleaner URLs has been open since July 2020, which leads me to believe this isn't a priority. I won't list the many reasons why user-friendly, SEO-friendly post slugs are important today, as Wikipedia already has it covered (and with a clean URL). The merits of clean URLs have been written about extensively for more than a decade. The bottom line is that this:

https://lemmy.ml/lemmy_support/72hsHD/qol_usability_concerns

...or even this:

https://lemmy.ml/lemmy_support/1043897

...reveals a lot more about a link before I click it than this:

https://lemmy.ml/post/1043897

It helps to understand the link destination before you click it, and this is an issue that will only get messier if left unaddressed for too long.

4. Sanitized post titles

Last week, I noticed that users are able to include markdown in their post titles, allowing for `code` syntax highlighting in the title itself. This is a bad practice, prone to abuse in the long run as some users will increasingly try to draw attention to their posts.

5. Link posts don't link to the link

I fully appreciate that Lemmy isn't trying to be a Reddit clone but as a link aggregator platform, I'm surprised that link posts do not actually link to the submitted hyperlink. This contradicts not only Reddit, but other link aggregator services, including Hacker News and Lobsters. Currently, the user has to know to click the thumbnail instead of the post title, or enter into the post and then click the title a second time to visit the submitted link. This is just not intuitive.

33
submitted 2 years ago* (last edited 2 years ago) by thayer@lemmy.ca to c/main@lemmy.ca
 

Update: @smorks@lemmy.ca has been kind enough to add Rediggit as a native theme to the lemmy.ca instance. You can now access it from your account settings page, without the need of another browser add-on.

Just posting an update on my Rediggit theme, in case anyone else prefers a reddit/digg-style interface for the desktop.

Highlights include:

  • Flexible full-width layout, with fixed width for vote buttons and thumbnail columns
  • Strong focus on content and discussion (improved comment legibility)
  • Decreased font size throughout
  • Increased post list density
  • No user or community circle-icons
  • No community banners or logos
  • Few rounded buttons or boxes
  • Re-sizable comment box
view more: ‹ prev next ›