trevor

joined 2 years ago
[–] trevor@lemmy.blahaj.zone 1 points 2 days ago* (last edited 2 days ago)

The same could be said about iOS and Android. We just gotta help people when we can.

[–] trevor@lemmy.blahaj.zone 1 points 2 days ago (2 children)

The same could be said about Windows. It's a bad idea for people to use Windows without installing it themselves because they are dependent on MS and the OEM that installed it for them.

Better that they'd be dependent on someone that cares about them than soulless corps that just want to exploit them.

[–] trevor@lemmy.blahaj.zone 1 points 1 week ago

Yeah. For every person out there that says "but muh dogshit software that hates me doesn't work on Linux!", they should just use macOS. It's compatible with a ton of proprietary and abusive software (Adobe, DAWs, etc.), and you at least get an OS that works.

I don't know how people can stand using Windows. I use a 50-50 split of macOS and Linux, and it's nice to not have to fight my computer to do even the most trivial of things.

[–] trevor@lemmy.blahaj.zone 3 points 1 week ago* (last edited 1 week ago)

My issue with snaps is also the power that Canonical has to fuck you over one day, because of the centralization that you mentioned, but also that their shitty fucking packaging format sucks ass and breaks everything but the most basic of apps. I've wasted hours trying to help people with their broken applications that were hijacked when they typed apt install whatever and "whatever" was actually a fucking broken snap package.

Flatpaks and AppImages actually do the fucking things they're supposed to. Snaps don't, and Canonical is pulling a Microsoft by hijacking your package manager.

Also, Snap sandboxing only works with AppArmor, so if you were hoping that all the breakage was worthwhile because you get sandboxing, you don't if you're on anything but a handful of distros 🙂

[–] trevor@lemmy.blahaj.zone 3 points 1 week ago

I've been a vegan for a long time, but I only learned in the past year or so what dairy fHarmers colloquially call their "breeding racks".

Now, when a carnist tries to tell me I'm being hysterical for simply being anti-exploitation, I just ask them to google what they call their own torture equipment. fHarmers are saying the quiet part out loud amongst themselves.

[–] trevor@lemmy.blahaj.zone 5 points 2 weeks ago (2 children)

Does anyone know if there's a more up-to-date blocklist? This is great, but it's 4-5 years old.

[–] trevor@lemmy.blahaj.zone 6 points 2 weeks ago

Friendly Interactive SHell

[–] trevor@lemmy.blahaj.zone 1 points 2 weeks ago

The new indirect GPU driver is AMAZING. I've previously suffered through getting GPU passthrough on one of my systems before, but I no longer need to because Linux flawlessly plays every game that I could ever want.

But I never liked that the VMs that I used for more general purpose stuff had choppy display performance. The indirect GPU driver sounds like it's as easy as installing the driver in the VM and you'll get much smoother graphical performance without the headache of configuring GPU pass through, which is awesome! I'd love to see that functionality baked in to stuff like Virt Manager and GNOME Boxes.

[–] trevor@lemmy.blahaj.zone 18 points 2 weeks ago

Fuck that. The Linux gate is wide open! Anyone that wants to use Linux, come on in!

And for your own sake: use anything but Ubuntu and their buggy Snaps.

[–] trevor@lemmy.blahaj.zone 2 points 3 weeks ago (1 children)

Sure, but that way of thinking seems to treat trying to avoid supporting bigots as some sort of "purity cult" game, and it's not. Just because there's no ethical consumption under capitalism, that doesn't excuse people to make highly unethical purchases.

Of course you can't perfectly avoid any bigoted shitheads from having worked on something you buy, but you wouldn't buy a game where the majority of the royalties go to David Duke, would you?

Some people are just doing the best they can to not support bigoted assholes, and when it comes to gaming, a market that exists purely for entertainment, and one that has millions of other options, that's rather easy and practical to do.

[–] trevor@lemmy.blahaj.zone 3 points 3 weeks ago

Thanks! That first link is an excellent resource for a security tool I'm working on. Specifically, gVisor, which I hadn't heard of, but looks like an excellent way to harden containers.

I may rebase to secureblue from Bluefin at some point to give it a try.

 

I am looking for something that can take a Dockerfile, like the following as an input:


FROM --platform=linux/amd64 debian:latest
ENV DEBIAN_FRONTEND=noninteractive

RUN apt update && apt install -y curl unzip libsecret-1-0 jq
COPY entrypoint.sh .
ENTRYPOINT [ "/entrypoint.sh" ]

And produce a a multi-stage Dockerfile where the last stage is built from scratch, with the dependencies for the script in the ENTRYPOINT (or CMD) copied over, like this:


FROM --platform=linux/amd64 debian:latest as builder
ENV DEBIAN_FRONTEND=noninteractive

RUN apt update && apt install -y curl unzip libsecret-1-0 jq

FROM --platform=linux/amd64 scratch as app
SHELL ["/bin/bash"]

# the binaries executed in entrypoint.sh
COPY --from=builder /bin/bash /bin/bash
COPY --from=builder /usr/bin/curl /usr/bin/curl
COPY --from=builder /usr/bin/jq /usr/bin/jq
COPY --from=builder /usr/bin/sleep /usr/bin/sleep

# shared libraries of the binaries
COPY --from=builder /lib/x86_64-linux-gnu/libjq.so.1 /lib/x86_64-linux-gnu/libjq.so.1
COPY --from=builder /lib/x86_64-linux-gnu/libcurl.so.4 /lib/x86_64-linux-gnu/libcurl.so.4
COPY --from=builder /lib/x86_64-linux-gnu/libz.so.1 /lib/x86_64-linux-gnu/libz.so.1
# ...a bunch of other shared libs...

# entrypoint
COPY entrypoint.sh /entrypoint.sh

ENTRYPOINT [ "/entrypoint.sh" ]

I've had pretty decent success creating images like this manually (using ldd to find the dependencies) based on this blog. To my knowledge, there's nothing out there that automates producing an image built from scratch, specifically. If something like this doesn't exist, I'm willing to build it myself.

view more: next ›