Solar Bear

  • 0 Posts
  • 19 Comments
Joined 2 years ago
cake
Cake day: June 27th, 2023

help-circle

  • The counter to low-quality “Ubuntu sux” posts is not low quality “nuh uh it’s actually super epic!!!” posts, but that’s all we ever get. I’ve seen this pattern for probably fifteen years now, and it’s exhausting. If you don’t care about the criticisms and want to keep using it, then keep using it. More power to you. I probably use things you think are garbage. Hell, Windows users think we both use garbage. I’m just tired of people desperate to justify their choices like they need to “prove” something to everyone who disagrees.

    There are plenty of high quality takedowns of Ubuntu, but so rarely are there high quality defenses of it, generally because the criticisms are correct. Nobody ever talks about what makes Ubuntu good, not even Ubuntu users. Arch users will yap your ear off about ArchWiki and AUR. I’ll evangelize Nix to anybody who will listen as the future of advanced Linux management. OpenSUSE Tumbleweed fans will not shut up about rollbacks and bleeding edge software. Fedora users… well, Fedora users are usually busy out there actually doing productive things with their time instead of pointless internet squabbles.

    But what is Ubuntu strong at? I genuinely have no idea. All I ever see Ubuntu users say is that it “sucks the least”, in some vague indescribable way. That it’s not as bad as everyone says, that Snaps are actually fine, etc. Always on the defensive. If Ubuntu is actually good, somebody needs to get out there and make a case for what it’s good at, besides being featured as the default instructions for running proprietary third-party software.


  • Solar Bear@slrpnk.nettolinuxmemes@lemmy.worldI see the Reddit hivemind has arrived
    link
    fedilink
    English
    arrow-up
    19
    arrow-down
    2
    ·
    edit-2
    16 days ago

    I don’t know why we’re still doing snap discourse in 2025. I’m going to be harsh and direct.

    It has a proprietary server backend. This is objectively true. Theoretically you can build an open source backend, but nobody has completed a full implementation of it.

    If you don’t care about that, you can use Ubuntu, nobody is stopping you. You don’t need other people’s approval. Which is good, because of the people who disapprove, you’re never going to get their approval until it’s actually open sourced. You’re not going to convince anybody here to stop caring that it’s proprietary. So just get over it and use your own operating system without airing your insecurities online about it.


  • Solar Bear@slrpnk.nettoSelfhosted@lemmy.worldHelp me harden my home server
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    1
    ·
    3 months ago

    Something you might want to look into is using mTLS, or client certificate authentication, on any external facing services that aren’t intended for anybody but yourself or close friends/family. Basically, it means nobody can even connect to your server without having a certificate that was pre-generated by you. On the server end, you just create the certificate, and on the client end, you install it to the device and select it when asked.

    The viability of this depends on what applications you use, as support for it must be implemented by its developers. For anything only accessed via web browser, it’s perfect. All web browsers (except Firefox on mobile…) can handle mTLS certs. Lots of Android apps also support it. I use it for Nextcloud on Android (so Files, Tasks, Notes, Photos, RSS, and DAVx5 apps all work) and support works across the board there. It also works for Home Assistant and Gotify apps. It looks like Immich does indeed support it too. In my configuration, I only require it on external connections by having 443 on the router be forwarded to 444 on the server, so I can apply different settings easily without having to do any filtering.

    As far as security and privacy goes, mTLS is virtually impenetrable so long as you protect the certificate and configure the proxy correctly, and similar in concept to using Wireguard. Nearly everything I publicly expose is protected via mTLS, with very rare exceptions like Navidrome due to lack of support in subsonic clients, and a couple other things that I actually want to be universally reachable.





  • Whatever you get for your NAS, make sure it’s CMR and not SMR. SMR drives do not perform well in NAS arrays.

    I just want to follow this up and stress how important it is. This isn’t “oh, it kinda sucks but you can tolerate it” territory. It’s actually unusable after a certain point. I inherited a Synology NAS at my current job which is used for backup storage, and my job was to figure out why it wasn’t working anymore. After investigation, I found out the guy before me populated it with cheapo SMR drives, and after a certain point they just become literally unusable due to the ripple effect of rewrites inherent to shingled drives. I tried to format the array of five 6TB drives and start fresh, and it told me it would take 30 days to run whatever “optimization” process it performs after a format. After leaving it running for several days, I realized it wasn’t joking. During this period, I was getting around 1MB/s throughput to the system.

    Do not buy SMR drives for any parity RAID usage, ever. It is fundamentally incompatible with how parity RAID (RAID5/6, ZFS RAID-Z, etc) writes across multiple disks. SMR should only be used for write-once situations, and ideally only for cold storage.



  • I’ve switched to Kagi recently and honestly it’s better than Google ever was. You can assign weights to sites to see more or less of them in your results, it automatically cuts the listicle crap out, it has various built in filters for specific things like forums or scientific studies.

    Downside: it’s $10/mo. But I’m at the “I’d rather pay with money than data” stage of my life. Especially if it actually makes the experience fucking usable again.






  • It’s not an opinion that proprietary for-profit software will betray you, it is an inevitability. It has happened every single time. If it was FOSS, we could salvage it. It’s proprietary, so we can’t. When it fails it must simply be abandoned. I just hope you learn the right lesson when this happens.


  • I’d argue it’s pretty stupid to use FOSS but then depend on a proprietary server that only one for-profit company is allowed to run to deliver all that software, trusting them to just never do wrong or leave you high and dry. I’d also argue it fits the analogy perfectly, because the analogy was about saying “I haven’t had a problem yet” in response to being shown the potential problems of the action.




  • Anarchism is less a system of functions to be implemented, and more of a governing philosophy on how we build other systems. That philosophy focuses heavily on the expansion of democracy and the elimination of hierarchy wherever possible in order to create the most total freedom in the system. It is not inherently opposed to the concepts of governance or laws as many believe. It usually means focusing on smaller governing units, preferring local governance wherever possible, to give people the most direct control over their own lives. Self-sufficient communities are a major goal here.

    The meaning of freedom to an anarchist is wholistic; not just freedom to, but also freedom from. Freedom to pursue your life on your terms, freedom from any obligation or inhibition that would prevent or detract from that goal. This includes, for example, unconditional freedom for all people from starvation, homelessness, or the inability to access medical care. It is an intentionally utopian ideal, that we should strive for something that may not even be possible, because that is how we’ll create the best possible world.

    Once upon a time, anarchism was effectively synonymous with libertarianism. That word was bastardized in America to the point that it is unrecognizable now.