shadowintheday2

joined 1 year ago
MODERATOR OF
[–] shadowintheday2 1 points 8 months ago

It seems that a namespace only has access to process that originates inside itself

systemctl --user list-units 
Failed to connect to bus: No medium found             

as we can see, the same user doesn't have access to other processes so we would need to duplicate every process above the namespace until we could acess the media

would duplicate of everything - pulsewire, dbus, etc - even work ?

[–] shadowintheday2 8 points 8 months ago

you install program A, it needs and installs libpotato then later you install program B that depends on libfries, and libfries depends on libpotato, however since you already have libpotato installed, only program B and libfries are installed The intelligence behind this is called a package manager

In windows when you install something, it usually installs itself as a standalone thing and complains/reaks when dependencies are not met - e.g having to install Visual C++ 2005-202x for games, JRE for java programs etc

instead of making you install everything that you need to run something complex, the package manager does this for you and keep tracks of where files are

and each package manager/distribution has an idea of where some files be stored

[–] shadowintheday2 6 points 8 months ago* (last edited 8 months ago)

You can freely manipulate NTFS in Linux. Just make sure your distribution has, after kernel >=5.15, enabled it, otherwise you may need to install the ntfs-eg driver. Other than that, Ach Wiki has info that may help you on any distro:

https://wiki.archlinux.org/title/NTFS

I have done something similar to what you want to do, just needed the ntfs-3g driver installed and "Disks" (gnome disks) application would mount/read/write the disks as usual

[–] shadowintheday2 5 points 8 months ago* (last edited 8 months ago) (1 children)

You can configure this behavior for CLI, and by proxy could run GUI programs that require elevation through the CLI:

https://wiki.archlinux.org/title/Sudo#Using_visudo

Defaults passwd_timeout=0(avoids long running process/updates to timeout waiting for sudo password)

Defaults timestamp_type=global (This makes password typing and it's expiry valid for ALL terminals, so you don't need to type sudo's password for everything you open after)

Defaults timestamp_timeout=10(change to any amount of minutes you wish)

The last one may be the difference between having to type the password every 5 minutes versus 1-2 times a day. Make sure you take security implications into account.

[–] shadowintheday2 4 points 8 months ago (1 children)

Timeshift, make sure to "include hidden files" to recover any configuration for desktop environments

After a few mess ups, you may find yourself not needing to backup everything, only the file(s) that messed up, and that's still a good thing to have Timeshift for

[–] shadowintheday2 36 points 8 months ago

IP is like an address to a big skyscraper where a company operates. You are the delivery man and must go to 201.154.76.19 and deliver something. When you get at the reception, you tell them you have a package to deliver to Mrs HTTPS, at room (port) 443. Since Mrs HTTPS is well known and has cleared your entry before, you're allowed to enter this room and only this room.

If you were to get at the same address and try to access other rooms you would either get refused because they are closed, or if open, someone would specifically need to be in the room so you can deliver something

Malicious actors that wanted access to the building could try to disguise their deliveries and enter the building, that's why the default policy of most firewalls is "reject" and you specifically need to open a port and have a program listening to it if you want incoming connections.

[–] shadowintheday2 3 points 9 months ago* (last edited 9 months ago)

Arch is having internal discussions to increase it. Might be something upstream may adopt if all major distributions end up increasing it.

[–] shadowintheday2 5 points 9 months ago

Also known as (close) to max signed int32

[–] shadowintheday2 1 points 9 months ago

Used to be messing with kernel arguments and installing/tweaking boot parameters. That was until Grub broke, I learned systemd-boot and chrooting into the system via live USB

Now if I break anything it's just a matter of "sigh, let me get the USB and type a few commands"

[–] shadowintheday2 2 points 9 months ago

After the initial learning curve when starting in Linux to solving advanced problemas that may or may not occur (will depend on Nvidia/exotic hardware/DE updates), you find it's easier to solve these because there are questions and answers in the internet, than finding another way to remove Edge, Cortana and restore the look and feel of windows 7 after every major update in windows

 

I'm getting a bug where left clicking a program open in the task manager triggers opening another instance of the same program instead of raising/focusing in the already opened window. This didn't happen using X11. It's not the behavior configured for the left click; a recently started session works fine. The only way for it to go away without restarting is entering Plasma's edit mode and exiting it - then task manager behaves ok for a while. How can I trace what causes this ? I tried checking journalctl for criticial errors or logs when I click and this behavior happens but couldn't find anything relevant

Plasma5, wayland, nvidia

 
14
Pacman force ipv6? (self.archlinux)
 

There are answers for disabling ipv6 is it possible to force ipv6 instead?

already using https://archlinux.org/mirrorlist/ to select ipv6-capable mirrors

4
encription (self.obsidianmd)
submitted 11 months ago by shadowintheday2 to c/obsidianmd
 

is there a way to encrypt obsidian vaults using either symmetric/asymmetric encryption with multiple devices?

23
submitted 11 months ago* (last edited 7 months ago) by shadowintheday2 to c/[email protected]
 

I use https://github.com/slingamn/namespaced-openvpn to have a isolated namespace and VPN connection

On X, these two steps would allow me to run a GUI program in the protected namespace. So I could have .e.g an IDE configuration for my main user/personal projects, and another entirely different instance of the same IDE for work because they use different users

sudo xhost '+si:localuser:user'
sudo ip netns exec protected sudo -u user -i

On Wayland, although the protected shell is created fine, GUI programs don't start. E.g fgor Dolphin

error: XDG_RUNTIME_DIR is invalid or not set in the environment.
Failed to create wl_display (No such file or directory)

I've tried to preserve the env without success:


sudo -E ip netns exec protected sudo -u user -i

It seems that I access to the wayland socket is a must for this to work

This discussion has a nuke option - giving 777 access to the dir where the wayland socket is, and another less permissive approach adding the users to a group and giving access to a new location where the wayland socket is created

https://stackoverflow.com/questions/41736528/linux-wayland-display-multiple-user

Is this second approach secure? If not, which other steps could I take to achieve what I did in X?

 

On X I use

xmodmap -e "pointer = 3 2 1" // lefthand
xmodmap -e "pointer = 1 2 3" //righthand

On wayland/KDE, I must change it manually via system settings; and any other application that run on xwayland doesn't respect this

is it possible to change everything via cli, for both wayland and xwayland?

please help an old and tired boomer that is trying to stick with wayland and nvidia this time

 

Think Zoom, Teams, google meet etc

When sharing the screen, it can see everything the user sees. Would it be possible to isolate what it sees only to GUI applications ran by the same user? If I run these as an unprivileged user via xhost, they don't really work well. Sandboxing via bubblewrap requires knowledge beyond my current skills and I'm not sure if it would work.

Has anyone

 

I want to configure a local webcam to stream (and possibly record) a live feed open to the internet, and acess it half-world away while traveling, using FOSS only acessing it via Android VLC

This guide was quite comprehensive; however the packages for nginx-rtmp are quite abandoned in arch linux. So I thought maybe WebRTC could be an alternative - the communication itself should be encrypted, which WebRTC seems to do; however, I still can't figure out if VLC will handle this well

Also, it seems that I might need to self-host a VPN to achieve this? What are my options? Has anyone else done this ?

 

Is there an open source app or tool like TestDisk/PhotoRec, but for Android?

view more: ‹ prev next ›