Linux

Full Disk Encryption is planned to be introduced in the forthcoming release candidate of the Aeon Desktop to enhance data security for its users.
The feature is expected to be included in the upcoming Release Candidate 3 (RC3).

Full Disk Encryption is designed to protect data in cases of device loss, theft or unauthorized booting into an alternative operating system.
Depending on the hardware configuration of a system, Aeon's encryption will be set up in one of two modes: Default or Fallback.

Default Mode

The Default Mode is the preferred method of encryption provided the system has the required hardware. This mode utilizes the Trusted Platform Module(TPM) 2.0 chipset with PolicyAuthorizeNV support (TPM 2.0 version 1.38 or newer). In this mode, Aeon Desktop measures several aspects of the system's integrity. These including:

• UEFI Firmware
• Secure Boot state (enabled or disabled)
• Partition Table
• Boot loader and drivers
• Kernel and initrd (including kernel command line parameters)

These measurements are stored in the system's TPM. During startup, the current state is compared with the stored measurements. If these match, the system boots normally. If discrepancies are found, users are prompted to enter a Recovery Key provided during installation. This safeguard ensures that unauthorized changes or tampering attempts are flagged.

Fallback Mode

The Fallback Mode is employed when the necessary hardware for Default Mode is not detected. This mode requires users to enter a passphrase each time the system starts. While it does not check system integrity as comprehensively as Default Mode, Secure Boot is strongly recommended to ensure some level of security, confirming that the bootloader and kernel have not been tampered with.

Contrary to initial concerns, Default Mode is not less secure than Fallback Mode despite not requiring a passphrase at startup. The strong integrity checks in Default Mode protect against attacks that could bypass normal authentication methods. For example, it can detect changes to the kernel command line that could otherwise allow unauthorized access. Furthermore, it safeguards against modifications to initrd thereby preventing potential passphrase capture in Fallback Mode.

Secure Boot, while optional in Default Mode due to the comprehensive integrity checks, is critical in Fallback Mode to maintain system security. Disabling Secure Boot in Fallback Mode increases vulnerability to tampering and attacks aimed at capturing the passphrase.

Aeon's implementation of Full Disk Encryption provides robust security options tailored to the capabilities of users' hardware. By offering both Default and Fallback modes, Aeon ensures that all users can benefit from enhanced data protection.

The inclusion of this feature in RC3 marks a significant step forward in safeguarding user data against potential threats.
Aeon users are encouraged to read and bookmark the Aeon Encryption Guide.

More Information about openSUSE:

Official

• openSUSE News
• openSUSE Mailing List
• openSUSE Wiki

Fediverse

• https://discuss.tchncs.de/c/opensuse@lemmy.world

(Image made with DALL-E)

Greetings,

I've installed Fedora Linux (with pipewire) on my friend's Alienware M17xR4 (linux-hardware probe).

This incredible laptop got a Sound Blaster Recon3Di with a S/PDIF Digital Output which unfortunally does not work out of the box. I can see the vu meter moving inside gnome-control-center but no audio comes out and the port's red light (which on Windows lights up) does not turn on at all.

By lookin up I've found this thread on Linux Mint Forums but I had no luck with it.

Has anyone else got issues with similar hardware? Thanks in advance.

Hi. I've not really used Windows since the early 2000. Even then not much.

I have a single mini PC with windows on. And use it only for device firmware updates. As a ham radio nerd. You get many devices that can only be modified via windows.

Anyway it was set up with dual boot the normal way. Windows first as it came with it. Then make a real Linux partition to use the PC on my boat while travelling.

Now the issue is I am upgrading the Mini PC. Basically replacing memory and the tiny 128gb ssd. So need to install it all from scratch.

I have order a copy of windows 11 from ebay. (At a price I consider acceptable for the crap)

But its going to take several days to arrive. And I would like to be more efficient.

So I am hoping folks can advice me on the best way to set up the PC with Linux first then install Windows 11 later. Knowing windows has a habit of messing up grub etc.

I'm developing a program in C++ targeting flatpak, since I'm on an immutable system I'd rather develop for flatpak than try using a container (plus I can't get SDL to open a window in a container anyway). Everything works with GNOME Builder but it's not as nice to use as vscode: less syntax highlighting, doesn't reopen where I left off, can't debug multiple instances (Not to say I don't like GNOME Builder - it's really good and will only get better, it's just slowing me down at this point). I managed to get the flatpak building and debugging from within code, using the vscode-flatpak extension the only thing not working properly is clangd. I am using the meson build system.

This is probably a bit of a long shot, but has anyone else tried to do this?

BTW I'm not talking about using clangd with the vscode flatpak package

Let's draw a Tux on Fediverse Canvas

back when I used ubuntu derivatives I used privoxy and edited the config file to route all my traffic through tor.

I just did the same on debian 12.6 and wonder if there's a better alternative.

After 3 years in the making I'm excited to announce the launch of Games on Whales, an innovative open-source project that revolutionizes virtual desktops and gaming. Our mission is to enable multiple users to stream different content from a single machine, with full HW acceleration and low latency.

With Games on Whales, you can:

• Multi-user: Share a single remote host hardware with friends or colleagues, each streaming their own content (gaming, productivity, or anything else!)
• Headless: Create virtual desktops on demand, with automatic resolution and FPS matching, without the need for a monitor or dummy plug
• Advanced Input Support: Enjoy seamless control with mouse, keyboard, and joypads, including Gyro and Acceleration support (a first in Linux!)
• Low latency: Uses the Moonlight protocol to stream content to a wide variety of supported clients.
• Linux and Docker First: Our curated Docker images include popular applications like Steam, Firefox, Lutris, Retroarch, and more!
• Fully Open Source: MIT licensed, and we welcome contributions from the community.

Interested in how this works under the hood? You can read more about it in our developer guide or deep dive into the code.

This is for real time communication as Lemmy has a delay before comments show up from other instances

I wanted to have a separate laptop where I only use the terminal for my use cases. At the moment I am somewhat confident using the terminal, but I think limiting myself to tty only would build my confidence even more. Any tips?

EDIT: I am already using nvim and I already have installed a minimal distro (Arch). I just need advice on how to actually run this system effectively.

I've installed a new battery on my laptop, but to my surprise, the percentage of charge in the battery is at 0. Here's the upower diagnostics:

$ upower -i /org/freedesktop/UPower/devices/battery_BAT0
  native-path:          BAT0
  serial:               0
  power supply:         yes
  updated:              Thursday 11 July 2024 09:54:55 PM (16 seconds ago)
  has history:          yes
  has statistics:       yes
  battery
    present:             yes
    rechargeable:        yes
    state:               pending-charge
    warning-level:       none
    energy:              0 Wh
    energy-empty:        0 Wh
    energy-full:         0 Wh
    energy-full-design:  0 Wh
    energy-rate:         0 W
    charge-cycles:       100
    percentage:          0%
    technology:          lithium-ion
    icon-name:          'battery-caution-charging-symbolic'

The "energy-full-design" capacity of the battery should be 70Wh, but here it is, at 0Wh. None of the statistics above (except date and time) have updated, and it's been two days already. How do I calibrate this battery?

[The author assumes] a high-level understanding of how text rendering works, for example, what shaping is. If that does not sound familiar to you, you might want to review State of Text Rendering (2009), and Modern text rendering with Linux: Overview (2019).

I know most of you already know these apps or need something more advanced but I found them interesting so I thought I might as well share it here for those not familiar with them.

WARNING: one of the apps in the list (Plexamp) doesn't appear to be open-source so use it with caution.

i've been searching nonstop. im stuck on gnome and i really hate it. i know theres mallit but its just a phone layout so how do i even exit vim? id need a full key layout

See title; I'm considering it, but the courses bundles are expensive

Zed is a modern open-source code editor, built from the ground up in Rust with a GPU-accelerated renderer.

cross-posted from: https://feddit.it/post/9251429

I was previously using PopOS! 22.04 on my tuxedo laptop and I'd installed on it Howdy to take advantage of the IR camera and have a windows hello alike face recognition feature.

Everything was working fine, but after some time GNOME 46 and its new goodies were too tempting to stick with Pop's old GNOME version (at least for me) and therefore I switched to Ubuntu 24.04

However, when I tried to install howdy using the PPAs as I did with Pop I noticed it wasn't working because of some changes that were made regarding on how Python is managed, and I couldn't find a solution for that. Looking at howdy's GitHub issues, there are a lot of them talking about this problem that seems to be started with 23.x versions already, but having so many issues created a bit too much confusion to me and I didn't manage to find a working solution from there.

Is there anyone here using Howdy on Ubuntu 24.04? How have you managed to install it?

For many, many years now when I want to browse a man page about something I'll type man X into my terminal, substituting X for whatever it is I wish to learn about. Depending on the manual, it's short and therefore easy to find what I want, or I am deep in the woods because I'm trying to find a specific flag that appears many times in a very long document. Woe is me if the flag switch is a bare letter, like x.

And let's say it is x. Now I am searching with /x followed by n n n n n n n n N n n n n n. Obviously I'm not finding the information I want, the search is literal (not fuzzy, nor "whole word"), and even if I find something the manual pager might overshoot me because finding text will move the found line to the top of the terminal, and maybe the information I really want comes one or two lines above.

So... there HAS to be a better way, right? There has to be a modern, fast, easily greppable version to go through a man page. Does it exist?

P.S. I am not talking about summaries like tldr because I typically don't need summaries but actual technical descriptions.

I’m trying to decide on a distro for my n100 mini pc. It’ll be for watching content, browsing the web, using discord And playing music. I have Garuda running in it right now just as a tester to see how it did at emulation and honestly it ran 3DS games pretty swell lol. But it feels very bogged down overall. Anything really light weight that will feel a bit snappier?

Another related article about System insights with command-line tools: lscpu and lsusb

I found my 7th gen iPod Touch running 15.8.2. This device is no longer supported by Apple so I can’t Sign in with Apple ID to do anything useful. Any ideas of how I can save this device from becoming e-waste? I was trying to add Delta emulator to use it for roms but no luck.

Any ideas/suggestions?? 🤷🏼‍♀️ TYIA 💜