Linux

I have created a network namespace to separate connections through a VPN, and it runs as the same user account as I use for everything else; however, it is not able to play music/use microphone

inside the namespace:

aplay -l  
card 2: Generic_1 [HD-Audio Generic], device 0: ALCS1200A Analog [ALCS1200A Analog]
  Subdevices: 0/1
  Subdevice #0: subdevice #0
card 2: Generic_1 [HD-Audio Generic], device 1: ALCS1200A Digital [ALCS1200A Digital]
  Subdevices: 1/1
  Subdevice #0: subdevice #0  

arecord -l

card 2: Generic_1 [HD-Audio Generic], device 0: ALCS1200A Analog [ALCS1200A Analog]
  Subdevices: 0/1
  Subdevice #0: subdevice #0
card 2: Generic_1 [HD-Audio Generic], device 2: ALCS1200A Alt Analog [ALCS1200A Alt Analog]
  Subdevices: 1/1
  Subdevice #0: subdevice #0 

I also tried running as another user, but the effect is the same, which is why for simplicity I resorted to using the same user that can play/record normally

what should I look for in configuring it ?

Status:

There are bootable images of CentOS Stream.

CentOS-bootc images

Repo

Note: I got the info that the CentOS people are working on this. Still, I think thats too slow XD

Note 2: See below for word explanations

CentOS is the downstream of Fedora and upstream of the extremely stable RHEL.

Debian is stable and has a release cycle of 2 years, RHEL uses 5 years. So using RHEL on a desktop is overkill.

But unlike all the hate about RedHat converting CentOS to CentOS Stream, I think this makes it a very very good candidate for a normal workstation!

It has EPEL and COPR repo support, so you can get tons of external packages, desktops etc. You can also just clone COPR repos you like, or ask the maintainers to add CentOS Stream to the builds.

I would not want to use a "traditionally" package-managed distro anymore though, it is just not reliable enough for me.

rpm-ostree is perfect, Fedora Atomic Desktops (Silverblue, Kinoite, Sericea, ...), uBlue, Bazzite, Bluefin, Aurora. Even a COSMIC image is there.

rpm-ostree needs 2 things:

1. An ostree remote OR OCI container registry, to pull the main image
2. Optional, for layering: traditional RPM package repositories

The repos are already there, but an OCI image is needed. There are OCI images of CentOS stream.

But uBlues framework can not just be used, as they download the image from Fedora, chroot into it and use the builtin tools. This requires the presence of rpm-ostree and a kernel, which are both missing in the CentOS Stream image.

So, the question:

Do you know how to manipulate OCI images, to pull it in, add packages from the CentOS repos (kernel) and COPR (rpm-ostree), do some changes and build an OCI image again?

Word explanations

This is DeltaChat desktop client but not with the default Electron. Compile instructions for Debian, Arch Linux and openSUSE. One Linux distribution has this packaged : NixOS, package name kdeltachat-unstable. The software developer is also active in the DeltaChat forum. Posting this here to give this project some more attention cause it would be nice to see less Electron and more Kirigami (or Tauri ?).

I've heard LTS kernels offer more stability, but lack the latest features. How likely is my system to break with the standard kernel?

Passkeys seem like a great idea, and we are at a point where, although things are still very much in flux, software passkeys managed by password managers are starting to be usable. I thought I'd share the workflow that's working for me on Linux with some sites, and ask the community for more tips & tricks.

A passkey is a client certificate - which is an old idea, but now there are some new standards in place*. When you log into a website, instead of sending a password you send a message signed using the private key on your hardware security device, or stored in your password manager. If you use a password manager the flow is about the same as with passwords: your password manager pops up and asks if you want to log in to the given website. But instead of sending a password to the browser, message signing takes place in the password manager. Unlike passwords those signed messages can't be replayed. Arguably you can skip sending MFA codes and get about the same (or maybe better) security with passkeys than you were getting with passwords + MFA.

Complications come up because support for passkey APIs is still patchy. On Linux I think there is system-level support for hardware keys, but not for passkey managers (password managers that can do passkey signing). But you can close that gap using browser extensions! I'm using Enpass with it's Firefox extension. Signing into websites in Firefox using passkeys works quite well in some of the sites I've tried. (I've also tested with Bitwarden's browser extension, and it works just as well.**) Although creating passkeys doesn't work on all of those sites.

• I was able to create a passkey on Github, and sign in with it.
• I was able to create a passkey for the demo at https://www.passkeys.io/, and sign in with it.
• I couldn't create passkeys for Google, but I could log in with passkeys created on another device, and synced by Enpass to my Linux machine.
• I can use a passkey for MFA on Discord, but they don't seem to be using them for logins yet.
• I'm not getting options to use my passkeys on Amazon or Paypal, but I was able to create passkeys for these sites on Android.

Without using a browser extension Chrome on Linux does have a feature to sign in with passkeys on mobile devices. I don't think this works with third-party passskey managers. On some sites Chrome gave me the option to log in using the automatically-generated, Google-managed passkey on my phone. It didn't actually worked for me - my phone showed a message saying "connecting to device" but never actually connected.

That brings me to the Android side. Since some sites will let me log in with passkeys but not create them it's helpful to have another option for creating passkeys. Android is further along in implementing system level passkey support (only in Android 14 or later). But it's not perfect yet. Firefox for Android is not working with passkey managers yet, but there is a ticket to track this. Third-party passkey managers work in Chrome for Android, but only if you enable an experimental flag:

• open chrome://flags/
• find the setting "Android Credential Management for passkeys"
• set the value to "Enabled for Google Password Manager and 3rd party passkeys"

* "Passkey" seems to be an umbrella term for WebAuthn or FIDO U2F. It looks like WebAuthn is a part of FIDO2.

** From a cursory look at the two I feel more comfortable with Enpass' browser extension than with Bitwarden's. I'm not positive, but it looks like Bitwarden loads credentials in the extension itself which puts all of your secrets in the browser process. OTOH the Enpass extension uses IPC to send requests to the Enpass desktop app. But as many will point out, Bitwarden's clients are open-source and audited while Enpass' software is closed-source.

https://chaos.social/@ktemkin/112310528803928457

I'm working on a some materials for a class wherein I'll be teaching some young, wide-eyed Windows nerds about Linux and we're including a section we're calling "foot guns". Basically it's ways you might shoot yourself in the foot while meddling with your newfound Linux powers.

I've got the usual forgetting the . in lines like this:

$ rm -rf ./bin

As well as a bunch of other fun stories like that one time I mounted my Linux home folder into my Windows machine, forgot I did that, then deleted a parent folder.

You know, the war stories.

Tell me yours. I wanna share your mistakes so that they can learn from them.

Fun (?) side note: somehow, my entire ${HOME}/projects folder has been deleted like... just now, and I have no idea how it happened. I may have a terrible new story to add if I figure it out.

I tried to setup jellyfin, but jellyfin didn't see any subfolders in my home folder I tried to grant jellyfin the rights to read my home folder, but it looks like I did something wrong and now I can't update and install flatpak apps. This is what I see when I try to update flatpak apps:

Warning: Failed to get revokefs-fuse socket from system-helper: Flatpak system operation GetRevokefsFd not allowed for user Warning: Flatpak system operation Deploy not allowed for user

Are there any suggestions I need to make to fix flatpack?

The Wine development release 9.7 is now available.

What's new in this release:

• Build system support for ARM64X.
• Some restructuration of the Vulkan driver interface.
• WIDL improvements for ARM support as well as SLTG typelibs.
• Various bug fixes.

Bugs fixed in 9.7 (total 18):

#37246 Old C&C titles freeze after the map is loaded.

#44699 Clang 6.0 fails to run under wine

#44812 Multiple applications need NtQueryInformationProcess 'ProcessQuotaLimits' class support (MSYS2, ProcessHacker 2.x)

#48080 Oregon Trail II will not start in 32-bit mode

#50111 osu! crashes since 20201110 version with wine-mono (needs native -> managed byref array marshalling)

#54759 Notepad++: slider of vertical scrollbar is too small for long files

#54901 Medieval II Total War some units partly invisible with d3dx9_30 as builtin

#55765 The 32-bit d2d1:d2d1 frequently crashes on the GitLab CI

#56133 explorer.exe: Font leak when painting

#56361 Geovision Parashara's Light (PL9.exe) still crashes in wine

#56369 Advanced IP Scanner crashes on unimplemented function netapi32.dll.NetRemoteTOD

#56442 Totem Arts Launcher.exe garbled text

#56491 Videos in BURIKO visual novel engine

#56493 PresentationFontCache.exe crashes during .Net 3.51 SP1 installation

#56536 UI: Applications using ModernWPF crash, Windows.Ui.ViewManagment.InputPane.TryShow not implemented

#56538 Mspaint from Windows XP needs imm32.CtfImmIsCiceroEnabled

#56551 HP System Diagnostics crashes when clicking the Devices tab

#56554 ON1 photo raw installs but wont run the application

Debian or Arch or Ubuntu never ask for my confirmation ?

Example :

You acknowledge that openSUSE Leap 15.3 is subject to the U.S. Export Administration Regulations (the “EAR”) and you agree to comply with the EAR. You will not export or re-export openSUSE Leap 15.3 directly or indirectly, to: (1) any countries that are subject to US export restrictions; (2) any end user who you know or have reason to know will utilize openSUSE Leap 15.3 in the design, development or production of nuclear, chemical or biological weapons, or rocket systems, space launch vehicles, and sounding rockets, or unmanned air vehicle systems, except as authorized by the relevant government agency by regulation or specific license; or (3) any end user who has been prohibited from participating in the US export transactions by any federal agency of the US government. By downloading or using openSUSE Leap 15.3, you are agreeing to the foregoing and you are representing and warranting that You are not located in,under the control of, or a national or resident of any such country or on any such list. In addition, you are responsible for complying with any local laws in Your jurisdiction which may impact Your right to import, export or use openSUSE Leap 15.3. Please consult the Bureau of Industry and Security web page www.bis.doc.gov before exporting items subject to the EAR. It is your responsibility to obtain any necessary export approvals.

cross-posted from: https://lemmy.ml/post/14721267

I'm having the hardest tine setting up a shared folder between a Linux host and Win11guest. I want to get rid of dual boot, but there are a few programs that I use which are Win only. I have set up a VB VM, but I want a fine tuned KVM VM. On VB sharing is trivial, but I can't get it to work in KVM. I have the host sharing the folder with Samba, and can see it from another Linux VM, but not from windows. Any clues?

EDIT: After reading all the responses, I’ve decided to allow cookies to persist after they close the browser, which I expect will make it so that 2FA doesn’t kick in as often, at least not on their most frequently used web sites. I may also look into privacy oriented browser extensions that might offer some protection, such as Privacy Badger. Thanks, all!

OP: I know two factor authentication is considered more secure than just passwords, but here’s the deal: One of my family members uses Linux Mint on their laptop (at my recommendation and yes, they are aware that it’s not a Mac), and while they’ve mostly adapted to the different workflows (coming from a macbook), one of their biggest pain points is that web sites are constantly challenging them because they don’t recognize their machine. It’s frustrating to them because they used to just allow all cookies in Safari, whereas I’ve configured Firefox on their Linux laptop not to keep any cookies after the browser is closed. I know this isn’t a Linux/Firefox issue, but I think they might not see it that way and I worry they’ll get frustrated to the point that they’ll go out and splurge on a new macbook air when they already have a perfectly functional laptop with functional OS.

Right now I’m thinking of adding their most frequently used web sites as exceptions in Firefox settings so at least those cookies would persist after closing the browser, making them easier to log into. Or maybe I’ll just allow all cookies indefinitely, although I’d rather not just throw in the towel on Big Surveillance. Is there another way to walk that line between convenience and security that I’m not thinking of? Should I just remove my tin foil hat and allow all cookies indefinitely?

Thanks in advance for your advice.

I want to display a symbol at the top right of one or both of my screens, similar to the lightning bolt symbol raspberry pi OS uses to indicate lack of power, when certain conditions are met.

I'm pretty sure i could cobble a bash script together to decide when to do it, but it's the actual displaying of the symbol i'm not sure where to start on. It would need to appear on top of anything else that may be on the screen at the time

Everything i have tried googling returns irrelevant results

Hey people! I want to learn typst, a modern alternative to LaTeX written in Rust.

Typst can incrementally compile the files to PDF.

Ironically, there is no incrementally refreshing PDF viewer afaik. So for direct visual output of my progress, I would like the fastest, smoothest PDF viewer.

• Firefox loads too slow
• Okular fast (thanks for the tips guys), just flickering scrollbar and background icon

It can be as small and minimal for that task as possible.

Priorities:

1. No flicker (no text re-alignment, no disappearing scroll bars, no changing UI)
2. Fast refresh
3. Smooth text refresh (maybe with a fade in)
4. Generally solid

To test:

• evince / GNOME Document viewer
• atril
• mupdf
• zathura
• gv

Barebones:

Somehow monitor for changes

• pipdf (GTK4, but unmaintained)
• pdf_render (very minimal, maintained)
• pdf2pwg (needs cargo add and cargo build, only A4 pages which seems totally sufficient)
• pdf_renderer (security focused, pure Rust, may crash, incomplete)

So I have this external 2.5" drive salvaged from an old laptop of mine. I was trying to use it to backup/store data but the transfer to the drive fails repeatedly at the ~290GB mark leading me to believe that maybe there is a bad sector on the drive. I tried to inspect the drive using smartmontools and smartctl but since it is an external drive, i was not allowed to do so. Is there anyway for me to inspect and fix this drive? I am on fedora ublue-main. The HDD is a 1TB seagate drive.

Edit : I am a linux noob so some hand holding will be appreciated. Also i am looking to use this drive only for low priority media files which i dont mind losing so please help even though it is not the greatest idea to use a failing drive

Edit 2 : It seems my post is not clear of what i am doing. I dont want to recover data from the drive. I want to try to use more of the drive for storing data

Hi, I was playing with rusty-rain when I decided that it was a good idea to make a custom FOSS effect. For this I made a change in "sibling" project ezemoji PR and with a small local change in rusty-rain I got it. All icons are from Nerd Fonts, so if you know of some FOSS icon is missing let me know to add it in the PR, =).

Solution :

• :set
• In this list of options find the entry with the default DDG and change it
• :save

The reason I had trouble starting to find the solution is because qutebrowser is not using a configuration file by default (from version 1.0 or something onward) and I got lost in the qutebrowser help which has countless entries. Thanks to the Arch Linux wiki I figured out more.

For the past few months I have been working on a simple windows notepad like text editor. It's nothing special, but when I first switched to linux I looked around and it took me a while to find leafpad. Unlike leafpad however, Janus uses gtk3, a much more modern toolkit then gtk2, it can display and modify binary data, and it can highlight code syntax for most popular languages. Feel free to check it out on the github.