Wait, what tools, and why would they need you to modify existing certificates? That's super sketchy.
bear
joined 1 year ago
Okay, then continue not caring as the people who do take care of things. Don't worry your pretty little head about it.
Nvidia shipping proprietary code is what makes it worse for people who actually use Linux. They should open source their driver.
They don't believe in copyright law so they don't mind whoever infringe on them. Especially since here it would make the proprietary driver work better.
I don't believe in copyright law, but I especially don't believe in partially enforced copyright law. Nvidia doesn't get to use copyright to protect their proprietary code while infringing on the copyright of FOSS.
I use Portainer a lot and have no issues with it. There's very little you can't do without Portainer though, it's just a convenient web frontend to access Docker tools. It's helpful if you manage a lot of stuff or multiple hosts. I also use it at work to expose basic management to members of my team who aren't Linux or Docker savvy.
It is true that corporations need to change, but when that happens it means you also will have to change. So why wait? Change now. Use less overall, and look for better alternatives for what you still use.
We don't have time to spin up enough infrastructure to match current production with renewable energy. Consumption must come down until then, and only scale up once the new infrastructure can handle it.
But one thing I always thought should be obligatory was that during installation of such programs, only the resources absent from the system would be added to the installation/system and any other resource bundled would be automatically discarded, thus saving disk space and avoiding redundant libraries present on the system.
Do flatpaks have such working structure?
It's possible, but rarely allowed because that would produce instability. Linux programs are built to rely on a specific version of a library. Depending on how much actually changes, you can sometimes get away with using a different version than the one it expects, but the more it changes the riskier it gets.
One of the major goals of flatpaks was to create a way for developers to ship one build that was guaranteed to run the same regardless of distro or environment. The isolation is very much the point. It does use more storage space, but in most cases it's not enough to matter. When storage space is at a premium, yeah, you generally want to avoid containers. They trade space for stability.
Pretty much everything in the Linux space is converging on this concept. Desktop is moving to immutability with flatpak apps. The server space has been entirely taken over by containers. Even Valve has shipped a separate Linux runtime for as long as they've officially supported it, and they're progressing on deeper containerization. You can direct it to run against your native packages instead of the runtime, but it's rarely a good idea.
The point is that it gives developers a single target that they can all rely on, instead of having to account for 20 distros with multiple still-supported versions each. And believe me, these efforts have made Linux so much easier as a user as well. It used to be that lots developers only targeted Ubuntu. Trying to get anything to run on another system was off like pulling teeth. Now, you can almost always expect to find a flatpak instead which runs on any distro.
What does known-good mean?
Known-good meaning a tested and working configuration approved by the developers/maintainers.
What if a security vulnerability is found in one of the dependencies. With an old-style distribution there is a security team that monitors security reports and they will provide a fixed package.
Flatpak is just another model of distribution. There isn't really anything that needs to change here. The bugs are fixed upstream and they get pushed via the method of distribution, which is Flathub in this case.
The security team in a given distribution is charged with getting upstream fixes backported and shipped. There's no need for this role because they're just shipped directly in most cases.
With flatpaks it's not clear to me if those developers will monitor each dependency for security vulnerabilities and how they will handle that.
The developers are usually the ones doing the fixes in the first place.
Will users even be informed about a security issue, will a fix be backported or will it only be available in the latest version?
Well, fixes don't normally need to be backported because flatpaks are usually fresh. They're just built normally in most cases.
For notifications, you'd have to follow the relevant projects directly.
Every government is authoritarian by its very nature. The government derives authority from having monopoly on legalized violence.
For goodness' sake, can we not do this? I'm an anarchist, I know this. I oppose the state on a conceptual level for this very reason. I'm speaking to you like a normal person using language that I know you understood the intended meaning of. There's no need to engage in academic fartsniffery here. Just be normal.
The only reason there is the illusion of freedom of speech is due to the fact that mainstream views are carefully curated.
The owners of our media have a vested interest in maintaining their own control. They are not compelled to act by outside force, they largely act of their own free will to maintain their position in our corrupt system. Understanding this distinction is crucial to being able to fix it. This is the true insidious nature of our system, at this point it is maintained by people pursuing their own interests rather than by an overarching plot. There's no need for one anymore, it is self-sustaining and perpetuating, like a cancer.
Used Nvidia for years, got tired of it. I used to keep a list of all the problems but I got tired of posting it.
Off the top of my head, gaming at all on Nvidia used to break KDE on X if you disabled the compositor for performance, the whole UI would visually freeze. FFXIV and WoW would crash constantly until DXVK put in special handling for the Nvidia driver. Wayland still has issues which means users with mixed refresh rates or VRR have to choose what features to sacrifice. Optimus laptop graphics switching support is a goddamn joke on Linux, only supported on a couple generations and it barely works there. Video hardware acceleration never worked on Firefox, no idea if it does now.
I installed an AMD GPU about a year ago and I've literally not thought about it once since. It just works, it doesn't cause problems, I don't have to do anything with drivers. I'm never gonna go back unless they get a fully functional open source driver stack.