• 1 Post
  • 48 Comments
Joined 2 years ago
cake
Cake day: July 7th, 2023

help-circle

  • If in the future you think you might bring family/relations onboard to the password manager, it may be worthwhile to pay for a BitWarden family plan. BitWarden is really low-cost and they publish their stuff as FOSS (and therefore are worth supporting), but crucially you don’t want to be the point of technical support for when something doesn’t work for someone else. Self-hosting a password manager is an easier thing to do if you’re only doing it for yourself.

    That said, I use a self-hosted Vaultwarden server as backup (i.e. I manually bring the server online and sync to my phone now and again), and my primary password manager is through Keepassxc, which is a completely separate and offline password manager program.

    Edit: Forgot to mention, you can always start with free BitWarden and then export your data and delete your account if you decide to self-host.



  • GnuLinuxDude@lemmy.mltoSelfhosted@lemmy.worldWhat is Docker?
    link
    fedilink
    English
    arrow-up
    11
    ·
    10 days ago

    You might notice that your Windows installation is like 30 gigabytes and there is a huge folder somewhere in the system path called WinSXS. Microsoft bends over backwards to provide you with basically all the versions of all the shared libs ever, resulting in a system that can run programs compiled from decades ago just fine.

    In Linux-land usually we just recompile all of the software from source. Sometimes it breaks because Glibc changed something. Or sometimes it breaks because (extremely rare) the kernel broke something. Linus considers breaking the userspace API one of the biggest no-nos in kernel development.

    Even so, depending on what you’re doing you can have a really old binary run on your Linux computer if the conditions are right. Windows just makes that surface area of “conditions being right” much larger.

    As for your phone, all the apps that get built and run for it must target some kind of specific API version (the amount of stuff you’re allowed to do is much more constrained). Android and iOS both basically provide compatibility for that stuff in a similar way that Windows does, but the story is much less chaotic than on Linux and Windows (and even macOS) where your phone app is not allowed to do that much, by comparison.






  • When I was in unspecified foreign country I went to a graveyard with my family. It was very different in that the bodies were buried basically right next to each other and you basically just walk over the bodies of the interred to get to where you want to go.

    It was a bit distinct from how we do it in America where, much like our suburban houses, you have to have a pointless giant green lawn surrounding where the body is buried.





  • A few remarks:

    • Mullvad is not the only acceptable choice just for torrenting. If your objective is just to subvert copyright trolls, any (non-Israeli) VPN that has a track record of not keeping logs will do the job.
    • FitGirl is great and all but let’s not forget DODI. One thing I seriously dislike about FG is while she gets the best compression rates, it’s at the cost of like 6x the time to unpack the games. There are probably still more reputable sources for games
    • If you want to use your computer without everything being on the VPN, you will have to either use containers (Linux), virtual machines, or explore split-tunneling features in your VPN client if available.




  • The VM is Debian Linux with a basic XFCE UI (for a system tray + notification widget) via QEMU/KVM which I run through virt-manager. Most unnecessary packages are removed or not installed in the first place. This is so that I can browse the sites, again, in a fool-proof manner. I share a directory from my host OS to the VM, which mounts it on boot in the fstab. This prevents me from downloading into the guest VM’s disk image and having to keep dealing with that file getting overly big. In the past I’ve done a Samba share but recently I’ve just been using direct shared memory/filesystem and that seems to work OK, too.

    As a bonus to this setup, I can use Microsocks in the VM to also proxy a profile in Firefox to get VPN coverage in a specific Firefox profile. I use this when watching on streaming sites instead of trying to watch within the VM, since there is considerable overhead to doing that.

    And that’s it, really. My VPN killswitches the VM if it ever experiences a connection interruption. And Qbittorrent is set up to use the VPN interface, as well. I use the aforementioned automatic torrents management feature to sort things when they’re done downloading.

    I should state that there are some obvious downsides to this setup. The first is now I have to overcommit disk space and RAM to keep and run a guest VM. You want enough to be able to run updates and the software in the VM without running into a wall. The second is that there does seem to be a CPU penalty when downloading files (maybe it’s because of the way I’m sharing the downloads directory into the VM with virtiofs?)


  • I have some beginner questions, for example: if I have the arr stack running in docker with a vpn, can I browse the internet non-anonymously on that same machine without compromising identifying details, assuming qbittorrent is configured to only move traffic through a VPN? (I’m wondering if I need a dedicated piece of hardware to run everything safely)

    The answer to this question is you can setup a docker system (or podman) so that all the traffic in that pod (don’t know the docker term for this) will route through the vpn. A good image to accomplish this easily and successfully is gluetun – and it will only affect the traffic in the containers, not the rest of your computer.

    Personally, my setup is much more like yours and it works fine for me, except I use a VM. So all the activity gets confined to the VM and that makes a bit idiot-proof. Using automatic management in the torrent client, completed torrents get put in the correct directory. You could combine this with Jellyfin if you desired.

    My own problem with Jellyfin is if I ever use it for anything I want direct playback on all relevant devices, because my computer is not good enough for transcoding (and why waste the energy and time on on-demand transcoding, anyway?) so it requires some massaging of the data to get everything right. I only use it infrequently, practically on-demand. I don’t use Jellyfin for myself.


  • You’re right. I wasn’t familiar with rawtherapee but just seeing that home page immediately clued me into the fact that it was some kind of image program. Didn’t even need to read a single word.

    Come to think of it, there have been a number of times where I’ve wondered about what a foss project does/looks like and I think a single screenshot would’ve just been a big help in understanding how it behaves.


  • GnuLinuxDude@lemmy.mltoOpen Source@lemmy.mlGIMP 3.0 Released
    link
    fedilink
    arrow-up
    17
    ·
    edit-2
    2 months ago

    I would have to choose GIMP (in spite of this awful name) because that page loaded without javascript and the photoshop page requires me to enable javascript.

    I know I’m being a bit facetious, here, but… Adobe can afford to hire full time front end devs and designers. FOSS projects can’t really compete with Adobe’s investors.