Open BSD, except it doesn’t support flat pack. But it’s everything else you want
But, I wouldn’t recommend using it as a desktop. If you want real security and isolation, look at qubes for your desktop.
Qubes uses xen, a real microkernel, as the hypervisor, which reduces the risk surface of VM escapes tremendously, then you run your untrusted services in their own vms.
In my production systems, and in my home systems, and in my gaming computers, I turn swap off. There’s no good reason to wear out disc writes. In production systems, I’d rather have something fail hard, then get slower and slower and slower falling behind.
Quite frankly, there’s no good reason to have swap on anymore, memory is huge. Most programs don’t need as much as they use. You can set memory pressure in systemd, telling programs to reduce their usage, and giving them individual hard cutoffs, so something like Prometheus can’t take down your whole system just because it’s got a memory leak.
In a gas town type scenario, where a agent is orchestrating a tree of other agents, there maybe many concurrent shells and commands at the same time. Does your output tracking have the ability to show individual sessions / streams coherently?
Ability to track environment variables in this? I can see the utility in debugging. Something like a full closure for the environment of each command (file system snapshot id, environment variables, command, output)
it’s interesting, i see the value for being able to inspect the history and outputs of agents running on dev vms - the web ui is a nice touch for that
What LLM and model and effort generated this code? I see the AI has been working for a week on this.
No mention of total space limitations for the sqlite database overall (rather then per output)
oh yeah, it does that!
Get a ai agent, run it on your server as a un privileged user and ask it to do a security audit for you, delete the account after. If you want to get fancy make a new VM and give it root and ask it to probe your production host.
Everyone’s advice here is great, but you need to test your config and systems for gaps.
Works a treat for me!
But 100% is a big ask. There are always things to improve or fix
Why not a tablet and keyboard?
Run your own Lemmy instance or Mastodon instance. You can say whatever you want, it’s absolute freedom of speech. People don’t have to listen to you, and many people may defederate, but that’s their choice
We do! Sky lights, fiber optic sky light extenders, etc. humans are always trying to light up their artificial caves with sunlight.
Building architecture used to have amazing creative designs to capture this free lighting.
However, cheap efficient indoor lighting removed this as a driving force, so newer buildings don’t have the same design constraints
Yeah, that’s just meeting other people. No two people have exactly the same beliefs on everything
Gather evidence, talk to the admins of your instance, and the admins of the instance of the abuser. The best option is to get their account banned or at least blocked at the instance level
Of course, don’t engage with them, it might be best just to block them and they’ll get bored and go away
Have one VPN attached in a work profile and another in your private space
Buy ear cup replacements off AliExpress for a few dollars.
You can also put on ear booties to cover the headset.
Well written! Yes combinations are a great way to complete the liebig amino acid barrel - here is a fun tool that helps do this https://www.diaas-calculator.com/ - but DIAAS cannot be “calculated”, we can guess by adding up amino acids in isolation, but you don’t get a real DIAAS reading unless you feed the combination to a pig then actually measure the amino acid absorption.
science says
That is a fun turn of phrase
There isn’t one person who’s opinions encompass “science says” - multiple public health bodies recommend a 1.1-1.6g/kg/day protein intake.
That doesn’t address grass land vs cropland.
It just complains people are turning forests into cropland.
If you want https it’s gotta be a external DNS record anyway, might as well point to internal ips
Depending on how paranoid your setup is not everything will use the DHCP provided DNS servers