Jnr

Yes, but people learned from issues that pulseaudio had and then came pipewire. Everyone is happy now.

I don't know about the philosophical aspects, but from pure technical point of view systemd brought some order into the mess. Before systemd it seemed like most distros were barely holding together with duct tape. Systemd standardized a lot of things.

I am fine with a little bit of controversy if the result is a much better desktop OS experience for the user. And as a relatively long time Linux user, I can certainly say it is much better now than it was 20 years ago.

But the architecture and approach is probably a bit older than that.

Systemd came out in ~2010 and maybe it was not clear if it will stay around for long enough and gain as much popularity as it did?

It depends on how you set it up, but main doesn't have to be the stable release branch. From what I have seen, in most public projects it is the staging area for the next release. If you have to go back to previous releases you have tags.

Still unable to get any repair manuals for cars, firmware locked down by PIN. For US VINs for the same car model you can purchase access to that easily. Meanwhile in EU you need to be an authorized service to get that.

When will EU/EEZ introduce right to repair? So much talk about freedom in EU but you can't even fix your own EU made car. All we get are stupid cookie prompts.

Cool, I did a similar thing last week.

I made a custom Payload CMS block that allows to create and update excalidraw diagrams within the CMS. It supports dark and light mode switching and rendering inline or as external SVG.

And last weekend I added MCP server with Oauth so I could generate and update those diagrams and add them to post drafts from Claude. I think it is more convenient since I don't have to use API billing model and don't need to build a custom UI.

Here is an example post: https://www.janhouse.lv/blog/network/self-hosting-tailscale-...

Originally I wanted to sync posts from Obsidian but it doesn't have good enough image handling which I sometimes need and I needed extra metadata to unlist or password protect or noindex some posts.

Except this is not FOSS. If it was open source, they would have chosen at least AGPL.

And also I don't think their architecture is any good for such a product.

For me personally, it would be sufficient to avoid it based on the license alone. But altogether it just looks very unappealing.

You are correct, but integration with CI/CD and other services as a part of pull-request process in a modern platform is very convenient. I would not go back to e-mail. Especially since I can self host the whole platform like Gitea.

I don't even update one file. I run it in docker with daily automatic container updates and it has been working fine without issues for years.

Yes, Debian is great.

But there is also Arch by the way :)

You can not trust the code or reviews it generates. You still have to review it manually.

I use Claude Code a lot, I generate a ton of changes, and I have to review it all because it makes stupid mistakes. And during reviews it misses stupid things. This review part is now the biggest bottleneck that can't yet be skipped.

An in an open source project many people can generate a lot more code than a few people can review.

In new installs you do stuff everything in EFI partition and skip the old /boot partition as such.

The better solution is to use tpm, unified kernel image and secure boot skipping the network unlock.

The whole process is like this -

1. enable secure boot;

2. generate and install your own secure boot keys (using sbctl);

3. use clevis to enable automatic unlocking of the root fs only when secure boot check passes;

4. generate the unified kernel image (in EFI partition) that is signed by your secure boot key;

4. use efibootmgr to enable booting of said kernel image.

(5.) If your CPU supports it, enable memory encryption in BIOS (to mitigate cold boot attacks).

The unified kernel image doesn't accept additional kernel parameters, so only parameters that are set during generation of the initram are used. The secure boot makes sure no one else has tampered with the boot chain. And TPM stores the disk key securely.

You can still add some additional network level check to make sure that your computer is in your expected location before unlocking.

And you can also include some recovery tools + dropbear in your initram (within the unified kernel image), if you expect that you will have to do some recovery from the other side of the world.

You should see the apps on MacOS. Almost every single app that is not installed from Appstore has that shitty update popup, it is driving me nuts.

I think Linux has the best solution for this - good package managers for bases system and Flatpak with Flathub repo for other apps. So you never get stupid popups, and update managers use signed packages and check those signatures before installation.

I don't think it is because they can't do it or that they want to be a base for other distros. They simply let the user choose what the user wants. And if you don't know what you want then you learn it.

I switched to arch 15 years ago to learn Linux. And it is by far the best way to understand it.

Having used Arch I can easily maintain almost any distro out there, but it doesn't work the other way around.

I am not coding while out with friends. I am just checking status and giving new instructions between breaks. It lets me spend more time away from the computer screen without feeling unease.

I have claude code hooks that send local computer notifications when action is required or processing finished. And when I step away from computer, I get those notifications through pushover. Then I login on phone to ssh (mosh) with Termius and connect to the tmux session running claude. I use this approach when watching TV with the family and laptop is not appreciated on the sofa. :)

Exactly, looks like Perl code to me. :)

I do exactly that in my container build pipelines and it is great. And then CI uploads those SBOMs to Dependency Track.

Depending on the language, scanning just the container is not enough, you for sure want to scan the lockfiles for full dependency list before it is compiled/packed/minified and becomes invisible to trivy/syft.

At this point I just want them to die off completely so we could get something better. They have been unable to make real improvements that make using Matrix a nice experience. And their existence somehow inhibits other solutions from emerging in the OSS community chat space.

How to speak from Patrick Winston at MIT is my go to. A must watch! https://www.youtube.com/watch?v=Unzc731iCUY

Real developers use whatever the fuck they want as long as it gets the job done.

Maybe they were thinking realistically that we will never get those 2Gbps from cell towers. :)

Wireguard is great, I have personally donated to it and have used Wireguard for years before it became stable. And I still use it on devices (routers) where Tailscale is not supported. But as Jason stated - it is quite basic and is supposed to be used in other tools and this is what we are seeing with solutions like Tailscale.

Tailscale makes it simple for the user - no need to set up and maintain complex configurations, just install it, sign in with your SSO and it does everything for you. Amazing!

My guess would be that Synology is an expensive but weak computer, bare minimum for NAS.

Immich does require some CPU and also GPU for video transcoding and vector search embedding generation.

I had Immich (and many other containers) running successfully on AMD Ryzen 2400G for years. And recently I upgraded to 5700G since it was a cheap upgrade.

OpenVPN is far from "no fuss", especially when compared to Tailscale.

I like to self host things so I also self host Headscale (private tailnet) and private derp proxy nodes (it is like TURN). Since derp uses https and can run on 443 using SNI I get access to my network also at hotels and other shady places where most of the UDP and TCP traffic is blocked.

Tailscale ACL is also great and requires more work to achieve the same result using OpenVPN.

And Tailscale creates a wireguard mesh which is great since not everything goes through the central server.

You should give it a try.

I create local and remote restic backups (using Backrest). I just point to the docker mount points and run database export as a pre-hook.

The offline sync was a bit problematic in the past but this year they finally got it working properly.

There is this now https://mikrotik.com/product/atl_5g_r16

I patched and rebuilt what I could and added custom Crowdsec WAF rules for this, in case I missed something.

I guess it was the Element X client that was advertised as Matrix 2.0 client and that did not work.