simosx

Note that bridged networking does not work if your computer is connected to the LAN over WiFi.

With virtual machines, the separation between what different customers get is quite straightforward.

With Docker containers, how do you solve this separation?

multipass supports two hard-coded remotes, `release:` and `snapcraft:`. It should be feasible to be able to launch any of the VM images from LXD (i.e. https://us.images.linuxcontainers.org/), as long as there was a way to add a new _remote_.

edit: there is a pending issue https://github.com/canonical/multipass/issues/307

Thanks for the correction.

Indeed, you can launch many more images than those you get when you run "multipass find".

There is a post about this at https://discourse.ubuntu.com/t/new-way-to-launch-images-othe...

This is a typical use-case scenario for using Multipass. You just use the IP address of the Multipass VM on your browser at the host and it will work.

On MacOS, Multipass uses the native VM software provided by the operating system. And you use Multipass to launch Ubuntu virtual machines. I do not think that Multipass would be able to directly launch custom qcow2 images.

However, your question is actually whether on MacOS you can have nested virtualization. Because, if MacOS (and Multipass support) it, then this is what you need.

You get a virtual machine, so you can build and run untrusted software. If you have very specific old software (for example, something that runs on Ubuntu 12.04 LTS), then you can install LXD inside a Multipass VM, and from LXD create a system container with Ubuntu 12.04.

While Multipass supports LTS versions of Ubuntu and recent development versions of Ubuntu, with LXD you get container images for many more versions and other distributions. See the list at https://us.images.linuxcontainers.org/

Currently, you can only use WSL1 in Windows. WSL1 is emulation and has way too few features compared to a proper virtual machine. WSL2 currently is available only through the Windows Insider Program, which is something that you will NOT setup on a work machine.

WSL2 is still work in progress. Currently it misses many features and the provided Linux kernel does not include many kernel modules (several for networking are missing). For example, WSL2 currently does not support bridge networking.

This has gone full circle and LXD is starting to support virtual machines in addition to system containers.

I was expecting that the multipass project would be absorbed by LXD but it does not look like that would be the case.

multipass is virtualization (KVM, Hyper-V, etc) and not containers.

Some GNOME community members and developers got an anti-Ubuntu stance since about ten years ago which I think poisoned the Linux desktop. It is a sad "shoot my foot" strategy and they are not doing something to resolve it.

I was contributing to GNOME for about a decade (1999 to 2011), mostly i18n, l10n and bug reporting.

Canonical engineer on performance improvements on GNOME for Ubuntu 19.10: https://discourse.ubuntu.com/t/boosting-the-real-time-perfor...

There is an article [1] by an Ubuntu engineer that describes the performance boost.

For Ubuntu 20.04, there will be extra work for performance boost on high-end computers.

For Ubuntu 20.10 there will be extra work for performance boost for low-end computers.

1: https://discourse.ubuntu.com/t/boosting-the-real-time-perfor...

Great story with many details, including technical details.

As a summary,

* The migration involved 100 employees at 14 different offices at the state of Kerala.

* At the same time there was a migration from legacy text encodings to Unicode. They used a GUI program to convert text in legacy encoding to Unicode (language: Malayalam).

* It is a full software migration to free software, including the operating system.

* They use a Linux distribution based on Kubuntu

* The typesetting software is Scribus.

The main benefit is that it makes Steam not depend anymore on the installed packages of the host Linux distribution.

Part of this is that Steam can still use 32-bit libraries even when the host Linux distribution has fully moved to 64-bit.

See recent discussion at https://ubuntu.com/blog/statement-on-32-bit-i386-packages-fo...

While you would have expected from Valve to use an existing container platform, they went ahead and used directly the security features of the Linux kernel in Steam.

LXC and LXD are system containers, which are similar to VMs but using Linux container facilities.

There is an entry-level guide at https://blog.simos.info/how-to-easily-run-graphics-accelerat... that describes how to setup a LXD container so that the GUI applications in the container appear on the host. Here, the GUI applications in the container are using the same X11 server as the host, therefore there is no effort for security isolation.

It is possible for those that are interested, to use features from `x11docker` (second X server, xpra, Xephyr) to provide security isolation with LXD containers.

For the Firefox use-case that you describe, you can setup Firefox and then take a snapshot of the container (`lxc snapshot ...`). Every time that you want to run Firefox, you can switch the container back to the snapshot state and start Firefox.

The source of the problem is that these ride-hailing companies want to expand so fast, that they do not perform any substantial screening for their drivers.

Another ride-hailing company, Hitch, was suspended for this reason.

Likely they do this for liability reasons, not safety reasons. Because if a female customer is not able to get a taxi ride after 8pm, they have fewer options for transportation.

It does indeed say that.

I do not think this has been a last-minute addition. I read the paragraph again, and I found it difficult to quickly scan the text that is presented in that font. The letters appear to me (Linux/X11) as too thin and faint.

Does anyone else have this issue?

It should be common in most European countries that have national health systems.

edit: Source: https://blogs.mediapart.fr/emmanuel-kosadinos/blog/310818/no...

I have seen this list.

Let's search if "Greek" is supported. It is, because I can see "Creek"? Creek is not Greek, it is the language/script of an American Indian tribe. Then, the list is too long to find a specific language.

What should have happened, is to add in the document an extra paragraph that reads like this:

> This font currently supports the Latin-based Unicode character ranges. See below the full list of language support.

It takes effort to figure out which languages/scripts are supported.

The FAQ says that over 200 languages are supported but what they actually mean is that the font covers the Unicode Basic Latin, Latin-1 Supplement and possibly some of the Latin Extended.

That is, the font does not support yet anything non-Latin.

They are quite useful as "VMs at the speed of application containers".

When you use application containers, you tend to create a more complicated setup and lose visibility as to what's going on in the system.

Just like you use VMs on a baremetal server, you use system containers in a VM.

But I find more important to use LXD as a tool for software development and also for Linux desktop use.

If you want to setup nodejs or something similar, it makes sense to put it in a LXD container so that it does not mess up your host. Each step of the workflow (creation, deletion, etc) takes a few seconds or less.

You can also setup LXD containers to run GUI applications. It makes big sense if you want to run games (like Steam) so that your desktop does not get polluted with i386 packages. You can also use for development tools, such as those from JetBrains, Android Studio and more.

> – The new CentOS Stream is a rolling-release distro that tracks just ahead of Red Hat Enterprise Linux (RHEL) development

So if someone wanted a free RHEL through CentOS, now CentOS is no longer a free RHEL.CentOS is now RHEL-devel.

If EasyOS is specifically for containers, I do not see a container image at the LXC/LXD repository at https://us.images.linuxcontainers.org/

Even Kali Linux has a container image at https://us.images.linuxcontainers.org/

edit: If anyone at EasyOS wants to add a container image, see as an example the PR for Kali, https://github.com/lxc/distrobuilder/pull/179

You need to switch to `http://` (from `https://`).

But why ElGamal?

There was drama about the MOTD two years ago.

Here is the summary from LWN, https://lwn.net/Articles/726902/

By default, a snap package cannot touch your dot directories in your $HOME. That is good for your security.

You would need to copy once (or `rsync`) from `~/.mozilla/firefox/` to `~/snap/firefox/current/.mozilla/firefox/`.

$ snap info firefox

...

channels:

  stable:        67.0.3-1    2019-06-18 (230) 221MB -

It is already available to use.

Damned if you do, damned if you don't.

Regarding the reference to "like mounting the CD ISO" for AppImage. All three of them actually mount one or more filesystems in order to install the package.