Eskating cyclist, gamer and enjoyer of anime. Probably an artist. Also I code sometimes, pretty much just to mod titanfall 2 tho.

Introverted, yet I enjoy discussion to a fault.

  • 17 Posts
  • 418 Comments
Joined 2 years ago
cake
Cake day: June 13th, 2023

help-circle


  • Yes. But you didn’t.

    Knowing what something does is important.

    If you install a piece of software expecting it to do something it actually doesn’t, that can leave a security gap.

    I wasn’t just correcting you. I was making sure you knew that if you install a “firewall” it won’t do the thing you’re looking for.

    As for an actual answer, most distros will already ask you to confirm if you try to run a random appimage you downloaded.

    But you shouldn’t need to do that in the first place. On linux, there’s not really any need to go running random programs downloaded using your web browser, since you can just download software from trusted reposotories that aren’t going to host malware to begin with.

    Unlike on windows… You don’t need to risk it in the first place.





  • Almost everything you do on desktop linux is already “outside the core os”.

    This is mostly relevant for server software configuration, where you should run services with as few system privileges as possible. Preferably you isolate them entirely with a separate user with access to only the bare minimum it needs.

    This way, if a service is compromised, it can’t be used to access the core system, because it never had such access in the first place. Only what it needed to do its own thing.

    By default, nothing you run (web browser, steam, spotify, whatever) should be “running as admin”.

    The only time you’ll do that on desktop linux, is when doing stuff that requires it. Such as installing a new app, or updating the system. Stuff that modifies the core os and hence needs access.

    Basically, unless you needed to enter you password to run something, then it’s already “outside” the core os.



  • I also need to work out how to do automatic certificate renewal and if that’s even worth doing

    This is what certbot is for. For example, with nginx, you just set up the webserver to be reachable via your domain.

    You then install and run certbot, and it will aquire, install and configure, and then set itself up to auto-renew, a certificate. All with just one command.

    With Nextcloud specifically I also don’t like the fact that you can’t change the domain after the initial setup

    Yes you can?

    I’ve done it thrice now.

    Is this some limitation of the docker AIO stack?




  • MentalEdge@sopuli.xyztoSelfhosted@lemmy.worldDo I need a NAS ?
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    16 days ago

    No sane NAS should work that way.

    Unless you have a giant raid array, where you need all the drives running at the same time on the same system, plugging in a single raid 1 member, for example, via usb to sata adapter, should let you access its contents just fine.

    Provided you’re on an OS that can read the file system. That can require some extra effort on windows.

    But yeah. Beware of the pre-built NASes. The vendor lock-in is real.





  • MentalEdge@sopuli.xyztoLinux@lemmy.mlSaved my parents 2015 MBA
    link
    fedilink
    arrow-up
    3
    arrow-down
    1
    ·
    edit-2
    19 days ago

    Don’t be difficult.

    You really cannot argue that the layout, and hence how people would actually navigate it is not “about the same”. Your words.

    To bring up a cosmetic difference is a nitpick. It’s the breeze theme, with a personal color scheme on top, not something explicitly made to look like MacOS. Which it could be.



  • KDE can be set up such that a ex-mac-user barely has to re-learn anything.

    The difference is that while gnome looks a lot like MacOS, it isn’t exactly like it in terms of layout. An ex-mac-user will look for certain things in certain places, and won’t always find them. (such as power off/restart being up in the left corner)

    Meanwhile, the customizability of the KDE desktop means you can manually put the same things in the same places as on MacOS. You can put a krunner search button in the same spot as the spotlight search button. You can make a panel that behaves like the dock, floating and shrinking to fit the number of icons in it. You can have a top panel with a power menu on the left end, and you can display a global menu to the right of it. Even the krunner keybind is the same, and spotlight people tend to pickup krunner like nothing.

    Finally, the KDE settings application seems to be the most similar to the modern MacOS settings application.

    The big caveat being that the user will need someone who can instruct them with setting this up, or who can set it up for them.