• 1 Post
  • 378 Comments
Joined 3 years ago
cake
Cake day: June 30th, 2023

help-circle



  • Saying “this starts difficult and stays that way” isn’t a good selling point for people to use your system.

    Both shouldn’t be configured that far by most users though and the basic usage of both has similar complexity.

    Edit: To be honest the actual difficulty of a system also depends on what you do with it. Windows at work and Linux at work both require only a basic understanding of how to use the OS to use effectively. Basic usage and restarting it if something isn’t working correctly. At home you’re more involved with actually installing the software that you use, the system settings and Updates/when they happen. Linux makes installing software safer due to the repos preventing the easy virus downloads and windows makes drivers for some windows only hardware work without complex setup. Assuming we’re buying a PC that ships with Linux drivers will work though that’s what I assume your average person using Linux would use (as in the average person uses a PC with the OS it is shipped with).


  • invalid reply?

    Can you use more than two words to explain your point? The only operating system I know that can be used by most people without teaching them the usage is Android and Chromeos and some similar mobile platforms, maybe MacOS though I don’t see enough people starting on that platform to know if it’s intuitive or not.

    Of course people can also figure out the usage over time but that’s more by trying out what works and seeing what does what and most people just give up before they get that far.


  • …So we should use android? Maybe chromeos?

    I’ve had windows classes in school, I’ve later learned how to configure Windows and Linux servers. Windows starts simple and isn’t easy to customize away from the default configuration. Linux starts difficult but doesn’t grow as quick in complexity. Both shouldn’t be configured that far by most users though and the basic usage of both has similar complexity.

    Why do you think an operating system shouldn’t have classes? From what I’m hearing around the workplace(though thats biased) more people should have basic computer knowledge and they even get training time allocated for in-house training courses.



  • My devs prefer Docker, and don’t want Kubernetes! We have a fix for that: Portainer-D2K. Portainer-D2K is a Docker translator for Kubernetes

    As someone who was using mostly podman and is now switching to kubernetes I can confidently say that the cli interface was not what was holding me back. Instead it was the sheer amount of setup and complexity kubernetes can bring into an environment. Kubernetes is great when you want most or all the features it offers, it is horrible if you want to deploy 3 containers for your application on one host.

    Oh well, not like I have to care, I wasn’t interested in portainer to begin with.







  • Add renovate bot (self-hosted or not) or a similar not to your nixos repository to automatically update your lock file. Enable automatic system rebuilds (not live, nixos-rebuild boot…) to keep in sync with the repo.

    Include multiple nixos systems in one repo, then reuse configuration or even make them reference each other (if you want that)

    Find an issue to report upstream (or even add a pull request)

    Fully automate your reinstall using disko and nixos-anywhere (don’t forget luks)

    Be happy (optional)

    Go over everything you’ve written in your repo so far, realise it’s formatted wrong and spend 2 hours fixing it until it no longer works

    Build a derivation for something that doesn’t exist (also add a pull request if applicable and you’ve got time to maintain it)

    Add a little nixpkgs-unstable, as a treat (use overlays)

    Backups

    Build a server so convoluted, kubernetes is easier to manage (I am here)






  • There exists shims that are signed by Microsoft and were not revoked. Normally this would be fine but these shims had weaknesses that allowes hackers to load any code using them. Normally the shims should only run other signed/trusted code. These vulnerable shims can be used to bypass secure boot by replacing your existing bootloader with the shim and then running rootkits/hackerOS/whatever and bypass bitlocker using TPM or just running a level 0 virus that can’t be detected by the OS on any PC which trusts Microsoft’s keys (99% of all PCs)

    To prevent this you’d have to not trust the vulnerable shims by either adding them manually to the exclusions list or using your own secure boot keys which would only trust the few bootloader files your pc uses and no other files.

    Worst case: it behaves as if secure boot wasn’t on. Without secure boot you wouldn’t need this exploit cause then you can replace the bootloader with whatever you want anyways. With or without secure boot you need administrative permission to replace the bootloader so this is only an issue after your PC is already compromised or if someone had physical access to your PC.