You could say the same thing about sudo. Sudo's codebase is massive, compared to alternatives like doas, but it comes with many features doas does not have, like being able to ask a remote LDAP server if a user will be able to escalate.

I find it absurd that we have just simply accepted the idea of a setuid binary with built in networking code, as our primary admin escalation tool. 100,000+ lines of C code, code that has had multiple buffer overflow exploits*, in a setuid binary, just for temporary admin privileges. Does that seem necessary to you?

Polkit provides an alternative to that. If you don't need the features, then fine, you don't have to use run0 — but then you can't use sudo without being a hypocrite. No longer do I have to have rely on a setuid binary that tries to do everything in one program when I really need sudo's features, instead polkit handles authentication (including asking remote resources if an action is okay), and run0 handles actual escalation.

In another comment in this thread, you mention sudo being lightweight — which is outright false. Compared to doas or su, it's extremely heavyweight, and with that complexity comes more risk of vulnerabilities. You also mention pkexec, for executing with polkit, but pkexec is also setuid, and has many of the same pitfalls.

*Buffer overflow exploits in sudo:

1. https://arstechnica.com/information-technology/2020/02/serious-flaw-that-lurked-in-sudo-for-9-years-finally-gets-a-patch/
2. https://blog.qualys.com/vulnerabilities-threat-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit

I've been watching this for a while now.

Most interesting is:

https://github.com/snowfallorg/nix-software-center , a GUI software center for nix

And https://github.com/snowfallorg/nixos-conf-editor , a GUI config editor for nix

Just like Eelco's way of governing, it will likely have 0 effect on 99% of people using NixOS,

Flakes not being stabilized, or worked on by Eelco, despite him literally being the inventor absolutely has an effect on every single Nix user. The flakes-nonflakes aplit is part of why the documentation on nix is so poor. Some things only support one or the other, and it's a pain.

The aux fork of nix (which idk what's gonna happen to it) said they would stabilize the current implementation of flakes as v0. I hope this new council does the same, because it's been far too long. So much of the community uses flakes that's it's basically official, but it being "experimental" means they can't be mentioned in official docs, or included by default in the official installer. You have to edit a config file to enable flakes.

The worst part of this all, is that the Determinate Systems nix installer, only comes with flakes and no channels (old way) - and Eelco literally works for Determinate Systems. Despite all of this, flakes are still "experimental".

I hope things change. Flakes are legitimately better, a minor addition in complexity, in exchange for making it easy to reuse code. And finally having unified documentation and tooling (if flakes become the main way) will probably be the best benefit.

I really hope this council moves flakes put of their "experimental" status. If so, then democracy has spoken: the users want flakes.

Non linkedin link shortener link (yes I want to go to a page that's not linkedin):

https://www.gomomento.com/blog/rip-redis-how-garantia-data-pulled-off-the-biggest-heist-in-open-source-history

It's a shame the price you pay for that is no crossplatform support.

If you have a little bit of server management know-how, you can set up https://geysermc.org/, which allows for crossplay between bedrock and java on a java server.

Don't worry, someone made a translator: https://github.com/bottom-software-foundation/bottom-rs

It's cause you're not actually supposed to use nix-env: https://stop-using-nix-env.privatevoid.net/

You're actually supposed to be using nix search nixpkgs#packagename to search and nix profile install nixpkgs#packagename to install.

However, to use both of those, you need to have the "experimental" (not really though, most of the community uses them) features of nix-command and nix flakes enabled, which they aren't by default.

And of course, nowhere on the main documentation did I find any if that, I only found it via the pain of using it wrong, and forum posts.

Nix's documentation is horrific. I've had situations where I only got help via discord...

I use https://github.com/Ylianst/MeshCentral

For this usecase. This also lets me do things like run admin cmd commands. It should be noted, however, that the Windows UAC prompt won't show up in a VNC session by default, you either need to configure UAC, or set up RDP.

The benefit of docker is portability. You can run software anywhere. Rather than going through all this pain of installing and managing systemd services, you can just run a docker container, often in only one command. Docker also handles things like setting environment variables, which are sometimes used by apps as a an alternative for, or even replacement for settings filed, like in the lemmy docker example: https://github.com/LemmyNet/lemmy/blob/main/docker/docker-compose.yml

Docker succeeds where java failed, but in a language agnostic way.

And I disagree with the author's point about disliking docker-only apps, for two main reasons. One, it isn't the developers responsibility to package things for every system, and two, docker containers are mostly self documenting, being very close to simply a shell script. I almost always look at dockerfiles, and I have only seen one or two that are not simple to extract to make them run outside docker.

For example, the lemmy docker image: https://github.com/LemmyNet/lemmy/blob/main/docker/Dockerfile

The author acts like it's some advanced witchcraft or something, but it's just using rust to compile stuff on an debian based system. Every command used to build lemmy is right there. Then, you can look at the environment variables set in the docker compose, and set them in a systemd service or something.

How do I tag people on lemmy?

u/tony

I'm in the max server limit, 100 right now, and many of those are people who treat discord as github, which is so annoying (but many projects are of questionable legality, like Dan's palace which makes and distributes completed android and vita ports of other games for free).

One time I got excited since there was announcement for the half life 2 android source port discord. I thought it was a big update or maybe a new game, but what I saw was something like:

the memes channel is for memes, not child porn

It's just discord that has these issues. Matrix or IRC don't have these problems. Discord just creates a kind of culture that fosters this stuff.

Incorrect, from wikipedia:

The available research indicates that the brain structure of androphilic trans women with early-onset gender dysphoria is closer to that of cisgender women than that of cisgender men.[3] It also reports that gynephilic trans women differ from both cisgender female and male controls in non-dimorphic brain areas

Aka: Trans women may have been born with the body of a man, but they were born with the brain of a woman.

https://en.m.wikipedia.org/wiki/Causes_of_gender_incongruence#:~:text=The%20available%20research%20indicates%20that,in%20non%2Ddimorphic%20brain%20areas.

Once federation gets added to one of the FOSS, self hosted alternatives, I'll probably switch. I'll mirror stuff to github probably, for resume/recruiter purposes, but the CI/CD, website deployment, and main development will happen on whatever alternative I chose.