Huh, I thought I looked through them all when I tried it last time. I’ll check again.

Do you self-host Jitsi? The public instance has absolutely unusable FPS for streaming gameplay which is pretty much the only thing I still use discord for because it’s the only thing that seems to do it well. I read somewhere you can turn up the FPS on a self-hosted Jitsi though.

cgroup names can be read from /proc/PID/cgroup.

pgrep --exact "$1" \
  | xargs --no-run-if-empty --replace cat /proc/{}/cgroup \
  | sort --unique

I see that it can be slower because of having all the dependencies included with the flatpak itself instead of relying solely on whats installed on the system.

No. Packing its own libraries wouldn’t make it slower. If anything it would be the extra access checks added by the sandbox (which is optional FWIW, apps don’t have to use it). I haven’t ever used Flatpak but I would assume the sandbox impact is minimal if at all noticeable.

Yup!

Never seen this before, but you can enable NFS debugging with ‘rpcdebug -m nfs -s all’ (or nfsd on the server, or rpc for the underlying protocol). It prints to dmesg.

IIRC Keepass2Android does have that feature.

Other Chromium browser vendors have claimed that they will continue to support MV2 based content blockers, later revealing that they were unwilling to support the code once Google removed it.

Xitter doesn’t load for me but this is quoting Brave so I’m not so sure about that

(edit: Though I think Brave has a builtin adblocker so you may not even need it. However, just don’t use Chromium anything at all)

Wow, I didn’t know there was so much piracy on Android. At least much more so than on desktop computers (or Windows specifically I guess). Enough to make a dev stop even, not just the usual “oh no a few people are pirating our software that would otherwise not have bought it anyway”. I assumed it would be a relatively small percentage of more experienced users.

By mid-September, the iA team claimed to have spent five months making 55 updates to its app and privacy policy and was ready to scan its passports and verify its payment accounts.

Google then requested a CASA Tier 2 assessment. This needed to be done annually, either through an intensive self-directed process or through a corporate partner, like TAC Security or KPMG. By iA’s estimation, the labor and fees to do this would cost “one to two months of revenue” for "a pretty much meaningless scan,” iA suggested in its post.

This is just absolutely crazy. I feel like Google absolutely had it out for them because why would they make them go through this arduous bullshit process for what seems to be described as a text editor app here.

But giving up Factorio is a bridge too far.

Factorio has an ARM port, it runs great on my M2 MacBook. But even if it didn’t, Rosetta works well enough so that x86-only games are playable.

widget.use-xdg-desktop-portal.file-picker=1 in about:config should be the only thing you need. @projectmoon@lemm.ee

What they suggest sounds like setting up a bridge interface between your LAN and the VPN interface to connect the VPS with your LAN. That’s actually a good idea since it would not need you to have a separate /64 for your local network. In this case I’m pretty sure that your VPN needs to be a layer 2 VPN, i.e. transports whole ethernet frames instead of TCP/UDP only, for this to work correctly. Wireguard doesn’t do this, OpenVPN can for example.

To make the VPS a gateway, you need to configure it to forward packets between networks and then set it as your default route on the clients (with IPv6, default route is usually published using router advertisements, set up radvd service on your VPS for that). That’s pretty much it IIRC except for the firewall rules. Here’s an article that’s some cloud stuff but is also applicable to your situation: https://www.linode.com/docs/guides/linux-router-and-ip-forwarding/#enable-ip-forwarding

hostapd. I have no idea how you’re supposed to figure out the 50 or so options OpenWrt outputs for an AX card that I just ended up copying. And why doesn’t it detect those on its own?

I had the network before moving here (created it when I did have a public IPv4). Can’t test creating one new since it will only allow me to make one per IP.

Hm, it doesn’t? I’m not behind CGNAT but I’m in a network I don’t control (university dorm) so my gateway is just another device in the local network and I don’t have a public IP which I control, which I feel like should effectively be the same thing as CGNAT, and it works for me. Maybe it isn’t the same.

Does chromebook hardware need special distros? Debian has an armv7 port, there’s Arch Linux ARM, Gentoo packages build for arm (though I feel like you’ll have a horrible time building anything on that piece of junk), etc.

Though ARM is notoriously horribly inconsistent when it comes to bootup so I don’t know if any of these will work on this specific device.

The easy way is to just use tunnelbroker.net, that is what I currently have (this would use one of their assigned net blocks, not the one from the VPS). Set it up on the Pi, set up IP forwarding with appropriate firewall rules, make the Pi serve RA so clients can assign themselves an IP, done (IIRC).

If you want to set up the v6/v4 gateway yourself, I would do this with a /64 you can fully route to your home network like you would get with tunnelbroker.net because then you don’t have to deal with the network split and essentially two gateways for the same network (your Pi and the VPS), because otherwise your clients would assume the VPS is directly reachable since it’s in the same network when in reality it would have to go through the gateway (you would have to set up an extra route in that case on every client, I think). You’d need a second network from Oracle for this.

But it’s pretty much the same thing I would assume plus the setup on the VPS side, make the VPN route your /64 block (or use 6in4 which is what tunnelbroker.net uses), configure IP forwarding on the Pi and the VPS between the VPN interface and local/WAN respectively.

You’re looking for an OAuth-compatible identity provider (personally I use Kanidm, if Keycloak does that too that works, I’ve never used it). And then set it up as the auth mechanism for Immich, and whatever else you want: https://immich.app/docs/administration/oauth

Yeah, I have an OpenVPN TAP server running for this purpose. (TAP so that broadcast packets work)

What do you mean? This is perfectly modern. Material UI and minimal, outline style icon theme. That’s all the rage with web devs nowadays. Amazing.

(Not that there’s anything wrong with that in this case, that’s the Android style after all. But personally I heavily dislike Material UI.)

I would say that this UI is ugly though. Spacing is all over the place, the icons don’t look cohesive at all apart from the colors used (for example, rounded vs sharp corners), the yellowed paper looking background color, overuse of bold/italic/colored text (especially multiple of those at the same time), inconsistent display of the same thing (in one screenshot the mailbox name is displayed as “Gmail”, in the other as “[Gmail]”). And so on.

But that doesn’t mean it’s “outdated”, this would have been equally as bad 10 years ago.

(I just have a knee jerk reaction to people saying “outdated UI” because usually it’s used as a justification to replacing perfectly well designed UI with a worse version just so that it follows contemporary design trends. Cf the Windows Settings app.)

How about GNU M4 + Make (output)?

(to be clear this is a joke suggestion. but yes it is what I legitimately use)