monovergent

joined 9 months ago
 

I like my Linux installs heavily customized and security hardened, to the extent that copying over /home won't cut it, but not so much that it breaks when updating Debian. Whenever someone mentions reinstalling Linux, I am instinctively nervous thinking about the work it would take for me to get from a vanilla install to my current configuration.

It started a couple of years ago, when dreading the work of configuring Debian to my taste on a new laptop, I decided to instead just shrink my existing install to match the new laptop's drive and dd it over. I later made a VM from my install, stripped out personal files and obvious junk, and condensed it to a 30 GB raw disk image, which I then deployed on the rest of my machines.

That was still a bit too janky, so once my configuration and installed packages stabilized, I bit the bullet, spun up a new VM, and painstakingly replicated my configuration from a fresh copy of Debian. I finished with a 24 GB raw disk image, which I can now deploy as a "fresh" yet pre-configured install, whether to prepare new machines, make new VMs, fix broken installs, or just because I want to.

All that needs to be done after dd'ing the image to a new disk is:

  • Some machines: boot grubx64.efi/shimx64.efi from Ventoy and "bless" the new install with grub-install and update-grub
  • Reencrypt LUKS root partition with new password
  • Configure user and GRUB passwords
  • Set hostname
  • Install updates and drivers as needed
  • Configure for high DPI if needed

I'm interested to hear if any of you have a similar workflow or any feedback on mine.

[–] monovergent@lemmy.ml 1 points 2 weeks ago

They sell finished motherboards with the upgrade on eBay and Aliexpress. Nothing newer than Ivy Bridge though.

[–] monovergent@lemmy.ml 1 points 2 weeks ago

Is that with the 3612QE or the 3615QE?

 

Anyone here use an X230 with the quad-core mod? I'm looking into it and was wondering about the reliability and battery life compared to the stock i5-3320M.

 

Been using searx.be for a bit now and they had many results in Dutch and German, which can be expected for a site based in Belgium. But does anyone notice an influx of results in Russian? Did they change the server location or are users in Russia catching on to it? Yandex isn't toggled on in the settings either.

Not trying to judge security by language. I just kinda liked having results in a mix of languages I could read.

[–] monovergent@lemmy.ml 3 points 3 weeks ago

What did it in were the semi-annual mandatory feature updates, which restored the invasive settings and bloat I worked hard to remove. Already being acquainted with Linux at that point, I began dual-booting and later having Windows on an entirely separate machine for a few stubborn programs I needed for work.

What made me acquainted with Linux was looking for alternatives after the loss of theming options and the start menu in Windows 8. That eventually brought me to my present Debian setup with the Chicago 95 theme, which recreates (and even improved) the workflow and stability I had grown to love in Windows 2000.

The first time I ever booted into a Linux iso, however, was to migrate files off of my machine, which was excruciatingly slow to transfer files under XP.

[–] monovergent@lemmy.ml 1 points 1 month ago

TIL what happens when the thermometer maxes out

 

Banking apps seem to be a motif among things that don't play well with privacy ROMs. My bank's website does everything I could want out of it. I think I might be ignorant to something.

  • What about banking apps is especially compelling?
  • How often do banks put must-have features behind an app?
  • And should I be concerned that banks might move away from offering services through browsers?
[–] monovergent@lemmy.ml 19 points 1 month ago (1 children)

IMF: Imperialist Monetary Fund

[–] monovergent@lemmy.ml 1 points 1 month ago

If you want to avoid this judgement, get an Apple silicon Macbook Air or something...

Damn, me over here trying to flex my Chicago95-ass X201T to my classmates

[–] monovergent@lemmy.ml 12 points 1 month ago* (last edited 1 month ago) (1 children)

Storytime!

As a physics major, daily driving Linux worked out pretty smoothly. The thing that saved me from trouble the most was making a weekly full system backup (I used Clonezilla and my file server). If anything was truly incompatible, I took care of it on the school's computers.

In my second semester, I began dual-booting on my X201 Tablet and desktop, eventually booting into Windows infrequently enough that I made my X201T Linux-only by the end of my second year.

Around that point, I began using LUKS full-disk encryption on my machines and USB drives. I highly recommend if you don't already, even if just for peace of mind. I have strong ideas about the way things ought to look and work, so being able to customize Linux to my heart's content (with Chicago95 ofc) made doing work on my computer a bit more enjoyable.

Documents

  • MS Office: Libreoffice worked 95% of the time. For the other 5%, I used the school computers or my Windows VM.
  • Google Docs and GMail: accessed through Chromium, which I only used to access Google and sites linked to my school's SSO system.
  • We did a lot of writing in Latex, though it might be a physics thing
  • A lot of other small stuff I'm starting to forget, but if I don't mention it, I probably did it through the browser.

Lab

  • MATLAB: GNU Octave sufficed 75% of the time, often needing just slight changes to the code. Otherwise I used the lab computers or my desktop with actual MATLAB.
  • Proprietary dana analysis software: One had a .deb package for oldoldoldstable so I set up a VM just for that. Otherwise, lab computers it was.
  • Lab computers running old and new versions of Windows were available to us, so if there was anything computationally intensive or requiring proprietary software, I would just take care of it in the lab.

Social

  • Slack, Discord, Facebook, Instagram, Whatsapp: browser client, which I would check on a schedule

Tools

  • VPN: NetworkManager, though it was a bit janky. I think it's a lot better nowadays.
  • Printing: We had a web print portal to upload docs and pdfs to a printer of our choice.

Graphics

  • Mostly prepared my posters, etc in a mix of Libreoffice Draw, GIMP, and Inkscape
  • Adobe: Had to use it on one occasion. Used the library computers where it was installed for everyone to use.
  • Digital notes: I would use Xournal on my X201 Tablet whenever I forgot to bring my notebook or refill my fountain pen. Managed to impress a few of my iPad-toting classmates when I whipped out the pen and the display around on what they believed to be an ancient clunker.

As for the desktop, I had purchased it with gaming in mind, but it eventually became my SMB file share, media server, and RDP session host so I could make any library desktop like my own. Each thing in its own VM, of course. By the end of it, I was one of about 3 students running a server over the campus LAN. Even in the comp sci department, surprisingly few students used Linux.

Linux also met all of my computing needs while studying abroad in Germany. For five whole months, I had not used Windows once. Though my SSD did give out on me once, a backup saved the day.

A friend once did need to use a rather invasive remote proctoring tool. Highly recommend a separate laptop or at least a fresh SSD for this case.

Mobile privacy, if it's relevant

  • I was in the fortunate position where none of my classes or jobs required proprietary mobile apps
  • Friends used Venmo or whatever else, I paid back in cash
  • SMS and emails sufficed for regular communication

Overall, it was smooth sailing using Linux throughout my college years and no incompatibilities that couldn't be solved in the library or a computer lab.

edit: i used debian btw

 

I'm about to degoogle my stock Android phone. For the past few years, I've used it to handle the non-open source apps that I don't want running on my main phone. As I've finally weaned off GApps, I realize that I might as well go degoogle the rom as well.

edit: to be clear, I'll be using sandboxed Play services on GOS

But since that phone is my compatibility guinea pig, is it likely I'll still run into an app that demands unmodded Android with no alternatives? In your experience, has any bank or other service required the app on regular Android, with no alternative for the desktop, browser, etc?

[–] monovergent@lemmy.ml 2 points 1 month ago (1 children)

I wanted to see if having a dedicated low power writing machine with "emergency" internet access would help with my productivity. Also a bit of nostalgia as it was one of my first laptops. Nothing too remarkable about it as long as I kept to offline office tasks. But between the short battery life and the profound slowness of google docs (have to use it for work, ugh), I went back to using my X230.

[–] monovergent@lemmy.ml 4 points 1 month ago (3 children)

Assuming full GUI is preferable over CLI/TUI/tiling WM minimalism, as it was for me while toying with a 2005 Celeron laptop with 2GB RAM

Hardware:

  • Use a native PATA SSD
  • Take good care of the T42, it's relatively delicate as far as ThinkPads go

OS:

  • antiX for more packages and less configuration
  • Alpine or Adelie if you are more adventurous

Desktop:

  • IceWM (default in antiX), FVWM, and wmaker are all snappy enough
  • XFCE is marginal and will eat up a good chunk (~450MB) of your precious RAM

Browser:

  • Netsurf is workable but there will be sites that don't work
  • Librewolf with Javascript disabled by default (uBlock makes it easy to whitelist as needed) might do, but expect a severe CPU bottleneck
  • Security aside, surfing the web on 98 will simply be painful
  • I would also remote into my desktop's browser over LAN with either RDP or compressed X forwarding. YMMV if not over LAN

Productivity:

  • Modern Libreoffice unfortunately feels a bit sluggish on old hardware. Writing in plain text and making spreadsheets in Gnumeric might be a better experience, as it was for me
[–] monovergent@lemmy.ml 2 points 1 month ago

Middle mouse click is indispensable but it seems to be first to fail on my mice

[–] monovergent@lemmy.ml 16 points 1 month ago (2 children)

Wayland, but I'm patiently waiting for xfce to support it

[–] monovergent@lemmy.ml 16 points 1 month ago (12 children)

yt-dlp. Too many options to remember and look up every time, but all useful and missing from GUIs when you just want to dowload audio or 'good enough' quality video in batches without re-encoding.

While nmtui is perfectly fine for the CLI-uninitiated, I sometimes wonder why the nm-connection-editor window doesn't provide the same level of functionality.

 

As I understand it, X11 has many inherent security concerns, including programs being able to read the contents of other windows and intercept keystrokes. Wayland addresses these concerns but at the moment breaks certain functions like screen readers, cursor warping, and the ability of a program to resize its own window.

I am curious as to how the display protocols of MacOS and Windows handle these situations differently. How does a program in those operating systems gain permission to read the contents of other windows, if at all? What is to be done in Wayland for these functions to be more seamless or are there inherent obstacles?

view more: next ›