Official statement regarding recent Greg' commit 6e90b675cf942e from Serge Semin

Hello Linux-kernel community,

I am sure you have already heard the news caused by the recent Greg' commit 6e90b675cf942e ("MAINTAINERS: Remove some entries due to various compliance requirements."). As you may have noticed the change concerned some of the Ru-related developers removal from the list of the official kernel maintainers, including me.

The community members rightly noted that the quite short commit log contained very vague terms with no explicit change justification. No matter how hard I tried to get more details about the reason, alas the senior maintainer I was discussing the matter with haven't given an explanation to what compliance requirements that was. I won't cite the exact emails text since it was a private messaging, but the key words are "sanctions", "sorry", "nothing I can do", "talk to your (company) lawyer"... I can't say for all the guys affected by the change, but my work for the community has been purely volunteer for more than a year now (and less than half of it had been payable before that). For that reason I have no any (company) lawyer to talk to, and honestly after the way the patch has been merged in I don't really want to now. Silently, behind everyone's back, bypassing the standard patch-review process, with no affected developers/subsystem notified - it's indeed the worse way to do what has been done. No gratitude, no credits to the developers for all these years of the devoted work for the community. No matter the reason of the situation but haven't we deserved more than that? Adding to the GREDITS file at least, no?..

I can't believe the kernel senior maintainers didn't consider that the patch wouldn't go unnoticed, and the situation might get out of control with unpredictable results for the community, if not straight away then in the middle or long term perspective. I am sure there have been plenty ways to solve the problem less harmfully, but they decided to take the easiest path. Alas what's done is done. A bifurcation point slightly initiated a year ago has just been fully implemented. The reason of the situation is obviously in the political ground which in this case surely shatters a basement the community has been built on in the first place. If so then God knows what might be next (who else might be sanctioned...), but the implemented move clearly sends a bad signal to the Linux community new comers, to the already working volunteers and hobbyists like me.

Thus even if it was still possible for me to send patches or perform some reviews, after what has been done my motivation to do that as a volunteer has simply vanished. (I might be doing a commercial upstreaming in future though). But before saying goodbye I'd like to express my gratitude to all the community members I have been lucky to work with during all these years.

I've been 100% on Linux for several years now and I don't miss Windows at all in any aspect.

But in my opinion, there is one thing that Windows does significantly better than Linux, kiosk mode.

I wish Linux had something similar. All the solutions I've been able to find are far more complex and technical to implement and use.

If anybody has suggestions for something that's easy to use on Linux that works similar to Windows kiosk mode, I'd love to try it.

Edit: including corruption of superblocks

[Solved] So I disabled the CD ROM repository using the software and updates application on Debian 12 because it kept asking me to insert the CD ROM when I would try to install stuff.

After disabling it I used Aptitude to update the packages I had already installed but I noticed that before I disabled the CD ROM repository it told me that because I didn't have it inserted that it used some older versions of software.

After removing the CD rom repository it just updated everything and didn't show that message.

My concern is that I know Debian uses some older versions of stuff because of its stability and I read very briefly about "Franken Debian" situations where people use versions of stuff that weren't intended to be used with the stable version of Debian.

Did I mess up by doing that and create a situation like that? And if so, after a fresh reinstall when I get here again is virtually mounting the USB stick I have the Debian DVD ROM on an option for it to stick with that CD ROM repository? (I don't have a physical CD ROM on this machine)

I see that it can be slower because of having all the dependencies included with the flatpak itself instead of relying solely on whats installed on the system. I read that this means it isolates or sandboxes itself from the rest of the system.

Does this not mean that it can't infect the rest of the system even if it had malware?

I have seen people say that it isnt good for security because sometimes they force you to use a specific version of certain dependencies that often times are outdated but I'm wondering why that would matter if it was truly sandboxed and isolated.

Do they mean that installing flatpak itself is a security risk or that also specific flatpaks can be security risks themselves?

[Solved] just had to log out and back in Original post: I'm running Debian 12 and I set a separate root password from my username password.

When trying to install a .deb file I noticed that it said I was not in sudoers file so I looked it up and tried the command SU and successfully entered my root password.

The I tried doing

sudo usermod -aG sudo [username]

And then I verify the addition of the user to the sudo group with

groups [username]

And this does indeed show that I am in the sudo group however when I try to install a .deb file after that or even sudo apt update its still telling me I am not in sudoers list.

Any ideas what I'm doing wrong here?

I went with GNOME just because I'm used to it and want stability as my main focus but I was wondering if using one DE over another can affect security or privacy at all? Or is that all dependant on the distro you are using?

Posting here as there doesn't seem to be an active Arch Linux community.

I noticed while updating my system today that I have a bunch of qemu packages I don't recall installing. So I took a look at why they were there and found this:

Name            : qemu-base
Required By     : qemu-desktop
Install Reason  : Installed as a dependency for another package

Name            : qemu-desktop
Required By     : None
Optional For    : qemu-base
Install Reason  : Installed as a dependency for another package

It seems like qemu-desktop was a dependency for something I later removed and pulled in qemu-base. However, because of the dependency cycle, they aren't showing up as orphans and has just been hanging around in my system along with 150mb of other dependencies.

Correct?

Highlights

• Fix an fd leak and confusion in the protocol that would cause leaks and wrong memory to be used.
• Fix bug where the mixer would not be synced correctly after selecting a port, leaving the audio muted. (#4084)
• Backport v4l2 systemd-logind support to avoid races when starting. (#3539 and #3960).
• Other small fixes and improvements.

PipeWire

• Fix a bug where renegotiation would sometimes fail to deactivate link.
• Fix an fd leaks and confusion in the protocol.

modules

• Fix a use-after-free in the rt module when stopping a thread.

SPA

• Fix bug where the mixer would not be synced correctly after selecting
• a port, leaving the audio muted. (#4084)
• Fix a compilation issue with empty initializers. (#4317)
• Backport v4l2 systemd-logind support to avoid races when starting. (#3539 and #3960).
• Fix a potential crash when cleaning ALSA nodes.

JACK

• Align buffers to the max cpu alignment in order to allow more optimizations.

Fixed a bug that could cause suspend/resume to fail when using the NVreg_PreserveVideoMemoryAllocations option: https://github.com/NVIDIA/open-gpu-kernel-modules/issues/472 Fixed a bug that caused the cursor image to be truncated on Gamescope: https://github.com/ValveSoftware/gamescope/issues/1099 Re-enabled GLX_EXT_buffer_age on Xwayland. This extension had been previously disabled on Xwayland due to a bug which is now fixed. Added support for mmap of exported DMA-BUF objects. Reduced some cases of stutter with OpenGL syncing to vblank while using GSP firmware. Fixed a regression that could cause some applications to exit due to resource exhaustion on some GPUs while using GSP firmware. Added several new per-plane and per-CRTC vendor-specific properties to nvidia-drm. These properties may be used by Wayland compositors to program the GPU's color pipeline for HDR hardware acceleration. Introduced a driver optimization to mitigate the performance loss from the 'd3d9.floatEmulation' option in DXVK. Fixed a bug that caused FarCry 5 running through DXVK to display a black screen. Updated the framelock settings page of the nvidia-settings control panel to use the GTK3 theme text color rather than defaulting to white for the text color, improving legibility with some themes. Fixed some performance regressions that were observed with Vkd3d 2.9. Fixed a bug that could cause flickering in some applications when using Unified Back Buffer (UBB). Fixed a bug which could cause incorrect and/or washed out colors to be displayed with HDR scanout: https://bugs.kde.org/show_bug.cgi?id=482780 Implemented support for VK_EXT_depth_clamp_control. Fixed a bug which could cause applications using GBM to crash when running with nvidia-drm.modeset=0. Fixed a bug that could cause kernel crashes upon attempting KMS operations through DRM when nvidia_drm was loaded with modeset=0.

Ubuntu 24.10 is available to download and install from the official website. It ships with the Linux 6.11 kernel and the latest GNOME 47 desktop enviroment. This version switches to Wayland by default for hardware with NVIDIA graphics, matching the previous Xorg transition for Intel and AMD graphics users, and uses the open-source NVIDIA 560 kernel modules by default on supported hardware. The kernel also has kdump-tools, which enables kernel crash dumps by default. This helps streamline troubleshooting by automatically capturing critical data after a crash.

Canonical also said in its blog post, "For gamers, significant improvements have also been made to the compatibility of the Steam snap, with an expanded permissions model and improved NVIDIA driver support. The Steam snap also bundles gaming-specific Mesa PPAs to deliver optimized performance out of the box when combined with the low latency settings enabled in the latest kernel."

Updates are also visible in the Ubuntu Dock, which better handles Progressive Web Applications. The OpenJDK 21 and OpenJDK 17 packages in Ubuntu have also changed and are now TCK (Technology Compatibility Kit) certified on amd64, arm64, s390x, ppc64el, and armhf. Passing the TCK tests means the OpenJDK packages for version 17 and version 21 on Ubuntu are compliant with the Java SE specification for their corresponding versions.

TL:DR : I just want xterm to not do anything special when I start typing ctrl+shift+u so I can write special character, so I must remove the ctrl+u default keybind.

I'm using xterm on a laptop (no discrete gpu and pretty bad integrated graphics, so gpu-accelerated ones like kitty are counterproductive, and I use i3 so an xorg based one sounds better). I also like using vim.

I'm also using a qwerty keyboard, but sometimes write in French and need accents. I've memorized the codes for those I often need, like ctrl+maj+u+e+9 for é, but it doesn't work in xterm because it executes the ctrl+u keybind (delete previous characters and then types "(" (because it's maj+9).

So, following online guides, I've created a .Xresource file with the following code:

XTerm.VT100.translations: #override \n\
   Ctrl <Key>U: none

And I also added the line

exec xrdb ~/.Xresources

But to no avail, even when restarting the x session or manualy running xrdb ~/.Xresources.

What am I doing wrong?

Hello, I'm having trouble unlocking my PinePhone Pro. I went through the introduction / tutorial, set a password, connected to my WiFi, and rebooted. But ever since then, its just been this spinning circle. I tried swiping up, down, left, right, nothing. I mean I can drag down the top menu or switch to my camera, but that's about it.

How do I unlock it?

Hi there, I will preface this by saying that I'm brand new to server stuff. I have used Linux for a very long time as a personal desktop computer, but not as a server exposed to the internet. I've previously only hosted Minecraft servers for my friends and also once had a VPS for a Discord bot, but otherwise never touched servers.

I've bought a VPS and domain name (let's call it domain.com) and have spun up a Nextcloud instance with it, currently at cloud.domain.com. It's all working smoothly and I'm happy with it.

I wanted to use this VPS to host multiple services. Currently wanting to self-host the following:

• Mail server
• Mastodon instance
• Matrix server
• Static website (on domain.com)
• Forgejo instance
• Possibly other miscellaneous things I might want to put on it, but that's what I'm planning for now

Now this is where the noob question comes in. I want to use this same VPS to host these services, probably as Docker containers, under subdomains like mail.domain.com, mastodon.domain.com, matrix.domain.com, etc, with the root domain being used to host my static website. Is it possible to do this all on one VPS? What about all on one IP address just using different ports? e.g. could I have mastodon.domain.com pointing to the same IP address as cloud.domain.com but just a different port? How do I set up the DNS records to do this?

Currently I have an A record at domain.com pointing to my VPS's IP address (so I can ssh into it with ssh 0v0@domain.com) and a CNAME record at cloud.domain.com pointing to domain.com. This was kind of a complete guess as to how to set this up as this is my first time managing a domain name and I didn't know anything about DNS records before doing this. It seems to work with my current setup of just using the VPS for Nextcloud but obviously I want to do more with this VPS, either that or I'd like to reduce the specs of this VPS to save money as I picked an option that I imagined would be capable of hosting all these things. Is it possible to set up DNS records such that when you connect to subdomain.domain.com it connects you to a specific port? Or is that not something DNS records can do, but I can set up server-side on my VPS?

My VPS provider also lets me buy additional IPv4 addresses for the VPS, if I can't have them on the same IP address with different ports should I buy more IP addresses instead? How do I go about using different IP addresses for the same server?

Or do I need to host these services on completely different VPSes and point towards the different IP addresses with A records?

I've also heard of reverse proxies and that they might be able to achieve this, is this something I should look into or am I barking up the wrong tree here?

I know this question betrays a complete lack of knowledge as to how networking works, so please bear with me. Before someone says "well if you don't know this, you shouldn't be hosting all these services", I have been finding the experience so far (i.e. just having set up my server with Nextcloud) to be fun and educational. I learn best by doing (I have ADHD and struggle with just reading books without doing any exercises alongside it) and I'd like to try host all these services just for the sake of the experience. I'm not hosting anything critical, it is purely for personal projects and I plan to have my friends on my Mastodon and Matrix servers. If this were for something serious I agree I'd get it managed by a professional sysadmin or at least someone who knows what they're doing, but this is just for fun.

I don't need my hand completely held, like I don't need a step by step, but if I could at least be pointed towards concepts/things to research to achieve what I want, I would appreciate that. Literally if I could just be told search terms to look up that would be great, or if you have any more specific pointers than that with specific articles etc even better, or just explain on a high level how I would achieve this setup. Thanks in advance for any help!

TLDR: Is it possible to host these different services on one VPS with one IP address on different ports? If so, how do I set up the DNS records accordingly with my subdomains? If not, how should I achieve hosting these different services on different subdomains, preferably on the same VPS if at all possible?

Edit: Thank you for all the responses, sorry I couldn't give everyone an individual response, but I'm grateful for all the help. I'll look into reverse proxies :) Appreciate it!