Nix is also packaged in debian as nix-bin.

A common distribution method involves multi-party signing, that is, multiple developers use keys to sign off on reviewed changes.

Multiple developers review the changes, before signing the git commit after review. Then they build the package, either locally or on CI servers, but again, multiple parties/servers sign and review, doing a reproducible build to verify across machines.

In an ideal architecture, there is never a single point of failure. You would have to compromise the computers of multiple devs, or multiple build servers that are building signed reproducible builds, in order to do it.

Although in theory, you could compromise all of them. But it's extremely difficult.

[-] moonpiedumplings@programming.dev 4 points 3 days ago* (last edited 3 days ago)

Anyway I was gonna write a rant about it but I'm too tired. But basically the docker ecosystem is kinda fucked in this regard, and trades security in many aspects for convenience of development and distribution. This is one of the most notable examples of this.

It's popular because it's convinient and easy to use in many ways. If these pitfalls are a dealbreaker for you, then there is no trivial way to add the security requirements you are asking for.

You can pay for signed images from someone else, which is a little better, but there are still disadvantages.

Also what are you building? You might be able to replace docker with nix for example.

I think the most popular solution is locally building and registry.

[-] moonpiedumplings@programming.dev 2 points 4 days ago* (last edited 4 days ago)

The version you get from Debian does respect all four freedoms.

The version that is installable from the repositories of Linux distros is all open source. Docker itself, the container engine and runtime are all open source. Nobody cares about stuff like docker desktop or docker sbx, not only are they not critical to the software itself, they aren't that useful or valuable.

[-] moonpiedumplings@programming.dev 67 points 4 days ago* (last edited 4 days ago)

Docker is foss. Docker desktop and docker sbx are not.

What do you use for notes and file/note syncing?

Also backups?

Is your comment supposed to say "native pf or nftables"?

25

They also have a website with docs: https://nixmultiverse.com/docs/

The website can also be used to search for specific package versions in nixpkgs, to get the nixpkgs revision: https://nixmultiverse.com/

The above feature is similar to: https://lazamar.co.uk/nix-versions/ or https://www.nixhub.io/ , but using this project is a way easier alternative than searching for an pinning revisions.

28
24

Pairdop is an open source, browser based, peer to peer file sharing application.

It is cool because it can find other devices on the network. So you open up pairdrop on one computer, and you open pairdop on another, and then you can see the devices and chat with eachother.

But, you also have the options of:

  • Creating a temporary public room for sharing files over the network to another device
  • Permanently pairing devices so that they can access eachother after you close the app

In addition to that, it's a progressive web application, so you can "install", and/or the web page does not need internet to load, firefox will cache it and let you use the app even if you don't have internet.

There is a publicly hosted instance you can try: https://pairdrop.net/

1
Swarm Simulator (www.swarmsim.com)

cross-posted from: https://programming.dev/post/52054729

Swarm simulator is an open source idle game:

https://github.com/swarmsim/swarm

15
Swarm Simulator (www.swarmsim.com)

cross-posted from: https://programming.dev/post/52054729

Swarm simulator is an open source idle game:

https://github.com/swarmsim/swarm

17
Swarm Simulator (www.swarmsim.com)

Swarm simulator is an open source idle game:

https://github.com/swarmsim/swarm

32
57

I can't find the source code for this, I am posting here to save it to remind myself to search later.

531

Other fun answers:

This site is: https://youraislopbores.me/

This site is a "fake chatgpt" where you can pretend to be chatgpt or ask questions to people pretending to be chatgpt.

32

Phone game that measures how high you can throw your phone into the air...

26
25
submitted 4 months ago* (last edited 4 months ago) by moonpiedumplings@programming.dev to c/linux@programming.dev

It was fairly easy. I used rustic to back up my entire home directory to a USB flash drive.

The trick is to ensure that all applications (except KDE) are closed. Firefox, for example, really hates if you try to actively sync or copy over it's profile directories while it is running.

And then I also nuked my podman user data. (podman system reset). Podman sometimes makes the ownership of it's files weird, but also the container images take up a lot of space that I don't really care about actually backing up. It's okay if those aren't on the new laptop.

Then I backed up to the usb flash drive:

rustic init -r /path/to/repo — this will prompt you for a password

rustic backup -r /path/to/repo /home/moonpie

One cool thing about the backups is that they are deduplicated and compressed. So I backed up 120 gb of data, but it was compressed to 80 gb.

restic snapshots -r /path/to/repo

The snapshots are deduplicated as well. Data that doesn't change between snapshot versions, doesn't take up any extra space.

rustic restore -r /path/to/repo snapshotid /

The / is needed because rustic restores to paths underneath the thing. It gave me a bunch of permission errors about not being able to read stuff not in my home directory, but eventually it restored all of my data.

And then yeah. All my data. Except Wifi passwords, which I had stored as unencrypted for all users, because I didn't like having to unlock the KDE wallet to get to Wifi passwords when connecting. I had (and have) LUKS encryption so I didn't worry about that too much. But it means that data not in my home directory was not copied over.

It was surprisingly smooth, and now I have all my data and firefox profiles and stuff on the new machine.

view more: next ›

moonpiedumplings

0 post score
0 comment score
joined 3 years ago