I got my mom on Bitwarden because I figured it would be easier for her than KeePass (which is what I use synced to my Nextcloud) and it turns out Bitwarden does the same thing. If you want to create "custom" attributes for an entry like your security questions, attach a screenshot, etc., you have to either pay or self-host.

Yeah that's the point I was getting at. One of the only times the NRA supported gun control was when the Black Panthers started carrying publicly.

Disarming all the people who "didn't" shoot up a beach won't bring those victims back, and it won't stop motivated extremists from doing it again. The kind of folks who commit atrocities like this just won't bother participating in the buyback.

I'm curious what kind of indicators might have been present that police or others in the community might have missed; violent rhetoric on social media, a sudden interest in guns by somebody who previously wasn't into them, etc.

Systemd has all sorts of options. If a service has certain sandbox settings applied such as private /tmp, private /proc, restricting access to certain folders or devices, restricting available system calls or whatever, then systemd creates a chroot in /proc/PID for that process with all your settings applied and the process runs inside that chroot.

I've found it a little easier than managing a full blown container or VM, at least for the things I host for myself.

If a piece of software provides its own service file that isn't as restricted as you'd like, you can use systemctl edit to add additional options of your choosing to a "drop-in" file that gets loaded and applied at runtime so you don't have to worry about a package update overwriting any changes you make.

And you can even get ideas for settings to apply to a service to increase security with:

systemd-analyze security SERVICENAME

I just host everything on bare metal and use systemd to lock down/containerize things as necessary, even adding my own custom drop-ins for software that ships its own systemd service file. SystemD is way more powerful than people often realize.

dpkg-deb --build
Makes it super simple to create one. You just lay out a folder with the contents you want to be installed. Just make sure it has a DEBIAN/control sub folder/file because that control file is where you can specify dependencies, package version, name, etc.