Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)KI
Posts
197
Comments
291
Joined
3 yr. ago
  • Others have already mentions gerrit, no need to review on the forge, and there's as well gitweb. I imagine there exists many other solutions much better than the forge MR/PR. Particularly reviewing PRs on github is really messy for me. Depending on how complex the review might become I end up branching to the PR branch locally and checking the complex stuff locally without the forge.

    And there are many many bug trackers much better than the issue trackers. Bugzilla actually has kept improving, though I believe it might be too much for small projects, but there are many more.

    I do agree with the article writer that one really needs to create too many accounts already, GH from MS, Gitlab, sourcehut.org (I really like this one better, but still you need yet another account), codeberg, gitea, and some with different instances with different accounts each... It's crazy, and now AI crawlers getting on them all, and also violating FLOSS licenses... Notice on distributed private repos it's way harder for AI misbehavior and illegal behavior to do what it does in general.

  • Well, before wayland I always used fluxbox (eventually with picom compositor, which previously was compton). Then now on wayland I'm using sway with fuzzel, yambar and others.

    I've always felt both gnome and kde, as well as most other DEs really bloated. Gnome used to be more stable on wayland, and as of Today with better support for nvidia AFAIK, but KDE is quickly catching up.

    Not sure why the hate on gnome (and I guess on GTK as well). It doesn't offer all the customization by default, but you can get it through extensions while available. But on KDE one really needs to see a pletora of dependencies each time one adds a simple module or application. Both are improving gradually to become less intense on resources being KDE more advanced on that.

    But hey, both are bloated compared to non full DE compositors such as sway or labwc. BTW I use sway with tabbed mode (not actually tiling) and some tweaks, and I prefer that over stacking compositors, but if wanting one labwc is pretty cool.

    On X11 there's a huge amount of window managers plus compositors plus several other applications which altogether can give a similar sense to a DE but way less intense on resources, and for sure way less bloated. To me DEs are overrated to answer your title, but perhaps that's just me, :)

  • Permanently Deleted

  • I know most don't care. I initially stated most people don't agree with me. This is just my take on universal packages in general. I really like and appreciate the typical shared libraries native to most distros. It's OK we disagree, I only hope we don't end up with empty shells with systemd and everything else on app stores...

  • Permanently Deleted

  • I installed liri-shell, and some other apps some time back, and totally disliked the experience. Too many duplicated stuff, which was totally unnecessary. While I can, I void universal packagers.

    I'm not complaining about open source, I've been using FLOSS for so many years now. The thing with developers only supporting universal packages distributed binaries is that the build recipes might be too tight to them, or not explicitly exposing all dependencies, and several other things. I have no issues building and installing software. So that's not it. All I said was that to me closing bugs because not using the universal package supported is sort of crazy, being open source and supposedly being able to build and distribute. I didn't say I couldn't support myself.

  • Permanently Deleted

  • I've tried in the past flatpak packages, they are terrible in many senses the proponent (vast majority AFAIK) don't say, among them:

    • They create huge static binaries
    • One gets many libraries embedded in the static libraries or local static libs to the package which are often repeated among many static binaries, even the same version of them. This is totally avoided when building against dynamic native libraries.
    • When installing a pletora of static dependencies for a package, lets say liri, a bunch of the stuff it requires might already bi installed natively in your system, but they need the static deps locally part of the package.
    • Care must be applied, there are statistics available about abuse on vulnerabilities infection on pypi, npm and so on, this no different on these packagers repos/hubs.

    Good that they provide an alternative way to install packages not available in your distro repos, but for that user repositories building against native libraries are a much better option, like AUR in the case of Arch, and even their binary packages coming from other distros or from upstream might be even better than those universal static binaries providers.

    There are political aspects involved in the past claim from the proponents, and it's that in their view gnu+linux echo-system should become like the windows one, where everyone company or org (to them doesn't matter) should be able to provide their binary packages, and then there's no reason to think of anyone being able to build their staff.

    There's a tendency actually on providers on those hubs, to ignore problems on people who tries to build their stuff on their own, claiming they only support those universal packages. Which to me it's dangerous, since it goes in detriment to the ability to build and distribute the software, which might not be due to licenses, but rather practical reasons. This might actually be against the licenses they use, but now a day who cares, right, it's available on that packager repo...

    Lastly one argument provided in favor of the apps coming from those universal packages is sandboxing. But there's firejail which can be install on most gnu+linux distributions, and comes with profiles for a pletora of apps, and if sandboxing is not enough, it can easily be combined with apparmor, or if you prefer selinux might be used... No need for those universal packages to have a sandboxed experience.

    One final note, so far gnu+linux has been characterized by having a diversity, which is good, that diversity offers people options to choose from, and a lot of different solutions for different purposes. Not so long ago the claim was that it was not good, that meant fragmentation, and fragmentation is bad for adoption and maintenance. I see it the other way around, this diversity allows for choosing for what aligns better with the user intends, like easy to use, or rolling release, or as vanila as possible, or as up to date as possible, or as hardened as possible, etc, etc. Systemd is another example of this universalization intended. Perhaps some distros prefer to be a shell for systemd and get packages just from universal packages, that's bad news to me.

    Of course having universal packagers present an oportunity for corps and orgs to also provide stuff on the gnu+linux platform, but in my mind the best would be for them to offer free/libre and open source software, that would build on any system and be provided by any packager that wants to offer it. Though I believe that to be too idealistic perhaps. Jeje.

  • Read about it some other community, perhaps the guix one, and I was keeping it to help me in the future. It relies on nonguix repo which has its own recipes, but this one is nice. I wish I wouldn't need any binary blobs, but sadly that's not how things work. Counting on risc-v not just getting competitive hardware, but also motivating the surrounding hardware to follow.

    I'll definitely need it in order to use relatively modern hardware.

    Many thanks !

  • Artix (current)

    • Vanilla as much as possible (same as Arch)
    • Rolling release (same as Arch)
    • No systemd (my personal preference)
    • AUR availability (still an Arch derivative)

    Guix (as soon as I have the time)

    • Similar reason as for Artix
    • Reproducible builds
    • Guile
    • Static configs
  • Yes. though I'm not sure if it's totally fine. I needed to have the "undetermined" language selected (which I did) but also all other languages I can read/write. For sure that makes a difference, but no sure if enough.

  • I've only used searx[ng] for several years. searx.space is pretty recommended to look for searxng working instances, as well as the ones that you might prefer depending of the country of the instance and so for. Public searx but no searxng working instances are really uncommon now a days.

    Every now and then your preferred instance becomes useless (whether google finds its way to block it, or to apply an aggressive rate limiter, or the instance gets unmaintained), so one needs to look for another one.

    DDG doesn't give bad results, but when I realized the majority of its results come from bing, meaning it's mostly a metasearch as well with a few entries of its own (that might have varied from that time), I then started to only use searx, and then when searx working instances were really hard to find I moved to searxng, and I'm happy with those instances. Again, at times I need to move to a different instance, though I've been using the last one I chose for more than a year now...

  • What do you mean by unstable? I don't get what this means. Install? Perhaps choosing a graphical install if available for your distribution of choice. I've heard nice things about Mint (can't tell, I'm using Artix, and Guix is in my plans).

    That said, US or EU are not that different. Actually the EU is little by little deteriorating the data privacy it used to say it protected, but moreover, even if the data is kept in EU, what does it prevent US gov or corps to get access to the data? Did people forget about the 5 eyes, the extended ones (not sure how many, there were several extensions)? Did people forget that no matter the current differences, the EU and the US are allies (not just politically) any ways?

    Linux (kernel) itself has already identified itself as a US org, since it complies with the US requirements and law, to the point of banning developers from countries the US doesn't like to be cooperating with US orgs (whether gov or not).

    So, focusing on country based software developers shouldn't be the main motivation. Looking for free/libre software if possible, so that you get some freedoms of yours sort of intended to be protected through licenses, or if not available then open source, is what we should be looking for. On top of that, communication software should be e2ee, and if possible distributed or peer to peer, or at least decentralized, and so on. Also we tend to forget that the data kept in the cloud is no longer yours anymore, no matter the cloud, neither the country, and if in need to keep personal data on some cloud we should make sure it's encrypted, but still the data keeps being the cloud owner hands, so having personal backups is important, and clouds usually don't advertise what metadata they leak.

    Having said that Fedora sounds OK to me while Ubuntu sounds too commercial to me and actually now a days looking for users to get packages from its own "app store". Instead of the "country of origin" for a distro, perhaps more importantly it is to see what your needs are, for example do you prefer rolling release vs. stable releases? Do you prefer vanila kind of packages (as close to upstream as possible) or your fine with the distro making changes to the upstream software as that serves better your purposes? How user friendly the distro is? Though perhaps you're out of options if the framework laptop requires firmware or patches not found upstream, then you might better stay with the "officially supported" distros, unless what you miss by not having such firmware or patches is something you can live with, but usually x86 laptops are "easily" used with gnu+linux on top, except for some drivers not fully working with your hardware or missing firmware, but people usually still uses those laptops with gnu+linux on top. For arm laptops (I believe framework has laptos with arm CPUs, and actually is offering some initial ones with risc-v cpus) that tends to be a little more involved and I personally have no experience with that, and actually I'm waiting for a cheap enough and not so low level risc-v laptop or mini-pc to start experimenting with it (not all distributions support arm and even less risc-v).

    Again, I've heard nice things of Mint, particularly for people new to gnu+linux, and it's not a rolling release distribution. Though I'm one of those thinking that rolling relase distributions are easy to live with, at least not on the server spectrum (there are actually servers running on top of rolling release distributions such as Arch, but that's not the majority of them) given they can't afford reboots (very few updates actually require reboot on gnu+linux, linux/kernel itself being one of those which better get a reboot ASAP but not necessarily immediately) or changes requiring a service to drop even for a little while. But with rolling releases one doesn't have to deal with big differences between distribution major versions upgrades, and the changes requiring using intervention when upgrading packages are distributed on time, so no need to focus on a lot of them at once.

    Just my two cents, :)

  • What does exactly mean hosting your own account?

    I mean, you still need to rely on some sort of server somewhere right? Then there's this sentence: hosting an XMPP server is way easier than hosting an XMPP server, which is not clear to me, though I guess it's some sort of type and you meant at the beginning hosting an XMPP account, right?

    If there's a server involved, then the messages are getting stored in it, until all devices with clients have synced right?

  • Well, I wouldn't like AI in any communication client of mine. Perhaps if it's local to my box I would like that, but this solution really seems cloud based, meaning one could have an AI crawling over one's data, to do whatever it wants with it. And local solutions usually are not as "good" as the cloud ones for whatever reason (hardware availability, data, and so on):

    for users on less powerful hardware, the development team has integrated NVIDIA’s confidential computing to keep any remote processing secure. Rest assured, those who prefer to skip AI services can continue using Thunderbird without these extras.

    There's still tuta, or even /e/ (now a days murena), which still seem safer privacy wise than this new thunderbird option.

    I'm really hoping for a "librewolf" kind of fork oriented to privacy, and betterbird doesn't offer anything like that. The phoenix project has a safer user config for both firefox and thunderbird, but that doesn't get rid of components (well perhaps it could possibly turn them off, though to make sure they better get ripped at build time).

    Does any one know if this new TB service would offer caldav and carddav services as well? I didn't see anything on stalwart advertisement.

  • Is there any overlap between already FLOSS applications, whether for mobile (F-Droid for example) or desktop/laptop (GNU+linux for example) and this catalog? Known to date FLOSS applications coming from everywhere, Jami sources for example comes from France and the application is peer-to-peer, XMMP standard protocol specification is governed by the IETF XMPP working group having members from different countries and servers/clients open sources from different people and servers actually all over the world or self hosted... In other words, I don't know if having an European catalog is what really matters.

    In my mind, no matter where you live, if you want your freedom[s] respected, you should prefer free/libre software, or at least open source, though in the later case it can be tweaked in ways ignored by you which might be dangerous or might not. If wanting privacy related applications, then the prior is a must but on top of that e2ee encryption is required, as minimal as possible personal information leakage, and hopefully using distributed applications mainly peer-to-peer though at least decentralized ones (hopefully self-hosting), and also security wise being externally audited if possible. I understand the EU requires the data to be stored and kept only within the EU, but that doesn't guarantees privacy any ways, and we should learn that the best is not to trust our information to anyone, and better use peer-to-peer whenever possible or zero trust mechanisms with everything encrypted (protecting the user, not the spying mechanisms so called zero-trust, like falcon-sensor).

    So I'm a bit confused by people trusting a state or supra-state backed catalogs, when FLOSS should be what conscious users should be looking for. Interoperability is what really resonates to me, but open standards (open document standard comes to mind for example) if used or for example a simple particular version of markdown (the pandoc one for example) and so on, should guarantee that...

  • Actually, FLOSS is more precise, given the "L" coming from "libre" in castilian (spanish now a days) referring explicitly to freedom. But it so happen open source != free/libre software, therefore open source usually disregard the philosophic aspect of freedom, which might turn against the users interest, which is what GNU guys were trying to prevent all along, because focusing in the practical aspects, without any concern on the principals behind, actually do have implications on the software itself and its usage.

  • Guix @lemmy.ml
    kixik @lemmy.ml

    Futurile: Guix Resources

    lemmy.ml meta @lemmy.ml
    kixik @lemmy.ml

    issues syncing with other instances

    Hello !

    As federated, I'm subscribed to communities from other instances than lemmy.ml, for example !xmpp@slrpnk.net, !monero@monero.town, !programming@programming.dev, !technology@lemmygrad.ml, and several other ones...

    The common thing is that the federated communities are often pretty out of sync with regards to the original ones on their corresponding instances, and that in the best cases, some times I don't think they've even been syncing for quite a while.

    I'm wondering if it's a limitation given lemmy.ml can't keep up, given its amount of users and federation, or if it's something that can be looked at...

    Thanks !

    Asklemmy @lemmy.ml
    kixik @lemmy.ml

    any desktop gtk client like lemoa?

    cross-posted from: https://lemmy.ml/post/25256388

    Unfortunately lemoa has stopped development and its repo is now archived since a year now. Current install on AUR (Arch, Artix, ...) doesn't even render...

    But I like gnu+linux native clients, in particular gtk ones. On the apps recommendations I see no real gnu+linux native client similar to what lemoa was. Are you aware of any fork, or any similar client, hopefully low on resources?

    Thanks !

    Lemmy Support @lemmy.ml
    kixik @lemmy.ml

    any desktop gtk client like lemoa?

    Unfortunately lemoa has stopped development and its repo is now archived since a year now. Current install on AUR (Arch, Artix, ...) doesn't even render...

    But I like gnu+linux native clients, in particular gtk ones. On the apps recommendations I see no real gnu+linux native client similar to what lemoa was. Are you aware of any fork, or any similar client, hopefully low on resources?

    Thanks !

    LibreWolf @lemmy.ml
    kixik @lemmy.ml

    From privacy community: If you use the LibreWolf browser, you may want to read this.

    cross-posted from: https://slrpnk.net/post/17370625

    I've been a user of Librewolf for a about a year now, and it's always served me pretty well as a nice easy way to get a hardened Arkenfox Firefox.

    However, recently I was curious why Librewolf wasn't recommended on PrivacyGuides, and took a look through their reasoning on their forum. That thread spans multiple years, and for the most part I thought their reasons for not including it were a bit unfair, especially after Librewolf started offering automatic updates.

    But towards the end of that thread in October, a Privacy guide team member posted a link to the Arkenfox github issue tracker, where a Librewolf team member reveals how the project appeared to have lost steam after a critical member left, and they are [struggling to keep it up to date](https://github.com/arkenfo

    Privacy @lemmy.ml
    kixik @lemmy.ml

    DivestOS ends development

    This is so so sad, :( I've been using Mull for quite some time and recently Hypatia. I guess time to move to fennec since I doubt there's a fork in the horizon, :(

    Science @lemmy.ml
    kixik @lemmy.ml

    ACSPublications: Presence of Perfluorohexanoic Acid in Fluoroelastomer Watch Bands

    Lineage OS @lemmy.ml
    kixik @lemmy.ml

    lineageos 21.0-20241216 nightly update on moto one 5g ace (kiev) boot loop

    Anyone with a moto one 5g ace (kiev) that performed OTA update recently and got a boot loop out of it?

    I use lineageos for microG, which is based on lineageos, and Today got an OTA update which I can't matches the same version as the one on lineage, but after attempting the reboot required by the update, the phone gets into a boot loop.

    I haven't found a way to get out of the loop without losing data. Downgrading doesn't help, no matter if a major upgrade is attempted.

    It looks to me this could be rather lineageos issue, since I got a past experience with a pixel 4a (5g), and at that time I lost all data attempting a factory reset that didn't even help at all. Later there came an update from lineageos, which I manually installed, and got the phone back, though with all data lost. This time I'd like to avoid losing data.

    Any help or hint is appreciated.

    Open Source @lemmy.ml
    kixik @lemmy.ml

    apkupdater not working properly

    cross-posted from: https://lemmy.ml/post/22214348

    Some weeks back apkupdater stopped being able to download/upgrade/install from apkpure, but now a days I see issues with apkmirror as well (I see way less apps when searching for them). There was an initial issue about not being able to install from apkpure, but it seems more than that.

    Agreed there's aurora store, but to be honest, I pretty much prefer avoiding the Google Play store at all, and I haven't found an issue with apkpure.

    There was apkgrabber, but it was not working since so long, and finally it got archived on github.

    Is there some FLOSS app similar to apkupdater, other than aurora store?

    Anyone experiencing issues with it? Issues are not meant to be status reports once filed, but it seems not many have even noticed about the referred issue.

    F-Droid @lemmy.ml
    kixik @lemmy.ml

    apkupdater not working properly

    cross-posted from: https://lemmy.ml/post/22214348

    Some weeks back apkupdater stopped being able to download/upgrade/install from apkpure, but now a days I see issues with apkmirror as well (I see way less apps when searching for them). There was an initial issue about not being able to install from apkpure, but it seems more than that.

    Agreed there's aurora store, but to be honest, I pretty much prefer avoiding the Google Play store at all, and I haven't found an issue with apkpure.

    There was apkgrabber, but it was not working since so long, and finally it got archived on github.

    Is there some FLOSS app similar to apkupdater, other than aurora store?

    Anyone experiencing issues with it? Issues are not meant to be status reports once filed, but it seems not many have even noticed about the referred issue.

    F-Droid @lemmy.ml
    kixik @lemmy.ml

    K9 and Thunderbird beta for testers

    I'm long K9 user, and I was aware of it becoming Thunderbird, but I need to clarify what should I do to easy eventual transition, hopefully without having the deal with all my K9 settings...

    Today K9 turned into Thunderbird Beta for Testers, however there's already an app called that way Thunderbird Beta for Testers showing up on f-droid. Thoug the actual ID of each differ (com.fsck.k9 vs. net.thunderbird.android.beta).

    What should K9 users do, to avoid losing its current settings (accounts, folder settings, encryption and so on)? Should we remain using the K9 app, and hope that when it goes away then the thunderbird app replaces it somehow automatically and pick all accounts and settings? Should this period when the two apps with the same name coexist be used to install thunderbird beta for testers, hope that it pick all settings from K9 up, and then remove K9?

    It's so

    Linux @lemmy.ml
    kixik @lemmy.ml

    Phoronix: Linus Torvalds Comments On The Russian Linux Maintainers Being Delisted

    Arch Linux @lemmy.ml
    kixik @lemmy.ml

    Dependency cycle on Arch (btw)

    cross-posted from: https://lemmy.ml/post/21673875

    Cross posting so that the OP realizes this community is alive. I have no issues with qemu, which is installed on my system with no issues.

    Posting here as there doesn't seem to be an active Arch Linux community.

    I noticed while updating my system today that I have a bunch of qemu packages I don't recall installing. So I took a look at why they were there and found this:

     undefined
        
    Name            : qemu-base
    Required By     : qemu-desktop
    Install Reason  : Installed as a dependency for another package
    
    Name            : qemu-desktop
    Required By     : None
    Optional For    : qemu-base
    Install Reason  : Installed as a dependency for another package
    
      

    It seems like qemu-desktop was a dependency for something I later removed and pulled in qemu-base. However, because of the dependency cycle, they aren't showing up as orphans and has just been hanging around in my system along with 150mb of other dependenc

    Linux @lemmy.ml
    kixik @lemmy.ml

    Phoronix: Several Linux Kernel Driver Maintainers Removed Due To Their Association To Russia

    Stallman Was Right @lemmy.ml
    kixik @lemmy.ml

    Youtube: Free Software Is Under Attack? (Will You Help Defend It?)

    cross-posted from: https://lemmy.ml/post/21522958

    (cross-posted from: https://lemmy.ml/post/21522265)

    A group of people including Drew DeVault are trying to cancel RMS again, basing their claims on ancient misinterpreted quotes. Stallman may be controversial, but these activists are just acid for the entire Free Software movement.

    LibreWolf @lemmy.ml
    kixik @lemmy.ml

    Bleepingcomputer: Mozilla fixes Firefox zero-day actively exploited in attacks

    Darn, and I just got Librewolf upgraded to 131.0, meaning needing to wait further for 131.0.2.

    LibreWolf @lemmy.ml
    kixik @lemmy.ml

    Is this total cookie protection something embedded, not requiring any user intervention? I know with librewolf we get the strict enhanced cookie protection mode, but I don't know if for this total protection there's something required, if not turned on by default...

    Greetings !

    Linux @lemmy.ml
    kixik @lemmy.ml

    ZDNET: 20 years later, real-time Linux makes it to the kernel - really

    Privacy @lemmy.ml
    kixik @lemmy.ml

    anonymous blog preserving author identifier digital signature or similar

    Hello !

    I'm wondering if there's some blogging mechanism which would allow some sort of unique digital signature (PGP perhaps) to prevent personification, but which allows non traceable and fully anonymous author. Not looking for blockchain like stuff (apart from the layer Monero adds, blockchains are totally transparent, traceable and non anonymous). Not looking for bigotry, attacking people or anything like that.

    The idea is to be able to share ideas, even corporate related, without being afraid of retaliations whether at work, corporations or governments. Expressing something at pubic might bring unexpected consequences, particularly if not aligned by the corporation one works on if that's the case, or might provoke AI, bots, or paid/unpaid people looking around, to include anyone in a particular list, without even warning the writer about it.

    So I was looking if such thing is possible, and if it exists. Social networks of course wouldn't be an option, they're not anonymous,

    XMPP @slrpnk.net
    kixik @lemmy.ml

    Dhole Moments: Against XMPP+OMEMO - Dhole Moments

    soatok.blog Against XMPP+OMEMO - Dhole Moments

    XMPP is a messaging protocol (among other things) that needs no introduction to any technical audience. Its various implementations have proliferated through technical communities for decades. Many…

    Against XMPP+OMEMO - Dhole Moments

    This blog post, and some of its comments are pretty interesting and concerning at the same time. Not really sure if in the end that means that nothing other than centralized controlled messaging can be as cryptography safe.

    Any comments?