LINUX Unplugged

Sixty vulnerabilities and exposures disclosed in one week sounds like a lot. We'll explain why it's just business as usual.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMToronto Meetup — Thursday, Aug 29, 2024Berlin with Brent — September Meetup @ Nextcloud Conference, Saturday, Sep 14, 2024Check out Alex’s “Building a Colo Server” videoMicrosoft’s latest security update has ruined dual-boot Windows and Linux PCs — The cause: an update Microsoft issued as part of its monthly patch release. It was intended to close a 2-year-old vulnerability in GRUB, an open source boot loader used to start up many Linux devices.What the f*** is an SBAT and why does everyone suddenly care — This update was not supposed to apply to dual-boot systems, but did anyway.SBAT Revocations: Boot Process - Ubuntu Community Hub“Something has gone seriously wrong,” dual-boot systems warn after Microsoft updateUbuntu Will Be Skipping Non-Critical Linux Kernel Updates For September - PhoronixSRU Mailing List AnnoucementCanonical Moves To Shipping Very Latest Upstream Kernel Code For Ubuntu ReleasesKernel Version Selection for Ubuntu Releases - Kernel - Ubuntu Community HubLinus Torvalds Begins Expressing Regrets Merging Bcachefs — The bcachefs patches have become these kinds of "lots of development during the release cycles rather than before it", to the point where I'm starting to regret merging bcachefs.Re: [GIT PULL] bcachefs fixes for 6.11-rc5 - Linus Torvalds — No one is being jerks here, Linus and I are just sitting in different places with different perspectives. He has a resonsibility as someone managing a huge project to enforce rules as he sees best, while I have a responsibility to support users with working code, and to do that to the best of my abilities.LINUX Unplugged 545: 3,062 Days Later — Kent Overstreet, the creator of bcachefs, helps us understand where his new filesystem fits, what it's like to upstream a new filesystem, and how they've solved the RAID write hole.Linux is a CNA — As was recently announced, the Linux kernel project has been accepted as a CNA as a CVE Numbering Authority (CNA) for vulnerabilities found in Linux.The Linux security team issues 60 CVEs a week, but don't stress. Do this insteadWhat is a "good" Linux Kernel bug?Keynote: Linux Kernel Security Demystified - Greg Kroah-Hartman - YouTubeMembership Summer Discount — Take $1 a month of your membership for a lifetime!added pihole nix module by Tdback · Pull Request #3 · JupiterBroadcasting/nixconfigs — Recently, I wanted to start 'nixifying' some of my docker-compose setup. I've created a simple module for spinning up a podman container running pihole as a systemd service, so that way I can just stick it on any NixOS machine and easily make it my DNS server.NetworkManager cli (nmci) wrapper to easily create a new network connectionDistrohopper WheelNo idea where to distrohop next? Let the ultimate distrohopper decide for you!Proxmox Virtual Environment - NixOS WikiPick: SaunaFS is a distributed file system — A robust distributed POSIX file system meticulously designed to revolutionize your storage solutions by offering unmatched efficiency, security, and redundancy. At its core, SaunaFS is a distributed file system primarily written in C++, inspired by the pioneering concepts introduced by Google File System.Google File System - Wikipediasaunafs/INSTALL.md

We reveal how we turned our humble LAN into a public server farm, all while keeping our IP address under wraps and our ISP blissfully unaware.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMToronto Meetup — Thursday, Aug 29, 2024Berlin with Brent — September Meetup @ Nextcloud Conference, Saturday, Sep 14, 2024Check out Alex's "Building a Colo Server" video — Building a colo server for Jupiter Broadcasting using the 45Homelab HL15 server.Firewall - NixOS Wikinftables wikiThe netfilter.org "nftables" projectGentoo Nftables Examplesnetworking/nftables: add .tables property and disable ruleset flushing by default by mkg20001Example nftables configOlympia Mike on "verified only Flatpaks" — I'm curious your take on a recent update that happened in Linux Mint, and the possible knock on effect of it.Incus is a next generation system container and virtual machine manager.Incus - NixOS WikiMoving from Proxmox to IncusMembership Summer Discount — Take $1 a month of your membership for a lifetime!Referral Code eXchangeauto-tab-discardtab-session-managerOneTab extension for Google Chrome and FirefoxTubular — A fork of NewPipe that implements SponsorBlock and ReturnYouTubeDislike.

Brent's computer pulls an all-nighter at the worst possible moment, and the hits keep coming for open-source Android distributions and our new 2FA tool.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMToronto Meetup — Thursday, August 29, 2024 from 6:00 PM to 8:00 PM EDTSacramento LUG Meetup — Saturday September 7th, 2024 from 10:00 AM to 2:00 PM PDTAnker PowerConf S330 USB SpeakerphoneCorsair Void RGB Elite Wireless Premium Gaming HeadsetLoss of popular 2FA tool puts security-minded GrapheneOS in a paradoxGrapheneOS on X — Google can either permit GrapheneOS in the Play Integrity API in the near future GrapheneOS on X — If Authy insists on using it, they should use the standard Android hardware attestation API to permit using GrapheneOS too. Banning 250k+ people with the most secure smartphones from using your app is anti-security, not pro-security.GrapheneOS on X — Authy simply delegated checking device integrity to Google. It's Google choosing to block GrapheneOS users from using Authy. Google chooses to allow using a device with no security patches for the past 8 years but bans using an OS much more secure than the stock Pixel OS.Twilio kills off Authy for desktop, forcibly logs out all usersGrapheneOS on X — Our latest release with prevention for most VPN app DNS leaks is currently available in our Alpha and Beta channels. We need more feedback from testing VPN apps and services with leak blocking toggled on, which GrapheneOS already enables by default.GrapheneOS on X — Our current approach to DNS leak blocking appears to work well without breaking compatibility. We've made progress towards fixing a related issue for some VPN apps where rare connections are made to VPN DNS outside of the tunnel. We can hopefully ship stricter enforcement soon.GrapheneOS on X — We've become aware of another company selling devices with GrapheneOS while spreading harmful misinformation about it to promote insecure products. We're making our usual attempt at resolving things privately. However, we need to quickly address what has been claimed regardless.Membership Summer Discount — Take $1 a month of your membership for a lifetime!How You Guys Expect to Beat Me?Blue Iris Containernetbird — Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.netbird on GitHubOpenZiti — Open Source Zero Trust NetworkingOpenZiti on GitHubCollapse OS — Bootstrap post-collapse technologyDocker-OSX — Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

The COSMIC desktop is just around the corner. We get the inside scoop from System76 and go hands-on with an early press build.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMSystem76 tips Fedora Cosmic spin for 2025 release with Fedora 42 — It looks like System76's exciting new Rust-based Cosmic DE will get an official Fedora spin in the upcoming Fedora 42, potentially giving Linux users with bleeding-edge hardware an official way to try Cosmic.Pop!_OS Mattermost — An excellent place to engage if you want to bring COSMIC to a distro near you.iced — A cross-platform GUI library for RustSmithay — A smithy for rusty wayland compositorTesting COSMIC — The easiest way to test COSMIC DE currently is by building a systemd system extension.Membership Summer Discount — Take $1 a month of your membership for a lifetime!Portal:Kalpa - openSUSE Wiki — openSUSE MicroOS Desktop Gnome was renamed to openSUSE Aeon, and the Plasma Desktop version is being renamed to openSUSE Kalpa.pop-os/kernelstub: A simple EFI boot manager manager for LinuxAlpaca — GTK App to Chat with local AI modelsAlpaca on FlatHub

Think Silverblue, but with cloud-native tooling used to build it. From Aurora to Bazzite, our impressions of the ambitious Universal Blue project.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMUniversal Blue — The Universal Blue project builds a diverse set of continuously delivered operating system images using Fedora Atomic Desktop's support for OCI/Docker containers.Universal Blue Architecture DiagramAurora — Aurora is a clean and reliable desktop operating system for every type of user. Many batteries included.Bluefin — Bluefin is a custom image of Fedora Silverblue offering the best of both worlds: The reliability and ease of use of a Chromebook and the power of a GNOME desktop.Bazzite — The next generation of Linux Gaming for all of your devices - including your favorite handheld.uCore — An OCI base image of Fedora CoreOS with batteries included; a lightweight server image including most used services or the building blocks to host them.Bazzite Desktop Environment Tweaks - Bazzite - Docs - Universal BlueInstalling and Managing AppImages on Bazzite - Bazzite - Docs - Universal BlueUniversal Blue Contributing GuideJazz up your Bluefin command line with some bling! [YouTube]Jorge Castro on YouTubeMembership Summer Discount — Take $1 a month of your membership for a lifetime!zap.store — a permissionless app store.Asking AI To Make A Caveman Rock Song - Me Like Rockwinapps — Run Windows applications (including Microsoft 365 and Adobe Creative Cloud) on GNU/Linux with KDE, GNOME or XFCE, integrated seamlessly as if they were native to the OS.The Mooltipass Hardware Authenticator — A Simple Hardware Authenticatorptyxis — Ptyxis is a terminal for GNOME with first-class support for containers.Gearlever — Manage AppImages with ease 📦

Wes' self-decrypting bcachefs disk and a GrapheneOS twist that'll make you ditch your iPhone.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMclevis — Clevis is a pluggable framework for automated decryption. It can be used to provide automated decryption of data or even automated unlocking of LUKS volumes.bcachefs EncryptionWhat measured boot and trusted boot means for LinuxAutomatically decrypt your disk using TPM2 — Entering the passphrase to decrypt the disk at boot can become quite tedious. On modern systems a secure hardware chip called “TPM” (Trusted Platform Module) can store a secret and automatically decrypt your disk. This is an alternative factor, not a second factor. Keep that in mind.Use systemd-cryptenroll with FIDO U2F or TPM2 to decrypt your diskAutomatic LUKS 2 disk decryption with TPM 2 on FedoraSafe automatic decryption of LUKS partition using TPM2 | 221bFOSDEM 2024: Clevis/Tang - unattended boot of an encrypted NixOS systemClevis & Tang on NixOS SlidesDecrypt LUKS volumes with a TPM on Fedora LinuxSelf-Hosted 127: Can't Fix What You Don't TrackGarmin Forerunner 265 — Forerunner 265 is a running smartwatch with a touchscreen AMOLED display, training metrics, phone-free music, & up to 13 days of battery life in smartwatchHRV StatusGarmin Sleep TrackingNap DetectionGarmin PayTribit Stormbox Micro 2 Wireless Portable Speaker: 10WUSB-C Charging Converter for Garmin Watch Without Charger CableObtainium — Obtainium allows you to install and update apps directly from their releases pages, and receive notifications when new releases are made available.Managing your personal access tokensMembership Summer Discount — Take $1 a month of your membership for a lifetime!Iotas — Iotas aims to provide distraction-free note taking with optional speedy sync with Nextcloud Notes.LINUX Unplugged 567: So Long sudoCeleste — GUI file synchronization client that can sync with any cloud providervt52's Blog: Migrating from NixOS channels to FlakesFUTO KeyboardautosshLINUX Unplugged 570: RegreSSHion StrikesAeon — The Linux Desktop for people who want to "get stuff done"Aeon: openSUSE for lazy developersGrayjay — Follow Creators Not PlatformsGrayjay on GitLabCrowdSecBustle — Bustle draws sequence diagrams of D-Bus activity. It shows signal emissions, method calls and their corresponding returns, with time stamps for each individual event and the duration of each method call. This can help you check for unwanted D-Bus traffic, and pinpoint why your D-Bus-based application is not performing as well as you like. It also provides statistics like signal frequencies and average method call times.open-and-shut — Type in Morse code by repeatedly slamming your laptop shut

Wes reports from the Skunkworks lab, and Brent tells us about his new computing lifestyle.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMNix Nerds Matrix RoomBeelink SER5 Mini PCMinisforum UM690 Propyenv-flake: experimental nix flake that can build pyenv pythonsdotenvx-flake: A nix flake for dotenvxauto-patchelf.sh - NixOS/nixpkgsPackaging/Binaries - NixOS WikiMembership Summer Discount — Take $1 a month of your membership for a lifetime!Try the JB Test Gathio Instance hosted by HybridSarcasmBerlin with Brent: September Meetup at Nextcloud Conference · JB EventsFix Kate sudo saves - use Plasma 6 version of Kate by MarkSort · Pull Request #3 · ChrisLAS/nixRunning OpenBSD 7.5 on your laptop is really hard (not) — I couldn't use OpenBSD exclusively; there's software that I need/want which isn't available. But I do appreciate certain of OpenBSD's qualities: it's a simple, ultra-lightweight, traditional UNIX. I have an ancient ThinkPad running OpenBSD configured as a minimalist desktop: it's nice for focused work. Sure, it can't run Steam or play Netflix, but sometimes that's a plus...@fabean's NixOS configsIBM Classroom LAN Administration System V 1.30 User Guide0xchat: Secure chat built on NostrGet NIP-05 verifiedPick: termscp — 🖥 A feature rich terminal UI file transfer and explorer with support for SCP/SFTP/FTP/S3/SMBLearn Nix The Fun Way — Sure, it’s sort of portable, if you tell the person running it to have curl and jq. What if you relied on a specific version of either though? Nix guarantees portability.

We dig into the RegreSSHion bug, debate it's real threat and explore clever tools to build a tasty fried onion around your system.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMSpokane Meetup - No-Li Brewhouse · JB Events on GathioPlasma/Krunner Docs — Brent's tip: 'https://search.nixos.org/options?query=\{@}' (the '\{@}' is the magic sauce)autossh — Automatically restart SSH sessions and tunnelsautossh on GitHubSpokane Meetup — No-Li Brewhouse, Sat, Jul 13, 2024, 4:00 PMRegreSSHion — Remote Code Execution Vulnerability In OpenSSH ServerregreSSHion — Remote Unauthenticated Code Execution Vulnerability in OpenSSH server.NixOS Security advisory: OpenSSH CVE-2024-6387 “regreSSHion” – update your servers ASAPNasty regreSSHion bug affects around 700K Linux systemsQualys CVE-2024-6387 Write-upLetmein: Authenticating port knocker - Written in Rust — Letmein is a simple port knocker with a simple and secure authentication mechanism. It can be used to harden against pre-authentication attacks on services like SSH, VPN, IMAP and many more.fwknop: Single Packet Authorization > Port Knocking — fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization (SPA). This method of authorization is based around a default-drop packet filterMembership Summer Discount — Take $1 a month of your membership for a lifetime!Jeff links: How to run non-nix executables?pick: stu — TUI (Terminal/Text UI) application for AWS S3

Why we think Plasma 6.1 is the desktop for people who like to mess with computers.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMMarknote - KDE ApplicationsMarknote 1.3 - KDE Blogs — Marknote lets you create rich text notes and easily organise them into notebooks. You can personalise your notebooks by choosing an icon and accent color for each one, making it easy to distinguish between them and keep your notes at your fingertips. Your notes are saved as Markdown files in your Documents folder, making it easy to use your notes outside of Marknote as well as inside the app.Spokane Meetup - No-Li Brewhouse, Sat, Jul 13, 2024, 4:00 PMNo-Li Brewhouse Menu10 best beer gardens in the US where you can quench your thirstKDE Plasma 6.1 Desktop Environment Officially Released, Here's What's NewPlasma 6.1 - KDE Community — This release introduces explicit GPU synchronization support for NVIDIA users and triple buffering support on Wayland for smoother animations.KDE Plasma 6.1.1 Desktop Environment Released with Various Bug FixesLUP 552 — Plasma 6 is out, and we've been giving it a go. What's new, our thoughts, and the lessons other desktops should learn.KDE Plasma 6.1 Performing Much Better On Older Intel Integrated GraphicsFixing KWin's performance on old hardwareplasma6-desktop package versionsplasma-desktop package versionsKRdp on GitLab — Currently, the main client that has been used for testing and is confirmed to work is the FreeRDP client.Open KRdp Bugsappiumtests: test adaptive panel opacity (!2324) · Merge requests · Plasma / Plasma Desktop · GitLabWhy the next GNOME Release will be one of the Best EverMembership Summer Discount — Take $1 a month of your membership for a lifetime!GathioJB Events Gathio hosted by HybridSarcasmGitHub Issue: Can't create events — An unexpected error has occurred. Please try again later.Crossover: Run Microsoft Windows software on Mac and Linux | CodeWeaversFUTO Keyboard — Your keyboard shouldn't connect to the internet.FUTO Keyboard · Wiki

Online identity is a ticking time bomb. Are trustworthy, open-source solutions ready to disarm it? Or will we be stuck with lackluster, proprietary systems?Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMJupiter Broadcasting MeetupsXZ Utils Backdoor Vulnerability (CVE-2024-3094): Comprehensive GuideThe Mystery of ‘Jia Tan,’ the XZ Backdoor MastermindWho is ‘Jia Tan,’ the coder behind the XZ Utils Linux backdoor?Reflections on Distrusting xzThe Linux kernel does not accept anonymous contributions due to legal reasons. — The Linux kernel does not accept anonymous contributions due to legal reasons.Kernel.org Docs on contributions — It is imperative that all code contributed to the kernel be legitimately free software.Elon Musk wants to ‘authenticate all real humans’ on Twitter.Elon Musk claims alien identity, links human brain function to AI purposeElon Musk Finally Realizes That Verification Requires More Than A Credit Card, Planning To Make Users Upload Gov’t IDElon Musk can show the world how to really do IDWorld IDNostr: All Your Silos Are BrokenNostr Iceberg MemeNIP-01Mapping Nostr keys to DNS-based internet identifiersNavigating the social graph — In this paper, you will find a definition of the social graph, principles for thinking about it, and practical ideas for using it for DoS prevention, social discovery, anti-impersonation, accurate ratings, and more.Highlighter — Highlighter is like Substack & Patreon but on Nostr.Satlantis — Satlantis is like Trip Advisor, meets Instagram and Google Places.HiveTalk — Free Video Calls, Messaging and Screen Sharingzap.stream — Twitch alt powered by value for value and NostrostrGit — A truly censorship-resistant alternative to GitHub that has a chance of working.Blogstack — Write decentralized blogs over relay using nostr w/ ⚡ lightning tips.Ditto — Ditto is a Nostr community server. It has a built-in Nostr relay, a web UI, and it implements Mastodon's REST API.UseNostrawesome-nostrDecentralized publishing for the webNostr AppsNosta — New to Nostr? You're in the right place. Here you can easily set up your profile, discover apps, and browse other profiles.Amethystamethyst: Nostr client for AndroidyanaPrimal AppDan's Nostr RelayMembership Summer Discount — Take $1 a month of your membership for a lifetime!SpeechNote — Speech Note let you take, read and translate notes in multiple languages. It uses Speech to Text, Text to Speech and Machine Translation to do so.rhasspy/piper: — A fast, local neural text to speech system.Starship — The minimal, blazing-fast, and infinitely customizable prompt for any shell!starship on GitHubZSH Docs: ZDOTDIRdistrobox-assemble — distrobox-assemble takes care of creating or destroying containers in batches, based on a manifest file.Pick: Gathio — Gathio is a simple, federated, privacy-first event hosting platform.

Your Linux box is a-changin'. systemd has a huge new release; we'll get into the most impressive features, including the new sudo replacement. Plus, our thoughts on the new Linux Arm laptops that are just around the corner.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMAnnouncing systemd v256 — In the weeks leading up to this release I have posted a series of serieses of posts to Mastodon about key new features in this release.systemd changes with v2⁸:systemd 256 Released With run0, systemd-vpick, importctl & Other New FeaturesLennart on systemd-vpick — Basically, you can now place multiple versions of the same resource in some dir of your choice, suffix that dir's name with .v/ and the you get some basic version management in place: delete or add new versions by just removing/adding new files, and the tools will find the newest item dropped in automatically.Introduction to Portable Services — “Portable services” do not provide a fully isolated environment to the payload, like containers mostly intend to. Instead, they are more like regular system services, can be controlled with the same tools, are exposed the same way in all infrastructure, and so on. The main difference is that they use a different root directory than the rest of the system.Trying out systemd's Portable Services — All in all, the core pieces are already in place for a very promising new technology that should make it easier for 3rd parties to provide Linux system-level software in a safe and convenient way, well done to the systemd team for a well executed concept. All it lacks is some polish around the tooling and integration.systemd sleep — Putting a PC to sleep is complicated business and there are different mechanisms available to achieve this on Linux. Lennart on SSH and AF_VSOCK — This automatic ssh-via-AF_VSOCK logic is particularly useful DDIs and systemd-nspawn — Or in other words: there's now unprivileged systemd-npsawn containers. Yay!Lennart on systemd-vmspawnLennart on sd_notifyLennart on dlopenLennart on run0 — There's a new tool in systemd, called run0. Or actually, it's not a new tool, it's actually the long existing tool systemd-run, but when invoked under the run0 name (via a symlink) it behaves a lot like a sudo clone. But with one key difference: it's not in fact SUID.doas - dedicated openbsd application subexecutorDoas - NixOS WikiDoas on WikipediaThe Tragedy of systemd — Join me on a journey through the bootstrap process, the history of init, the reasons why change can be scary, and the discovery of a part of your OS you may not even know existed.The Two Year Journey Funded By Arm/Qualcomm For Improving ARM Linux Laptop Support — ARM Kernel developers spent the last two years working on improving ARM Linux laptop support with a focus on the Lenovo ThinkPad X13s powered by a Qualcomm SoC.Ubuntu 24.04 LTS support to the Lenovo ThinkPad x13sSnapdragon 8cxUbuntu Asahi projectTUXEDO Working on Snapdragon X Elite Linux LaptopMembership Summer Discount — Take $1 a month of your membership for a lifetime!Spokane Meetup, Sat, Jul 13, 2024, 4:00 PMBerlin with Brent: September Meetup @ Nextcloud Conference, Fri, Sep 13, 2024 | MeetupA Nix Flake for Bitfocus CompanionChrisLAS' Beelink NixOS ConfigBluetooth - NixOS Wikinix-direnvxscreensaver on AndroidRainier cherry - WikipediaPick: Iotas — Markdown notes that syncs with NextCloud Notes.

We try Omakub, a new opinionated Ubuntu desktop for power users and macOS expats.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMHave a pint with Alex in Norwich , Sun, Jun 16, 2024, 2:30 PM | MeetupSpokane Meetup, Sat, Jul 13, 2024, 4:00 PMNextcloud Conference 2024: call for speakers - NextcloudNextcloud Conference 2024 - NextcloudBerlin with Brent: September Meetup @ Nextcloud Conference, Fri, Sep 13, 2024 | Meetupnotch on X — Alright, that's enough spyware in my OS. Do I go desktop Mac, or do I have the energy to go full Linux? Not sure, but I'm tired of my operating system treating me like the product.DHH on X — If I have such a fundamental misalignment with where Apple has gone, why stay? I think that was the question I finally just asked myself for the umph-teenth time, and realized I didn’t have a good answer that wasn’t just based on comfort.For the Love of Linux — In this podcast episode, REWORK host Kimberly Rhodes talks with David Heinemeier Hansson, co-founder of 37signals and CTO, about his personal shift from using Apple products to exploring Linux and Windows platforms. He discusses the expanded platform integration at 37signals, which now includes all three operating systems.DHH on X — The big YearofLinuxontheDesktop will be 2025. Snapdragon X chips will be ready. Folks will be sick of AI shoved into every crevasse of their life. Thank heaven for disagreeable nerds refusing to bend the knee to the corporate agenda!Linux as the new developer default at 37signals — I've personally been having a blast over the last few months digging deeper and deeper into the Linux rabbit hole, and it's been a delight discovering just how good its become as developer platform.Introducing Omakub — Omakub turns a fresh Ubuntu installation into a fully-configured, beautiful, and modern web development system by running a single command.Xournal++FlameshotPintaFrameworkOmakub list of installed appsOmakub — An Omakase Developer Setup for Ubuntu 24.04 by DHHOmakub on GitHubOmakub introductory videoMembership Summer Discount — Take $1 a month of your membership for a lifetime!devenv — Fast, Declarative, Reproducible and Composable Developer Environments using NixsquidGeneBean on X — My dad was so happy with his desktop after I switched him to #Pop_OS! that he had me do the same to the laptop he takes on trips. Thanks for such a stellar distro @system76Walkthrough of Nix Install and Setup on MacOS by zmre on YouTubeWildspaces.work — Wildpsaces.work is designed for remote workers interested in reconnecting with community and working from new and wild places.Chris' Amazon Tablet — 10.1 Inch Android 13 Octa-core with 8(4+4) GB+128GB Tablets, 5MP+8MP Camera, Bluetooth 5.0Fully Kiosk Browser LockdownJellyfin Media Player — Desktop client using jellyfin-web with embedded MPV player. Supports Windows, Mac OS, and Linux.kthresher: Tool to remove unused kernels in Debian/Ubuntuhelipad-flake — A Nix flake to provide a helipad package and NixOS module. Intended for use with nix-bitcoin.Kopia — Fast and Secure Open-Source Backup SoftwarePick: Multiplex — Multiplex is an app to watch torrents together, providing an experience similar to Apple's SharePlay and Amazon's Prime Video Watch Party.weron — weron provides lean, fast & secure overlay networks based on WebRTC.

The facepalm moments that make us question our sanity—and swear off sudo for a week.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMLinux May Be the Best Way to Avoid the AI Nightmare — What if you care about AI's environmental impact, privacy holes, and the ethical problems of training on data without the creators' permission? The answer might be to switch to Linux. Yes, Linux.Kate Asks about Mistakes to Avoid — Hey boys-Microsoft has officially gone off the deep end with this AI stuff. I'm pretty sure AI Clippy is pulling the strings behind the scenes. Any tips for escaping to Linux before I get assimilated? What are the big don'ts for a newbie?Jeremy Molina on X — sudo rm -rf ./ on the root directory 😓Lee Ball on X — I thought I was in a backup directory when I did an rm -rf but turned out I'd forgotten the ./ and just went into /var/lib/mysql and not the backup of said directory.ChaoticHuman on X — I think my most major beginner mistake once was something like sudochownuseraccount/ because I wanted to not have to deal with file-ownership-conflicts though I no longer remember what exactly I did. I only remember that it led to completely destroying my Linux-system.Ken Starks on X — What are all these files with a dot before them. They aren't programs. Might as well delete them.PDunn on X — Using fringe distos and too much distrohopping causing loss of time and not being productive. Linux can be a time sink I don't have time for. So I installed Ubuntu and moved on. I just use what works and is easy to maintain. Unplugged contributor here.Membership Summer Discount — Take $1 a month of your membership for a lifetime!Chris' Beelink Nix ConfigNix from First Principles: Flake Edition — This guide is a beginner's guide to Nix and related tooling, focusing on the newer nix command, and flake.nix compared to older tools like nix-env and default.nix. It does not require any prior Nix knowledge, and instead builds up the Flake based world from first principles, so that it can serve as an introduction to Nix itself, as well as the concept and uses of Flakes.Pick: Delfin — Delfin is a native client for the Jellyfin media server. It features a fast and clean interface to stream your media in an embedded MPV-based video player.Delfin on FlathubDelfin repoDelfin nix packageA fireside chat with Nextcloud founder Frank Karlitschek - Nextcloud — Part of this talk was on LUP, now you can hear the full thing.

We're following one simple rule to build a Linux desktop so stable it could outlive us.Sponsored By:Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.Core Contributor Membership: Save $3 a month on your membership, and get the Bootleg and ad-free version of the show. Code: MAYSupport LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMMicrosoft’s controversial Recall feature for Windows 11 could already be in legal hot waterApple GPT — What We Know About Apple's Work on Generative AIChris' BeeLink — Beelink Ryzen 7 5700U Up to 4.3GHz 8C/16TRV BeeLink Nix configuration.nixSlack - NixOS WikiChris' Win 7 Inspired Lookmusnix — Real-time audio in NixOSBoost Pick: nh — NH reimplements some basic nix commands. Adding functionality on top of the existing solutions, like nixos-rebuild, home-manager cli or nix itself.Pick: gridplayer — Simple VLC-based media player that can play multiple videos at the same time. You can play as many videos as you like, the only limit is your hardware. It supports all video formats that VLC supports (which is all of them). You can save your playlist retaining information about the position, sound volume, loops, aspect ratio, etc.

After months of debate, the Nix community might be coming to a resolution. We'll examine what happened, what's changing.Sponsored By:Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.Core Contributor Membership: Save $3 a month on your membership, and get the Bootleg and ad-free version of the show. Code: MAYSupport LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMUsing Tailscale for Android just got a whole lot betterReport on NixOS Governance Discussions - by Chris McDonoughThe NixOS Foundation board announced on April 30 that Eelco Dolstra is stepping down from the board following the recent calls for his resignation.A leadership crisis in the Nix community (LWN) — On April 21, a group of anonymous authors and non-anonymous signatories published a lengthy open letter to the Nix community and Nix founder Eelco Dolstra calling for his resignation from the project.NixOS Foundation board: Giving power to the community - Announcements - NixOS DiscourseNixOS Foundation Board: Constitutional Assembly Appointment - Announcements - NixOS DiscourseFull Email with GrahamChris' s nginx ConfigNixOS Manual: Using DNS validation with web server virtual hostsNixOS Manual: SSL/TLS Certificates with ACMEUnplugged Core MembershipSigning up with an email addressDell OEM Replacement PartsWinamp has announced that it is opening up its source — Winamp has announced that on 24 September 2024, the application's source code will be open to developers worldwide.RcloneShuttle — Upload your files to anywhere - GTK4 GUI for Rclone

Three revelations from Red Hat Summit. Our on-the-ground report will separate fact from hype.Sponsored By:Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.Core Contributor Membership: Save $3 a month on your membership, and get the Bootleg and ad-free version of the show. Code: MAYSupport LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMIntroducing image mode for Red Hat Enterprise Linux — Image mode for Red Hat Enterprise Linux is a new deployment method that takes a container-native approach to deliver the OS as a bootc container image.Image mode for Red Hat Enterprise Linux OverviewImage mode for Red Hat Enterprise Linux YouTube Examplepodman-desktop-extension-bootc — Support for bootable OS containers (bootc) and generating disk images.bootc Introduction — Transactional, in-place operating system updates using OCI/Docker container images. bootc is the key component in a broader mission of bootable containers.Show HN: Convert your Containerfile to a bootable OSWhat is InstructLab? — InstructLab is an open source project for enhancing large language models (LLMs) used in generative artificial intelligence (gen AI) applications.InstructLab — InstructLab is a model-agnostic open source AI project that facilitates contributions to Large Language Models (LLMs).instructlab CLI — Command-line interface. Use this to chat with the model or train the model (training consumes the taxonomy data).IBM's Granite code model family is going open source — We're releasing a series of decoder-only Granite code models for code generative tasks, trained with code written in 116 programming languages. The Granite code models family consists of models ranging in size from 3 to 34 billion parameters, in both a base model and instruction-following model variants.ibm-granite/granite-code-models — A Family of Open Foundation Models for Code Intelligence.Getting Started with Fedora/CentOS bootc — The Fedora/CentOS bootc project generates reference base images that are designed for use with the bootc project. Its goal is to provide a host system easily configurable via container tooling, usable as a container host, but also to allow non-containerized deployments with applications bound to the host context.CentOS/centos-bootc — Create and maintain base bootable container images from Fedora ELN and CentOS Stream packages.LAB Paper: Large-Scale Alignment for ChatBotsSpring Membership Discount — $3 off forever.psitransfer — Simple open source self-hosted file sharing solution. It's an alternative to paid services like Dropbox, WeTransfer.bhh32's food-journal — Command line tool and web application to keep track of my food intake.Pick: URL to PNG — A URL to PNG generator over HTTP with a fairly simple API accessed via query params passed to the server.Bonus Pick: Telegraph — Telegraph is a simple Morse translator, start typing your message to see the resulting Morse code and vice versa.

A few of our go-to tools for one-liner web servers, sharing media directly from folders, and a much needed live Arch server update, and more!Sponsored By:Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.Core Contributor Membership: Save $3 a month on your membership, and get the Bootleg and ad-free version of the show. Code: MAYSupport LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMBerlin with Brent — May Meetup, Sat, May 11, 2024, 6:30 PM CESTLinuxfest Northwest 2024 VideosTiny File Manager — Web based File Manager in PHP, Manage your files efficiently and easily with Tiny File Manager and it is a simple, fast and small file manager with a single file.Tiny File Manager Password OptionsTiny File Manager Project Demonoblepayne/tinyfilemanager-flake — nix run github:noblepayne/tinyfilemanager-flakeBig list of http static server one-liners — python -m http.server 8000awesome-webservers: ⚙️ — Collection of one-liner static servers.static-web-server — A cross-platform, high-performance and asynchronous web server for static files-serving. ⚡The smallest Docker image to serve static websitesSelf-Hosted 122: Back to the Future — How Chris created live TV streaming from his local media collection, Alex breaks down the new Open Home Foundation and what it means for self-hosters. Brent's been trying out an open-source AirDrop replacement for all systems, and much more!LocalSend — An open-source cross-platform alternative to AirDrop.🌷 Spring Membership Discount 🌱 — Promo code: MAYSouthEast LinuxFest — June 7-9, 2024 in Charlotte, NC.Boost LINUX Unplugged on Fountain’s WebsitePick: audioserve — Simple personal server to serve audiofiles files from folders. Intended primarily for audio books, but anything with decent folder structure will do.Neofetch is Dead! Here are 7 Alternatives for Your Linux System

The first LinuxFest is back and better than ever. We share stories and friends from one of the best Linux gatherings of the year: LinuxFest Northwest.Sponsored By:Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMLinuxFest Northwest 2024 — An annual open-source event co-produced by Bellingham Linux Users Group, the Information Technology department at BTC, Cascade STEAM, and Jupiter Broadcasting.Bellingham Technical College — At BTC, we're here to help you access the hands-on education that can give you an advantage in today's job market.Ubuntu 24.04 LTS Downloads Now Available — Ubuntu 24.04 is an exciting Long Term Support (LTS) update with this new Linux distribution release being powered by the Linux 6.8 kernel, making use of Netplan for networking on the desktop, features the modernized desktop OS installer, various performance optimizations, and a ton of new features.x32-proxy — UDP and Web Socket proxy server for Behringer and Midas digital mixer control.LinuxFest Northwest YouTubePeyton's GitHubElectromagnetic Field — A non-profit camping festival for those with an inquisitive mind or an interest in making things: hackers, artists, geeks, crafters, scientists, and engineers.completenoob's NixOS ZFS on Root Setup — Install NixOS with ZFS on root on a ThinkPad T470 with 24gb Ram and a 1TB nvme ssd.radio-browser.info — This is a community driven effort (like wikipedia) with the aim of collecting as many internet radio and TV stations as possible. Any help is appreciated!Pick: Playlifin — A tool to convert a Youtube Music playlist to a Jellyfin playlists.Pick: Playlifin Voyager — Playlifin Voyager is a tool to export and import playlists from and to your Jellyfin Server.

We're back from Austin, with interviews and stories to share. Plus, it's Gentoo week and we take our first look at Fedora 40.Sponsored By:Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMFedora 40 beta is fastest operating system I've tested — Apps opened in the blink of an eye. The Overview appeared instantly. Everything seemed to be built around the idea that the user works at the speed of madness and the OS is there to help make it happen.Fedora Linux 40 DocsFedora Linux 40 Cleared For Release — Fedora 40 thus will see its official release happen next Tuesday, 23 April.F40 Change Proposal: Drop Delta RPMs — According to early feedback from Release Engineering, it looks like it will not be feasible to address the shortcomings of Delta RPMs as they are currently implemented, and since they often no longer result in a net reduction in download sizes for upgrades, this Change proposes both to disable the generation of DeltaRPMs during the compose process, and to disable the deltarpm support in dnf / dnf5 by default.Berlin with Brent May Meetup — May 11, 2024LinuxFest Northwest 2025 — April 26 - 28, 2024System76 and Jupiter Broadcasting Epic Parking Lot BBQ — Sat, Apr 27, 2024, 12:00 PMLFNW Talk: 5 Reasons to Love NixOS — NixOS seems to be everywhere these days and has the fanatic energy usually reserved for Arch users. But WHY is it so popular? In this talk, I'll go over 5 reasons I love NixOS and you might too.LFNW Talk: Deploying NixOS Anywhere — In this talk, we'll unlock the full potential of NixOS by exploring how its unique architecture enables installation just about anywhere—from bare metal and VMs to a VPS provider near you.LFNW Talk: LINUX Unplugged LIVE — We're recording a live edition of LINUX Unplugged in person. Our weekly Linux talk show with no script, no limits, surprise guests, and tons of opinions. Scinary Cybersecurity — Founded in 2015, we are proud to be one of few full-service cybersecurity firms focused on small and midsized governmental entities. Serving clients in mutiple states, we provide quality services and solutions that best fit your needs.Jupiter Extras — Texas LinuxFest Day 1Jupiter Extras — Texas LinuxFest Day 2Texas Linux Festival 2024 — Texas Linux Fest is the first state-wide annual community-run conference for Linux and open source software users and enthusiasts from around the Lone Star State.MIL-STD-1553 — MIL-STD-1553 is a military standard published by the United States Department of Defense that defines the mechanical, electrical, and functional characteristics of a serial data bus.Chris' Cave PicturesBuc-ees — If you've been to Buc-ee's, you may already know that this friendly neighbor along the highways has the cleanest restrooms in America. In 2012, Cintas ran a nationwide restroom contest and made it official!Street Fighter 2 Music — Arcade IntroStreet Fighter 2 Music — OC RemixUEFI Boot Standalone NixOS (2024-04-20) — This guide will explain how to install NixOS on the internal NVMe drive of an Apple Silicon Mac using a customized version of the official NixOS install ISO, then boot it without the help of another computer.TeX Shinobi Keyboardnixos-conf-editor — A libadwaita/gtk4 app for editing NixOS configurations.nix-software-center — A simple gtk4/libadwaita software center to easily install and manage nix packages.bhh32's app installerdharple/detox — Tames problematic filenamesJovian NixOS — NixOS on the Steam DeckPick: Shortwave — Shortwave is an internet radio player that provides access to a station database with over 30,000 stations, including Jupiter Broadcasting.

We asked, and you answered: Your top 5 Linux app essentials and post-install rituals. Plus, some news to better cope with "extreme file-system damage."Sponsored By:Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.Support LINUX UnpluggedLinks:Berlin with Brent: May Meetup — Brent is back in Berlin! Please join the Jupiter Broadcasting community for an evening together, and bring your friends!💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMWarp — Warp allows you to securely send files to each other via the internet or local network by exchanging a word-based code.Bcachefs Repair Code Reaching Complete & Robust Recovery — "This patchset was kindly tested by a user from India who accidentally wiped one drive out of a three drive filesystem with no replication on the family computer - it took a couple weeks but we got everything important back."Linux 6.9-rc3 Released With Many Bcachefs Patches — "[...] but hey, if you had a corrupted bcachefs filesystem you'd probably want this, and if you thought bcachefs was stable already, I have a bridge to sell you. Special deal only for you, real cheap."Fedora 42 Change Proposal Wants To Make KDE Plasma The Default Over GNOMEF42 Change Proposal: Fedora Plasma Workstation — Switch the default desktop experience for Workstation to KDE Plasma. The GNOME desktop is moved to a separate spin / edition, retaining release-blocking status.Changes/FedoraPlasmaWorkstation - Fedora Project Wiki412linux.io — N100 Media Serving Efficiency with Quick SyncPick: FreeTube — FreeTube is an open source desktop YouTube player built with privacy in mind. Use YouTube without advertisements and prevent Google from tracking you with their cookies and JavaScript. Available for Windows, Mac & Linux thanks to Electron.FreeBSD Speedruns — The zero-to-desktop FreeBSD speedrun category records the time taken from the first boot of a FreeBSD image, through installation, to the display of a desktop environment or window manager.FreeBSD Zero to Desktop Speedrun Challenge — The operations and commands that needed to be done took me 1:33 and installation of base.txz/kernel.txz datasets took 0:28. Downloading and installing needed pkg(8) packages took 2:22 of time.