Tech Freedom

FOSS News Big Show 2

FOSS News Big Show 2

Special Guest: Connor Needling of Needling Worldwide

Distro News
Top 15 Rolling Distros
Alpine 3.18
RHEL 9.2

FOSS News
How to Delete a Directory with 1000’s of Files in it
QEMU 8.1
Plasma 5.27.5

FOSS Fun
No More Roblox on Linux
Steam Deck Competitor?
Arcane Wilds

Distro News
DN 1 – 16 Rolling Distros to Consider
This is a listicle of rolling release distros you might want to look at if you’re curious about having more frequent updates. I’ll comment on each one, similar to how I did with the privacy listicle last week.
1) Vanilla Arch
a) Had to be #1 on the list. It is the quintessential rolling release distro, and serves as the base for many of the options later in the list. This is not, however, for the faint of heart. It uses a script-based installer (or you just have a list of all the packages you want to install, in the correct order, and you handle it all yourself. It gives you a level of control over your system that is otherwise more or less unheard of. However, you can break it by looking at it in a way that it doesn’t like. (https://archlinux.org)
2) Solus Linux
a) Much more user-friendly than Arch, independent, though in the process of merging with SerpentOS, which is headed up by the original developer on the Solus project. This is the team that brought us Budgie. I’ve poked at Solus a little, but was not taken by it. (https://getsol.us)
3) Manjaro
a) Loosely based on Arch, quasi-rolling, but also has a semi-point release cadence. Every few months, they roll a fresh ISO version with the latest stable packages. It is like Arch with training wheels. I’ve used it for years, where I’ve yet to successfully install Arch on even a VM, to be quite honest. (https://manjaro.org) It is easy to install, easy to use, but still has the customizability of Arch at the core. Solid distro.
4) Void Linux
a) Another indie distro like Arch, only more focused on raw performance and security than Arch is. It is ultra-customizable. Did I mention fast? I’ve never tried it, but have friends who have sworn by it in the past. (https://voidlinux.org)
5) openSUSE Tumbleweed
a) I have a friend who ran it in a production environment while trying to get Alpine to work for his purposes. He enjoyed it and was surprised by the volume of updates that sometimes came in hourly, but also at the fact that it was rock stable. The thing that turned him off about it was that it has some systemd quirks that drove him up the wall and made it harder for him to do what he needed to do. I had Tumbleweed on a flashdrive and tried it once, but was not happy with it then (a couple of years ago). Give it a shot if you want to learn a new distro, you may be surprised at the outcome. (https://get.opensuse.com/tumbleweed)
6) Fedora
a) Community-based upstream for Red Hat and RHEL. This puts it in close proximity to IBM, who is one of the major contributors to Red Hat. They also lead development for GNOME, as well as systemd. I could go off on systemd, but feel like I’d be wasting my breath. It more or less controls your system from behind the scenes. They recently made a change to the way it handles DNS such that you can no longer control which DNS servers your system uses. That feels like a big deal to me. (https://fedora.org)
7) NixOS
a) I did a piece on NixOS over on the Altha Tech blog ( https://althatech.com/it-work/nixos-and-altha-tech/ ) last month, as it is the primary OS they use in their server infrastructure. It is more or less just an indie package manager which provides a high degree of reliability and reproducibility due to the fact that all configurations are resident in a single file, so once you commit changes there, if you have a whole fleet of machines or server running NixOS, they all get that change automagically. (https://nixos.org)
8) Debian Testing
a) Yes, there is a branch of that venerable distro which is rolling release. If you know Linux, you are probably familiar, at least in passing, with grandaddy Debian. It is the base of Ubuntu, after all, so all of the Ubuntu flavors and derivatives owe their existence to Debian. Debian is not terribly exciting, but it is stable once down-stream from Testing. (https://wiki.debian.org/DebianTesting)
9) Sparky Linux
a) Been around for a while, based on Debian Testing. Stable and simple. Haven’t tried it, so I can’t speak to how good it is, personally. (https://sparkylinux.org/)
10) EndeavourOS
a) NASA-themed Arch derivative which is relatively light, fast, and certainly rolling. It comes with the latest Calamares installer and most of what you need in order to make your system run well out of the box. One thing you have to keep in mind with this distro is it will require you to become much more comfortable with the terminal than others will, as it does not ship with a GUI package manager, so you have to use CLI pacman to get that done, at least until you install something like Octopi (which feels a bit like aptitude in Debian distros). (https://endeavouros.com)
11) Ka OS
a) Indie distro which only ships with the latest versions of all things KDE Plasma. Think of it as an indie version of KDE Neon (which is based on Ubuntu… It is basically Kubuntu unstable, where much of the KDE package testing happens). Ka OS is intentionally limited in scope, as their focus is on quality not quantity. It is a great option for those of us who are hardcore KDE fans. I’ve not tried it, but have talked about it quite a bit over the last year (I typically cover each new ISO release). (https://kaosx.us)
12) Gentoo Linux
a) Another indie distro, but not one that is intentionally user-friendly. This one is built by developers and system admins for developers and system admins. It has its own package manager, and actually serves as the base on which ChromeOS is built. But Gentoo, on its own, is about as easy to use and maintain as Arch is. Not for anyone who doesn’t enjoy building packages from source. (https://gentoo.org)
13) Chakra Linux
a) Arch-based hybrid distro which offers rolling for non system-critical packages, but periodic updates for core system packages. I’d never heard of this one, and it is no longer being developed, so don’t bother with this one, boys and girls. Doesn’t even have its own webiste.
14) Sabayon became Mocacchino OS
a) It is more or less Gentoo + containers and layers and all sorts of other current buzz words. I don’t have the desire to try this one, but if containerization sounds beneficial in your usecase, add this to the container-driver distro list. (https://www.mocaccino.org/)
15) Rolling Rhino Remix
a) Ubuntu, only rolling. I covered this distro briefly when it was announced several months back they track all of the devel series updates and roll them out to users. I’m not clear as to whether it is really daily driver ready or not, so take your chances if you wish. It looks interesting, is all I’m going to say. (https://rollingrhino.org/)
https://www.geeksveda.com/rolling-release-linux-distributions/
#distronews #FOSSNews #rollingrelease

DN 2 – Alpine Linux 3.18
A new version from this minimal, OpenRC, MUSL based distro. This will matter more to you if you are aware of just how much control you lose of your system to run systemd. Systemd used to simply be an init system, but in the last 5 years, especially, it has ballooned out into controlling most aspects of your system behind the scenes. It is still technically FOSS, but very few people who are not developers even have the desire to look at release notes and the like to see what kind of feature creep has invaded that stack of protocols and firmware hooks. One thing that was recently brought to my attention, courtesy of friend of the channel, Connor Needling, is that systemd has now been rewritten in such a way that we no longer have control over what DNS servers our systems use. Let’s start to migrate away from systemd-based distributions. Alpine is one, but it is not particularly user friendly on the front end, unfortunately. Connor is a huge fan of Alpine, and I am testing it on my kids’ machine, as it is very lightweight and performant, and their machine is over 10 years old, so it seems like a match made in heaven, to a certain extent. Devuan, MX Linux, Salix, Artix, and AntiX are a few other non-systemd options out there that might be a bit more user friendly (MX is excellent in that respect, if you are ok with Debian based distros. Check this list for even more options: https://en.wikipedia.org/wiki/Category:Linux_distributions_without_systemd
There of course were some key updates in 3.18, such as moving up to the Linux 61 LTS series, musl libc 1.2.4, Python 3.11, Ruby 3.2, Node.js 20.1, Go 1.20, and Rust 1.69. Remember, this is a lightweight distro. Don’t expect a ton of bells & whistles. You’ll even need to install and configure networking for your machine. Beware the install script, though. It will try to force you to set up WiFi, when your system may not be 100% supported. I suggest plugging in hardline, via a lan cable. Worry about WiFi later. You’ll also need to use their setup-desktop script to pick your DE poison, so to speak. You’ll also need to wrap your head around doas vs sudo, at least until you install and configure sudo (which I suggest you do quickly), as well as their package manager (Alpine Package Keeper, or APK). 3.18 does ship with support for GNOME 44 and Plasma 5.27LTS, just need to pick which one you want, but you also have the option of Xfce. The bottom line when installing Alpine is that the wiki is your best friend, unless you have a friend who has done it and is good at explaining things.
https://9to5linux.com/alpine-linux-3-18-is-out-with-linux-6-1-lts-experimental-support-for-unattended-installs

Freedom Consultation
Free call.
60-90 minutes.
Q&A
Leave with Actionable Steps to take, whether you work with me or not.
Schedule today.

https://techfreedom.pro/freedom-consultation
#distromonday #freedom #consultation #Linux #degoogleyourlife #TechFreedom

DN 3 – RHEL 9.2 Out Now with Some Interesting Goodies
Last week, we talked about a couple of distros which are based on RHEL, but now we’re gonna talk about the main source for those distros, RHEL (Red Hat Enterprise Linux). This is the preeminent enterprise distro in the world. Red Hat is trusted because it has always enjoyed a close relationship with Big Blue (IBM), who have supplied funding and software contributions to the organization and its products for many years. Fedora is somewhat clean, as it is community driven, as far as I know. RHEL and CentOS Stream are decidedly less so than Fedora is, in my opinion, but take that with a grain of salt, as this is pure opinion based on circumstantial evidence at best. I went off about systemd earlier, so I won’t harp on that, but GNOME is also developed by teams at Red Hat. Anyway, back to RHEL and why I am sharing this article in the first place… RHEL got an update. Podman got a huge leg up (podman is a container management tool) in that now, it doesn’t require so much CLI knowledge to operate and take care of your container needs in your fleet. It seems to be geared more and more for automation, which is a welcome piece of news for network admins everywhere. So much more besides that, but you’ll have to read the article in the description if you care to see all of that.

https://9to5linux.com/red-hat-enterprise-linux-9-2-adds-64k-page-sizes-support-for-arm-new-system-roles

FOSS News
FN 1 – Ever Wondered How to Delete Files in Linux?
Well, if you’ve been around for a minute, you’re probably yelling at your screen about the trusty old rm command. If you are, you’re right. If you were wondering if I’ll mention stat or ls –i or find, you won’t be disappointed, my friend. If you are completely at a loss as to what I’m talking about, that’s ok, too. This is a brief rundown of how to use these commands to get rid of files in the Linux command line interface/terminal. Say you have a huge directory that is simply stuffed with files and perhaps sub-directories, etc, and you need to free up some space on your computer, then you may try to simply select the directory in question in your file manager of choice (Dolphin, Nemo, Nautilus, etc…) and hit the delete key. This MAY work for you, but will only move your directory and its contents to the Trash bin (assuming it isn’t too big, as there is a file size limit placed on the Trash Bin). If it is too big, you can expect an error stating as much. Deleting in Linux does not work the same way as it does in Windows. When you delete a file in Linux, you are simply removing a link to the file from your computer, then later on, when you aren’t using the file you just unlinked to, the contents get cleaned up. In Windows, due to the way the FAT partitioning system used to work, one must make entirely separate copies of a file in order to have it in multiple places, as FAT is kind of dumb that way. At any rate, time to talk commands, yeah?

Everybody’s favorite is rm. It quickly and relatively painlessly removes the link to the file or directory in question. Here’s the basic syntax for rm:
rm -<options> <name of file or directory> —<flag>
For example, if I wanted to delete the pacman lock file ( a frequent enough scenario in Arch based distros) it would go: sudo rm –f /etc/pacman/db.lck the –f option will force it to delete the file, and adding sudo in front will elevate your privileges so that you can take out that system file.
If you want to get rid of a whole directory, though, how would you do that? That is what the –r option is for. –r stands for recursive, so it will get rid of the directory and all that is in it (files, sub-directories, etc). Say you had a directory called Test in your Documents directory, and it has a whole bunch of random junk in there that you don’t need to have around anymore. You would run an rm command like this: rm –r /Documents/Test, and that will get rid of the directory and anything that was inside of it. You experienced users might be wondering if I’ll mention rmdir, well, don’t worry. There’s your mention. It isn’t terribly useful in this case, as it is only capable of removing said directories if they are empty.
Next, we turn to find. Find is a bit more complex than rm, so is probably used less. So here’s the situation: you have a directory called “Test 2” in your Downloads directory, and you don’t want to use rm. What do you do? Find to the rescue! Here’s the command you need: find /Downloads/Test 2 –delete
You could also use find in concert with ls –li or stat to find the inode number (the unique file number for each file or directory in Linux), then write something like this:
find /path/to/file -inum INODE_NUM -exec rm -i {} + (where you would plug in the inode number you found by running either stat or ls –li beforehand for the file in question where it says INODE_NUM), then hit y to confirm the action. This seems extremely specific, which is good, but at the same time, if you know the name of the file or directory anyway, then why bother with the inode thing anyway?

https://www.tecmint.com/delete-large-directory-linux/

FN 2 –QEMU 8.1 Announced
Though 8.0 just shipped, here is a sneak peek at what is coming in the next version of this crucial emulation back end for handling things like running your classic Nintendo or PlayStation games on your Linux PC. It is also useful for more important things, such as testing ARM or RISC-V compatibility for a piece of software. It can also help you to run regular x86 software on an ARM or RISC-V based system. This is incredibly useful for developers so that they can make 100% sure that their software will work on any platform, so the changes made in 8.1 will make it that much more pleasant to use. They added better pipewire support for audio and video backends, as well as a handful more chips that it can emulate for both ARM and RISC-V. It is unlikely that most of you will need this, but I thought I’d cover it, because it will likely indirectly effect you in the future. Lots of good stuff with this release, so if you want to know more, read the article and the announcements, down below.
https://gitlab.com/qemu-project/qemu
https://9to5linux.com/qemu-8-1-promises-pipewire-audio-backend-improved-risc-v-support

Want to learn more about how to degoogle your phone and why?

https://techfreedom.pro/degoogled/

#TechFreedom #degoogled #degoogleyourlife #defintionsday #Truth
FN 3 – Another KDE Maintenance Update
Here’s KDE Plasma 5.27.5, with a bevy of useful changes and bug squashings, as usual. 5 weeks after the release of 5.27.4, we have the next maintenace update, so what’s new here?
• Even more better flatpak support
◦ No more broken configs
◦ New flatpak permissions page in system settings
◦ And more
• Task Manager can now do better with text for windows which do not have text in the titlebar
• Emoji selector window invokes more quickly from kb shortcut
• Scrolling in Task Manager and Pager widgets works better
• Touchscreen
◦ Long press on system tray icons for context menus works now
• Bug fixes
◦ Plasma Discover
▪ Correctly applies firmware updates
▪ Many flatpak issues
• Crash when dealing with a missing .flatpakref file
◦ Plasma Wayland
▪ no longer crash the KWin window and composite manager when hovering the cursor over Task Manager icons or when closing windows (that was annoying)
▪ System Settings app should no longer crash during startup if the Activities database is corrupted
▪ Plasma should no longer crash due to excessive memory usage when searching for unusual things with KRunner (how do they define an unusual search term?)
◦ Multimonitor Support
▪ No more screens-overlapping-by-one-pixel issue
▪ Many other random issues were fixed as well
◦ Random bits
▪ fixes Plasma Calendar’s “Months” views
▪ updates the mouse acceleration profiles to work properly with libinput 1.3 or later
▪ fixes long notification title text in the Notifications history
▪ improves the Bluetooth connection experience
▪ improves importing of VPN configurations
▪ plugs a major memory leak when plugging in an external display
▪ addresses a recently discovered regression in the size and sharpness of GTK CSD windows’ minimize, maximize, and close buttons when not using a scale factor
▪ improves the centered arrangement of Plasma widgets between two flexible Panel spacers places on vertical panels
As usual, the KDE team have been hard at work to make Plasma that much better, even as they have been devoting many resources to KDE 6, which is due to drop later this year. When 2-in-1 touchscreen support is closer to GNOME level, I very well may go back to KDE on my surface, but not until then. It’s funny, since I put GNOME on my Surface, It almost feels jarring to go back to KDE, though I know I could make it behave similarly. If you want a clearer picture of what this update did, take a look at the announcement page in the description below. (https://kde.org/announcements/plasma/5/5.27.5/)
https://9to5linux.com/kde-plasma-5-27-5-improves-flatpak-permissions-page-system-settings-and-more
#FOSSnews #bigshow #KDE #updates #fixes #TechFreedom

FF 1 – Roblox h8s Penguins
The Roblox developers have hammered the last nail into the coffin for compatibility and support on Linux. They are adopting Hyperion anti-cheat, as the Roblox team bought the company behind Hyperion last October. Their logic for blocking WINE usage is tenuous at best, in my view. They also refuse to countenance the concept of a Linux port, claiming that the gaming community on Linux is neither large nor cohesive enough to bother devoting company resources to developing or supporting. Will this affect Linux adoption rates? I don’t know. I know that Roblox is nearly as popular as Minecraft, particularly with the younger set, however, as this article states, we have Heroic and the Steam Deck, as well as Proton which still enable us to play many games, and those tools are only getting better. I don’t see this as a huge detractor from the appeal of getting away from Windoesn’t and MacOS, if for nothing other than privacy and security reasons. For that matter, Linux is stable, now, particularly if you choose a point release distro like Pop!OS or Mint. It pretty much “just works” for most things, these days. Are there exceptions to the rule? Of course, just like anything else in life. I do not see this making that much of a difference for people who are motivated to make the change anyway.

https://news.itsfoss.com/roblox-linux-end/

FF 2 – ASUS ROG Ally Formally Announced
Well, we have more information about this Steamdeck competitor now, from specs to pricing. It will indeed be running AMD’s new Z1 chips, but it ships with Windoesn’t 11. *throws up in mouth* Why are they inflicting that privacy nightmare on their customers? Oh wait, massive subsidies from MSFT, no doubt. That, and running Windoesn’t entails fewer compatibility issues. Let’s keep an eye on this gear and see about perhaps getting it working on Linux, shall we? So, here are the specs for this piece of kit: AMD Z1 capable of up to 2.8 TFlops for the base model, both ship with a .5 TB Gen4 SSD, 16 GB DDR5 RAM, a 7” FHD touchscreen display capable of 500 nits brightness, and dual cooling fans. Raw power, this thing sounds promising, and it will cost $599. The upgraded model comes with the Z1 Extreme chip, which is about 3x more powerful than the regular Z1, capable of pushing 8.6 TFlops (you might be wondering what a TFlop is: a teraflop, 1 Trillion FLoating point OPerations. A FLOP is a measure of computing performance which gives a more accurate picture of the capabilities of a chip than simple instructions per second). The extreme version is comparable with the processor in the PlayStation 5, clocking in less than half a TFlop/s lower than the P5 in a smaller package that is also more efficient. By the way, the more capable version is slated to sell at $699. To put it into perspective, the top spec Steam Deck sells for $649, and has the same size ssd, and a AMD Zen 2 chip, and 16 GB RAM, with a 1280*800 resolution 7” screen. Its processor can only manage ~1/2 TFlop/s and its integrated GPU can only manage up to 1.6 TFlop/s. That is pretty weak in comparison to the Z1, but it does natively run SteamOS, which is based on Arch Linux. Here’s a link for the Steam Deck: (https://store.steampowered.com/steamdeck)

https://www.gamingonlinux.com/2023/05/asus-rog-ally-releases-in-june-priced-competitively-to-the-steam-deck/

Freed Computer

https://techfreedom.pro/freed-computer/
https://techfreedom.pro/free-your-pc

#freedcomputer #linux #nospying #safe #TechFreedom #Truth

FF 3 – What’s Arcane Wilds?
A Western-themed fantasy RTS game that is cross-platform and currently in beta testing. It has
3 factions which each have their unique features, strengths and weaknesses, Army (a Civil War era US Army-alike), Colony (wild west-style gunslingers and the like), and Tribes (similar to native Americans). Who vie for resources and territory. The difference here is that two of the key resources (Supplies and Essence) are actual physical things which need to be transported and can even be stolen. That is novel to me. I like that idea, it makes the whole thing much more realistic and potentially engaging. The combat system sounds like it should be really fun, as it is designed to be very fast-paced, but not at the expense of strategy. Units get ordered via the port, which is where you start every game. In order to order certain units, you do need to build certain buildings, but units are not directly produced by their associated buildings, but those buildings do allow you to order them at the port. Interesting mechanics, y’all. Not just build base, harvest resources, make units, and attack your enemies. We’ll see what shape this game finally realizes once it is out of beta.

I will take a look at it and see if my system can handle it and stream & record the whole thing or not. If it can, I will test it out on the Weekend Edition.

https://www.gamingonlinux.com/2023/05/arcane-wilds-kicks-off-with-some-refreshing-rts-ideas/

#FOSSNews #FOSSFun #linuxgaming #TechFreedom

FOSS News Big Show 1

Big Show 1

 

FOSS News 1 – Big Show

Distro News

Manjaro Talos Released

Ubuntu Double Header

Alma vs Rocky: Which is the Best CentOS Alternative?

FOSS News

How to Set Up Your Own VPN with WireGuard

LibreOffice 7.5.3 Released

11 Ways to Be More Private

FOSS Fun

Discord Makes It Easier to Find People

Heroic Launcher Gets Hotfixed

Proton 8.0-2

#FOSSNews #Linuxnews #Linux #Distros #Howtos #FOSSFun #TechFreedom #Manjaro #Ubuntunews #almalinux #rockylinux #wireguard #Lireoffice #privacy #valve #steam #Proton #heroiclauncher

FOSS News, Linux, How-tos, Gaming, Tech Freedom, all sorts of good stuff


 

Distro News

DN 1– Manjaro 22.1 “Talos”

On April 21, the Manjaro team released their latest round up system updates, codenamed “Talos”. As is typical with this very tested, Arch-based distro, they lag behind the bleeding edge by a few months. I still use Manjaro on my streaming PC and my wife’s laptop, though I have migrated my surface and our other machine away from that, as it seemed to break things or cause unnecessary slow-downs for those machines. Manjaro is very much a solid distro, and is a good starting point if you want to try the Arch side of the Linux family tree, as it is safe, yet still essentially a rolling release. So, what’s new in this ISO?

  • GNOME 43.5
    • redesigned system status menu
    • in-house Layouts Switcher application
    • Gradience
    • Custom dynamic wallpapers
    • Manjaro green theming is back
  • KDE
    • 5.27.4
    • Gear 22.12
    • Wayland support as cornerstone (Manjaro team is very excited by this)
      • I’ve spilled much digital ink talking about the latest in KDE as these updates are released, typically on a monthly cadence, and the latest is actually Gear 23.04 and Framework 5.105, not 22.12. This is the nature of Manjaro, though. They make sure that the packages they roll out to users (generally) are rock solid and stable, so unless you feel the need to live dangerously, this is a solid option for you.
  • Xfce
    • Finally on 4.18
    • New file highlighting feature in Thunar
    • Recursive search in Thunar
    • Panel preferences changes
    • Panel length in pixels vs %
    • Panel can now stay on top of windows, so the bottom of a window goes below the panel, rather than covering or sitting flush against it
    • Control Center is now the one-stop shop for all desktop module settings
  • New Kernel 61 LTS ships by default, but options for 5.15 and 5.10 LTS as well.

https://forum.manjaro.org/t/manjaro-22-1-talos-released/139155 

DN 2 – Ubuntu Double Header

2.1 – Update PSA

Make sure that you update to the latest kernel patches from Canonical if you are running Ubuntu, as there were a pair of critical vulnerability exploits which got patched recently: CVE-2023-1829 and CVE-2023-0386, both of which could allow a local attacker to escalate their privileges to root level without a password. The first one was a flaw in the traffic-control index (TC-Index), which required the devs to shut that down in order to fix it. The second was an issue with the OverlayFS file system, which controls the copying process from one UID to another.

These patches affect 22.10, 22.04 LTS and 20.04 LTS users,  so run the update via terminal as you usually would: sudo apt update && sudo apt full-upgrade should grab and install these for you with no problems.

https://9to5linux.com/canonical-issues-new-ubuntu-kernel-updates-to-fix-two-local-privilege-escalation-flaws 

2.2 – Bionic Beaver (Ubuntu 18.04 LTS) is End-of-Life

Just a heads up, here. LTS versions of Linux are supported for 5 years, and we are at the end of that time frame now. If you have any systems running 18.04 still, I suggest upgrading, if it is at all practicable to do so for you. Or you can move to Ubuntu PRO, which will offer extended support through expanded security maintenance (ESM) updates until 2028. Just thought you should know, just in case we have some stragglers or people out there who really have a mission-critical need for 18.04.

https://news.itsfoss.com/ubuntu-18-04-eol/ 


 

Freedom Consultation

  • Free call.
  • 60-90 minutes.
  • Q&A
  • Leave with Actionable Steps to take, whether you work with me or not.

Schedule today.

https://techfreedom.pro/freedom-consultation

#distromonday #freedom #consultation #Linux #degoogleyourlife #TechFreedom


 

DN 3 – Alma VS Rocky: Which is the better CentOS Replacement?

This article lays out several points of comparison, ranging from ease of installation, to extensiveness of documentation, to performance, and ease of use. They both inherited the CentOS installer, so if you liked that, you’ll love the Rocky and Alma Linux installers. I’ve not worked with any of them, personally, but it looks straightforward enough, as it should. Both Alma and Rocky Linux are aimed squarely at enterprise use cases, just as CentOS was. This means that they are geared to be ultra-stable and secure. It is also very easy to migrate from a CentOS install to either Rocky or Alma Linux. All you need is their script to run, and it will switch you right over. One benefit that Alma has is that they have also included upgrading in their migration script. So not only will it laterally migrate you from CentOS to Alma, but it will update & upgrade you to the latest version of Alma Linux all in one go. Rocky Linux also has migration tool, but as I just said, it doesn’t have the ability to upgrade you to the latest version in one fell swoop, but that is ok. Alma Linux is slightly faster in the benchmarks, but the difference is pretty negligible. As for ease of use, they are pretty close to identical, and both ship with GNOME templates for workstations. Rocky Linux  has far better documentation, so maintaining and repairing it is easier than Alma, which has a much more sparse, but that can be made up for by the great community support that exists, on the very active subreddit and mattermost channels. Rocky also has community support on their subreddit and mattermost channel, however, they are not as quick to answer questions as the Alma Linux community is. So these distros are pretty darn close, in my book. I’m not looking for an enterprise distro, but if you are, either of these are great options, from what I can tell.

https://www.maketecheasier.com/almalinux-vs-rocky-linux/ 


 

FOSS News

FN 1 – Your Own VPN? Just Like That…

As long as you have a VPS set up somewhere, you can easily set up docker and install Wireguard on it and have your very own, truly private, virtual private network. So right now, we will talk through the process, if you don’t mind. I unfortunately do not have a spare VPS anywhere, so I can’t SHOW you how this works.

First, make sure you have Docker and Docker Compose installed on your server. Most distros are pretty simple in terms of how to get that done, and I trust that you can look that up for yourself, if you don’t know how to get it done right now. So the first step is to check if Docker is installed:

Docker —version

If it returns a version, you are good to go, move on to installing Compose, which will allow you to install and run multi-container apps (which is what this will require).

If not, simply install Docker by following the appropriate install directions for your distro, then do the same for Docker Compose.

Here are the directions for Docker Compose:

  • sudo curl -L “https://github.com/docker/compose/releases/latest/download/docker-compose-linux-$(uname -m)” -o /usr/local/bin/docker-compose
    • sudo chmod +x /usr/local/bin/docker-compose
  • After that, you’ll need to install the appropriate containers for Wireguard Server and WireguardUI:.
  • First you’ll need to create and navigate into a directory called wireguard
    • mkdir wireguard
    • cd wireguard
      • Once there, You’ll need to use your favorite text editor (VIM, Nano, Gedit, ect) to create and edit a file called docker-compose.yaml
        • vim docker-compose.yaml
          • Once the file is open, simply copy the following lines of code into the file:
            • version: “3”
            • services:
              •   # WireGuard VPN service
              •   wireguard:
                •     image: linuxserver/wireguard:latest
                •     container_name: wireguard
                  •     cap_add:
                    •       – NET_ADMIN
                  •     volumes:
                    •       – ./config:/config
                  •     ports:
                    •       # Port for WireGuard-UI
                      •       – “5000:5000”
                    •       # Port of the WireGuard VPN server
                      •       – “51820:51820/udp”
                  •   # WireGuard-UI service
                    •   wireguard-ui:
                      •  image: ngoduykhanh/wireguard-ui:latest
                      •  container_name: wireguard-ui
                      •     depends_on:
                        • – wireguard
                      • cap_add:
                        • – NET_ADMIN
                    • # Use the network of the ‘wireguard’ service
                    • # This enables to show active clients in the status page

    network_mode: service:wireguard

    environment:

      – SENDGRID_API_KEY

      – EMAIL_FROM_ADDRESS

      – EMAIL_FROM_NAME

      – SESSION_SECRET

      – WGUI_USERNAME=admin

      – WGUI_PASSWORD=password

      – WG_CONF_TEMPLATE

      – WGUI_MANAGE_START=true

      – WGUI_MANAGE_RESTART=true

    logging:

      driver: json-file

      options:

        max-size: 50m

    volumes:

      – ./db:/app/db

      – ./config:/etc/wireguard

All you should need to do is change the WGUI_username and WGUI_password fields to your desired values, save and exit from the text editor, then you will actually download the container images and set them up thusly, from the above directory:

docker-compose up -d

It should take about a minute for them to download and be set up this first time, but after that, it should only take seconds to start the respective containers, as they won’t need to download every time you start them. After they have started up, you can open your browser of choice, then navigate to the IP address of your server, like so:

https://my.server.address.here

Enter your username and password (which you changed before you downloaded the images), if you are indeed following these directions. Then click “sign in”.

If you are very concerned with security, which, lets face it, if you are making your own VPN, you probably are, then you should look into installing a reverse proxy such as either Caddy or Traefik,to secure your access to WireguardUI.

Next, you’ll need to configure your new Wireguard VPN server. Simply copy the following batches of code into the Post Up and Post Down script fields, respectively:

Post Up:

iptables -A FORWARD -i wg0 -j ACCEPT; iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

Post Down:

iptables -D FORWARD -i wg0 -j ACCEPT; iptables -t nat -D POSTROUTING -o eth0 -j MASQUERADE

After this, hit the Save button in the bottom left (below the fields you just populated) Apply Config button in the upper right corner, then confirm by clicking Apply in the dialog box that pops up. After this, you will click over into the Global Settings tab on the left hand side of the window.

Check to make sure that the auto-populated public IP address is accurate, if it is, great, if not, you will have to find and enter the IP address of your server, and you can set DNS servers for your VPN, so say you want to add AdGuard, a PIHole, or perhaps content filtering to protect you and your family from garbage online (such as porn, gambling, drugs, or other sketchy things). On that subject, you could also set up your own DNS filtering through ControlD (https://controld.com), or add AdGuard and perhaps CleanBrowsing DNS addresses before you Save and Apply Changes.

Finally, in order to connect to your new VPN, you’ll need to set up a new client or two, so click the New Client button, and enter a user name and email, but leave the rest blank/ as they populate it. Then hit the Submit and Apply Config buttons, and your first client should be automatically set up and ready to use.

Next, we need to figure out how to connect to this VPN client, right?

Right, we do.

Here’s how to get it done on your Linux PC:

Click the Wireguard Clients tab on the left hand side of the WireguardUI window. You should see the client(s) you just set up.

Click the Download button on the client in question, then rename it something recognizable so that it is easier to do the next step:

Open your terminal

Copy this command:

nmcli connection import type wireguard file <yourfilename>.conf

Then open up your Settings app, navigate to the Network Connections section or tab, and you should see the WireGuard VPN connection available to you and then click it and click connect. After this, it should show up as connected, so if you ping your VPN server’ s private IP address, it should return a positive result, and lo & behold, you are connected to your brand new VPN. You can also confirm by going back to your WireguardUI window and looking at the Status tab.

But what about phones? Have no fear, I’ve got you covered:

Download the official WireGuard VPN Client app from your app store of choice, then open it and tap Add a Tunnel, then Create from QR Code. To get the QR code you need, go back to the WireGuard Clients tab again, and pick your client, and click the QR Code button, then capture the QR code with the app on your phone, and all should be set up for you. Once that is done, simply enable the profile, and you are protected.

https://linuxiac.com/how-to-set-up-wireguard-vpn-with-docker/ 


 

FN 2 – LibreOffice 7.5.3 Released

This one will be much shorter than the last story, as I won’t be talking you through installing and configuring anything, just reporting on a maintenance release for a popular FOSS office suite. I have often covered these releases on Tech Tips Tuesdays in the past, but they are a thing of the past now. Here we are… LibreOffice 7.5.3. This release squashes 119 bugs found in the previous release, and if you are a LibreOffice 7.5 user, you should certainly update to this as soon as you can, so that you can stop encountering those bugs. The 7.5 series will be actively developed until 7.6 comes out sometime this November. That is all. I used to use LibreOffice for everything, but recently began switching to OnlyOffice, which tends to be more stable and is easier to link up to NextCloud, as well. These days, I only use LibreOffice personally to read off my show notes on my streaming PC. That is not to say that it is crap, but the simplicity and closer compatibility of OnlyOffice feels like a better fit for me now.

https://9to5linux.com/libreoffice-7-5-3-is-now-available-for-download-with-119-bug-fixes 

Want to learn more about how to degoogle your phone and why?

https://techfreedom.pro/degoogled/ 

#TechFreedom #degoogled #degoogleyourlife #defintionsday #Truth
 

FN 3 – A Privacy Listicle from It’s FOSS

This is has 11 ideas, so we’ll more or less copy what he says, then comment on them a bit.

1. Secure & Hide Your Email

You can use email aliases to keep your actual email address private. We have a list of tools to help protect your email address. Choose any options like SimpleLogin or use the email alias addresses your email provider allows creating.

https://simplelogin.io 

Also, try using secure email services like Tutanota or ProtonMail for the best experience.

I hadn’t really thought about this… I should start doing this on my own, for sure. I have a few protonMail addresses, but don’t use them because I had already set up with Zoho for email and collaboration for my domains. Until Proton has an ecosystem as diverse as Zoho’s, I can’t see myself moving away from Zoho. True, as far as privacy and security, Zoho is not in the same realm as either Proton or Tutanota. The major leg up that they have, in my opinion is that they are geared to be a drop in replacement for Google Spaces and Office365 online (including Outlook, to a certain extent), but will not scrape your data for relevant Ad data or other, more nefarious things. The other two are end to end encrypted to the point where if you lose your password and do not have a recovery method set up, you will lose all of your emails.

https://zoho.com

https://proton.me 

https://tutanota.com 

2. Secure Your Internet

Use a secure or encrypted DNS like NextDNS or ControlD

Use a VPN to encrypt your internet connection

ProtonVPN and Mullvad VPN would be two excellent options, offering open-source clients and Linux support.

Funny, I just mentioned ControlD earlier, didn’t I? The encrypted DNS is key, 100% of the time, the VPN you can get by without unless you are out on public WiFi.

https://nextdns.io 

https://controld.com

https://proton.me

https://mullvad.net 

3. Secure Your Search Activity

I harp on this weekly. The top options here are probably Swisscows, Mojeek, Metager and SearX. A distant placing would be Brave Search. The reason I say that Brave Search has fallen from favor is that with the enfolding of AI, their index has shifted to the Left, where it used to be fairly balanced, if not conservative-leaning. All of them are far better than Yahoo, Bing, or Google Search, in terms of keeping your information under your control, though, so take your pick, try a few and see which one scratches your itch best. SearX is unique in that you can and should host your own instance, in a way, that is the ultimate in privacy, as you control the engine for your instance.

https://swisscows.com

https://mojeek.com

https://metager.org

https://github.com/searx/searx 

https://search.brave.com 

4. Use a Privacy-Focused Browser

Some popular options are Brave, LibreWolf, and Vivaldi. Only one of these is actually FOSS, in fact, the Vivaldi team will not even allow the browser to be packaged as a flatpak. Brave is not FOSS, either, but with a few tweaks, it certainly passes the privacy sniff test. LibreWolf is 100% FOSS, as it is a fork of FireFox, but geared to be about as private as possible without going Tor. For instance, it defaults to deleting all history and cookies every time you close the browser, so be aware of that.

https://brave.com 

https://librewolf.net 

https://vivaldi.net 

5. Do Not Install a Program You Don’t Know

Be careful with the stuff you download and run on your computer, whether you’re a Linux, Windoesn’t, or MacOS user. Research apps before  you randomly install things, they could just be malware. Ankush is right that there are a few tells that any piece of software is probably ok:

  1. Make sure that it is reasonably popular

  2. Not brand spanking new

  3. Is FOSS and has a stable release or 2

  4. Read the privacy policy to make sure any app is not just a black hole for your private data.

  5. Never just simply download unverified files from an email.

  6. Only grab software from official channels, unless the developers suggest getting it somewhere else.

6. Utilize All Privacy Tweaks and Options

Take a look at the privacy options for every single app and system-wide on your phone or computer. It will probably yield dividends for your privacy, as often it is possible to make things more private than they are by default, but you have to look for the settings in order to change them.

7. Use Secure Password Managers

Use something like KeepassXC or BitWarden, or even the Nextcloud password manager (tied to your own instance, ideally) to keep your passwords and credentials safe from prying eyes, and thereby keep your data safer. Don’t use browser based options, they can be more readily hacked.

https://keepassxc.org 

https://bitwarden.com 

8. Keep Your Notes Secure

If you take notes on your devices, these may be some of the best options for privacy.

Standard Notes and CryptPad are great and offer end to end encryption by default. There are of course others which are just as good. Just go hunting a bit.

https://standardnotes.com

https://crytpad.org 

9. Store or Backup on a Private Cloud Platform

You should always have multiple secure backup solutions in place, to make sure that your data is safe from disasters (whether natural or electronic), as well as from intruders. Most of us don’t have the time or know-how to set up and manage our own home storage servers for backup, so the next best solution is a secure cloud, such as Mega or pCloud, or a FOSS alternative like LibertyStratus, which is essentially a fork of NextCloud, which is the best self-hosted option out there for this. With NextCloud, you could create an instance on your own hardware, or set up a VPS with a hosting company and create other users and share files and communicate in your own little cloud whenever you’d like.

https://mega.nz

https://pcloud.com

https://libertystratus.org 

https://nextcloud.org 

Https://althatech.com (great little hosting company that I write blogs for)

10. Use Private Messengers

You can always utilize open-source and encrypted messengers like Signal (cross-platform) to secure your communications.

If you want a bit more privacy than that, you could spin up your own matrix server and connect to it with element or fluffy chat, or any of these other options (https://matrix.org/clients). 

11. Specialized Distributions

If you are adventurous and want to try an entirely different operating system tailored to give you a private experience, you can pick Tails OS, Whonix, or Qubes. These are the best for privacy, and each one has different approaches to the problem. Tails is designed to not have persistent storage, so if you unplug your flash drive from a computer, your data is gone. Whonix is designed to be run in a VM, where Tails is meant to be purely a live environment option. Qubes, on the other hand, can be installed normally, but is entirely containerized in such a way that once you close an application, all its data is irrevocably lost.

https://whonix.org 

https://tails.boum.org 

https://qubes-os.org

https://itsfoss.com/improve-privacy/ 

FF 1 –  Discord to Finally Make Usernames Make Sense

Are you a Discord user? Have you noticed that the usernames have always been a bit too random to easily search for friends? I’m not on discord, though I may hop on at some point kinda soon to actually participate in ministry there. We’ll see how that goes. I may invite him on to talk about his project, which is largely based on open source tech, if I’m not mistaken. He is a brilliant guy, actually leaves me feeling wanting when I talk to him because he knows so much. But I digress. I don’t know much about Discord, other than it is a voice chat tool which is often used by gamers, similar to Mumble and TeamTalk. I guess I’m just not that much of a gamer… Certainly not in this season of my life. Part of me misses it, but I like to be busy, and my plate is pretty full these days, so I’m good.

https://www.gamingonlinux.com/2023/05/discord-username-system-changing-to-make-it-easier-to-find-people/
 


 

FF 2 – Heroic Games Launcher Gets a new Hotfix

What needed a fix this time around? Well, it looks like users were having trouble getting past the captcha when trying to sign into Epic. Let’s see what else they worked on, shall we?

  • They’ve also added some keyboard shortcuts now too:

  • Command Or Control+R: Reloads the app.

  • Command Or Control+Q: Quits the app.

  • Command Or Control+Shift+I: Opens the dev tools.

  • Command Or Control+K: Opens the Heroic settings screen on the frontend.

  • Command Or Control+L: Opens the library screen.

  • Command Or Control+J: Opens the downloads screen.

Full changelog:

  • [Tech] Refactor Game Managers by @BrettCleary in #2578

  • [FIX]: Fix winemenubuilder not being disabled by @Etaash-mathamsetty in #2630

  • [FIX]: Fix playing status (again) by @Etaash-mathamsetty in #2626

  • [Enhancement]: When selecting item from search bar, it will take you directly to item’s game page by @JordanPlayz158 in #2614

  • Fix missing game settings info in logs by @arielj in #2638

  • [Enhancement]: Provide Wine-ge/Proton-ge latest version via wine manager by @Nocccer in #2513

  • [Enhancement] Add logic to Stores feature by @redromnon in #2622

  • [Fix] Searchbar and autoComplete UI by @redromnon in #2621

  • [Fix] Ignore Logitech’s G29 by @arielj in #2570

  • [Fix]: Blank screen on startup by @Nocccer in #2612

  • [FIX] Image search on Add Game Screen blocking finish button by @flavioislima in #2657

  • [Fix] Captcha not working on epic games page by @flavioislima in #2658

  • [GOG] Fix url for horizontal images for GOG downloads by @arielj in #2661

  • [FIX] Proper kill wine processes when hitting Stop Button by @Etaash-mathamsetty in #2666

  • Allow ‘null’ as lifespan so cachestore does not expire by @arielj in #2664

  • [Fix] Steam Shortcuts with missing runner by @flavioislima in #2660

  • [UX] Add Keyboard global shortcuts by @flavioislima in #2659

  • [i18n] Updated Translations by @weblate in #2636

https://www.gamingonlinux.com/2023/05/heroic-games-launcher-271-hotfix-1-fixes-up-epic-games-login/ 

Freed Computer

https://techfreedom.pro/freed-computer/ 

https://techfreedom.pro/free-your-pc

#freedcomputer #linux #nospying #safe #TechFreedom #Truth


 

FF 3 – Proton 8.0-2 Released

Here’s another small update, which pulled in some of Proton experimental’s work to, for one thing, make the EA app work again, since they keep messing with everybody over there at EA. Aside from that, here is a shortlist of things that got pulled in from experimental:

  • Fixed Baldur’s Gate 3 getting stuck on a black screen in Vulkan mode.

  • Fixed Divinity: Original Sin: Enhanced Edition and Divinity Original Sin II: Definitive Edition crashing on launch.

  • Fixed Path of Exile crashing.

  • Fixed memory leak in Trackmania and Ubisoft Connect overlay.

  • Improved Elden Ring compatibility compared to Proton 8.0-1. It can still be finicky.

  • Fixed Red Dead Redemption 2 and other games not starting after switching from Proton Experimental to stable.

Hmmm… I remember talking about the Path of Exile thing recently… Makes me want to play again, but I don’t dare until I get a better computer. Oh well… Thus is life. I also don’t really have time to get back into it. I was pretty deep in it for about 4-5 years right after it left beta, 10 years ago. Then kids happened and I realized that it wasn’t worth my time to play a dark A-RPG. I digress again, though… Good that major games like RDR and Elden Ring are getting plenty of love, as always. One thing you can generally count on in FOSS development is relatively incremental improvements happening on a regular basis. Enjoy your games, y’all.