Only public facing ports, maybe your openvpn login. But that means you are already firewalled up and your attack surface is tiny, good 👍

I recommend fail2ban to stop the automated attacks that are the background noise of the internet. It will set your firewall to block certain ip’s for a while, especially ports 21/22 are getting hammered with dictionary login attempts. And port 80 and 8080 for example get constantly version checked to see if you are vulnerable with an old apache, old dokuwiki etc, so don’t expose more than you need to and maybe learn about ssh tunnels and close a few.

I once installed ossim in a small network with a server and it showed me it is war out there, scripts flying everywhere.

I like badblocks in destructive mode. It can also do multiple rounds of overwriting. It is also a good tool to burn in a new hdd or test a used one. just check smartctl bad sector count, run it, check again if it increased.

Someone has to write all these shitty articles how bad the other generations are.

Sounds great! I’ll have a look once the user infrastructure is in place.

This article is far too hypey. One dude has started this initiative and needs people to work on his concept to get it off the ground. I’m not opposed to a red-hat free immutable system, but this one is so far from maturity this article is selling a first drawing like an almost finished product. Remind me in two years how this went.

Primitive ftpd from fdroid is my go-to “too lazy to configure a cloud thing” solution. It is fast and just works.

This happened to me when my language settings weren’t set. You can’t even access them in jerboa, log in with a browser and check if English is selected besides default. And whatever else you wish to see.

Would you notice if it doesn’t? The screen flickering is obvious, what if your ram and ssd flicker, too? You can tinker with that laptop and try to reduce 3.3 or 5v power rail load with kernel flags, but until someone checks those power rails electrically I wouldn’t trust that laptop to be reliable for anything but a tinkering exercise. We sadly don’t get redundant power IC’s you could switch to, but the failure is common and the involved parts cheap. I wish competent repair shops were more common.

I would conclude from this that your dc-dc converter is out of whack and only works stable enough for a small range of input voltages. This hardware issue might require a hardware fix at a repair shop :/

I’m impressed they could get their momentum going for so long, they were able to burn so much money and only now are investors pulling out? That was a serious hype train! Even if it was meant as lobby sponsoring against standard high speed rail, holy cow what a waste!

if your layout is part of the keymaps (/usr/share/kbd/keymaps depending on distro) you can load it with ‘sudo loadkeys -u awesomelayout’ and make it permanent with ‘localectl’ except on debian and heirs. There it would be ‘sudo dpkg-reconfigure keyboard-configuration’

https://www.techpowerup.com/gpu-specs/geforce-gtx-1660-super.c3458

The relative performance table below the specs can help you. The cheapest you can get right now is a rx 6600 dipping below 200 $/€, but the 6600xt 6650 6700 6700xt are also viable. The 66xx range is enough for 1080p, 1440p begins with the 6700 becausa it has a 10gb vram buffer and wider pci bus.

According to your logs when installing the kernel, your nvme modules are nowhere to be found, and basic system tools are unavailable. Your core system seems severely borked… can you do a memtest (broken ram can corrupt your storage and your attemps at finding the problem) and check your smartctl --all of that ssd?

Yes. One is obviously running in a kvm of the other. Both nailed down with grsec hardening and selinux and chroot jails everywhere a noob would use a container. The main filesystem is a readonly squashfs on raid1.

Any more ideas for the most hellish linux system we can create for our enemies?

Haha, noob. My distro is the best distro and everybody should be using it because nobody has a different use case and expectation anyway. My terminal skills are unrivalled, your mouse is blocking your progress to true productive greatness. My automated installation runs faster than you can download your proprietary drivers. I use imagemagick instead of gimp for its speed and user friendliness. Vim is the only editor you ever need. Do you even internet without your own email server? I rather install rpm’s on arch than use flatpack.

//The linux endboss needs to be a meme. We could make chuck norris level jokes about him.

I was pretty happy with my lineage-os install that had the play store as the only google service. F-droid for other apps, nextcloud for cloud+calendar. But you need an unlockable phone and a bank that allows unlocked phones for their app.