Why you cannot delete with swaylock? Backspace should work

Creating a different user account for it is out of the question btw, since you can still change the password for that user via the primary admin account.

First of all, if users have admin rights, nothing really prevents them to run that app. Even if you encrypt the app itself, they can just reinstall/replace it from standard repository.

Few ways this can be done:

1. If app needs internet connection, you may use firewall rules to block said connections, or even application firewall (Opensnitch). Create script which unloads said rules via su (create diffrent accounts with passwords the user must know) then runs app, and after closing app loads rules again. Users must not have admin rights or they can just unload fw rules.

2. Create encrypted container/directory, protected by password, and manually install said app under there (probably needs manual recompile of the app). Create script which asks password, unlocks the encrypted location, runs app, and locks container after use. Again, no admin rights for users or they just install same app from repositories.

3. Use apparmor or selinux to block said app. And again create script which by using su (create diffrent accounts with passwords the user must know) allows app via selinux/apparmor policies and runs app, and blocks it again afterwards. I repeat, users must not have admin rights or they can just unload those blocks.

What app it is?

EDIT: Clarification for su usage

To have user asked password before app can be done via su + sudo like this

• create user demouser
• give password of that user to end user
• give demouser sudo rights to run particular command as root without password (to unload fw rules, unload apparmor/selinux policy etc).

Same workaround works here as with dirty frag. Just disable those kernel modules.

I would use Ubuntu LTS (free) or Redhat Enterprise Linux. If paying is not an option, some RHEL derivate would probably also work.

Care to elaborate how Ubuntu failed newest release?

Systemd has already won. So other init systems must adapt, and modify themselves to be compatible with systemd.

You are trying to install wrong versions of nvidia drivers and proton app.

For nvidia, use this https://linuxconfig.org/how-to-install-nvidia-drivers-on-ubuntu-26-04

For proton vpn, I assume you are trying to install app meant for 24.04. Do not do that, just search one for 26.04, if it is available.

I am using Tiling Shell

https://extensions.gnome.org/extension/7065/tiling-shell/

Puppet / Foreman / Ansible for managing servers, and probably for workstations too.

Checkmk / Nagios / Zabbix for monitoring.

FreeIPA for user management.

I am working in company where about 35% of users are on Windows, 40% on Linux and 25% on Mac. In Linux, official way to use MS Office is web apps, but Libreoffice is quite heavily used too.

How to know if you are old:

First thing which comes to mind from DDR is not game about dancing or computer memory, but Deutsche Demokratische Republik (DDR).

https://en.wikipedia.org/wiki/East_Germany

Wild guess. Libspa version has changed and thus its path too. You will have to put (probsbly new version) of aac.so file to new libspa directory.

Yeah, it might require new one if dependencies have been changed.

Note. Before rebooting, regenerate initramfs for all kernel versions. I am not in debian, but dpkg-reconfigure initramfs-tools might do it.

Vim + vimwiki is what I use, with session saving plugin. That is all I need. For syncing, I use either git or syncthing.

I think their vision is solid. I just think there are gaps in following their vision. Wheres the “create new empty file”? Where’s the “open folder in terminal”? Why do I need to install bunch of bloatware to change more than 2 options?

On my Gnome Files, there is option to “Open in terminal” and create new files (from templates, which were set up by default on my distro). All by default without any extensions or anything.

If computers are in same network, even with different ip addresses, they still can see all broadcast and multicast traffic. This means for example dhcp.

If you fully trust your computers, and are sure that no external party can access any of them, you should be fine. But if anyone can gain access to any of your computers, it is trivial to gain access and sniff traffic in all networks.

If you need best security, multiple switches and multiple nics are unfortunately only really secure solution.

Luks FDE, and install dropbear-initramfs, configure ssh authorized_keys and rebuild initramfs. Then you can access initramfs via ssh to type luks password.

If you just rename the dir, and then find all broken symlinks in your system?

find . -xtype l

I had laptop running Ubuntu 16.04, which was running for 2273 days without reboots or anything. It was located in safe place so not even security updates were installed during that time. And it was still completely fine after all these days (little bit over 6 years). It was finally shut down when there was electricity break, and its battery failed, and I decided that it was time to retire it.

There of course were tons of updates available then, but no one forces you to install them. and in Debian system instead of Ubuntu, there will be lot less, their release policy is much stricter.

Have you ever upgraded the Ubuntu laptop? Cause that’s my main gripe with Ubuntu. Server upgrades work, desktop upgrades never did for me.

I wonder about this. I have been running Ubuntu on one of my laptops for years, and updated it several times withouth hitch. All the way from around 18.10 to 22.04 (non-lts, so I upgraded to every release) until the laptop was replaced.

Usually the breakage happens if one has tons of shitty third-party repos and thus will get package conflicts when upgrading. And those are solved by removing/replacing all software installed from those repos and then after upgrade reinstalling them again if needed.

Can you access your wan ip when you are somewhere else than on your own lan?

If not, then this is probably just that your router does firewalling and nat is such order that you can access admin interface from local network via wan address.

If yes, then router has some serious misconfiguration.