• 0 Posts
  • 26 Comments
Joined 2 years ago
cake
Cake day: June 4th, 2024

help-circle
  • I see. When I wrote that out it was more of a “Why would some one pick this over CachyOS or plain Arch?” and I think you’ve adequately answered that.

    I have NEVER had less issues with an OS ever since running Arch and/or CachyOS

    I can say the same, except I’ve never had a real issue with Arch in the 15(+) years I’ve known of it and used it. Every issue I’ve had with it was my own fault and was just part of learning of how package managers work. Nothing unique to Arch is inherently confusing or prone to user error in my opinion. But that’s just my own bias.

    Good luck with this distro. My only bit of feedback is that distros with a bus-factor of 1 usually die out quickly (burn out is real). I would say if you’re planning to have any support channels look into on-boarding some trustworthy comrades to assist you with this. Other than that wish you the best homie!




  • but on desktop Linux you need to either create a new user (and remove world-readable permissions from your main account files), or create a custom Docker container, or create a chroot, or launch a VM

    You don’t need to do any of that stuff to achieve application sandboxing. bubblewrap or firejail exist for exactly this purpose. Firejail in particular can integrate with AppArmor (which most mainstream distros that aren’t RHEL or Fedora ship with) so you get MAC on top of sandboxing.





  • Sickday@kbin.earthtoLinux@lemmy.ml•Do you use vim?
    link
    fedilink
    arrow-up
    7
    ·
    5 months ago

    It’s just way easier to get helix to a usable state for the languages I write in than it is with vim. I don’t have to go plugin hunting or vetting random github repos; all the support mostly comes shipped with the editor. Throw some lines in TOML file and you’re good, vs downloading a plugin manager, downloading plugins, configuring those plugins and hoping you got everything right and the plugin repo’s README isn’t 10 years out of date.

    vim feels like a downgrade.

    100%



  • You register a new device on your tailnet and advertise it as an exit node. When other devices on your tailnet use the exit node all of their traffic goes through that device. If that exit node has a wireguard connection setup, all other devices using it will also use that same connection. The only tricky part was making sure wg-quick’s systemd service starts before tailscaled’s does (mentioned that in my op).

    Tailscale offers this as a service but I dont use tailscale directly. I basically set this up manually and use headscale as my control server instead of using tailscale’s control servers.



  • personally I just use headscale with tailscale clients and mullvad vpn via wireguard on the control server. there’s a bit of systemd magic required to make sure wg-quick starts before headscale does. dns is setup via a pihole device and I just point headscale’s config at that device for dns. it’s a pretty simple setup, but I have no issue doing everything via cli so this works well for me.