𞋴𝛂𝛋𝛆

  • 11 Posts
  • 83 Comments
Joined 2 years ago
cake
Cake day: June 9th, 2023

help-circle

  • The UEFI boot system is tricky and you need to get along with Secure Boot to do this. Secure Boot is outside of the Linux kernel. Both Fedora and Ubuntu have systems for this. Fedora uses the Anaconda system and I believe they do it best. I have had a W11 partition for 2 years and never used it once. It can’t even get on the internet with my firewall setup, but it is there and never had any issues the 3 times I logged into it.

    I think all of the Fedora systems support the shim key and secure boot but I know Workstation does. For Ubuntu I think it is just the regular vanilla Ubuntu desktop that the shim supports. This may be somewhat sketchy with Nvidia or maybe not. Nvidia “”““open sourced””“” their kernel code but the actual nvcc compiler required to build the binaries is still proprietary crap.

    I have a 3080Ti gaming laptop. It isn’t half bad with 16 GB of video RAM from all the way back in 2021. Nvidia is artificially holding back the vram because of monopoly nonsense. The new stuff has very little real consumer value as a result, at least with AI stuff I run. The hardware is a little faster, but more vram is absolutely critical and new stuff that is the same or worse than what I have from 3 generations and nearly 5 years ago is ridiculous.

    The battery life blows and the GPU likely won’t even work on battery. It will get donkey balls hot with AI workloads, especially any kind of image gen. This results in lots of thermal throttling. All AI packages run as servers on your network. If you are thinking along these lines if running your own models, get a tower and run the thing remotely.

    I manage, and need the ergonomics for physical disability reasons, but I still would prefer to have a separate tower to run models from.

    Anyways, you can sign your own UEFI keys to use any distro, but this can be daunting for some people. The US defense department has a good PDF guide on setting your own keys. The UEFI bootloader for the machine may not have all key signing features implemented. There is a way to boot into UEFI directly and set the keys manually but this is not easy to find great guides on how to do it step by step. Gentoo has a tutorial on this, but it assumes a high level of competency.

    Other than signing your own keys, the shim keys mentioned are special keys signed by Microsoft for the principal maintainer of the distro. These slide under the Microsoft key to keep secure boot enabled.

    If you boot any secure boot enabled OS, the bootloader is required to delete any bootable unsigned code it finds. It does not matter if it is a shimmed Fedora or W11. If you have any other OS present in the boot list, it should be deleted. W11 is SB only, and this is where the real issues arise.


  • 𞋴𝛂𝛋𝛆@lemmy.worldtoLinux@lemmy.mlSecurity Focused Daily Driving Distros?
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    3
    ·
    edit-2
    16 days ago

    Are you insane? Debian is a base distro like any other and runs more hardware than any other. It has all of the bootstrapping tools to get hardware working.

    Canonical is a server company and Ubuntu server is literally the product.

    Arch is absolute garbage for most users unless you have a CS degree or you have entirely too much time on your hands and don’t mind an OS as your life project. Arch abhors tutorial content in all documentation and therefore dumps users into a rabbit hole regularly. Pacman is the worst package manager as it will actively break a system and present the user with the dumbest of choices at random because the maintainers are ultimately sadistic and lackadaisical. Arch is nearly identical to Gentoo with Arch binaries often based on Gentoo builds, yet Gentoo provides relevant instruction and documentation with any changes that require user intervention and does so at a responsible and ethical level that shows kindness, respect, and consideration completely absent from Arch. Arch is a troll by trolls for trolls. I’m more than capable of running it now, but I would never bother with such inconsiderate behavior.






  • Probably better off just using a power resistor than worrying about waterproofing, unless you are concerned about it getting submerged.

    Like with a telescope outside at night, the first step is to normalize temp over a few hours time, but the next level step is a little resistive heater to keep the moisture at bay. Keeping the temp inside any enclosure a few degrees over ambient should keep humidity forming condensation.



  • These are great for certain use cases, but there are areas where volume is critical for economy of scale and we have no equivalent.

    Like with my disability and ergonomic needs I went looking for a laptop with an AI capable GPU. Also because building hardware is such a garbage marketing scam to navigate. I got a late- 16GB GPU model for $2k when all I could buy was a 12GB S76 for $3k5 or 16GB for $4k5+ and it had a 14k9 Intel with C4-roulette bomb built in.

    We are at a stage where it is insane that gaming is even relevant to GPU specs. The die used in almost all of these GPUs are not only capable of handing a lot more RAM, but the support for more RAM is actually already in the firmware and only configured by soldering the correct chips and changing a configuration resistor on the PCB. Most chips are more than capable of addressing the maximum memory that was available in the series. There are people posting on YT demonstrating this swap on multiple Nvidia cards. So either we must be able to buy a GPU with replaceable memory or hardware should be sold with the option for maximum. Gamers have no use for this, but it is super important for AI stuff. Like I was looking at getting some old P40 Tesla GPUs just because they have 24GB of ram but it would take 8 of them to have as much compute as my current single 16GB GPU on a laptop! I would love to buy a similar machine with something like a 48GB GPU in a 3090 or 4090 like class and with Tesla hardware that cannot be used for gaming. That absolutely cannot be some super rich, I-made-up-a-price boutique retailer bullshit. The existing hardware already supports this where something like a 5070 and 5060 are more than capable of shipping with 32GB of RAM attached. It is not super niche or stupid expensive to use chips that are a few dollars more each when the bulk of the cost is the same and already being spent. Sure my Tesla GPU laptop dream is edgy, but shipping a 32GB 5060 at economy of scale ~$2k is not. Even Nvidia should start classing dice and putting out AI specific specs if the bad blocks in a die permit just killing the ray tracing junk but can still do tensor math. These kinds of things are in the near future of possibility, but I don’t see anyone in the Linux space being particularly edgy and leading by offering something great. They are acting like boutique retail and charging premiums or offering mundane hardware for tried and true use cases.

    Anyways, I wanted to support S76 but paying twice as much, and when they do not open source their bootloader, it was a solid no for me. Fortunately https://linux-hardware.org/ exists and shows the kernel log and what works and does not work for almost all hardware that exists. Do a scan of your stuff to help others too, especially if you use esoteric stuff, unusual distros, or find some workaround to get hardware working when it did not work before. We don’t have very good economy of scale with edge case and enthusiast hardware, but this is a way around that.




  • Why are you confrontational? I’m just casually tossing out ideas and learning. Of course I understand what you are saying. However, busybox covers the core of a POSIX system and with the size constraints, it is likely standardising something like this. On Gentoo, such a change might be more straight forward instead of some sloppy hack with a wrapper.

    I imagine you must be good at memorizing a lot of information. I am not. I am good at abstraction and must explore in abstraction to understand heuristically. I understand heuristic connections better than most people. Neither method is better or worse. Being toxic about interchanges of information is useless nonsense. I know far more than I let on, but I’m well aware that I am a jack of all trades and expert of none. All the projects don’t matter relative to those that are used the most. If most projects can be colorized, it will motivate others to fall in line or prompt rewrites assuming such a change was popular. Colorized manpages and help pages should be standard and should have been a decade ago. No one is using an IDE without syntax highlighting. The terminal is an extension of the abstracted language of Linux. Without universal syntax highlighting for new users in these spaces, Linux is presenting an outdated language format ripe for deprecation. These details have long term consequences.