JayleneSlide comments on It’s that time of year, time to blow up the home server!

It’s that time of year, time to blow up the home server! (sh.itjust.works)

submitted 1 day ago* (last edited 1 day ago) by muusemuuse@sh.itjust.works to c/linux@lemmy.ml

23 comments fedilink hide all child comments

me and fedora have been boxing for a while now and I’m thinking I want to try something else after I finish designing my next home server case for it.

I’m considering NASty https://github.com/nasty-project/nasty as it’s doing pretty much everything out of box I want to do with this next one already, and even though it’s young, it’s build on nixOS, which I consider mature at this point.

But I have no experience with nixOS. It sounds like it’s a less obnoxious form of fedora coreOS. Any opinions?

[–] JayleneSlide@lemmy.world 6 points 1 day ago (13 children)

This is the first I've heard of NASty. Thanks for the new rabbit hole!

Genuine question: what's obnoxious about Fedora? TIA

permalink

fedilink

source

hideshow 13 child comments

[–] muusemuuse@sh.itjust.works [S] 12 points 1 day ago* (5 children)

Fedora always felt slower no matter what I did with it. Selinux sent me to therapy. Cockpit always felt incomplete. Some updates require me to box with fedora to get it to boot again because selinux had an opinion.

Fedora touched me in places they don’t even have on the doll.

permalink

fedilink

source

parent

hideshow 5 child comments

[–] JayleneSlide@lemmy.world 6 points 1 day ago (4 children)

. Fedora touched me in places they don’t even have on the doll

;D That's going in my lexicon. Moreover, I feel duly warned; thanks for that.

permalink

fedilink

source

parent

hideshow 4 child comments

[–] muusemuuse@sh.itjust.works [S] 6 points 1 day ago* (3 children)

It’s not necessarily a bad thing, SELinux is doing exactly what it’s supposed to do. The default is no, and you’re gonna have to convince it otherwise. I’m just not all that great at convincing it otherwise cleanly.

permalink

fedilink

source

parent

hideshow 3 child comments

[–] Martineski@lemmy.dbzer0.com 1 point 1 day ago (2 children)

Just know that NixOS has no support for SELinux or apparmor. Though if you are into that model of 'no by default' I have something related but for the files under root: https://github.com/nix-community/impermanence

permalink

fedilink

source

parent

hideshow 2 child comments

[–] muusemuuse@sh.itjust.works [S] 1 point 1 day ago* (last edited 1 day ago) (1 child)

Which is weird but I get it. I wanted to force myself to learn selinux with fedora and I get it I’m just bad at it. I shoudnt have a headless machine running all the time without some protections, but I suppose I could do well enough by having ip2d and bittorrent in a VM and local only stuff in containers. its not great but it should be good enough.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] Martineski@lemmy.dbzer0.com 2 points 1 day ago

I never tried SELinux before and I don't know all that much about NixOS but apparently it has to do with how NixOS works under the hood which makes it hard and there's no incentive to actually struggle to implement support.

A big shame because SELinux model is something I would love to have on my system as I don't want everything to have access to everything by default.

permalink

fedilink

source

parent