NRoach44

joined 1 year ago
[–] [email protected] 5 points 10 months ago (4 children)

Where are these OEMs that allow proper bootloader unlocking on most of their range?

Google, Sony ...? Huawei stopped doing it, Oppo & Samsung doesn't last I checked.

[–] [email protected] 3 points 10 months ago

IIRC docker on Windows lives inside WSL, so everything is done on Linux anyway. What's the issues you're getting?

[–] [email protected] 4 points 10 months ago* (last edited 10 months ago) (1 children)

It means that if someone breaks out of your container, they can only do things that user can do.

Can that user access your private documents (are these documents in a container that also runs under that user)?

Can that user sudo?

Can that user access SSH keys and jump to other computers?

Generally speaking, the answer to all of these should be "no", meaning that each group of containers (or risk levels etc) get their own account.

[–] [email protected] 4 points 10 months ago (1 children)

(If you buy a suitable device) You don't have to use the preloaded OS (see Graphrne, Lineage etc).

[–] [email protected] 2 points 11 months ago

Not quite, I have to go through out of box, and then join it to the domain, but then yes!

Applies security policy, install apps, disables bloat, login in with central username and pass, get mapped drives etc

[–] [email protected] 4 points 11 months ago* (last edited 11 months ago) (2 children)

I have a Windows AD domain and have my preferences and some apps as GPOs.

In the server world we use Ansible, or in some cases maybe PowerShell DSC.

Ansible is much more focused on Linux and orchestration, but does have some support for Windows, and DSC is for Windows Servers.

Both use YAML or similar structured config to impart a state, e.g.

- name: Install Firefox
  Ansible.builtin.package:
    name: firefox
    state: present

Meaning that ansible does the legwork to make sure FF is installed.

[–] [email protected] 16 points 11 months ago

No, this is

  • buying a surface from Microsoft
  • immediately wiping it and installing Linux
  • Microsoft then forcing you to authenticate using the device that is only tied to your account via purchase, and NOT login records, AND disabling other forms of auth
[–] [email protected] 4 points 11 months ago

gedit in native Linux or WSL2. use it for Ansibke, python, C, bash, basically anything I need to edit. Has a git plugin, bottom terminal pane, left open files / current folder pane. Does all I need it to do, and it's not a huge fuckoff electron app.

[–] [email protected] 4 points 1 year ago

I'm pretty certain that the USB IF decided to use the max possible Gbps as the cable rating, rather than the mess that was

USB 3.0 USB 3.1 USB 3.1 (Gen 1) USB 3.1 (Gen 2) ...

So it's more likely apple are just being specific in the type of cable you need.

[–] [email protected] 2 points 1 year ago* (last edited 1 year ago)

There is a db migration command that I used to do the same thing, was pretty painless, just needed to run that and then update the config iirc

[–] [email protected] 14 points 1 year ago (1 children)

Landing gears are usually designed to drop by gravity (or manual hand cranking) alone if there's a hydraulic failure.

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (1 children)

Just a point of clarification: Don't use RAID 5 for more than 2-4 TB. The rebuild takes so long that the mean-time-between read errors statistic basically guarantees a read error while rebuilding, which may cause the controller to trash the array.

That and rebuilding that much data might push one of the drives over the edge anyway.

view more: next ›