• 0 Posts
  • 22 Comments
Joined 11 months ago
cake
Cake day: May 20th, 2024

help-circle
  • Different person here but I’ve been using Fedora for many, many years. This discussion comes up all the time and though RPMFusion is a checkbox in the software store GUI people obviously would like to have Nvidia proprietary drivers and proprietary codecs as an easy install like from a button click on install.

    The problem is that Fedora has had a FOSS only core value since the beginning and I’m sure a big part of that is to keep Redhat out of legal troubles but it also resonates with a lot of the actual Fedora volunteers (those folks on the SIGs that do all the work).

    I don’t think it’ll change anytime soon. Normally the response to this is “then new users will go elsewhere” or “If Linux wants to (something number of users or something market share)”. The thing is the Fedora project doesn’t ‘care’ about that and why should they?


  • To install Steam on most distros with popular DE’s, you click the software store to open the software store. If Steam isn’t listed in the front page then just click the search box and start typing Steam.

    When you see it, click the install button.

    When it is done open it by clicking the Open button or pressing the Windows (or Super) key and type Steam. Click it when you see it.


  • Compiling from GitHub is cherry picking the worst case especially for “most normal people” and frankly they should be using the software store GUI in their DE to install and update software with nice easy buttons to click.

    Frankly software management for a normal person generally is easier on Linux than it is on Windows for stuff made to run on Linux.

    But don’t worry someone will respond with nvidia’s shitty proprietary drivers.


  • People forget XP was pretty bad at first just like Windows 98 and like Windows 98 people became less critical after a bunch of major fixes. For Windows 98 this became Windows 98SE and for XP this became XP SP2 (and eventually 3).

    Both Vista and 7 had problems before they were fixed after awhile. The most common issue I can remember was UAC and everyone just told you to turn it off to install and use their software and games. There were also a bunch of breaking Win API stuff and a lot of software made for XP just didn’t work anymore in Vista+.

    People mainly just remember them after they were fixed, except for Vista because 7 came out fairly quickly (just 2 years later). Microsoft does not have a good track record for initial Windows releases but eventually everyone forgets and even some of the bad ones are remembered as the good ones.




  • This is true. If you have DMARC and your RUA set up (with a working email (or one that doesn’t bounce at least)) along with SPF and DKIM, Google and MS will accept your mail. The only time it won’t at that point is if your IP is in the same /24 as a known spammer but so long as the spam stops, you’ll fall off the list. Some of the common spamlists allow you to request your IP be removed by request and I can only recall one list that almost nobody uses that makes you pay for the removal though there may be more I don’t recall.






  • So I don’t get all this. Everything I buy tickets, I choose my seats unless I fly southwest. And even they are going to move to assigned seats.

    At least when my kids were young, you’d have to pay extra to pick a seat, at least if you purchased through Expedia or Travelocity.

    And if so, do they not seat everyone in your reservation together?

    You know how you print your boarding pass and it has your seats? When my kids were young on multiple trips via United, AA and Delta, the boarding pass would not have a seat assignment and we’d have to go the gate agent at every gate, even on the same airline if it was not a direct flight and get our seats assigned last minute. So no, we weren’t always seated together. On one flight, none of us were in the same row with anyone in our family.

    Since we were scraping by back then we always booked months in advance for cheaper tickets. I thought originally it was a fluke with just United but after the next trip, I had learned to pay extra and pick seats ahead of time.


  • There are a couple of OEMs like System76 and Starlabs that sell laptops with Linux on them, provide tech support for customers and so on.

    And no, installing most distros aren’t hard. You just click the buttons to proceed and fill out the username and password box, select your time zone and select your wi-fi network if you’re using wifi.

    You can do manual partitioning but why would you if you don’t know what you’re doing?

    Installing software in the GUI is as easy as installing software from the Microsoft Store. Just search or look around and when you see something you want, just click the Install button.


  • I get the sentiment but defense in depth is a methodology to live by in IT and auto updating via the Internet is not a good risk to take in general. For example, should Crowdstrike just disappear one day, your entire infrastructure shouldn’t be at enormous risk nor should critical services. Even if it’s your anti-virus, a virus or ransomware shouldn’t be able to easily propagate through the enterprise. If it did, then it is doubtful something like Crowdstrike is going to be able to update and suddenly reverse course. If it can then you’re just lucky that the ransomware that made it through didn’t do anything in defense of itself (disconnecting from the network, blocking CIDRs like Crowdsource’s update servers, blocking processes, whatever) and frankly you can still update those clients anyway from your own AV update server which is a product you’d be using if you aren’t allowing updates from the Internet in order to roll them out in dev first, phasing and/or schedules from your own infrastructure.

    Crowdstrike is just another lesson in that.




  • Needing to use command line for some things that should be a right click, not supporting right click, ambiguities galore when looking at a package repository, odd defaults in packages that one really wouldn’t expect to have to check (e.g. Selecting RDP connection in a Remote app, but it defaults the security to something other than RDP?)

    Sounds like you’re using a GNOME Desktop. You should give KDE Plasma a try instead. KDE Plasma basically gives you a Windows-esq experience without trying to install something like GNOME extensions.

    For a regular user there’s not much point into going into the command-line anymore.

    there’s problems like Libre Office devs …

    Sure but there’s also alternatives. LibreOffice doesn’t try to emulate Microsoft Office and they never really have. They won’t even try to be compatible with MS Office but rather they do with OOXML which Microsoft created for other Office suites to be compatible with it but then just never supported it very well. Some alternatives do however. WPS Office is perhaps the most popular alternative for this that does try to be compatible with MS Office and emulate its feel and features but ONLYOFFICE is also a contender.


  • Just a heads up, if you use an AMD GPU, the drivers are built into the Linux kernel itself by AMD engineers (and others helping/supporting/contributing to the kernel like themselves). So you don’t even have drivers to install, unless you’re one of the 10 people that want to use AMD GPUs for Machine Learning. Then you’d do a quick install of AMD PRO (those are proprietary so that’s why they aren’t built into the kernel).


  • I don’t know, I like using Fleet Commander with FreeIPA (where it stores the profile). You just spin up the template VM for whatever like-clients on the network you want to make default profiles for and make the changes, shut it down, checkbox the changes (the configurations and stuff) that you approve and let it apply the profiles across the network. Easier than depending on Puppet or Ansible playbooks IMO.

    I have had issues with SSSD as well though and it had to do with Kerberos tickets but I can’t remember what I did to fix it. We’d have to manually use kinit on each machine when it’d basically fall off the realm. I want to say it was a DNS issue but it was so long ago, I just don’t remember.

    We used to use Centrify for Linux and Solaris and it was easy using Access Manager to basically handle AD users and computers with Active Directory and had some GPO support (you could push config writes with GPOs for example and organize it all via OUs for example) but it would get a little wonky between trusts in the forest sometimes (in regards to zone management in Centrify) and they kept getting more expensive. Maybe they’ve fixed that stuff now but it was really simple to use and you could basically manage a lot through the AD and create group profiles in the Access Manager. I think the last straw was wanting to force us to license the entire suite regardless of whether we were using it or not. Personally, I never liked it because it wouldn’t use SSSD or kclient/nsswitch and if some service tried to join the realm/domain, it’d join using the same computer accounts and basically break the account since Centrify used its own client, so you’d specifically need to join the computer accounts via Centrify as a different name. It wasn’t detrimental or anything – just annoying that it was a problem at all. Also, sometimes the user cache database saved in specific users’ appdata that use Access Manager would corrupt from time to time and you’d need to manually delete it to use Access Manager. I’d hope they fixed that by now too though.

    All and all, I’m not saying Active Directory isn’t an excellent product because it is and I’m not saying that there is a 1:1 solution for Linux but I’m saying it that in my experience it isn’t terrible either with FreeIPA and products you can use with it. I definitely hated other 389 solutions prior to FreeIPA though.


  • For Linux user management you can just use an LDAP solution like FreeIPA. You can even tailor sudoer rules based on security groups, so like you can allow someone to reboot the server but not actually make configuration changes to system config files and what-not. It’ll also handle CA and PKI with smart card support and of course DNS. It has a web interface as well.