FS permissions are the main thing, yes. One can build more systems around it (don't mount the socket into a Flatpak container, if you don't want the Flatpak to talk to DBus) or (implement some sort of auth protocol like TLS does).
cizra
joined 1 year ago
- Make a snapshot with LVM2 or BTRFS to ensure consistency, delete the snapshot after backing up.
- You can back up files as root (I do) or a dedicated user that has perms to all the relevant data via groups.
- Rsync can preserve users either numerically or by name.
- Rsync can do incremental backups via hardlinks (you'll have a complete view of all files in each snapshot, but only pay the storage when files actually change).
What's an rpc port anyway? Do you mean DBus? Then FS perms of the socket. Perhaps also something in the protocol itself.
If your Windows partition is encrypted with BitLocker (which it probably ought to be, for security), and you disable Secure Boot, Windows will get angry at you.
You can set up Linux to do Secure Boot (I think I saw Fedora do it for you automatically), but it's extra hassle.
You might be able to decrypt BitLocker in Linux: https://github.com/Aorimn/dislocker/
Tried, but it didn't support my disk encryption, LUKS2. I intended to stick Guix in a BTRFS subvolume, but didn't succeed.
Wheee, I just got out of the Prison start recently. Trying to figure out what I want to do with my life, next.
I use it whenever possible, for its easy sandboxing. I've also been bui lding my own sandboxing solution based on Bubblewrap, for things not on Flathub. Maybe I should learn how to build flatpaks locally, instead...
I feel like I couldn't live without my bathroom. I probably could, but it'dn't be great.
What's a tactical shooter anyway? Here's a shooter, tactical or not: https://flathub.org/apps/com.realm667.Wolfenstein_Blade_of_Agony ... oops, it's "source available", but not libre.
I'm using NixOS in Azure - Azure allows creating a VM out of a disk image, and NixOS has tools to create preconfigured disk images. You inject your SSH keys and stuff straight into the image, then upload and create a VM. A bit fiddly, but I got it to work.
192.168.0.00? 'Shopped.
Cool idea. If this doesn't exist, and it probably doesn't, it sounds like a worthy project to get one's MSc or perhaps even PhD.