Sure, Soda then. As that’s the fork of Wine that Bottles develops, and the fork of Wine that this article is about.

Ignore the other guy on this, I have an A770 in my gaming ring and a B60 in my server. The drivers are amazing on Linux, and much better than NVIDIA.

If all you need is encoding, then VAAPI just works. There are some other caveats with the Alchemist series, which is mostly it was made during the transition to xe, which means you either pick better encoding with i915 (default) or better gaming performance with xe. For your use case I’d leave it with the default i915, though there are encoding patches for xe if you must use the newer driver. Both drivers are mainlined and officially supported by Intel.

For context, CodeWeavers sells a paid Wine product, CrossOver, and its database still lists Microsoft Office 365 on Linux as “Installs, Will Not Run,” last tested against CrossOver 26.3.0.

Office 365 does run in CrossOver, just poorly. They’ve also recently dropped support for it in CrossOver 26, and AFAIK CrossOver 27 won’t be able to run it at all.

So it’s good to know that Bottles has effectively replaced it.

Regarding Google Coral, from the docs: https://docs.frigate.video/frigate/hardware

The Coral is no longer recommended for new Frigate installations, except in deployments with particularly low power requirements or hardware incapable of utilizing alternative AI accelerators for object detection. Instead, we suggest using one of the numerous other supported object detectors. Frigate will continue to provide support for the Coral TPU for as long as practicably possible given its still one of the most power-efficient devices for executing object detection models.

Personally, I’d recommend OpenVINO. It works on iGPUs, and if that’s not possible it’s quite performant on CPUs. I currently run a Google Coral and the Linux driver is no longer officially maintained meaning it breaks every now and then after a kernel update, next time it breaks I’m going with OpenVINO.

Also, I’d install Docker in an LXC for Frigate, it makes passing the iGPU through to it a lot easier.

the smallest model made by Deepseek is about a 300B param model.

This is not correct. DeepSeek has plenty of smaller models. I just had a scroll through their huggingface, and picked out a few: DeepSeek-V2-Lite (16B), deepseek-moe-16b-chat, deepseek-llm-7b-chat, but there’s quite a few more too.

Though DeepSeek R1 is their flagship model, which is the one people usually think of, and that’s a 684B param model.

Can confirm it does:

OrgAbuseHandle: ABUSE9107-ARIN
OrgAbuseName:   ABUSE
OrgAbusePhone:  +1-313-516-8908
OrgAbuseEmail:  abuse@hostodo.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE9107-ARIN

I believe OP would require an authoritative DNS server, which AFAIK Quad9 is not. desec.io would be my recommendation though.

It’s only slightly faster. cpuid is a serialising instruction, which means all the instructions before it have to complete, removing any gains from pipelining and out of order execution. However for a VM this also triggers a VM exit, where the hypervisor takes over to modify the values for the guest.

Systemd can also create a temporary user, with DynamicUser. But I so very rarely see that being used.

the service would start as root to do privileged operations like opening specific ports

You can also add the CAP_NET_BIND_SERVICE capability to do this without root.

IMO, there’s usually no reason to use root in a systemd service, it’s just ignorant developers.

I haven’t properly used Windows in a long time, but I have a feeling the disk checking might be caused by fast startup. Basically Windows hibernates instead of fully shutting down, and the disk should never be touched while hibernated. But if you have the NTFS partition mounted in Linux, then it touches the disk anyway.

Is fast startup enabled in Windows? If so, try disabling it. It also isn’t needed on SSDs and does more harm than good.

I can dig it…but surely the simple option is to have the PC wake up on power restoration, right?

After the PC shuts down, the UPS runtime will increase by a lot. So the power might come back before the UPS turns off, so as far as the PC can see, the power was never lost.

Edit: Also I assumed you meant restore on after AC loss, and not the last state.

Sure screw Microsoft, but inpout is dead and blocked by the vulnerable driver blacklist, so it’s crazy that official RGB software is still using it.

If you’re looking for alternatives but stuck on Windows: OpenRGB doesn’t use inpout since 0.9 or even winring0 since 1.0rc2, and works on Linux if you ever plan on switching.

Not to wreck your joke, but certificates have a starting date on them too, so the epoch also won’t work.

I’ve got a Framework 13 7840U and I’ve never had issues with S0ix sleep. Very early on, apparently the keyboard would spuriously wake the laptop, but that’s been fixed for years now, and I’ve never noticed it.

On some other (non-Framework) laptops you can enable S3 using Smokeless_UMAF, but it just results in a black screen on resume for mine.

There is a option for Windows: https://www.memtest86.com/blacklist-ram-badram-badmemorylist.html#badmemorylist

Although it seems like it may be broken.

I believe Fwupd can also update your Secure Boot certificates.

Also, a backdoor in this particular program can steal your PGP keys.

Now you can make that decision. Evolution is also available from the Debian and Arch (and others) repos without sandboxing, if you’d prefer it to have access your whole system.

You can also remove those permissions with the Flatpak cli, or Flatseal.

It’s in no way like Android where “OpenKeychain” were forced to define a protocol and now reading a key prompts the user.

I don’t see why this couldn’t be done with Secret Service, just no one does so no one expects it. You should email one of the mailing lists for GnuPG if this bothers you though.

Oh, and one of the few dozen local privilege escalations found by AI in the mountains of trash of our great kernel completely negate all of this.

Well yeah, sandboxing/containers/namespaces were never guaranteed to be fully isolated, there’s a reason all the cloud companies settled on VMs over containers. It’s just one line of defence that you otherwise wouldn’t have.

Well, both the Flathub website and KDE Discover list this, so this seems like a GNOME issue and not a Flatpak issue.

Flathub:

KDE Discover:

The Immich app (at least on Android) supports mTLS client certificates, I use that for my instance.

If you really have to use Adobe Acrobat Reader, it works fine in CrossOver, which is paid but it supports the wine developers.

Also if it helps with getting it working in Wine, these are the installers that CrossOver uses:

• Windows 10 64bit - https://ardownload2.adobe.com/pub/adobe/acrobat/win/AcrobatDC/2200320322/AcroRdrDCx642200320322_en_US.exe
• Windows 7 32bit - https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2300320244/AcroRdrDC2300320244_en_US.exe