What risk are you trying to mitigate, specifically?

If it’s the CA taking over your site, control over your CA specifically doesn’t really give any advantage to an attacker (they would have to hijack traffic and provide a new certificate - nobody will notice if the certificate is from a different CA).

Note that your CA cannot decrypt the exchanges between your server and its clients.

FILENAME='birthday_0' $(cat command_ffmpeg_SYNCAUD)  

cat prints out a file without altering it’s contents.

If it’s important to keep the commands in a separate file, you could use sed to find/replace, or use eval, or use some external template engine (lookup “bash expand variables in file”).

What you probably want to do instead, I assume, is to replace the external files with regular bash variables:

filename="some-file"
command="ffmpg -i ${filename}.mpg -bla -blabla ${filename}.mkv"
echo "$command"

TIL, thanks!

IIUC the EUPL is more similar to the GPL that the AGPL (ie. there’s no “network use” clause)

edit: seems like IDUC - see comment below

deleted by creator

I hope this is not against rules 4 and 6, but… I fear it might be?

If you want me to remove the post just tell me (or report it to the mods, of course).

I’m only sharing this because I found it very funny :)

That’s way too tame… I fear it won’t attract 8M in funding.

Jokes aside, the Christian commandments are quite lacking (insufficient) when it comes to contemporary morals… eg. there’s nothing forbidding discrimination or violence (short of homicide) or slavery or corruption or torture or neglicence etc. (and this is if one quite generously interprets “your neighbor” as “anybody else”, which is clearly not what the word means and which doesn’t explain why only some of the precepts have this “universal restriction”).

I always find it weird when people cite the commandments as a moral compass without integrating them with (very much necessary) additional prescriptions.

It’s part of the official install docs for docker

Not true.

The “add user to docker group” thing is not part of the install instructions (also, there is no official install docs for arch - but that’s a moot point), it’s in a separate document that literally starts with [emphasis mine] “These optional post-installation procedures describe how to configure your Linux host machine to work better with Docker” and contains a big orange box warning about that being part of the docker group is equivalent to being root.

Even if you think the docker doc could trick a newbie into thinking it’s ok to make your user part of the docker group (which I’d argue it doesn’t), you have to consider that:

1. distros should be made by people who actually know what they are doing
2. people who package something for an arch-based distro should at least read the arch wiki (which also clearly warns about the docker group)
3. this whole thing is a very well known issue of a very well known software package, something that anyone who ever used docker with any seriousness (and most of the people who chose podman instead) knows very well

You can say that the whole “docker group” thing is a very stupid idea and that it’s existence is squarely on the docker’s devs, and you could even argue that it’s a trap, but there cannot be any doubt that falling for this trap (that has big “this is a trap!” signs all over) is a major blunder for a distro.

it’s a group that gets automatically when you install it on any distro.

The issue is not the group existing, the issue is your user being part of that group.

Yes, you can make your user part of the docker group if you so chose, but distros should not make that very unwise choice for you per default (just as they shouldn’t set things up to encourage you logging in as root or configure passwordless sudo for your user).

Thanks for the correction!

The distro is (reportedly - I’m not touching it) just arch + hyprland + dotfiles scripts, the main dev is the same dev behind hyprland (who’s right-leaning to say the least), and the money comes from right-leaning-to-say-the-least entrepreneurs.

errata: read the reply below

Most probably those services are started because some other service depends on them.

After running systemctl disable someservice the service someservice is not “disabled” in the sense that it can’t be started, it merely isn’t started automatically at startup. If you want to make a service not startable, use systemctl mask (or, you know, uninstall/delete it?).

systemctl list-dependencies --reverse mysql.service should list the services that depend on mysql.service.

It’s great to see more and more project leaving github!

PS: “Live Demo” on https://www.pdfding.com/ is a dead link

Wow. Do they block VPNs inside your country too?

Anyway, there’s openvpn and there’s nebula (I think nebula doesn’t use wireguard… do double-check), or you look into things built specifically to hide traffic (keyword: “vpn obfuscation”).

No idea if VPN protocols other than wireguard may be blocked too (probably?).
No idea if trying too hard to circumvent government policies may get you added to some list you’d rather not be in.

See https://wiki.gentoo.org/wiki//etc/portage/package.use

Might be that you are at the end of your distro-hopping journey, which isn’t when you have found the perfect distro, but when they all start to look the same

Err… you write markdown and hit “preview” before posting?

Also, the edit box (PC, browser) has a question mark button that will take you to https://join-lemmy.org/docs/users/02-media.html

What you describe sounds like a hardware failure (one where btrfs plays no specific role).

If that’s indeed the case, you can only bring the drive to a data recovery service and see what they say (if it’s a spinning disk, they’ll probably recover the data for an exorbitant fee, if it’s an SSD idk).

PS: this is unlikely to work, but… you can try cleaning the drive’s contacts to see if it makes any difference, and also try moving the drive to a different connector (or use it on another computer)

Terrible posting etiquette

Agreed!

Though it’s very widespread, sharing a link without a word of comment is as obnoxious as those people who send you emails with no text or subject and only an attachment.

I feel less alone knowing that someone else also hates this practice.

IDK if it’s the “best” way, but generally I just let ping run for a while and check the statistics at the end

Sure thing!

(also, please do post about it when you eventually decide to switch to linux)