Engie, Gunner, Scout (with single-target focused loadouts) do tend to perform best in dreadnought missions. Driller plays more of a support role, but can do decent chip damage and make pathways to ensure cover for teammates. There are also tactical support strategies such as fully freezing dreadnoughts while weak points are up and having a teammate do a massive burst of damage.
You can build single-target damage builds as driller with overclocks and they will work decently well, with the caveat that the weapons used for the build will lose a lot of their normal utility.
Remote VM seems overkill if you can just enable "Linux for Chromebook", which gives a sandboxed terminal at which point you can setup and install software like Blender, PrusaSlicer, etc.
It won't be the fastest because they are thin clients, but even modern thin clients do decently for 'light' work.
Reading up on RDP as it's something I do not utilize, I wondered just how encumbered RDP is compared to Spice and VNC. Wonder how third-party server and clients are handling the patent-encumbered protocol.
Do third parties implement an older standard of the RDP protocol that isn't as encumbered?
Oneshot services are for things like scripts that do a thing and exit. Simple is for basic services that intend to run for the lifetime of the system (or for user units, the lifetime of the user's session).
Create a systemd user unit that waits for the network-online.target.
A script something like:
[Unit]
Description=Startup script
Requires=network-online.target
After=network-online.target
[Service]
Type=oneshot # either simple or oneshot, but sounds like oneshot
ExecStart=/home/<user>/script.sh
RemainAfterExit=yes #if oneshot, otherwise no
[install]
WantedBy=default.target
Edit the template according to your needs and dump it into ~/.local/share/systemd/user/<unit>.service and enable it with systemctl --user enable --now <unit>
Check for and kill all wine-related processes and then swap Proton versions for the game again.
Seeing prefix breakage messages with a wine version mismatch is often because of remnants of WINE processes that didn't stop correctly. Steam prevents game launches for games that still have child processes present from previous launches.
For backing up files, you can plug in an external hard drive or ssd and clone your Users folder either directly from Windows, or open a Linux Live USB and clone the files 1:1. A simple copy in the file manager of either choice would work, but the command line tool rsync -avX <source> <destination> can be used instead to ensure as much of the file metadata is cloned as possible (accounting for differences in filesystems if you are transferring across from NTFS to Ext4 for example).
In Linux Mint, there is a built-in backup utility which will let you create and restore backups from external media or cloud sources. Other backup tools like Timeshift, Snapper, BTRFS Assistant also exist, but may require additional configuration and/or specific configuration on OS installation if you intend to use some of these tools specifically.
If you cannot use different applications for opening various file types and need a Windows-only software, the WINE translation layer does exist for general-purpose software, though it isn't guaranteed to work with everything. Proton also exists for playing most Windows games on Steam.
Scrolling through their Discord, that particular mod doesn't work on the latest version of the game as it's long out of date. You aren't likely to find another client or server that is hosting it with it actually working. Checking the mod listing page, it just claims untested on latest version.
Unfortunately a lot of the more useful information for the RaftModding ecosystem is all gated behind Discord.
(Less so now that it's preinstalled in Windows) OpenSSH
Using the file manager (dual pane support in dolphin, most have tabs built-in, renaming files in dolphin with large directories doesn't jump the view position around)
tabbing out of exclusive fullscreen applications
installing and updating most applications
installing the OS
using AMD, Intel Graphics (somewhat less awful if drivers actually autoinstall in Windows)
If you're running an email server for more than a handful of persistent users, I'd probably agree. However, there are self-host solutions that do a decent job of being 'all-in-one' (MailU, Mailcow, Docker-Mailserver) that can help perform a lot of input filtering.
If your small org just needs automation emails (summaries, password resets), it's definitely feasible to do actually, as long as you have port 25 available in addition to 465, 587 and you can assign PTR records on reverse DNS. Optionally you should use a common TLD for your domain as it will be less likely to be flagged via SpamAssassin. MXToolbox and Mail-Tester together offer free services to help test the reliability of your email functionality.
I'm currently going through a similar situation at the moment (OPNSense firewall, Traefik reverse proxy). For my solution, I'm going to be trial running the Crowdsec bouncer as a Traefik middleware, but that shouldn't discourage you from using Fail2Ban.
Fail2Ban: you set policies (or use presets) to tempban IPs that match certain heuristic or basic checks.
Crowdsec Bouncer: does fail2ban checks if allowed. Sends anonymous bad behavior reports to their servers and will also ban/captcha check IPs that are found in the aggregate list of current bad actors. Claims to be able to perform more advanced behavior checks and blacklists locally.
If you can help it, I don't necessarily recommend having OPNSense apply the firewall rules via API access from your server. It is technically a vulnerability vector unless you can only allow for creating a certain subset of deny rules. The solution you choose probably shouldn't be allowed to create allow rules on WAN for instance. In most cases, let the reverse proxy perform the traffic filtering if possible.
The game was under exclusivity contract for Epic Games, but they were still allowed to sell copies of the game on their own website. Now that the contract is up, the game can be sold on Steam. Granting players who bought the game from the website free Steam keys is a nice touch.
In order to maintain software versions, package maintainers will often selectively pull git commits from the upstream projects that fix bugs / vulnerabilities in the code, while not pulling feature commits. Sometimes the pulled commits may need modifications to work properly on an old feature version of the software, which will also be done during the process. Alternatively, a software may be compiled with different feature flags to restrict functionality to mitigate bugs known in upstream.
For desktop/workstation users: the simple answer is just use the flatpak from Flathub or from some other source if you need a user package that doesn't align to the ethos of your chosen distro. In most cases desktop Linux users have gone beyond self-packaging for specific library versions and just use a separate set of common libraries to power application needs beyond the out of box experience of any given distro. It's part of why immutable distros are starting to take off and make more sense for desktop/workstation use-cases.
For servers, it's in the nature to become part of the technical debt you are expected to maintain, and isn't unique among RHEL, OpenSUSE Leap, Debian, Ubuntu, or any other flavor of distro being utilized.
If you're not on RHEL-likes manually installing piles of out-of-tree software or randomly dumping RPMs into your system blindly hoping that things will "just work", all is good on most rpm-based distros (RHEL, Fedora, AlmaLinux, OpenSUSE Leap, etc.). Updates don't have issues and system upgrades (where possible) have had minimal problems within the past few years on all of my systems.
Ocis/OpenCloud can integrate with Collabora, OnlyOffice but don't currently have things like CalDAV, CardDAV, E2EE, Forms, Kanban boards, or other extensible features installable as plugins in Nextcloud.
If you desire a snappy and responsive cloud storage experience and don't particularly need those things integrated into your cloud storage service, then Ocis or OpenCloud might be something to look into.
Engie, Gunner, Scout (with single-target focused loadouts) do tend to perform best in dreadnought missions. Driller plays more of a support role, but can do decent chip damage and make pathways to ensure cover for teammates. There are also tactical support strategies such as fully freezing dreadnoughts while weak points are up and having a teammate do a massive burst of damage.
You can build single-target damage builds as driller with overclocks and they will work decently well, with the caveat that the weapons used for the build will lose a lot of their normal utility.
How locked down are the Chromebooks?
Remote VM seems overkill if you can just enable "Linux for Chromebook", which gives a sandboxed terminal at which point you can setup and install software like Blender, PrusaSlicer, etc.
It won't be the fastest because they are thin clients, but even modern thin clients do decently for 'light' work.
There are good reasons for why both JPEG-XL and WebP exist though.
Reading up on RDP as it's something I do not utilize, I wondered just how encumbered RDP is compared to Spice and VNC. Wonder how third-party server and clients are handling the patent-encumbered protocol.
Do third parties implement an older standard of the RDP protocol that isn't as encumbered?
Oneshot services are for things like scripts that do a thing and exit. Simple is for basic services that intend to run for the lifetime of the system (or for user units, the lifetime of the user's session).
Create a systemd user unit that waits for the network-online.target.
A script something like:
Edit the template according to your needs and dump it into
~/.local/share/systemd/user/<unit>.serviceand enable it withsystemctl --user enable --now <unit>Check for and kill all wine-related processes and then swap Proton versions for the game again.
Seeing prefix breakage messages with a wine version mismatch is often because of remnants of WINE processes that didn't stop correctly. Steam prevents game launches for games that still have child processes present from previous launches.
For backing up files, you can plug in an external hard drive or ssd and clone your Users folder either directly from Windows, or open a Linux Live USB and clone the files 1:1. A simple copy in the file manager of either choice would work, but the command line tool
rsync -avX <source> <destination>can be used instead to ensure as much of the file metadata is cloned as possible (accounting for differences in filesystems if you are transferring across from NTFS to Ext4 for example).In Linux Mint, there is a built-in backup utility which will let you create and restore backups from external media or cloud sources. Other backup tools like Timeshift, Snapper, BTRFS Assistant also exist, but may require additional configuration and/or specific configuration on OS installation if you intend to use some of these tools specifically.
If you cannot use different applications for opening various file types and need a Windows-only software, the WINE translation layer does exist for general-purpose software, though it isn't guaranteed to work with everything. Proton also exists for playing most Windows games on Steam.
I went ahead and made a few small edits to hopefully better explain things for most desktop environments if anyone else stumbles upon this thread.
Scrolling through their Discord, that particular mod doesn't work on the latest version of the game as it's long out of date. You aren't likely to find another client or server that is hosting it with it actually working. Checking the mod listing page, it just claims untested on latest version.
Unfortunately a lot of the more useful information for the RaftModding ecosystem is all gated behind Discord.
I had written about this in their Discord in a thread:
using this shim script I made, do the following:
WINEDLLOVERRIDES="winhttp.dll=n,b" ./shim %command%(Instructions adapted from both mine and Discord user YumiChi's)
This method doesn't require custom installations, messing with bottles, nor wine runtimes other than Proton.
If you're running an email server for more than a handful of persistent users, I'd probably agree. However, there are self-host solutions that do a decent job of being 'all-in-one' (MailU, Mailcow, Docker-Mailserver) that can help perform a lot of input filtering.
If your small org just needs automation emails (summaries, password resets), it's definitely feasible to do actually, as long as you have port 25 available in addition to 465, 587 and you can assign PTR records on reverse DNS. Optionally you should use a common TLD for your domain as it will be less likely to be flagged via SpamAssassin. MXToolbox and Mail-Tester together offer free services to help test the reliability of your email functionality.
I'm currently going through a similar situation at the moment (OPNSense firewall, Traefik reverse proxy). For my solution, I'm going to be trial running the Crowdsec bouncer as a Traefik middleware, but that shouldn't discourage you from using Fail2Ban.
Fail2Ban: you set policies (or use presets) to tempban IPs that match certain heuristic or basic checks.
Crowdsec Bouncer: does fail2ban checks if allowed. Sends anonymous bad behavior reports to their servers and will also ban/captcha check IPs that are found in the aggregate list of current bad actors. Claims to be able to perform more advanced behavior checks and blacklists locally.
If you can help it, I don't necessarily recommend having OPNSense apply the firewall rules via API access from your server. It is technically a vulnerability vector unless you can only allow for creating a certain subset of deny rules. The solution you choose probably shouldn't be allowed to create allow rules on WAN for instance. In most cases, let the reverse proxy perform the traffic filtering if possible.
It doesn't.
The game was under exclusivity contract for Epic Games, but they were still allowed to sell copies of the game on their own website. Now that the contract is up, the game can be sold on Steam. Granting players who bought the game from the website free Steam keys is a nice touch.
In order to maintain software versions, package maintainers will often selectively pull git commits from the upstream projects that fix bugs / vulnerabilities in the code, while not pulling feature commits. Sometimes the pulled commits may need modifications to work properly on an old feature version of the software, which will also be done during the process. Alternatively, a software may be compiled with different feature flags to restrict functionality to mitigate bugs known in upstream.
For desktop/workstation users: the simple answer is just use the flatpak from Flathub or from some other source if you need a user package that doesn't align to the ethos of your chosen distro. In most cases desktop Linux users have gone beyond self-packaging for specific library versions and just use a separate set of common libraries to power application needs beyond the out of box experience of any given distro. It's part of why immutable distros are starting to take off and make more sense for desktop/workstation use-cases.
For servers, it's in the nature to become part of the technical debt you are expected to maintain, and isn't unique among RHEL, OpenSUSE Leap, Debian, Ubuntu, or any other flavor of distro being utilized.
If you're not on RHEL-likes manually installing piles of out-of-tree software or randomly dumping RPMs into your system blindly hoping that things will "just work", all is good on most rpm-based distros (RHEL, Fedora, AlmaLinux, OpenSUSE Leap, etc.). Updates don't have issues and system upgrades (where possible) have had minimal problems within the past few years on all of my systems.
Ocis/OpenCloud can integrate with Collabora, OnlyOffice but don't currently have things like CalDAV, CardDAV, E2EE, Forms, Kanban boards, or other extensible features installable as plugins in Nextcloud.
If you desire a snappy and responsive cloud storage experience and don't particularly need those things integrated into your cloud storage service, then Ocis or OpenCloud might be something to look into.