I disagree that AI will never be useful. In its current state/design? Absolutely not, but there is a good chance that eventually AI (AGI) will be awesome someday.
I would learn the following at some point (not in order):
nftables - specifically how tables/chains/rules interact and how to use them correctly (this is a learning process)
ssh - using non-default port key-only authentication.
custom routing - more advanced, but is very handy if you plan to have services talking to each other in non-typical ways.
openvpn and WireGuard - pros/cons, what they do and how they can make connecting to things more secure.
podman - docker alternative that is imo more secure and open. It can run services in a non-root enabled way (rootless) which is great with you get it working, but can be hard to get there.
Above are more on personal preference in some cases. There are so many options to do things in the Linux world.
Be careful relying on AI to do this stuff for you. I’ve reviewed some generated nft configs that left things wide open in some cases, or added needless fluff that worked, but caused bottlenecks. Better to know what it is doing, so you can catch when it is confidently incorrect.
Ofc, if you want to go back to basics, you should first dive into the file system, data storage, permissions and ownership. Without those, the rest might not be able to protect you no matter how well they are setup.
How can they just enforce this? I guess I know how they intend to, but I don’t trust these corporations to handle this properly and I sure as hell don’t think some governments will have citizen’s interests at heart, so whatever service they force into requiring me give my ID for, just won’t get me as a user. Or will lose me as one.
I’m prepared to go back to writing letters and sending scrapbooks. Screw them all.
This is inevitable unfortunately. It is being pushed top-down across the corporate landscape. The people pushing think it’s going to save them money. lol
This reads like more of a trade piece. China is seen as a more reliable trade partner.
I would argue that they are looking better for more than that. Politics aside, they are actively pursuing better technologies and methods to curb climate change, have firm predictable stances on most anything, whether you agree with them or not, and they generally seem to stick to a plan or agreement.
The biggest elephant in the room with them seems to be Taiwan and their record of human rights issues. Which, although terrible, are still somewhat predicable.
It’s wild to me that we are in a universe where this is happening, however compared to the US, where every day seems to bring a new flavour of uncertainty and ridiculousness, no wonder.
If I am following, there are a few ways, which shouldn’t involve hacks in nft, but you would need it allowing at least localhost traffic, which I assume you do already.
The keyword “localhost” usually will only work within a network or pod on rootless, however there is a separate address that can work.
host.containers.internal
I use it quite often for extra-user and pod communication. Hopefully this helps.
Doesn’t seem to matter. They have disabled the checks and balances, if they were ever there to begin with.
The mountain of terrible is only starting to grow. At some point this all comes to a tipping point and then we’ll see. Either it becomes totalitarian, or the people rise up. This doesn’t end well either way if history teaches us anything.
I setup custom bash scripts eons ago to handle all my subuid/gid and networking stuff, and I’m on the road now, so getting into the code is harder. If I have time tonight, I’ll reply back with how I did it for rootless.
I run everything in rootless podman with quadlets. Be prepared for the docker die-hard crowd to tell you podman is inferior, but it really isn’t. At least not in my 10ish years using it. Is it harder to get going? Sure, but the extra abstraction layer for security is worth it imo.
I have to get ready to update my scripts for the podman 6.0 changes upcoming, but otherwise they pretty much run themselves. Systemd gets a lot of hate sometimes, but when you get it working, it’s pretty much automated.
Want to have program x run after condition y. Use targets, sockets or a small monitor service. I have encrypted volumes that require me to enter the unlock password before they will unlock, the services will just wait until that is done.
Networking and permission issues? Run a pod. Podman unshare is also your friend.
The biggest thing I found getting everything figured out is the lack of step-by-step instructions on how it all works. The docs help, but can be a bit confusing/ambiguous at times.
Feel free to dm me if you have a specific question and I’d be glad to try and help. Just might be a bit delayed on responses for the next bit while I’m travelling.
Yep. No worries about this being anywhere but lemmy.
Controlling interests decided to bury their heads in the sand and build bunkers instead of actually trying to save the planet the way we humans have known it for thousands of years.
Whatever comes next might not be what is predicted, but you can pretty much count on it being inconvenient, uncomfortable and expensive.
Which seems to be exactly the people they want for management roles. At least in my experience. And I have been in those roles before, but couldn’t fit in. I always related more with workers, than the people that were supposed to be my peers.
It’s a ladder of ego stroking and politics.
AI it seems, is the perfect tool for these people. Imagine a service that always tells you that you are right!
I found out lemmy.ml was nuts through getting banned as a troll, then labelled a harasser for questioning what rule I broke to the mod.
Have since blocked the whole instance entirely.
Single best thing I have done online in a while for my own mental well being.
I disagree that AI will never be useful. In its current state/design? Absolutely not, but there is a good chance that eventually AI (AGI) will be awesome someday.
Definitely not today.
Except when the bot tells you it exists, but it doesn’t. This can be managed with some prompt-fu, but it’s still annoying sometimes.
I would learn the following at some point (not in order):
Above are more on personal preference in some cases. There are so many options to do things in the Linux world.
Be careful relying on AI to do this stuff for you. I’ve reviewed some generated nft configs that left things wide open in some cases, or added needless fluff that worked, but caused bottlenecks. Better to know what it is doing, so you can catch when it is confidently incorrect.
Ofc, if you want to go back to basics, you should first dive into the file system, data storage, permissions and ownership. Without those, the rest might not be able to protect you no matter how well they are setup.
It’s a near perfect term, but I feel like it doesn’t quite capture the phenomena fully just because it sounds like something uncommon or even rare.
Which in my experience, these are quite common.
Especially in the corporate world.
But I don’t have a simpler alternative either, so I guess it’s the best we got.
The shocking part to me is that they took this long. I just assumed anything good had already been gutted by now.
How can they just enforce this? I guess I know how they intend to, but I don’t trust these corporations to handle this properly and I sure as hell don’t think some governments will have citizen’s interests at heart, so whatever service they force into requiring me give my ID for, just won’t get me as a user. Or will lose me as one.
I’m prepared to go back to writing letters and sending scrapbooks. Screw them all.
Fine! Don’t want steel? Take Canadian smoke instead!
I’m curious. What exactly do you mean by cleaning a forest floor?
What could be cleaned that would stop forest fires from happening?
Also, since this is apparently only affecting the US. is the US proposing to pay for this imaginary practice?
Finally, the US is also currently on fire in case you were unaware, so did the first floor cleaning there just not work?
This is inevitable unfortunately. It is being pushed top-down across the corporate landscape. The people pushing think it’s going to save them money. lol
More distraction.
This reads like more of a trade piece. China is seen as a more reliable trade partner.
I would argue that they are looking better for more than that. Politics aside, they are actively pursuing better technologies and methods to curb climate change, have firm predictable stances on most anything, whether you agree with them or not, and they generally seem to stick to a plan or agreement.
The biggest elephant in the room with them seems to be Taiwan and their record of human rights issues. Which, although terrible, are still somewhat predicable.
It’s wild to me that we are in a universe where this is happening, however compared to the US, where every day seems to bring a new flavour of uncertainty and ridiculousness, no wonder.
Yes.
If it can get more messed up by stupid, then trump do.
I’m starting to think execs in general have no grasp on reality.
Maybe surrounding yourself with bootlickers just isn’t so smart?
I feel terrible for you having to go there in your brain to just write this, but it’s terribly good lol
If I am following, there are a few ways, which shouldn’t involve hacks in nft, but you would need it allowing at least localhost traffic, which I assume you do already.
The keyword “localhost” usually will only work within a network or pod on rootless, however there is a separate address that can work.
host.containers.internal
I use it quite often for extra-user and pod communication. Hopefully this helps.
Doesn’t seem to matter. They have disabled the checks and balances, if they were ever there to begin with.
The mountain of terrible is only starting to grow. At some point this all comes to a tipping point and then we’ll see. Either it becomes totalitarian, or the people rise up. This doesn’t end well either way if history teaches us anything.
I setup custom bash scripts eons ago to handle all my subuid/gid and networking stuff, and I’m on the road now, so getting into the code is harder. If I have time tonight, I’ll reply back with how I did it for rootless.
I run everything in rootless podman with quadlets. Be prepared for the docker die-hard crowd to tell you podman is inferior, but it really isn’t. At least not in my 10ish years using it. Is it harder to get going? Sure, but the extra abstraction layer for security is worth it imo.
I have to get ready to update my scripts for the podman 6.0 changes upcoming, but otherwise they pretty much run themselves. Systemd gets a lot of hate sometimes, but when you get it working, it’s pretty much automated.
Want to have program x run after condition y. Use targets, sockets or a small monitor service. I have encrypted volumes that require me to enter the unlock password before they will unlock, the services will just wait until that is done.
Networking and permission issues? Run a pod. Podman unshare is also your friend.
The biggest thing I found getting everything figured out is the lack of step-by-step instructions on how it all works. The docs help, but can be a bit confusing/ambiguous at times.
Feel free to dm me if you have a specific question and I’d be glad to try and help. Just might be a bit delayed on responses for the next bit while I’m travelling.
Yep. No worries about this being anywhere but lemmy.
Controlling interests decided to bury their heads in the sand and build bunkers instead of actually trying to save the planet the way we humans have known it for thousands of years.
Whatever comes next might not be what is predicted, but you can pretty much count on it being inconvenient, uncomfortable and expensive.
Which seems to be exactly the people they want for management roles. At least in my experience. And I have been in those roles before, but couldn’t fit in. I always related more with workers, than the people that were supposed to be my peers.
It’s a ladder of ego stroking and politics.
AI it seems, is the perfect tool for these people. Imagine a service that always tells you that you are right!