Significantly better than several hours od most of the internet being down.
- 0 Posts
- 32 Comments
dafta@lemmy.blahaj.zoneto
Technology@lemmy.world•ICE to Buy Tool that Tracks Locations of Hundreds of Millions of Phones Every DayEnglish
4·5 months agoNot affiliated, just discovered this amazing app relatively recently.
dafta@lemmy.blahaj.zoneto
Linux Gaming@lemmy.ml•Battlefield 6 requires secure boot to be enabled and activeEnglish
2·6 months ago- This is with systemd-boot, which I switched to because it’s easier to use a unified kernel image with, but it should work just fine with grub as well. The last step will sign everything that needs to be signed, including grub and the kernel images.
- You only need to trigger a re-sign if you update grub using grub-install. If you just change the grub config, you don’t need to re-sign it because the config is loaded once the signed grub is already booted. This is another reason why I went with systemd-boot and unified kernel images, because I work with sensitive data and maybe I’m a bit too paranoid, and don’t want anyone to be able to tamper with my boot in any way. This is also possible with grub and using an encrypted boot partition, but systemd + UKI + full system encryption was just easier. If you’re not worried about evil maid attacks and just want secure boot, grub will work with no additional setup.
- No issues with the pacman hook, it triggers every time there’s a kernel update or nvidia update, and since I’m using mkinitcpio and UKI, the signing is usually already done by mkinitcpio before the pacman hook is ran, so the pacman hook doesn’t really ever do anything. It’s all done in the mkinitcpio hook.
As for bricking your motherboard, this only happens if your motherboard or any other component uses the microsoft vendor keys as part of the boot sequence, and it’s only really a hard brick if it’s your motherboard that uses it. If it’s any other component, you can remove it and readd the microsoft keys and it’ll work again when you add the component back.
And the key part here is replacing the platform keys. If you just always use the -m flag on sbctl enroll-keys, you’ll enroll both your own keys and microsoft’s, meaning no replacing necessary. If you always use -m, there’s no real risk really, because you’ll always add the microsoft keys that your hardware might need. Plus, if you’re dual booting with windows, you need the -m to have windows secure boot work, anyway.
If you’re extra paranoid, you can also add the -f option which should also include all the keys that your motherboard comes with by default, if it contains more than just microsoft’s keys, but this shouldn’t really be necessary.
dafta@lemmy.blahaj.zoneto
Linux Gaming@lemmy.ml•Battlefield 6 requires secure boot to be enabled and activeEnglish
3·6 months agoI’m saying this as someone who has a self-signed key + kernel + bootloader + dual boot with windows. I have Arch and I dual boot windows, and the setup was literally three commands.
Enable secure boot setup mode and then do the following:
sbctl create-keysto create the keyssbctl enroll-keys -mto enroll the keys to BIOS, including microsoft keyssbctl verify | sed -E 's|^.* (/.+) is not signed$|sbctl sign -s "\1"|e'to sign everything that needs to be signed.And everything is signed automatically on an update with a pacman hook that comes by default when installing sbctl.
That wiki entry lists all the possible ways to do it, for all combinations of bootloaders and secure boot tools. You only need one of them, for example 3.1.4. which is what I just described.
dafta@lemmy.blahaj.zoneto
Games@lemmy.world•Has the live-service dream crashed back down to earth? | OpinionEnglish
2·7 months agoAdventureQuest Worlds my beloved
dafta@lemmy.blahaj.zoneto
Technology@lemmy.world•In 2025, Apple still makes it hard to play your own MP3s, so I wrote my own appEnglish
3·9 months agoMy GF has an iphone, and on KDE I can just connect it via USB and it’s visible in the file manager.
There’s also this.
dafta@lemmy.blahaj.zoneto
Technology@lemmy.world•In 2025, Apple still makes it hard to play your own MP3s, so I wrote my own appEnglish
3·9 months agoMy GF has an iphone, and on KDE I can just connect it via USB and it’s visible in the file manager.
There’s also this.
dafta@lemmy.blahaj.zoneto
Programming@programming.dev•What's your favorite IDE right now?English
71·9 months agoThere’s avante.nvim for LLM integration, it supports most if not all LLM vendors at the moment.
I tried it, however, and got to the same conclusion as you. Not worth it.
dafta@lemmy.blahaj.zoneto
Technology@lemmy.world•VMware perpetual license holders receive cease-and-desist letters from BroadcomEnglish
1·9 months agoYeah but GTK
dafta@lemmy.blahaj.zoneto
Technology@lemmy.world•VMware perpetual license holders receive cease-and-desist letters from BroadcomEnglish
11·9 months agoVirt-manager is a GUI for libvirt, which can use several hypervisors, including KVM/QEMU, and it works great.
There’s several other clients for libvirt, including GNOME Boxes, Cockpit (web based), and virsh (CLI).
dafta@lemmy.blahaj.zoneto
Linux@lemmy.ml•Is this video a legitimate way to get Linux on LineageOS via Termux or is there a better recent method?English
2·10 months agoYou just go into Settings > System > Developer options > Linux development environment, and enable it.
dafta@lemmy.blahaj.zoneto
Linux@lemmy.ml•Is this video a legitimate way to get Linux on LineageOS via Termux or is there a better recent method?English
4·10 months agoI updated to LineageOS 22.2 yesterday. It has the option, I enabled it and it works. I’m on a Pixel 8, tho. Might have something to do with it.
dafta@lemmy.blahaj.zoneto
Technology@lemmy.world•Firefox, VLC, Gimp, KeePass, LibreOffice among open source software endorsed by French GovernmentEnglish
2·10 months agoWhat are you referring to?
Sorry, my bad, I forgot that the setup script isn’t part of the default repo and is something I added in my own fork. But yeah, if there’s no systemd, it’s no use.
I can whip up a quick script that should work, I’ll test it out on my own hardware, and post it here for you sometime tomorrow.
You should definitely try with the systemd-gadgets I linked earlier. It makes all the configuration really easy, you just need to enable the relevant services, so in your case
usbgadget-func-uvc.serviceandgadget-start.service. You also need to copy them beforehand to/etc/systemd/system, includinggadget-init.service, and you need to copygadgetto/etc/default/gadget, and the scriptsgadget-start.shandgadget-init.shto/etc/systemd/scripts. Edit/etc/default/gadgetto edit the configs and names of the gadget, and then startgadget-start.service. No need to enablegadget-init.service, it’s called as a dependency from other services.There’s an install script in the repo that you can use as well,
setup.sh, and a PKGBUILD so you can create an Arch package. After installing with either method, just change/etc/default/gadget, enable the uvc and gadget start services, and then just start the gadget start service.
Hey, if you ever create that, give me a shoutout, I’d love to see it.

Those are called Progressive Web Apps (PWA). You can use firefox to add the website to your desktop like this: https://developer.mozilla.org/en-US/docs/Web/Progressive_web_apps/Guides/Installing
Once you do, when you open the app it should have just the website without the tabs and everything else firefox does.