Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill
A while ago, 2-3 weeks or so, it was reported that AMD (ATI) would open-source their drivers. Having a x800 PRO this was great news. Have they been released yet? I'm not exactly expecting any advancements made in the next 6 months or so, but it'd be good to know for future reference.

Adbot
ADBOT LOVES YOU

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill
Going crazy here. Been trying for the last 30 minutes to get this straight but it just won't budge.

In my .screenrc I have the following line:
hardstatus alwayslastline '%{g}%-w%{b}%n %t%{-}%+w %<%{kk}'
Which gives me a tab-bar that looks exactly like I want it to, except that I want the background of the tabs to be black too (it should be white if you use that line). Anyone? :( Been banging my head against the wall on this one for way too long.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

agnitrate posted:

I'm assuming your terminal background color isn't black, because using that line gives me a black background tab in my black background terminal. However, isn't it just as simple as making it this:

hardstatus alwayslastline '%{kg}%-w%{kb}%n %t%{-}%+w %<%{kk}' ?
Me love you long time. It's not perfect, (selected tab) background is still green instead of black on the selected tab (I wonder why that is, since kg should make it black background with green text?) but I can definitely live with that. I have black background on the terminal (using putty), so I really don't get why the default is white/grey. Using lastest putty-tray and Ubuntu 7.10. :(


Edit:
Switching kg in the first {} (so it's gk) made the trick. I think I may love this. Thank you SO much! :)

Marinmo fucked around with this message at 03:19 on Nov 12, 2007

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

hooah posted:

So, sort of the same?

Sorry it took me so long to get back on this; I've been using Finale a lot, and it doesn't quite behave nicely in Ubuntu.
Not at all the same actually. This means that nautilus isn't running on your system. Was this typed while in a Gnome-session? If so, you have a problem with nautilus either crashing (unlikely) or exiting with an error (likely). teapot or someone more knowledgeable might be more helpful than me, but I'd start with checking something like /etc/var/log. An example command you could try with is;
cat /etc/var/log | grep nautilus

(Edit: Just tried this on my server though and it seem ubuntu doesn't use /etc/var/log. Google doesn't seem too helpful on this one but you may try something like:
ls /var/log | grep nautilus)

Paste the results here and I (or someone else) might be able to help you further.

Good luck!

Marinmo fucked around with this message at 05:46 on Nov 12, 2007

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

hooah posted:

That command doesn't seem to do anything.
Sorry, I don't have gnome handy here (server is headless and I don't care for X forwarding), but perhaps ~/.xsession-errors might be able to tell you something.
So something like:
less ~/.xsession-errors
and scroll through the eventual errors until you find one that seems applicable. But as I said, teapot might be able to help you more than I do. Hopefully he'll see this post and correct me. :)

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

Rayn posted:

I have a number of samba shares mounted to various directories in my file system in my fstab. Upon system boot, theses shares are not automatically mounted. So, I wrote a script and added it to my /etc/init.d/ directory that calls 'mount -a'. Still no love. So, everytime I reboot, I need to term in and type mount -a, then everything works fine.
You did a sudo update-rc.d (scriptname) default? Asking because it's so easy to forget.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill
What the flying gently caress happened to gentoos packages database? Previously it was a nicely laid out page with a very handy searchbox where you could search for individual packages. Now it's just an abortion of what it previously was. Does anyone know how to use that drat page (I don't consider browsing by category as an option), or even better, if there's an search tool for packages available somewhere on the gentoo.org site?

I am aware of using /package/packagename - that is not what I want.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

sund posted:

Big security flaw on their site, but that was a long time ago now. I'm surprised it's still down.
drat that sucks. Well, now I at least know why. Wonder how hard it could be to code a proper search function and why noone has done it yet.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

bitprophet posted:

In my recollection, yea, the server CD's default install option does not install any GUI environments unless you ask it to, so you probably got a mislabeled download. One way to tell is to pop in the CD again and see if it offers a LAMP server option - AFAIK that option is only on the server disks.
The server just drops you off at the default text-login yes. No X server is even installed.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill
Is aMSN or Mercury-messenger still the only alternatives for full speed file transfers on linux? Is Pidgin going to wait until 2010 before it gets this? The fact that this is a low priority (Patches wanted? WHAT?!) for the Pidgin devs boggles the mind.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

covener posted:

It's about as high a priority as a chat system would be in a fileserver.
Funny how file transfers seem to work fine with AIM then. And not everyone likes to teach their less computer literate friends how to use FTP only to be able to transfer a file larger than 1 megabyte. Telling me to switch IM program/network would be as feasible as to tell an American to stop using AIM and going for MSN.

Reason why I'm asking is because aMSN is simply horrible with it's UI and the same goes for Mercury. aMSN uses TCL which sucks and Mercury is done in java which is - as if possible - worse.

Marinmo fucked around with this message at 01:50 on Dec 20, 2007

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

Roctor posted:

Sorry if this has already been discussed, but the search is down.

Can anybody recommend a good media player? I'm looking for something that has similar functionality to winamp for windows. I want to be able to browse my music by artist or album or whatever.

edit: I feel like an idiot. Right after posting this I found rythmbox already installed on my machine, and it seems to do what I want.
Personally I found Exaile better than Rythmbox but they're pretty much different flavors of the same fruit. amaroK is great if you run KDE.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

Toiletbrush posted:

Although the Linux version of OSS comes with ALSA emulation, you should really try to use native OSS when using it. There's probably no OSS gstreamer plugin installed on your system, considering how some distros treat OpenSound like a red headed stepchild due to ALSA propaganda.

If osstest generates output, OSS works.
What are the advantages of OSS compared to ALSA nowadays? I've always only used ALSA because it supported multiple outputs on the same card while OSS didn't (if I remember it right) back in 1997 when I last tried it.

Then again I never use gstreamer either, I hate the framework and have never really got it to work properly to be honest and when mplayer+alsa worked just fine I never really bothered to try to make gstreamer do aswell.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

chryst posted:

SMTP administration on Linux is really a nightmare. These turnkey solutions are the best answer. I've been using Sendmail, Postfix, Qmail, and exim for years, and it's still seriously difficult to get them working well, let alone customizing them.

Things are far easier if you've got authoritative control over your DNS though.
Although I haven't tried the prepackaged solutions I'll just chime in and say that getting mail to work right - especially if you want it secure (SSL) - is honestly quite a nightmare. But if you have a lot of time and patience, good luck!

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

bootleg robot posted:

Is there any music player for linux that makes use of the "album artist" tag? I have a lot of compilations that I like to attribute the "artist" tag to "Various Artists", and I dislike adding addition artists to the "title" tag (Z, feat. A, B and C).
Isn't that quite backwards though? If it were me I'd use the artists name in the "artist" field and "Various Artists" as the "album artist" field. Just a thought. :)

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill
fstab and possibly menu.lst/grub.conf, don't really know if ubuntu uses uuid for the latter though

I really don't know if simply dd:ing a "normal" harddrive to an SSD is such a good thing though, at least all versions of windows will need to be reinstalled, but then again linux is quite much more flexible in those cases ...

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

Sepist posted:

I would personally try and dd the drive from one to the other and edit fstab with the new uuid, you should be able to get the id from "vol_id /dev/$newdrive" (ID_FS_UUID=$)

I've had success dd'ing a windows drive this way as long as the hard drive drivers are deleted beforehand so I can't see why this wouldn't work.
This is a dd from a mechanical drive to an SSD, not mechanical -> mechanical which has worked wonders forever and ever. Idk about linux, but windows refuses to play nice in this scenario.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

Prize Loser posted:

Edit: I totally misunderstood the post above me and just pretty much repeated him. :v:


Well, as far as making new subdirectories and files adopt the group of the the primary folder, it's not terribly hard:

$ chmod g+s <dir>

The files created within will still be 755 even if you change the primary directory's modeflags, though, so it's only a step in the right direction.
Does this apply even for "sub-sub directories"? That is, if g+s is set on /public, will user created folder /public/foo/bar also be affected by this (assuming the user first creates /public/foo and then /public/foo/bar)? This is exactly the behaviour I am hoping for, btw.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

covener posted:

Can't you test that in 7 seconds?
Was at a uni comp, so not really, and didn't really know what terms to google either, and since the subject was already up ... :) Thanks to everyone who clarified it for me!

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

ClosedBSD posted:

When I had a Linode for a website I just used Gmail for your domain, its much easier and free up to a certain point.
I know it's beating a dead horse, but I tried to do exactly what Phiberoptik wanted to do 1½ years ago or so. It took me about 2-3 hours to know that I was in way over my head and also that it'd be a giant pain to actually achieve this. Such a simple thing as SASL authentication was quite complicated to get working, so I eventually gave up and went the gmail route aswell. Never looked back. For the interested though, I think there's guides for this on the ubuntu forums or the likes of it.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

Pivotal Lever posted:

Alright, thanks. I've only been using linux for a few weeks or so, and I only read the ln man page twice, instead of three times ;)
I've run linux for a long time and can still find me asking myself about the syntax. I don't know about others, but while symlinks are awesome, they are hardly anything I use on a daily basis :)

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

Zom Aur posted:

Either way, seems a lot of the more desktop oriented linux systems are moving over to systemd. Fedora has switched, opensuse is switching, it's in the arch package tree (though sysvinit is still default, same in debian). We'll see what happens.

Personally, I like it, but I also like pulseaudio, so I'm probably close to being "objectively wrong". :)
It's Poettering. Just like PA was a great, great idea in theory, systemd will probably fall short on the exact same points, namely implementation and transparency. PA loving sucked rear end (still does?) when it came out because in many many cases it broke something that, for most users, worked previously. And while most of the things were fixable in one way or another, no one wants to mess around with config files to get something as stupidly simple as sound. Systemd seems like, theoretically, a good idea too with many features added that has been long missing ... But Poettering is Poettering like history is history and this one is really going to have to prove itself.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

evol262 posted:

(dbus, udev, and pulseaudio all come to mind)

But appeals to tradition are bad, especially when that appeal itself is fallacious
Thing is, remember pulseaudio? Yeah, me neither. I'll take you down memory lane though: it's that thing that was the "future of audio on linux" where 99 % of people was fine with piping poo poo directly to alsa and enjoyed listening to whatever goatporn they got off to. Also, pulseaudio had a poo poo ton of flaws, quite a few bugs and a somewhat incomprehensible (to the layman) config when it was released into the wild, and its author/main architect/lead proved to be a massive, massive cock. You can just google his name and inevitably you'll end up with him being snarky, rude or outright hostile towards other developers. Or all 3 at the same time, which unfortunately isn't very unusual. This is the same guy who is now head of systemd. I realise I'm talking about one of your colleagues, but there's no defending that guy. I'd piss my pants as well if "the future of the Linux userspace" was in the hands of that lunatic, but here we are. Systemd in itself isn't too bad I guess, it does bring quite a few pros, but I'm really holding out on it; I'm (despite the catastrophe of a SA thread devoted to it) still expecting win10 to be a really good desktop OS which would confine linux to my server which rarely sees use these days anyway. Further, I'm not so sure that the deprecation of udev and subsequent integration of systemd poo poo (no matter how nice/convenient/good it may be) in the kernel counts as "separation" anymore, but I'm not too well versed in the subject to definitely judge that.

Just for clarification: No one remembers PA especially because by now most of its bugs are ironed out and things work flawlessly (a few years later ...). Still, literally no one has any idea what the big pros of it are since 99 % of users don't need networked audio. It's solving a problem that didn't really exist in the first place, which is what systemd kinda is as well to the detractors of it, only way way way (I want to keep on writing way here but I'm sure you get the point) more intrusive.

TL;DR: The problem is not necessarily all systemd as a design, the problem is also its lead and feature-creep into the kernel

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

Longinus00 posted:

One pro of pulseaudio over straight ALSA is that you can listen to two different audio streams at once (e.g. you're watching youtube and chatting with your mom over skype) without requiring a hardware mixer in your soundcard. This may not seem like a big deal but when was the last time a consumer computer had anything but one of those realtek chipsets? Unless you wanted everyone to go out and buy soundcards to put into their computers (think about laptops here) the writing was on the wall for pure ALSA.
As someone else already pointed out, this was fully possible with ALSA as well. Actually, that was one of the big pros of ALSA over OSS afaik. So no, that's not something PA solved. Sorry, sad fact is: ALSA was/is enough for 99 % of users. PA is more or less pure cosmetics, things that you go "oh that's nice to have, despite that I'll never use it". It's basically fulfilling edge-case users' desires, which it's great at. It just wasn't by any stretch of the imagination necessary when keeping in mind all the headaches it gave users when it was forced upon them.

Marinmo fucked around with this message at 17:12 on Mar 28, 2015

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

VostokProgram posted:

Is there a "right" way/best practice to get software that's newer than what's in the distribution's repository? For example, if I'm reading this right, the latest stable version of Fedora only has version 2 of Mono, while the upstream is on version 4. I could get version 4 by moving the system to Rawhide, but then I'm on a nightly update schedule and everything on my system is going to be changing all the time and it's just like Arch all over again. :smith:

The way I see it, my options are:
  1. Deal with old software
  2. Use a binary I manually download, if available
  3. Use a third-party repository, if available
  4. Compile from source

I'm leaning towards #3 as the right answer, but there might be something I'm missing, and in any case I'd like a second opinion. #2 would be probably be my fallback, but then I have to get all the dependencies myself and keep track of updates myself.

Also, even though I'm using Fedora as an example, I'd still like to know what the best practices are in general. I'm not tied to it, either, so if the solution is actually "use distribution X" I'll gladly switch.
This will help you install the latest mono into /opt, which probably is the best of solutions. Nothing more than a few path additions and you'll be good to go, and avoid breaking anything by upgrading between major versions of the package.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill
Using fedora 22, mounting NFS filesystems at boot makes it very slow (systemd-analyze blame shows Netmanager taking a good 8ish seconds). Enter autofs.

The client is 192.168.1.2, the server 192.168.1.10. Excerpt from client's fstab (actually 4 mountpoints, following the same structure with different directories on the server):

code:
192.168.1.10:/download	/server/download		nfs	defaults 0 0
This works perfectly, as expected. However, sudo showmount -e 192.168.1.10 returns:

code:
clnt_create: RPC: Port mapper failure - Authentication error
rpcbind is started on both hosts. The output from the client of nmap 192.168.1.10 is as follows:

code:
Host is up (0.00056s latency).
Not shown: 994 closed ports
PORT     STATE SERVICE
22/tcp   open  ssh
53/tcp   open  domain
111/tcp  open  rpcbind
139/tcp  open  netbios-ssn
445/tcp  open  microsoft-ds
2049/tcp open  nfs
RE: Configuring autofs:
code:
/misc	/etc/auto.misc

/net	-hosts --timeout=60
Neither of those, with the following in /etc/auto.misc:

code:
download	-rw,soft,intr		192.168.1.10:/download
Will automatically mount the export(s) on 192.168.1.10.

Anyone?

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

evol262 posted:

Networkmanager isn't involved in NFS mounting. Are you sure this isn't a red herring?
Quite. Without NFS mounts in fstab, systemd-analyze blame shows:
code:
           849ms plymouth-quit-wait.service
           849ms dev-mapper-fedora_client\x2droot.device
           782ms systemd-udev-settle.service
           528ms lvm2-monitor.service
           518ms libvirtd.service
           454ms plymouth-start.service
           420ms firewalld.service
           322ms dnf-makecache.service
           285ms akmods.service
           276ms lvm2-pvscan@8:2.service
           219ms dmraid-activation.service
	   [...]
            37ms NetworkManager-wait-online.service
	   [...]
            24ms NetworkManager.service
With (and without) _netdev in fstab, systemd-analyze blame shows:
code:
	  8.071s NetworkManager-wait-online.service
           910ms plymouth-quit-wait.service
           848ms dev-mapper-fedora_client\x2droot.device
           444ms lvm2-monitor.service
           432ms plymouth-start.service
           421ms lvm2-pvscan@8:2.service
           413ms systemd-udev-settle.service
           392ms firewalld.service
	   [...]
           130ms server-audio.mount
           127ms server-movies.mount
           127ms rtkit-daemon.service
           124ms avahi-daemon.service
           114ms server-tv.mount
           102ms server-download.mount
	   [...]
            24ms NetworkManager.service
Interestingly, the mounts on the server doesn't seem to take a lot of time, however, networkmanager spends a lot of time waiting.

evol262 posted:

dmesg? Is this a gss failure because rpc-gssd isn't running but it's trying (and failing) krb5? Is rquotad running? Is the firewall blocking it? v3 or v4?
In no particular order: v4(.1), rquotad not running, rpc-gssd is failing indeed because I didn't touch kerberos (no keytab). Honestly, it seems a bit convoluted having to set up Kerberos just for this - I might just skip it and let the current situation (slow fstab mounts) be if so. However, the firewall might be blocking it - I'll have to look into that.

evol262 posted:

Is /misc/download created? If not, autofs may be failing to parse your entry for some reason.
It isn't. It's weird though, because writing an autofs mount is just about the same as writing a fstab one ain't it? Seems hard to mess up somehow, but I guess we're all fallible. Will double check this too.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

Boris Galerkin posted:

Is Wayland the way to go now?
Heavens no. I do read your question as way to go equaling being the default without fallbacks, and then the answer is that it won't be for a long time as long as the nvidia-issues remain (someone's gotta budge or X.org will stick around forever, can't see it being nvidia either). Wayland is fine for AMD-based machines and people with nvidia cards who really hate 3D-acceleration though.


As a PSA for anyone upgrading from F24 -> F25, if you get an error with rpm-python3 apparently a fix is in the works and you should be able to upgrade within' the next few days. Got the error on my machine, no biggie though as the only noticeable improvements for workstations are Gnome 3.22 and some other smallish things.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill
Sometimes I play games and poo poo. Currently I have a GTX 670 which does okay. I'm considering a RX480 because they're cheap and I am too. Last time I heard anything about AMD on Linux was back in the paleolithic era when they decided to open source their drivers, so how are they doing today? I'm looking for a hassle-free approach here because I don't want to waste time on managing drivers, and say what you will about the binary blobs-approach but it sure is convenient. Are AMD cards plug-and-play? Do they come with bells and whistles because kernel devs love them?

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

Mega Comrade posted:

Everything is in a weird position atm. The new AMDGPU-PRO drivers are hassle free but some games don't work with them yet and while the 1060 and 480 are neck and neck on windows, the 1060 cleanly beats the 480 on linux if you use the NVIDIA propriety drivers (but the nvidia FOSS drivers are poor). That being said the propriety drivers for NVIDIA can be a pain in the arse to install and maintain on some distros so it comes down to how strongly you feel about FOSS and the sort of games you want to play. If you want plug and play/FOSS and don't mind performance being a bit ropey as the drivers continue to mature go AMD, if you want pure FPS for $ and don't mind a bit of hassle go Nvidia.
Thanks a lot. I have no tendencies of Stallman in me, and while I do agree installing nvidia drivers in the first place wasn't easy as cake, now that it works it does work continuously even through updates of kernel and the drivers themselves. I'm running Fedora and have no intention of changing that part of the equation, and I don't care about Wayland. So a 1060 seems to be it then, or 1070 should I magically find myself with cash abundant.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

skooma512 posted:

There's also something you need to do to get SELinux off your back. I had to exactly what you're doing a couple weeks ago and me taking all afternoon to do one simple thing on Linux is as true on Fedora in 2017 as it was on MEPIS on 2005 :v:
It's telling SELinux that yes, I want samba to be able to access these files.

Fedora wiki says:

https://fedoraproject.org/wiki/SELinux/samba posted:

FILE_CONTEXTS
SELinux requires files to have an extended attribute to define the file
type. Policy governs the access daemons have to these files. If you
want to share files other than home directories, those files must be
labeled samba_share_t. So if you created a special directory /var/eng,
you would need to label the directory with the chcon tool.

chcon -t samba_share_t /var/eng

Yes, for home use it's loving retarded and obnoxious. Oh and if you're using NTFS? gently caress you.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

SoftNum posted:

At the risk of starting a holy war.... What WM do people like these days?
I'll be the heretic and say that I use GNOME because it works and I don't want to/have time&patience for tinkering anymore. It just works (c). I did install two extensions though; gnome shell output switcher and topicons plus, the first one you'd only really need if you have 2+ sound cards/outputs.

I'd really hate GNOME if I wanted to do anything but actually use (surf/listen to music and such) my computer though.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

apropos man posted:

I'm really busy this week and I don't have time to mess about with cups and third party drivers. I've got to prepare for a job interview on Thursday which I'm really hopeful for tomorrow and I'll be seeing him tomorrow night. I just want an easy distro to wipe onto his laptop with will run his printer with minimal messing around. I hate printers. Is Ubuntu or Fedora a safe bet, since they with be up to date with cups/drivers/postscript drivers?
Unless it's a server I don't really see the point of going for CentOS over any of the desktop oriented distros. Try Fedora!

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

Combat Pretzel posted:

Ignoring the risk of sticking my dick into the hornet's nest, but what are the chances this drama about EME having been ratified (or whatever) will result in 1080p Netflix on Linux?
Chrome ain't going anywhere. I wouldn't worry too much unless your principles are as rigid as RMS's, in which case I guess you wouldn't be watching Netflix anyway.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

Mr Shiny Pants posted:

I have this too, the taskbar seems to stop updating, doing a killall plasmashell and kstart plasmashell seems to fix it.
I'll third this and add another annoyance I had when trying KDE; when running a fullscreen app (a game for example), the exposé-function would stop working even if I had the fullscreen window minimized and was fooling around in a terminal or whatnot. It was all the small things not working (+ the settings window, oh gosh the settings, try finding something there!) that drove me back to GNOME. I've ran KDE every now and then for the last 10 years, and ironically last I really enjoyed it was back when the universally hated KDE4 was just released. Maybe it's because the computer is a tool for me nowadays, not a project in itself? I don't know.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

ewe2 posted:

I am, maybe that's the problem :v:
Just honking onto this, I recently sold my desktop and got a laptop, which also meant going from nvidia to intel in the GPU department. It was a quick switch back to Xorg when I noticed/found out mpv couldn't draw a window title bar for whatever reason. I'm well aware the problem might be with mpv and not wayland. However, it's the small things which makes you go "nuh uh, not putting up with this" and switching back to Xorg where everything just works.

I'm kinda bummed out actually, I really wanted to try Wayland long term and see what the fuzz was all about after so many years. Seems I'll have to wait a little longer (10 more years ... ?).

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

xzzy posted:

podman is superior to docker in every way and will be the product of choice in the future, if anyone is building up their knowledge of containers now I'd start there instead of using docker.

The only issue I've had with podman is using their "pods" feature. When I was testing it (about a year ago, so maybe it's better now) it had a bad habit of flinging "filehandle open" errors and requiring a manual purge of directories from /var/lib/containers/.. which is very not optimal.

My favorite feature so far is the ability to spit out a systemd unit file for a container. It's a small thing but I really appreciate it.
While I agree with this sentiment (podman being superior to Docker), since it's the late comer to the party - and I'm currently experiencing this firsthand - it's a massive PITA to get to work properly compared to Docker, if you actually want to use the nifty features that podman brings (running rootless mainly, systemd integration secondly). Every single container out there (not really, but a large majority) expects to be run under rootful Docker, Linuxserver.io especially. Combine this with the fact that error logging is slightly ... Subpar, to put it nicely ... Makes for a very long and interesting ride should you attempt it. I'm currently moving over my entire Docker-stack to podman (on Fedora Server, so add in SELinux to the fun mix too!), consisting of the following:

SWAG (moved to Nginx proxy manager + mariadb)
Jellyfin
Rtorrent + flood behind wireguard
ZNC
Authelia

So far Nginx proxy manager and mariadb works flawlessly with systemd services generated and working. Currently struggling with flood and then going to do rtorrent, but looking at objectively it's just a massive, massive headache taking way too much time for what little gains there's to be had. Disabling SELinux would probably lessen the pain somewhat but only ever so slightly - the real problems are the extremely funky permissions issues combined with init systems which break if you even happen to look at 'em funny. If I ever finish I'll do the rest of the world a favour and write a blog about it or something, because things should not have to be this ... Annoying. It isn't even hard: just like a million gotchas in a single process.

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

The Gadfly posted:

Why did you move from SWAG to Nginx Proxy Manager? I couldn't even find out which Nginx version it's based on, and it's lacking some things that SWAG has integrated like fail2ban.
Linuxserver.io apparently does not have the resources to maintain anything else than images known to work on Docker and are very vocal about it. Their images also love to be root (not saying this as a pro or con, just a consequence of being heavily invested into Docker I suppose). I've seen some people claiming to run SWAG through podman but none of those were rootless as far as I could tell, which is like 90 % of the reason I'm migrating. I was thinking of rolling my own solution (manually setting up a nginx reverse proxy) but the effort it'd require simply didn't seem worth it especially considering every other headache this project brings. The fact that NPM is more barebones than SWAG is, for this reason, a pro. I'm also integrating Authelia which takes care of mostly everything (this server is behind a gateway/router with only ports 80 and 443 forwarded) when it comes to security - I did look into Caddy as well but alas, no support for external authentication.

... I'm 95 % sure I'll end up saying screw it and either run everything bare metal or just going back to Docker like a shameful dog :suicide:

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

The Gadfly posted:

Oh I didn't know that SWAG only supports Docker.

I quickly installed the latest version of Nginx Proxy Manager and went into the container to see what Nginx version it's running, and it's currently on 1.19.3.1. SWAG is running 1.20 according to the docs, so it seems that SWAG is more updated to the mainline Nginx version.

I'm currently trying to decide between SWAG, Nginx Proxy Manager, Traefik, or baremetal Nginx. I thinking maybe either baremetal or SWAG is what I'll end up using.

I'm also planning on using Authelia for 2FA.

Maybe I'll just try to do a quick install of SWAG and configure Authelia to work with it. Then, if I find something lacking or run into issues, I'll take the plunge and go baremetal.

I don't particularly like or dislike Docker in general, but I guess I'll look into its security issues more and factor that into my decision too. I'm not familiar with Docker's issues because I haven't used it very much.
SWAG+Authelia is quite easy to set up, make sure you enable Duo integration (authentication through push notifications for your mobile phone) for an additional layer of security. As for me, I realized I'm too lazy to manually set up reverse proxying via nginx even though it's pretty much set-and-forget since there shouldn't be any radical changes in the subdomains setup.

Really, using Docker is mostly fine unless you want to work with containers in an enterprise environment (my prediction: podman will probably be replacing Docker at ... some ... point) or just have an unsatisfied intense self hate. I switched because of the latter reason. Also security (rootless is a really attractive feature and running the containers without them having their own IP is just very a convenient way of handling things).

Mr. Crow posted:

That's a linuxserver.io deficiency not podman. You can run rootfull podman exactly the same as docker and either stop there for parity or drop privileges in the container.
:agreed:
I think podman is the superior solution overall, but it comes with additional complexity for sure. My current workflow is to manually run each container via podman run [...], ensuring it starts up without error and then generate a service through podman generate systemd [...]. No two ways about it, it's pretty cumbersome.

Adbot
ADBOT LOVES YOU

Marinmo
Jan 23, 2005

Prisoner #95H522 Augustus Hill

Marinmo posted:

While I agree with this sentiment (podman being superior to Docker), since it's the late comer to the party - and I'm currently experiencing this firsthand - it's a massive PITA to get to work properly compared to Docker, if you actually want to use the nifty features that podman brings (running rootless mainly, systemd integration secondly). Every single container out there (not really, but a large majority) expects to be run under rootful Docker, Linuxserver.io especially. Combine this with the fact that error logging is slightly ... Subpar, to put it nicely ... Makes for a very long and interesting ride should you attempt it. I'm currently moving over my entire Docker-stack to podman (on Fedora Server, so add in SELinux to the fun mix too!), consisting of the following:

SWAG (moved to Nginx proxy manager + mariadb)
Jellyfin
Rtorrent + flood behind wireguard
ZNC
Authelia

So far Nginx proxy manager and mariadb works flawlessly with systemd services generated and working. Currently struggling with flood and then going to do rtorrent, but looking at objectively it's just a massive, massive headache taking way too much time for what little gains there's to be had. Disabling SELinux would probably lessen the pain somewhat but only ever so slightly - the real problems are the extremely funky permissions issues combined with init systems which break if you even happen to look at 'em funny. If I ever finish I'll do the rest of the world a favour and write a blog about it or something, because things should not have to be this ... Annoying. It isn't even hard: just like a million gotchas in a single process.
To follow up on this, I've finally finalized this little project. I'd like to say I'm done and it's 100 % working as expected, but for now I just cannot be bothered to work out the last kinks (mostly separating into separate users running the containers, running with --userns=keep-id and working out which containers want/need --init - at current all of them have it which is probably a bad idea). I wanted to run everything rootless, but as far as I was able to work out, running rootless and connecting to Wireguard for internet connection (for rtorrent/flood) is not possible since rootless containers doesn't get their own networking interfaces. Those services are therefore run as rootful containers instead utilizing the --user flag in podman. I originally thought to use quadlet for service file generation but that mainly seemed to be an option for rootful containers which was what I was trying to move away from, so I just ran each container manually through podman run until it worked as expected, slapped a -d switch on the command and did podman generate --new --files --name=containername.
I did find a really neat and seamless way of enabling Wireguard for one or many containers, wg-pod. Syntax is dead simple, wg-pod join containername /path/to/wg.conf. You can use the -d switch to delete all other routes in the resulting netns and place it in an ExecStartPost in the service file. Caveat: it requires CAP_NET_ADMIN which means you'll have to fiddle with yet-another-permissions-system-in-Linix, luckily, here's your solution: # setcap cap_net_raw+eip /path/to/wg-pod (usually /usr/local/bin) - do note I'm not a 100 % the i is necessary here but I don't want to mess with it - works for me. If you use the same wg.conf for more than one container, wg-pod will join subsequent containers to the same netns. Just super convenient.
As everything still is a bit of mishmash I really want to hold off on publishing anything about the process, but there's really something to be said for it all, that's for sure.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply