I think that it's definitely a good case for overlaying with install. They say to use it sparingly because it increases the chances of something breaking, but that doesn't mean it will. Something like a VPN usually needs liw level access that container isolation makes difficult.

I've only had 1 issue on silverblue years ago where I couldn't update because I had vim overlayed and they fixed it within a day or two.

So it's windows emulating linux emulating android emulating linux?

I'm interested to hear how that works out for you

I think librewolf scrubs most of that stuff out. I'm basing that off of using burpsuite's proxy server though. On vanilla firefox it captures so much crap going out. I havent tried with wireshark though.

Did anybody think that they did?

I always assumed they were just easier to set up

I've been using dnf5 for a few weeks now. I never want to go back. If you use fedora, seriously consider checking it out. The only thing I'm missing is the provides subcommand.

From mozilla. I'm guessing that the links were hosted/owned/etc. by google. When your system resumed it only partially loaded the sponsored links and you were left with the text of the url.

Your system is fine security wise, but privacy wise pinging google servers everytime you open a new tab is not ideal. This type of stuff is why I use Librewolf. Of course it's up to you how much it bothers you. You can disable alot in vanilla firefox too.

Yeah pretty much, but it's wayyyy faster. There's times where it feels like dnf is hanging trying to download metadata that's 25KB. I have 1Gb down and it takes like 2 minutes, its ridiculous. I know in the grand scheme of things I'm being petty. But it's frustrating when the metadata step takes longer than downloading 500MB of packages lol

I am root I am admin I am user I am all.

Holy shit I almost died

For anyone thinking about conducting a similar search for this image.

Turn on safe search before you search "flesh prison"

I'm done internetting for today

Search 1e100, it's a google thing

Just to offer the other perspective. I started with podman years ago. I knew very little about containers and I would say it made the learbing curve a lot steeper. Most guides and README's use docker and when things didnt work I had to figure out if it was networking, selinux, rootless, not having the docker daemon, etc... without understanding fully what those things were because I didn't know docker. But when I started running stuff on kubernetes, it was really easy. Pods in podman are isomorphic to kubernetes pods. I think the pain was worth it, but it was definitely not easy at the time. Documentation, guides, and networking have improved since then, so it may not be as big of a deal now

Can you share your service file?

I have zero experience with SteamOS but Gnome Boxes uses a qemu usermode networking that doesn't let you access the guest the way you want to.

I would trying using virt-manager (gui for libvirt). It lets you use a bridge as the network interface and for vm gets a proper IP and can communcate on the network like any other computer

Damn, I thought this was self hosted

It also depends on the viewer. I remember using prctl() in C to chamge a process name and top showed my change but htop didn't. I'm sure a competent malware writer would be able to trick it though

If you run in distrobox you should not have issues with dependencies

I'm in the wrong timeline

If you're making backups of things you care about and not running sudo rm -rf the command isn't really dangerous.

But +1 for having it in /tmp I have a bash function I call tempd that is basically cd $(mktemp -d) I use it so much for stuff I dont really care to keep.

I would make a bash function to do this. I'm on my phone so idk how this will look lol

dbxcreate () {
ALL_CONTAINER_HOME=${HOME}/dbx

CONTAINER_NAME="$1"

export DBX_CONTAINER_CUSTOM_HOME="${ALL_CONTAINER_HOME}/${CONTAINER_NAME}"

distrobox create --name "${CONTAINER_NAME}"
}

I would add some checks/more arguments and error messages but thats the idea

You may also have to make that home dir but then its as easy adding a mkdir line

You could try setting TimeoutStopSec="infinity" for the service. There may be a default timeout for services and its killing rclone before it can finish because the oneshot type is considered "starting" until the program exits.

I haven't yet! Today I did a kernel update with it, I was kind of hoping something would go wrong so I would have a bug to report. But nope. Everything worked flawlessly. I'm not really sure how to break it but I'm going to try (in a vm lol)

Yeah you're right, it's time for bed lol

The default start timeout is disabled by default for oneshot.

Yeah I am on a potato, i just gave that as a reference. Its really probably more like 10 the first time it opens. After that its faster.

If you CTRL-ALT-F3 and login to a non graphical session does everything work as intended?

I had never heard of radxa. Looks awesome!

This explains it. Especially the section about selections. A program "owns" the "clipboard" and if it stops it is released. Aka bye bye copied data

Can you be a little more specific? Does the installer not launch?

!selfhosted@lemmy.world

I was too dumb too link it lol

Brb

Install clamav and run a scan. You will probably get false positives.

For instance the gnome polkit agent has a "malicious" image that it tries to load at start and if it succeeds it kills the program before it can run. This is to keep an actually malicious icon from being used. I spent days on that one lol

Cool! I had no idea that was a feature, thanks for sharing

I think nmcli is the easier way to go but this article from redhat has what your looking for in 6.4

All vpn things are off (i.e. wireguard and tailscale)

I'm using dunst and it's running. I dont get notifications often, so I opened element to get some. Element isn't working either lol

Nope it's all green.

Idk if you saw my update but turning of the wifi fixes this problem.

I did move to a new network yesterday, I just didn't think that could impact the flatpak launch, while not affecting the systems binary launch.

It's a real head scratcher

I tried restarting portal, didn't work. systemctl status for xdp did show an error for hyprland about a config file. But I'm running on sway mainly. I just tried out different DE's to see if anything changed.

Here's flatpak output

flatpak run --verbose io.gitlab.librewolf-community
F: No installations directory in /etc/flatpak/installations.d. Skipping
F: Opening system flatpak installation at path /var/lib/flatpak
F: Opening user flatpak installation at path /home/auser/.local/share/flatpak
F: Opening user flatpak installation at path /home/auser/.local/share/flatpak
F: Opening user flatpak installation at path /home/auser/.local/share/flatpak
F: /home/auser/.local/share/flatpak/runtime/org.freedesktop.Platform/x86_64/23.08/329ad0f04e21dc3234accff013641299e13a9eb2f1b2908129692b4755393789/files/lib32 does not exist
F: Cleaning up unused container id 75319174
F: Cleaning up per-app-ID state for io.gitlab.librewolf-community
F: Allocated instance id 821024549
F: Add defaults in dir /io/gitlab/librewolf-community/
F: Add locks in dir /io/gitlab/librewolf-community/
F: Allowing dri access
F: Allowing wayland access
F: Allowing pulseaudio access
F: Pulseaudio user configuration file '/home/auser/.config/pulse/client.conf': Error opening file /home/auser/.config/pulse/client.conf: No such file or directory
F: CUPS configuration file '/home/auser/.cups/client.conf': Error opening file /home/auser/.cups/client.conf: No such file or directory
F: Running '/usr/bin/bwrap --args 43 /usr/bin/xdg-dbus-proxy --args=45'
F: Running '/usr/bin/bwrap --args 43 librewolf'

Try running docker logs for the tailscale container to see if it gives any more info

I uninstalled, it didn't change anything :(

The card is Realtek. I found an askubuntu thread where all flatpak commands were hanging, and their solution was to disable the nic.

This has only happened on this network. I didnt mention at first because I didnt think it mattered, but I'm visiting someone and moved networks.

The instant I take the dev down, the browsers pop up. I would bet money that when I go to my home net everything will work.

The flatseal angle didnt work either. The only reference is names on system bus.

You could try dmesg -w in a terminal before you start firfox and see if any messages come through.

Can you still access the internet with another program?

This could be a firefox issue, and not a flatoak issue as I assumed. Do you have another version of firefox on the system? If so what version?