monovergent 🛠️

  • 9 Posts
  • 25 Comments
Joined 1 year ago
cake
Cake day: November 27th, 2023

help-circle

  • It’s certainly doable and something like that was my setup for a few years. There isn’t much in the way of distros or software packages that provide such a ‘personal multiseat’ configuration out of the box.

    I wanted bare metal GUI access, so instead of using Proxmox, I went about configuring Debian to the task. This might not directly answer any questions, but here's an idea of what it looked like.

    Hardware

    • i7, 48 GB RAM, 500 W PSU
    • GTX 1650 (passed through to VM), Radeon R5 340X (basic bare metal output)
    • 60 GB SSD boot disk
    • 1 TB SSD for VM images
    • 2 x 4 TB HDD for NAS
    • 1 TB HDD for testing, “overflow”, etc.

    Boot disk

    • Debian stable with XFCE
    • Virtual machines set up through virt-manager and each port forwarded to LAN
    • unattended-upgrades, ufw / iptables firewall
    • GUI more for ease of management, software on bare metal kept to a minimum

    Virtual machines / (RAM allotment)

    • Desktop (10 GB): I would use this VM while seated at the machine for productivity and web browsing.
    • NAS / media server (4 GB): both 4 TB HDDs passed through to this VM, which hosted a Samba file server and Jellyfin. Also served as file storage for a couple other VMs via internal connections. 4 TB of usable capacity since I set it to rsync to the second drive at 02:30 every morning.
    • Misc. services (4 GB): second Samba file server for devices I wanted to sync but didn’t trust with access to my full 4 TB library. Also an Apache server to host a couple of HTML pages on LAN. Various other services tested here as well.
    • Windows (8 GB)
    • GPU access (16 GB): GTX 1650 forwarded here. Intended for gaming, but ended up using it for Stable Diffusion and LLMs for reasons below.

    I’d suggest starting with anything graphically intensive running on bare metal and setting up a VM with virt-manager / Virtualbox / etc. for the NAS part. Get a couple of disks specifically to pass through to the NAS VM, forward its ports to LAN, and connect to them on the host as you would any other machine. For a desk further away, you may be able to get away with a KVM extender, but I can’t say I’ve any experience with them.

    If you try to virtualize everything like I did, there’s a couple of hurdles:

    • Much time and manual configuration in the command line is needed
    • Atrocious graphical and input latency on remote connections
    • Very high RAM usage
    • Input glitches and general slowness on the VM with GPU passthrough, remained unresolved despite scouring tutorials from people who somehow managed to get buttery-smooth gaming in a VM
    • Lots of bandwidth used while updating all of the VMs. Probably optimizable, but not out of the box.

    Go for AMD if you can, but NVIDIA hasn’t given me much trouble either. Make sure to install the driver from your distro’s repo, not NVIDIA’s website. IMO, this is less of an issue if you decide to pass through the GPU to a VM since any NVIDIA driver shenanigans will be contained to the VM.






  • Also got the same impression back when I used XScreenSaver from jwz. I looked in to customizing the logo shown on the login dialog and some of the screensavers, only to find a rather preachy write-up on the advantages of XScreenSaver and a very stubborn affirmation that the logo is hard-coded and should not be changed because it is the identity of the program or something.




  • In an academic setting, LibreOffice is a good substitute if:

    • Documents will not be passed back and forth between LibreOffice and MS Office for collaboration
    • Teachers accept assignments in PDF format

    I got away with using LibreOffice in university since:

    • Opening and reading files prepared in MS Office almost always works
    • Every formatting option I had used in MS Office was also present in LibreOffice
    • Professors accepted work I prepared in LibreOffice and exported as PDF to guarantee that my formatting stays intact
    • Students and professors almost always used Google Docs for collaborative work

    From experience, a moderately-formatted document with images will survive about 3 round trips between MS Office and LibreOffice before something breaks (things on the page get completely rearranged or get stuck and can’t be moved or deleted).

    And despite having used LibreOffice for several years now, I still feel like I’m having a stroke when I see the default interface. For sanity, either set the user interface (under View menu) to tabbed or sidebar, or customize the toolbar to match that of Google Docs.





  • An Intel Atom notebook with 2GB RAM and 32GB storage acquired for $200 on Black Friday. Despite many attempts to optimize it, it was practically unusable 4 years in. If I had the foresight to buy a used ThinkPad for the same price instead, it could have been my daily driver to this day.

    Also a faux leather wallet. The “leather” started turning to goo and powder about a year in. Some of my cards and my wallet photo still have some of those decayed fake leather bits stuck on the edges or rubbed in.


  • Side-loaded apps could be anything, ad-free or ad-infested. It costs money to publish an app to Apple’s App Store, even if the app is going to be free. For commercial developers, that’s an incentive to monetize and recuperate the $99/year Apple charges. For open source developers, that’s a barrier to entry.

    On the Android side, free and ad-free apps are correlated with being open source. Many open source developers are philosophically against publishing on Google’s Play Store, or at least know that their main audience does not want to sign up for a Google account to download it from the Play Store. But that’s not saying that the Play Store is inherently superior to Apple’s App Store. It just happens to overlap with open source apps that are guaranteed to be free and ad-free, given the lower barrier to entry (one-time $25 fee).

    This is more an exception than the rule so far, but one final case is an open-source developer wants to publish their perfectly safe and legitimate app, but is rejected. This happened to Organic Maps on the Play Store.

    Contrast these app stores with F-Droid, where users do not need to sign up for an account and developers can publish for free without handing over personally identifiable information. However, it relies on a form of sideloading that is not possible on iOS devices, at least outside of the EU.




  • You had me in the first part, but that last paragraph reeks of Apple fanboyism.

    Anyway, I also had an iPad 2 back in the day and it was a pretty solid machine coming from media players and digital photo frames of yore. Also an amazing mobile gaming experience compared to the cramped iPod touch or iPhone of the time. But terribly frustrating if you wanted anything outside the walled garden, even something as ubiquitous as Adobe Flash support.

    What plumbercraic says though is absolutely the case today. Some of my family use Apple devices. Mind-blowing what ad- and subscription-infested apps they endure on the regular. Sometimes they’ll ask me to recommend friendlier apps and I really wish iOS had its F-Droid equivalent. Yes, the Play Store also has terrible apps, but when only the Apple App Store exists, I have to spend time hunting for the one good app, which could just as well enshittify the next year.


  • Limitations

    • Debian with XFCE: I want all of my Linux machines, both older and newer, fast and slow, to be consistent, with the GUI customized to my taste. I accept that I will miss out on whatever security benefits Wayland or distros like secureblue may provide.

    • Networking: In the grand scheme of things, I know jack shit about networking. OPNsense, Pi-Hole, VPN, etc. would probably help my cause but I have yet to implement many network-based measures.

    • Corporate conveniences: There are colleagues I need to reach with Whatsapp or SMS and there is software for my job that requires Windows. I try to sequester all of this among my work devices.

    All of my frequently-used computers on Linux have “hardened Debian”

    • hardened to the best of my ability according to Madaidan, with compromises to avoid obstructing day-to-day work
    • LUKS encryption
    • MAC randomization
    • Mullvad DNS
    • Hyper-threading disabled
    • Rootless Xorg
    • Firewall defaulting to deny
    • unattended-upgrades
    • LibreWolf
    • Passwords in KeePass

    Personal devices

    • Desktop: The usual software. Non-FOSS components are mostly gaming-related.

    • Server: Jellyfin, NAS, Local LLM / Stable Diffusion, and secondary workstation, each hosted on LAN in their own VMs. SSH password authentication disabled. Would like to set up a VPN so I can access it away from home someday.

    • Backups: weekly to server, which is pulled to an offline encrypted 8TB disk about monthly. Repeat for the off-site disk that I store in a drawer at work.

    Phone:

    • Pixel with GrapheneOS and FOSS apps only
    • Messaging primarily using Molly (Signal client)
    • Email from important work and family contacts forwarded to my inbox on PurelyMail
    • Looking to get a non-KYC eSIM once I learn how to pay in Monero
    • Mullvad DNS

    The “DMZ”

    • Tablet: Samsung Tab A7 Lite received as a gift. Installed an AOSP GSI ROM (no Google Play services or GApps), mostly used as a NewPipe and travel device.

    • Laptop: ThinkPad X230 with Coreboot and soft-disabled Intel ME. Also hardened Debian with the usual software, nearly all FOSS components with the exception of intel-microcode and the VGA option BIOS. I say it’s the DMZ since personal stuff resides here, but most of my work also ends up here. Logged in to work-related websites and email in a separate user profile for LibreWolf.

    “Work” devices (for context, work has BYOD policy and does not provide devices for us to bring home)

    • Laptop: can’t be bothered anymore to fuss with Windows VMs or debloating that go stale twice a year, so I just bring a separate lightweight ThinkPad with full-fat Windows for everything that requires it. While some proprietary software packages support Linux, I’ll also just throw the Windows versions on this laptop.

    • Backup Phone (unused for now): Samsung XCover Pro with removable battery, waiting for the day I encounter apps that demand a stock version of Android. When not in use, the battery is removed.

    • Occasional check of social media also takes place on one of these devices, though through the browser rather than an app.

    Phone:

    • Old Pixel with GrapheneOS
    • Nothing I use really needs Google Play services
    • One user profile for work apps, including proprietary 2FA and Slack
    • Another user profile for various proprietary apps that aren’t necessarily work-related, but that I’m not entirely comfortable having on my personal phone.