LINUX Unplugged

The Linux 6.12 kernel isn't just another update — it's a game-changer that deserves our full attention, from performance improvements to fascinating new features.Sponsored By:Jupiter Party Annual Membership: Put your support on automatic with our annual plan, and get one month of membership for free!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMLinux 6.12 Features Are Super Exciting With Real-Time, Sched_ext, Intel Xe2 & Raspberry Pi 5 - PhoronixRelease v6.12 · torvalds/linuxLKML: Linus Torvalds: Linux 6.12The 6.12 kernel has been releasedLinux_6.12 - Linux Kernel NewbiesLinux Kernel Release ModelHow do kernel version numbers work? : r/linux4noobs2. How the development process works — The Linux Kernel documentationoracle/bpftune: bpftune uses BPF to auto-tune Linux systemsWhat's scheduled for sched_extSched_ext at LPC 2024sched_ext: scheduler architecture and interfaces (Part 2)sched-ext/scx: sched_ext schedulers and toolsRaspberry Pi 5 Initial PatchPrintk Changes Submitted For Linux 6.12 Finish NBCON Console Preparations - PhoronixReal-Time "PREEMPT_RT" Support Merged For Linux 6.12 - PhoronixReal-time programming with Linux, part 1: What is real-time? - Shuhao's Blogrealtime:documentation:howto:applications:preemptrt_setup [Wiki]Annual Membership — Put your support on automatic with our annual plan, and get one month of membership for free!binary boost soundLINUX Unplugged 563: Nix's People ProblemBtrfs Assistant — Btrfs Assistant is a GUI management tool to make managing a Btrfs filesystem easier.kernelconfig.io — search config information for linux kernel modules

We go back in time to revisit our favorite classic SUSE release and then fix Brent's broken box the hard way.Sponsored By:Jupiter Party Annual Membership: Put your support on automatic with our annual plan, and get one month of membership for free!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMTest openSUSE Tumbleweed GNOME onlineFountain 1.1.6 is now live on iOS and Android — Our latest release contains more bug fixes than ever before - plus we have improved navigation by making the bottom nav bar persistent across all pages.Planet Nix — CFP Submission Deadline: December 9th, 2024LINUX Unplugged 432: Three Tumbleweed TemptationsLINUX Unplugged 461: Deep in the Tumbleweedsnix-community/nixos-images — netboot and kexec images for NixOSAnnual Membership — Put your support on automatic with our annual plan, and get one month of membership for free!bees: Best-Effort Extent-Same, a btrfs dedupe agent — bees is a block-oriented userspace deduplication agent designed for large btrfs filesystems. It is an offline dedupe combined with an incremental data scan capability to minimize time data spends on disk from write to dedupe.markfasheh/duperemove: Tools for deduping file systems — Duperemove is a simple tool for finding duplicated extents and submitting them for deduplication. When given a list of files it will hash their contents on an extent by extent basis and compare those hashes to each other, finding and categorizing extents that match each other.MicroMirror CDN: Mirroring FOSS as a Managed Appliance :: SeaGL 2024Minisforum UM790 Pro 7940HS Mini PCBeelink open sources the design of the Beelink EX GPU dockBeelink Multi-Functional EX Docking Stationtmate • Instant terminal sharingNixOS Manual - Installing From Another DistroDocumentation for lustrating does not actually work as it is · Issue #49520 · NixOS/nixpkgs · GitHubnixos-anywhere: install nixos everywhere via sshownCloud becomes part of Kiteworksopen-webui: User-friendly AI InterfaceThe Trouble With Tumbleweed - YouTubeOCIS

Fedora 41 is here! We break down the best new features, then branch out for a three-way spin showdown. Which flavor will come out on top?Sponsored By:Jupiter Party Annual Membership: Put your support on automatic with our annual plan, and get one month of membership for free!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with StrikeFlock 2024 Introducing Fedora Miracle, a proposed Fedora spin built on Mir - YouTubemiracle-wm-org/miracle-wm — Miracle is a Wayland tiling window manager built on Mirmiracle-wmmiracle-wm wikiRoadmap - miracle-wm wikinwg-piotr/nwg-shell — Installer & meta-package for the nwg-shell project: a GTK3-based shell for sway and Hyprland Wayland compositorsnwg-shell - a GTK3-based shell for sway and Hyprland Wayland compositorsfast fedora 41 mirrorWhat’s new for Fedora Atomic Desktops in Fedora 41 - Siosm’s blog — With Fedora 41, we are now building two new unofficial images: Kinoite Mobile and COSMIC Atomic. They join our other unofficial images: XFCE Atomic and LXQt Atomic.bootupd changebootupd GitHubcontainers/bootc — Boot and upgrade via container imagesIntroduction - bootc docsModifying Kernel Arguments :: Fedora DocsGetting Started with Bootable Containers :: Fedora DocsBooting local builds - bootc docsfedora-ostree-desktops RegistryAnnual Membership — Put your support on automatic with our annual plan, and get one month of membership for free!asahi-audio - Fedora PackagesAsahiLinux/asahi-audio: Userspace audio for Asahi Linux — PipeWire and WirePlumber DSP profiles and configurations tod rive the speaker arrays in Apple Silicon laptops and desktops.AAA gaming on Asahi Linux — We’re thrilled to release our Asahi game playing toolkit, which integrates our Vulkan 1.3 drivers with x86 emulation and Windows compatibility. Plus a bonus: conformant OpenCL 3.0.FEXWineDXVKvkd3d-protonmuvmholesaileikosiena's nixtcloudFOSSCOMMEmerald Coast Linux User GroupFedora Media WriterFedoraQt/MediaWriter — A tool to create a live USB drive with an edition of FedoraPreparing Boot Media - Fedora DocsGDM SettingsGDM Settings Web Site — Customize your login screenWeb Appseyekay/webapps source — Install websites as desktop apps, so that they appear in their own windows separate from any browsers installed. This is similar to the "Install as App" feature found in popular web browsers.

We're hot-swapping our rigs to Fedora 41; then Graham Christensen gives us the inside scoop on a new Nix distribution, and Determinate Systems' big week!Sponsored By:Jupiter Party Annual Membership: Put your support on automatic with our annual plan, and get one month of membership for free!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMdracut-loopbackReboot Linux faster using kexecLinux.com :: Reboot like a racecar with kexecLinux 3.14 To Support EFI Kexec CapabilityByteDance Working To Make It Faster Kexec Booting The Linux KernelDefeating Secure Boot With Linux KexecGoogle Engineers Get Windows Booting When Kexec'ed Under LinuxThe Future is Nix — Today, we still find ourselves sitting on the most powerful technology of our lifetimes and we can’t even decide on small steps in the direction of making it easier for folks to adopt it.The future of software is Nix. — Today, we still find ourselves sitting on the most powerful technology of our lifetimes and we can’t even decide on small steps in the direction of making it easier for folks to adopt it.Announcing Determinate NixDeterminate Nix documentation — With Determinate Nix, our goal is to transform Nix from what it is today—a tool with great potential but with too many hard edges to be ready for prime timeIntroducing Determinate - YouTubeNix at work: FlakeHub Cache and private flakes — Today, we’re delighted to announce a new chapter for FlakeHub with the general availability of two new features: FlakeHub Cache and private flakes.Graham Christensen on X — Yesterday at work we launched a binary cache that goes beyond bytes in a bucket. This launch means you can deploy to brand new cloud environments with two lines of userdata:Annual Membership — Put your support on automatic with our annual plan, and get one month of membership for free!lobe-chat — an open-source, modern-design AI chat framework. Supports Multi AI ProvidersDnote: A Simple Command Line Notebookplastic — NES emulator in rust with egui and TUIcool-retro-term: A good looking terminal emulator which mimics the old cathode display...plastic-flake

Wes got Mom a new Linux laptop, and he lets her pick the distro. Plus, we take a look at the new Ubuntu 24.10, and why we think this release might be a good sign for the future.Sponsored By:Jupiter Party Annual Membership: Put your support on automatic with our annual plan, and get one month of membership for free!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMUbuntu 24.10 - Oracular OrioleUbuntu UnityAMD Framework 13Annual Membership — Put your support on automatic with our annual plan, and get one month of membership for free!imagegenius/docker-immich — Monolithic (Single) Docker Container for Immichrramiachraf/dumb — Private alternative front-end for Genius.qdm12/gluetun: — VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.SCaLE 22X Call for PapersSCaLE CFP Feedback Livestreamcli-ai — A simple command-line AI assistant that translates natural language into shell commands. Supports all Windows and Unix-based systems (Linux, MacOS).

After building nodes, climbing roofs, swapping antennas, and even some war driving, it's time for our Meshtastic deep dive!Sponsored By:Jupiter Party Annual Membership: Put your support on automatic with our annual plan, and get one month of membership for free!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMMeshtastic — An open source, off-grid, decentralized, mesh network built to run on affordable, low-power devicesBitcoin Vets: Establish communications via meshtastic & ham radio networkMeshtastic in the air — Avery Airfield in Spruce Pine which is running air delivery of critical supplies to HLZs in the AO is now equipping flights with Meshtastic airborne nodes which significantly increases coverage of vital communications.Heltec V327100 Cell holderMPPT Solar Charge controller for 1S cells25 Watt Solar PanelsProject BoxPole MountsProgrammable GPSPreferred 27100 Cells2nd choice 21700 CellsTdeckGPSBattery3D printed case filesScrew inserts for casem2 screw kit, nice to have for these kind of projects (threaded for inserts above)5 dbi antenna2 dbi antenna5.8 dbi antennaSMA - RPSMA adapters if needed12' SMA cableWiseblock RAKHundreds Weigh in on FCC NextNav Petition for 900 MHz Band Change — At issue is a NextNav petition filed in April to the FCC to expand the power level, bandwidth and priority of its licenses in the 902 to 907 and 918 to 928 MHz bands in the United States—a band currently in use by UHF RFID, Z-Wave, Zigbee, LoRa and numerous other wireless technologies. Additionally, NextNav proposes to use 5G connectivity over the relatively low bandwidth.Consumer Choice Center submits FCC comments to protect radio frequency for open-source projects and amateur radiomeshbbs — This is a BBS project to run on a meshtastic node. The system allows for message handling, bulletin boards, mail systems, and a channel directory.nostrastic — Bridge to publish Nostr posts and send/receive DMs over LoRa using Meshtastic.Home Assistant and Meshtastic — On this page, we'll guide you through the process of creating Meshtastic MQTT sensor entities within Home Assistant. Whether you want to keep an eye on battery levels, environmental conditions, or even receive notifications from your mesh network, these integrations provide you with the tools to make it happen.T-Watch S3awesome-meshtastic — A curated list of amazingly awesome Meshtastic resourcesMeshMap - Meshtastic Node MapMeshtastic Routing Issues & Deployment Scenarios - YouTubeAnnual Membership — Put your support on automatic with our annual plan, and get one month of membership for free!Nix-ld: A clean solution for issues with pre-compiled executables on NixOSnix-ld on GitHubDIYmall 2 Sets 915MHZ ESP32 Lora V3 WiFi+BLE Development Board — WiFi LoRa 32 is a classic IoT dev-board. The newly launched V3 version retains Wi-Fi, BLE, LoRa, OLED display, and other functionsLILYGO T-Echo Meshtastic LoRa SX1262 — NRF52840 module, SX1262 wireless transceiver BME280 temperature pressure sensor, GPS RTC, NFC, LoRa

Wes gives his shell superpowers to solve a tricky problem. Then, we share an update on our favorite Google Photos alternative, including breaking changes and a great new way to run it.Sponsored By:Jupiter Party Annual Membership: Put your support on automatic with our annual plan, and get one month of membership for free!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMbda in the Nix Nerds Matrix Chat with Python WoesInstall a couple of Python packages : r/NixOSAnyone using python UV on NixOS? : r/NixOSdevenv — Fast, Declarative, Reproducible and Composable Developer Environments using Nixdevenn's direnv integrationPOLL: Do you use any tools to "move between machines"?Immich Release v1.117.0NixOS Immich ModuleImmich Nix Packageimmich-machine-learning.nixLINUX Unplugged 476: Canary in the Photo MineLINUX Unplugged 409: Launch Your Memories Into the FutureAnnual Membership — Put your support on automatic with our annual plan, and get one month of membership for free!Meshtastic Matrix Chatroom — Chatastic for Meshtastic.nixy — Nixy is a Hyprland NixOS configuration with home-manager, secrets and custom theming all in one place. It's a simple way to manage your system configuration and dotfiles.I'm not sure if Jeff can be called a ProducerSeattle GNU/Linux ConferenceDistroStu's Computer Keyboards! Talk on YouTubeNix from First Principles: Flake Edition — This guide is a beginner's guide to Nix and related tooling, focusing on the newer nix command, and flake.nix compared to older tools like nix-env and default.nix. It does not require any prior Nix knowledge, and instead builds up the Flake based world from first principles, so that it can serve as an introduction to Nix itself, as well as the concept and uses of Flakes.NixOS & Flakes Book — Want to know NixOS & Flakes in detail? Looking for a beginner-friendly tutorial? Then you've come to the right place!EtchDroid — An application to write OS images to USB drives, on Android, no root required. Use it to make a bootable operating system USB drive when your laptop is dead.EtchDroid on Github

We explain the one-packet attack on CUPS and discuss its real-world implications. Plus, a Meshtastic update and more.Sponsored By:Jupiter Party Annual Membership: Put your support on automatic with our annual plan, and get one month of membership for free!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMAttacking UNIX Systems via CUPS — A remote unauthenticated attacker can silently replace existing printers’ (or install new ones) IPP urls with a malicious one, resulting in arbitrary command execution (on the computer) when a print job is started (from that computer).Marcus Hutchins Scan finds 107,287 servers responding to the UDP port 631 — Instead of relying on Shodan data, I performed my own internet-wide scan using a distributed network of servers. This resulted in discovering drastically more exposed cups-browsed instances, causing my total count to rise from 13,289 to 107,287.Shodan on X: 75,000 exposed CUPS daemons on the InternetAnnual Membership — Put your support on automatic with our annual plan, and get one month of membership for free!nodeboard — Your Ultimate Digital Inventory ManagerLightning Payactivate-linux — The "Activate Windows" watermark ported to LinuxInstall Frog on Linux | Flathub — Extract text from images, websites, videos, and QR codes by taking a picture of the source.Clapgrep — Ever had a folder full of PDF files, where you knew, somewhere in there, is what you're looking for. But you did not know in which file. So you had to search each of them at a time...

What if we had to abandon ship and stop using Desktop Linux? We've come up with a master plan, and put it to the test.Sponsored By:Jupiter Party Annual Membership: Put your support on automatic with our annual plan, and get one month of membership for free!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMMeshtastic Linux-Native ApplicationMeshMap — Meshtastic Node MapLINUX Unplugged 269 — What if desktop computing went a very different direction in the late 90s? Deeply multithreaded from the start, fast, intuitive, and extremely stable. This is the world of Haiku, and we go for a visit.The Dawn of Haiku OS — Haiku, unlike its more established competitors, is exceedingly good at tackling one of the toughest challenges of modern computing: multicore microprocessors. Let's take a look at why that is, how Haiku came to be, and whether the operating system running on your computer really performs as well as it should.Haiku Project HistoryHaiku R1/beta5 Release Notes — The fifth beta for Haiku R1 over a year and a half of hard work to improve Haiku’s hardware support and its overall stability, and to make lots more software ports available for use.docker-qemu-haiku — A Docker image for the Haiku operating system.golang-haiku/go — The Haiku port of the Go programming language for upstream support. Changes are made in 'golang-1.11-haiku' or 'golang-haiku-master'.Using the remote app server | Haiku ProjectJB Haiku ServerLighttpdDHH Talks Apple, Linux, and Running ServersAnnual Membership — Put your support on automatic with our annual plan, and get one month of membership for free!dadjoke-clicolmenaspectorus' NixOS ConfigPick: rustpad — Efficient and minimal collaborative code editor, self-hosted, no database requiredIs the Nostr moment officially here?

The things we like in the new Nextcloud release, and we attempt to upgrade our production server live—from a big blue bus.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMOpenSats Grants Long-Term Support for WireGuard Creator Jason DonenfeldOpenSats Lightning NodeNextcloud Hub 9Introducing Nextcloud Hub 9 - the world's leading open source collaboration platform! - YouTubeDay 1: Nextcloud Community Conference 2024 - YouTubeDay 2: Nextcloud Community Conference 2024 - YouTubeNextcloud Community Conference 2024Mailvelope — Mailvelope is a browser add-on that you can use in Chrome, Edge and Firefox to securely encrypt your emails with PGP using webmail providersNextcloud Server Releasesnextcloud/docker: ⛴ Docker image of NextcloudBug: Unable to update background execution mode: conflict between new type (mixed) and old type (string)VLESShacompanion: Daemon that sends local hardware information to Home Assistant.LNXlink: 🖥 Effortlessly manage your Linux machine using MQTT.Waycheck — Waycheck is a simple graphical application that connects to your Wayland compositor and displays the list of Wayland protocols that it supports, along with the list of protocols that it doesn't.Supersonic — A lightweight cross-platform desktop client for Subsonic and Jellyfin music servers.

Secret moments from the show you've never heard before. We kick off with some hardware hurdles, then dive into the news and share a few surprising stories.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FM

Rust meets Linux in a clash of coding cultures. Why some developers are resisting, and where things go from here.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMBerlin with Brent: September Meetup @ Nextcloud Conference, Sat, Sep 14, 2024Berlin Buds on MatrixLinus Torvalds talks AI, Rust adoption, and why the Linux kernel is 'the only thing that matters'KubeCon + CloudNativeCon + Open Source Summit + AI_Dev China 2024Rust for filesystems — At the 2024 Linux Storage, Filesystem, Memory Management, and BPF Summit, Wedson Almeida Filho and Kent Overstreet led a combined storage and filesystem session on using Rust for Linux filesystems.Filesystem in Rust - Kent Overstreet and Wedson Almeida FilhoAsahi Lina: "I think people really don't appreciate just how incomplete Linux kernel API docs are, and how Rust solves part of the problem."One Of The Rust Linux Kernel Maintainers Steps Down - Cites "Nontechnical Nonsense" — One of the several Rust for Linux kernel maintainers has decided to step away from the project. The move is being driven at least in part due to having to deal with increased "nontechnical nonsense" raised around Rust programming language use within the Linux kernel.[PATCH 0/1] Retiring from the Rust for Linux project - Wedson Almeida FilhoOn Rust, Linux, developers, maintainers — There's been a couple of mentions of Rust4Linux in the past week or two, one from Linus on the speed of engagement and one about Wedson departing the project due to non-technical concerns. This got me thinking about project phases and developer types.The revival of the Linux C++ discussionMembership Summer Discount — Take $1 a month of your membership for a lifetime!Thank you Core ContributorsBrewHouse by the Lake – Amsterdam Brewery ShopBITCOIN WELL — The fastest and safest way to buy bitcoin in CanadaThe new JB server - KTZ systems — Join Alex, Chris, and Brent as we fly to Toronto to deploy our shiny new colo server in Canada. We'll be deploying the 45homelab HL15 server.Projectivy LauncherAerial Views ScreensaverOpenEBS — OpenEBS is a modern Block-Mode storage platform, a Hyper-Converged software Storage System and virtual NVMe-oF SAN (vSAN) Fabric that is natively integrates into the core of Kubernetes.oppy1984's Satoshi SurveyCoder Radio 582Keybase Filesystem Storage LimitsI Don't Care for GnomeDAVx5 — DAVx⁵ DAVx⁵ – CalDAV / CardDAV / WebDAV for AndroidFlock 2024 Universal Blue: Building the Future using Fedora AtomicPick: Shotcut - New Version 24.08Install Shotcut on Flathub — Shotcut supports many video, audio, and image formats via FFmpeg and screen, webcam, and audio capture. It uses a time-line for non-linear video editing of multiple tracks that may be composed of various file formats. Scrubbing and transport control are assisted by OpenGL GPU-based processing and a number of video and audio filters are available.Bonus Pick: Butler — Access your Home Assistant dashboard from a native companion UI, integrating better with your OS.Butler on GitHubRust for Linux revisitedRedox OS — Redox is a Unix-like general-purpose microkernel-based operating system written in Rust, aiming to bring the innovations of Rust to a modern microkernel, a full set of programs and be a complete alternative to Linux and BSD.

Sixty vulnerabilities and exposures disclosed in one week sounds like a lot. We'll explain why it's just business as usual.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMToronto Meetup — Thursday, Aug 29, 2024Berlin with Brent — September Meetup @ Nextcloud Conference, Saturday, Sep 14, 2024Check out Alex’s “Building a Colo Server” videoMicrosoft’s latest security update has ruined dual-boot Windows and Linux PCs — The cause: an update Microsoft issued as part of its monthly patch release. It was intended to close a 2-year-old vulnerability in GRUB, an open source boot loader used to start up many Linux devices.What the f*** is an SBAT and why does everyone suddenly care — This update was not supposed to apply to dual-boot systems, but did anyway.SBAT Revocations: Boot Process - Ubuntu Community Hub“Something has gone seriously wrong,” dual-boot systems warn after Microsoft updateUbuntu Will Be Skipping Non-Critical Linux Kernel Updates For September - PhoronixSRU Mailing List AnnoucementCanonical Moves To Shipping Very Latest Upstream Kernel Code For Ubuntu ReleasesKernel Version Selection for Ubuntu Releases - Kernel - Ubuntu Community HubLinus Torvalds Begins Expressing Regrets Merging Bcachefs — The bcachefs patches have become these kinds of "lots of development during the release cycles rather than before it", to the point where I'm starting to regret merging bcachefs.Re: [GIT PULL] bcachefs fixes for 6.11-rc5 - Linus Torvalds — No one is being jerks here, Linus and I are just sitting in different places with different perspectives. He has a resonsibility as someone managing a huge project to enforce rules as he sees best, while I have a responsibility to support users with working code, and to do that to the best of my abilities.LINUX Unplugged 545: 3,062 Days Later — Kent Overstreet, the creator of bcachefs, helps us understand where his new filesystem fits, what it's like to upstream a new filesystem, and how they've solved the RAID write hole.Linux is a CNA — As was recently announced, the Linux kernel project has been accepted as a CNA as a CVE Numbering Authority (CNA) for vulnerabilities found in Linux.The Linux security team issues 60 CVEs a week, but don't stress. Do this insteadWhat is a "good" Linux Kernel bug?Keynote: Linux Kernel Security Demystified - Greg Kroah-Hartman - YouTubeMembership Summer Discount — Take $1 a month of your membership for a lifetime!added pihole nix module by Tdback · Pull Request #3 · JupiterBroadcasting/nixconfigs — Recently, I wanted to start 'nixifying' some of my docker-compose setup. I've created a simple module for spinning up a podman container running pihole as a systemd service, so that way I can just stick it on any NixOS machine and easily make it my DNS server.NetworkManager cli (nmci) wrapper to easily create a new network connectionDistrohopper WheelNo idea where to distrohop next? Let the ultimate distrohopper decide for you!Proxmox Virtual Environment - NixOS WikiPick: SaunaFS is a distributed file system — A robust distributed POSIX file system meticulously designed to revolutionize your storage solutions by offering unmatched efficiency, security, and redundancy. At its core, SaunaFS is a distributed file system primarily written in C++, inspired by the pioneering concepts introduced by Google File System.Google File System - Wikipediasaunafs/INSTALL.md

We reveal how we turned our humble LAN into a public server farm, all while keeping our IP address under wraps and our ISP blissfully unaware.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMToronto Meetup — Thursday, Aug 29, 2024Berlin with Brent — September Meetup @ Nextcloud Conference, Saturday, Sep 14, 2024Check out Alex's "Building a Colo Server" video — Building a colo server for Jupiter Broadcasting using the 45Homelab HL15 server.Firewall - NixOS Wikinftables wikiThe netfilter.org "nftables" projectGentoo Nftables Examplesnetworking/nftables: add .tables property and disable ruleset flushing by default by mkg20001Example nftables configOlympia Mike on "verified only Flatpaks" — I'm curious your take on a recent update that happened in Linux Mint, and the possible knock on effect of it.Incus is a next generation system container and virtual machine manager.Incus - NixOS WikiMoving from Proxmox to IncusMembership Summer Discount — Take $1 a month of your membership for a lifetime!Referral Code eXchangeauto-tab-discardtab-session-managerOneTab extension for Google Chrome and FirefoxTubular — A fork of NewPipe that implements SponsorBlock and ReturnYouTubeDislike.

Brent's computer pulls an all-nighter at the worst possible moment, and the hits keep coming for open-source Android distributions and our new 2FA tool.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMToronto Meetup — Thursday, August 29, 2024 from 6:00 PM to 8:00 PM EDTSacramento LUG Meetup — Saturday September 7th, 2024 from 10:00 AM to 2:00 PM PDTAnker PowerConf S330 USB SpeakerphoneCorsair Void RGB Elite Wireless Premium Gaming HeadsetLoss of popular 2FA tool puts security-minded GrapheneOS in a paradoxGrapheneOS on X — Google can either permit GrapheneOS in the Play Integrity API in the near future GrapheneOS on X — If Authy insists on using it, they should use the standard Android hardware attestation API to permit using GrapheneOS too. Banning 250k+ people with the most secure smartphones from using your app is anti-security, not pro-security.GrapheneOS on X — Authy simply delegated checking device integrity to Google. It's Google choosing to block GrapheneOS users from using Authy. Google chooses to allow using a device with no security patches for the past 8 years but bans using an OS much more secure than the stock Pixel OS.Twilio kills off Authy for desktop, forcibly logs out all usersGrapheneOS on X — Our latest release with prevention for most VPN app DNS leaks is currently available in our Alpha and Beta channels. We need more feedback from testing VPN apps and services with leak blocking toggled on, which GrapheneOS already enables by default.GrapheneOS on X — Our current approach to DNS leak blocking appears to work well without breaking compatibility. We've made progress towards fixing a related issue for some VPN apps where rare connections are made to VPN DNS outside of the tunnel. We can hopefully ship stricter enforcement soon.GrapheneOS on X — We've become aware of another company selling devices with GrapheneOS while spreading harmful misinformation about it to promote insecure products. We're making our usual attempt at resolving things privately. However, we need to quickly address what has been claimed regardless.Membership Summer Discount — Take $1 a month of your membership for a lifetime!How You Guys Expect to Beat Me?Blue Iris Containernetbird — Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.netbird on GitHubOpenZiti — Open Source Zero Trust NetworkingOpenZiti on GitHubCollapse OS — Bootstrap post-collapse technologyDocker-OSX — Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

The COSMIC desktop is just around the corner. We get the inside scoop from System76 and go hands-on with an early press build.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMSystem76 tips Fedora Cosmic spin for 2025 release with Fedora 42 — It looks like System76's exciting new Rust-based Cosmic DE will get an official Fedora spin in the upcoming Fedora 42, potentially giving Linux users with bleeding-edge hardware an official way to try Cosmic.Pop!_OS Mattermost — An excellent place to engage if you want to bring COSMIC to a distro near you.iced — A cross-platform GUI library for RustSmithay — A smithy for rusty wayland compositorTesting COSMIC — The easiest way to test COSMIC DE currently is by building a systemd system extension.Membership Summer Discount — Take $1 a month of your membership for a lifetime!Portal:Kalpa - openSUSE Wiki — openSUSE MicroOS Desktop Gnome was renamed to openSUSE Aeon, and the Plasma Desktop version is being renamed to openSUSE Kalpa.pop-os/kernelstub: A simple EFI boot manager manager for LinuxAlpaca — GTK App to Chat with local AI modelsAlpaca on FlatHub

Think Silverblue, but with cloud-native tooling used to build it. From Aurora to Bazzite, our impressions of the ambitious Universal Blue project.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMUniversal Blue — The Universal Blue project builds a diverse set of continuously delivered operating system images using Fedora Atomic Desktop's support for OCI/Docker containers.Universal Blue Architecture DiagramAurora — Aurora is a clean and reliable desktop operating system for every type of user. Many batteries included.Bluefin — Bluefin is a custom image of Fedora Silverblue offering the best of both worlds: The reliability and ease of use of a Chromebook and the power of a GNOME desktop.Bazzite — The next generation of Linux Gaming for all of your devices - including your favorite handheld.uCore — An OCI base image of Fedora CoreOS with batteries included; a lightweight server image including most used services or the building blocks to host them.Bazzite Desktop Environment Tweaks - Bazzite - Docs - Universal BlueInstalling and Managing AppImages on Bazzite - Bazzite - Docs - Universal BlueUniversal Blue Contributing GuideJazz up your Bluefin command line with some bling! [YouTube]Jorge Castro on YouTubeMembership Summer Discount — Take $1 a month of your membership for a lifetime!zap.store — a permissionless app store.Asking AI To Make A Caveman Rock Song - Me Like Rockwinapps — Run Windows applications (including Microsoft 365 and Adobe Creative Cloud) on GNU/Linux with KDE, GNOME or XFCE, integrated seamlessly as if they were native to the OS.The Mooltipass Hardware Authenticator — A Simple Hardware Authenticatorptyxis — Ptyxis is a terminal for GNOME with first-class support for containers.Gearlever — Manage AppImages with ease 📦

Wes' self-decrypting bcachefs disk and a GrapheneOS twist that'll make you ditch your iPhone.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMclevis — Clevis is a pluggable framework for automated decryption. It can be used to provide automated decryption of data or even automated unlocking of LUKS volumes.bcachefs EncryptionWhat measured boot and trusted boot means for LinuxAutomatically decrypt your disk using TPM2 — Entering the passphrase to decrypt the disk at boot can become quite tedious. On modern systems a secure hardware chip called “TPM” (Trusted Platform Module) can store a secret and automatically decrypt your disk. This is an alternative factor, not a second factor. Keep that in mind.Use systemd-cryptenroll with FIDO U2F or TPM2 to decrypt your diskAutomatic LUKS 2 disk decryption with TPM 2 on FedoraSafe automatic decryption of LUKS partition using TPM2 | 221bFOSDEM 2024: Clevis/Tang - unattended boot of an encrypted NixOS systemClevis & Tang on NixOS SlidesDecrypt LUKS volumes with a TPM on Fedora LinuxSelf-Hosted 127: Can't Fix What You Don't TrackGarmin Forerunner 265 — Forerunner 265 is a running smartwatch with a touchscreen AMOLED display, training metrics, phone-free music, & up to 13 days of battery life in smartwatchHRV StatusGarmin Sleep TrackingNap DetectionGarmin PayTribit Stormbox Micro 2 Wireless Portable Speaker: 10WUSB-C Charging Converter for Garmin Watch Without Charger CableObtainium — Obtainium allows you to install and update apps directly from their releases pages, and receive notifications when new releases are made available.Managing your personal access tokensMembership Summer Discount — Take $1 a month of your membership for a lifetime!Iotas — Iotas aims to provide distraction-free note taking with optional speedy sync with Nextcloud Notes.LINUX Unplugged 567: So Long sudoCeleste — GUI file synchronization client that can sync with any cloud providervt52's Blog: Migrating from NixOS channels to FlakesFUTO KeyboardautosshLINUX Unplugged 570: RegreSSHion StrikesAeon — The Linux Desktop for people who want to "get stuff done"Aeon: openSUSE for lazy developersGrayjay — Follow Creators Not PlatformsGrayjay on GitLabCrowdSecBustle — Bustle draws sequence diagrams of D-Bus activity. It shows signal emissions, method calls and their corresponding returns, with time stamps for each individual event and the duration of each method call. This can help you check for unwanted D-Bus traffic, and pinpoint why your D-Bus-based application is not performing as well as you like. It also provides statistics like signal frequencies and average method call times.open-and-shut — Type in Morse code by repeatedly slamming your laptop shut

Wes reports from the Skunkworks lab, and Brent tells us about his new computing lifestyle.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMNix Nerds Matrix RoomBeelink SER5 Mini PCMinisforum UM690 Propyenv-flake: experimental nix flake that can build pyenv pythonsdotenvx-flake: A nix flake for dotenvxauto-patchelf.sh - NixOS/nixpkgsPackaging/Binaries - NixOS WikiMembership Summer Discount — Take $1 a month of your membership for a lifetime!Try the JB Test Gathio Instance hosted by HybridSarcasmBerlin with Brent: September Meetup at Nextcloud Conference · JB EventsFix Kate sudo saves - use Plasma 6 version of Kate by MarkSort · Pull Request #3 · ChrisLAS/nixRunning OpenBSD 7.5 on your laptop is really hard (not) — I couldn't use OpenBSD exclusively; there's software that I need/want which isn't available. But I do appreciate certain of OpenBSD's qualities: it's a simple, ultra-lightweight, traditional UNIX. I have an ancient ThinkPad running OpenBSD configured as a minimalist desktop: it's nice for focused work. Sure, it can't run Steam or play Netflix, but sometimes that's a plus...@fabean's NixOS configsIBM Classroom LAN Administration System V 1.30 User Guide0xchat: Secure chat built on NostrGet NIP-05 verifiedPick: termscp — 🖥 A feature rich terminal UI file transfer and explorer with support for SCP/SFTP/FTP/S3/SMBLearn Nix The Fun Way — Sure, it’s sort of portable, if you tell the person running it to have curl and jq. What if you relied on a specific version of either though? Nix guarantees portability.

We dig into the RegreSSHion bug, debate it's real threat and explore clever tools to build a tasty fried onion around your system.Sponsored By:Core Contributor Membership: Take $1 a month of your membership for a lifetime!Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices! 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps. Support LINUX UnpluggedLinks:💥 Gets Sats Quick and Easy with Strike📻 LINUX Unplugged on Fountain.FMSpokane Meetup - No-Li Brewhouse · JB Events on GathioPlasma/Krunner Docs — Brent's tip: 'https://search.nixos.org/options?query=\{@}' (the '\{@}' is the magic sauce)autossh — Automatically restart SSH sessions and tunnelsautossh on GitHubSpokane Meetup — No-Li Brewhouse, Sat, Jul 13, 2024, 4:00 PMRegreSSHion — Remote Code Execution Vulnerability In OpenSSH ServerregreSSHion — Remote Unauthenticated Code Execution Vulnerability in OpenSSH server.NixOS Security advisory: OpenSSH CVE-2024-6387 “regreSSHion” – update your servers ASAPNasty regreSSHion bug affects around 700K Linux systemsQualys CVE-2024-6387 Write-upLetmein: Authenticating port knocker - Written in Rust — Letmein is a simple port knocker with a simple and secure authentication mechanism. It can be used to harden against pre-authentication attacks on services like SSH, VPN, IMAP and many more.fwknop: Single Packet Authorization > Port Knocking — fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization (SPA). This method of authorization is based around a default-drop packet filterMembership Summer Discount — Take $1 a month of your membership for a lifetime!Jeff links: How to run non-nix executables?pick: stu — TUI (Terminal/Text UI) application for AWS S3