Interesting, I swear I’ve done exactly this before and didn’t have DHCP troubles, but that was like a decade ago, so I might be misremembering.
You’ll want to bridge your WiFi and Ethernet interfaces. As always the Arch Wiki has instructions for setting up a bridge interface, there’s multiple options depending on how you have your network setup on your system: https://wiki.archlinux.org/title/network_bridge
IMO, the best free option is https://freedns.afraid.org/. The biggest downside of that one is that you have to login a couple times a year (IIRC?) to keep it active. I actually still use this even though I have a paid domain, I just CNAME my real domains to the afraid dynamic name. That was easier than changing the config every time I become unhappy with my domain registrar and have to reconfigure everything after swapping.
I’ll start off with a proviso, I haven’t s much touched my Librem 5 in at least a year (maybe even 2?), so if they’ve had some massive turn around in that time I don’t know about it. All of this post is just what I think I remember, if you want actual facts go dig around in the wayback machine or something.
The promise of the L5 was super grandiose. They were going to create this mobile device that could completely replace your android device. It was going to launch with a custom matrix client that would let you make voice and video calls, which no other matrix client at the time could do. It was gonna be great and it was going to be delivered in a year.
Now clearly that was never going to go off without a hitch. I don’t blame them for being late nor for not delivering all their promises right at launch. But when things started getting delayed they seemed to be doing everything in their power to not communicate with backers. And anytime they would say something, they would say “well we didn’t hit that deadline, but we promise we’re totally super duper close now”. And then they’d blow through that deadline without a word too.
I did eventually get my phone, obviously, but it wasn’t anything like a usable device. The battery that it came with was smaller than advertised and it didn’t have any power management so you got a few hours of battery life. The cameras just didn’t exist as far as the software was concerned. The privacy switches would randomly kill power to the modem when you lightly brushed against them without the switch moving out of the ‘on’ position. Which was super annoying since you had to reboot the phone any time you wanted to turn the modem back on. And rebooting took ages.
Even at this point I was still rooting for them to succeed. I really want a proper Linux phone and have since 2008.
But ever since then, I really haven’t seen much of anything change with the software, at least for as long as I was paying attention to it. One of the cameras got support added by a community member at some point, but the pictures it was taking were so bad it looked like some 1999 digital camera taking pictures in a dimly lit room even in full sunlight. There was no way to know if an application in their store was going to work or not, most didn’t, mostly because they were meant for a larger screen & a mouse.
I pulled it out a few times on and off over the years, but the last time I did, I couldn’t even figure out how to get it to update. So, I haven’t really even touched it since then. (I’ve got it out connected to power to see what it’s like now. Though, I’m not sure it’s charging, is flashing green (with an occasional flicker of red) a good thing?)
Since receiving it, the only communication I’ve gotten from Purism has been “Investment Opportunities”. I’m not sure why I’d invest in a company that still hasn’t delivered what it promised me over 5 years ago.
I absolutely want them to succeed, and I hope they prove my pessimism wrong, but at this point I absolutely would not put my money on that happening.
As the owner of a Birch batch Librem 5 and former defender I’m sad to say, agreed.
Less commercial interest means only hobby level development
Podman is developed by RedHat: https://github.com/containers/podman/graphs/contributors
The day Firefox shutters its doors is the day the internet truly dies.
*the web
The internet has so far been doing a much better job surviving as a proper decentralized system than the web.
It supports them already, there just aren’t any provided by default. They’re called Bookmark Keywords: https://github.com/jameshealyio/bang-bookmarks
I’d suggest not importing all of them from that list though, there’s a crap load, just pick the ones you want and put them in manually.
Unfortunately, no. Samba needs a different label. Doing that relabels things so that only containers (and anything unrestriced) can access those files.
IMO, yes. Docker (or at least OCI containers) aren’t going anywhere. Though one big warning to start with, as a sysadmin, you’re going to be absolutely aghast at the security practices that most docker tutorials suggest. Just know that it’s really not that hard to do things right (for the most part[1]).
I personally suggest using rootless podman with docker-compose via the podman-system-service.
Podman re-implements the docker cli using the system namespacing (etc.) features directly instead of through a daemon that runs as root. (You can run the docker daemon rootless, but it clearly wasn’t designed for it and it just creates way more headaches.) The Podman System Service re-implements the docker daemon’s UDS API which allows real Docker Compose to run without the docker-daemon.
If anyone can tell me how to set SELinux labels such that both a container and a samba server can have access, I could fix my last remaining major headache. ↩︎
The light is visible, the flashing isn’t.
The top white rectangle is a multi-color LED (presumably RGB). Can’t make out what’s in the bottom, but I wouldn’t be surprised if it was some form of light sensor for (literally) flashing new information onto the tag.
A little bit of unsolicited advice: You don’t have to tell them your GPA.
Don’t lie, that’s an instant disqualifier. But, you don’t need to list it on your resume or otherwise offer it up unless they ask. The only time I was ever asked was when I was applying to do a co-op through the university and that was literally the university asking. I never put mine on my resume and was never asked by any potential employers.
I also have a couple months repairing laptops as experience but I’m thinking of leaving that out.
I wouldn’t. At this point in your career, any amount of work (or even “work”) experience is a leg-up.
You can only do that with Firefox Developer, can’t you? And IIRC, they self uninstall after a week or something, don’t they?
Oh, I’m confident(-ish) in my ability to review the code, but as I understand it I have no way to guarantee that the code that’s on github is the code that AMO installs. Plus updates are automatic, so I have no way to ensure that something malicious won’t be added anyway.
I keep thinking about installing this, but the required permissions seem a bit excessive:
This add-on needs to:
- Input data to the clipboard
- Access your data for all websites
Anyone know if the ‘All Access’ permission is really required for what this is doing? It just feels wrong. There isn’t some sort of “Control Navigation for These Domains” that it could request for each enabled site or something is there?
Pretty similar myself.
Defense in depth. If something escapes the container it’s limited to only what’s under that user and not the whole system. Having access to the whole system makes it easier for malware to hide/persist itself.
If your distro offers it, rootless podman + podman system service is the best setup, IMO. That will give you a docker
command that is 1-to-1 compatible with docker and lets you use tools like docker-compose that expect a docker service socket. Then you can just follow tutorials that only explain things for docker.
They may block IP addresses associated with consumer ISPs. Assuming that’s the case, I would guess you’re seeing that as an HSTS/TLS error because their network is trying to trick your browser into redirecting to/displaying an error page hosted by some part of their network.