I am slightly bothered by how the logo is quite off-center, is it intentional?

It’s so sad to see that voice of reason is trampled over like this. To see how bad is running Linux on phones, just ask the grapheneos folks. Linux phones have looong way to go compared to AOSP.

True, but asking user about permission to home folder vs. granting permission by default is huge difference. Also doesn’t flatpak also grant other permissions the app wants as well? Like the Mic permission.

While lots of this is problem of desktops in general, but:

• Linux applications can access your entire home folder, which likely contains most of your data. It can also access e.g. state of other applications, which can be bad.
• While flatpak somewhat mitigates the issues, it is half-baked: permissions are granted directly when you install the app, and user has to manually revoke the permission - Needing e.g. FlatSeal for this is insane as well. With Android/iOS, the user only grants permission when needed, which reduces lots of attack surfaces.
  • Doesn’t too many apps want your home folder access by default? If you think about it, it is a huge security issue - you basically have to trust the app to keep your secrets intact.
  • Mic access can be very problematic, esp when it would be enabled by default if app requests it. Although I don’t know to which extent this would be abused.

Pardon my ignorance, but why people keep trying Linux phones when you can develop on top of open source android version, like GrapheneOS? Linux desktop apps are not exactly secure.

deleted by creator

O hello, the one and only other ItB player! How was the mech chess today

deleted by creator

While this would not answer your question, but according to podman maintainers, rootful podman with userns=auto enjoys nearly as much security benefits as rootless. (As always, there are nuances to this)

Check out https://github.com/containers/podman/discussions/13728

Maybe you could consider running rootful podman, especially if the OS is immutable.

Sometimes I wish I were like OP, being creatively greedy to snitch lots of money. Then I realize, that requires money and influence to work out… Life.

I see, guess I was overly paranoid. Bitwarden sounds good, then!

To be fair, it is slow on VPS with single core CPU and 2GB RAM. But that’s not normal…

deleted by creator

Thanks, I am trying both paperless and calkbre and see which works better for which tasks.

Indeed, I don’t get the post. Does OP genuinely think they could influence Affinity to support linux? Via freaking change.org?? Really, why is the post so well-received by community? Got so many questions.

Thanks a lot! I will go with the blockinfile, sounds promising.

How do I keep some of the existing firewall rules (which is dependent on host) in the remote file, and change the other parts?

Thank you! Templating rules.v4 is a pretty attractive option. Though my VPS has some portions of the file which should be unmodified, so I would have to avoid this method.

Thanks, but I looked up and learned to prefer the idempotence to be handled by ansible. Ansible support iptables by default, while nftables need a plugin, so iptables it is for me.

Sorry, I prefer input |> then |> doThis |> lastly