

Sadly no recommendations, I still use portainer myself
Just your normal everyday casual software dev. Nothing to see here.
People can share differing opinions without immediately being on the reverse side. Avoid looking at things as black and white. You can like both waffles and pancakes, just like you can hate both waffles and pancakes.


Sadly no recommendations, I still use portainer myself


while docker does have a non-root installer, the default installer for docker is docker as root, containers as non-root, but since in order to manage docker as a whole it would need access to the socket, if docker has root the container by extension has root.
Even so, if docker was installed in a root-less environment then a compromised manager container would still compromise everything on that docker system, as a core requirement for these types of containers are access to the docker socket which still isn’t great but is still better than full root access.
To answer the question: No it doesn’t require it to function, but the default configuration is root, and even in rootless environment a compromise of the management container that is meant to control other containers will result in full compromise of the docker environment.


man, arcane looks amazing, I ended up deciding off it though as their pull requests look like they use copilot for a lot of code for new features. Not that I personally have an issue with this but, I’ve seen enough issues where copilot or various AI agents add security vulnerabilities by mistake and they aren’t caught, so I would rather stray away from those types of projects at least until that issue becomes less common/frequent.
For something as detrimental as a management console to a program that runs as root on most systems, and would provide access to potentially high secure locations, I would not want such a program having security vulnerabilities.


yea it makes it so much easier since there’s only one user in the system anyway so makes no sense for everything to be installed system level


The majority of my development work is on chat bots or sites so I’ve always just used bot as the name


I always make a ~/.local/{bin,opt,share} if the distro lacks it. and a ~/bot that I use for my development stuff


I don’t agree with this. While they have stated its against their stores policies to use permanent identifiers instead of your IDFA, I haven’t seen any stories of them actually enforcing said restriction. I’ve seen a lot of /them/ saying that they will and do, but I’ve never seen a story of a company saying they were disabled for it.
On top of that, they didn’t forbid companies from using workarounds like a unique device fingerprint using your current device configuration for it either, so many apps just did that instead, which brought everyone back to square one again, they just switched to using a third party to identify the device instead of using apple’s first party solution.
Privacy advocates actually warned that apples way of marketing this feature would do exactly what is occurring here. Giving users a false sense of privacy when really very little has changed.


From a company POV it’s probally meant to try and encourage you to let a friend know, but it seems that the page in this case might change upon login because it says to sign in to see your deals if you are an existing member. I don’t have it though so I can’t confirm that so I’m running off assumptions based off what the “eligibility” area says


maybe they updated it, for me it says first 12 months and then specifies “new customers only” under the “who’s eligible for this plan” section on the deal page. It also doesn’t give a link to login anymore and informs existing customers to sign in to see their own specialized deal


I’m just chiming in to say that while the documentation gives you information on how to do external access, there are multiple issues open on the github about unauthenticated endpoints that if you know what is on the server already, you can confirm that it’s there
So I wouldn’t use a standard naming convention because using that knowledge, someone who cares could use common names that could be on the server, followed by common standards of formats they would be in, and be able to confirm it’s their via the end points.


Firmly agree, I think their primary issue is it’s hard to find a game that they refuse that would be a decent game to back that type of cause. This is just due to the nature of the games that get rejected on Steam. They’re the controversial leaning style games.
This one in particular for sure isn’t a good choice, because of the underage controversy but, all of these style games are also going to have a pretty vocal and not so small group against this type of effort.


I have to disagree to be honest. Not because I think that they should allow a naked guy with a young girl(gross), but because in the time that it took for steam to review the game and give a verdict, they had already changed it on their own to be a different model.
For them to refuse re-submission of the game is pretty dumb, considering that the offending content(if that is what it was) had already been fixed in the release build and steam was operating under old information.
If they haden’t already changed it for the release candidate I would be fully on board, but clearly they saw wrong in it as well which was why they had changed it prior to steams decision.
Steam forced an early release build of the game way earlier than they normally asked for, which meant it was exactly that, a pre-release build, meaning it had not gone through the proper channels for vetting or checking to make sure that what they wanted to publish was a final product. Then when requested for a review of the actual final build, steam refused. This combined with the fact that the only storefront that blocked the release was steam, I definitely think steam is the bad guy here.
BEING SAID, this might not be the reason anyway, reading the struggles of this games development process, steam had already posted concern about the live action portions of the game, so I’m expecting it might have been a combination of the nudity aspect of the game (even if not intended to arouse) and the live action portions. I assume steam was already looking for a reason to block this release, and when they were given one they just went with it.


yea but he wouldn’t need to handle that, I do all his setup, he just has to click the shortcut that opens the game just like he does currently.


We all have been there. First technical build I struggled for 45 minutes trying to figure out why I was getting a zero display whatsoever only to find out that I plugged that damn HDMI cable into the wrong port, and the board had disabled everything including post and splash from using the motherboards port


you arent the only one. I had suck a painful onboarding process with next cloud from the docker setup to the speed of it to the UI that I just gave up and decided to use a combination of immich and syncthing instead.


My grandfather’s reason for it. “It will be too different from my current system”
… the only thing he does is the web browser, and bookworm deluxe which i have confirmed does work via wine. I was recommending him install an OS called q4os, which I have on my laptop, I showed him the side by side comparison of q4os vs windows. For a point of reference this is what q4os looks like 
I think he is too scared of change.


Fair, the first thing I teach anyone who gets a dualboot up and running, is how to install boot repair disk on a flash drive and how to run the system repair on it(easy enough since it autoruns). It fixes most basic BS that windows can do to a Linux install


I guess that really depends on the equipment though, some devices when you turn it on for the first time will automatically enter pairing mode, so all that had to be done is click it in the bluetooth menu, but it might not auto enter pairing mode when you turn it on after. So it’s unlikely the user ever knew they were pairing it, and just clicked through the prompts like many do
I somewhat agree with their mentality on post 2022 Debian since they had changed the default and made it harder to disable non-free from the start but, from what I understood by reading the FAQ page, even prior to bookworm it wasn’t endorsed due to having the toggle in the first place, which I find super weird.
Silk Song had x33 beat by almost triple the max player count. the fact that it didn’t get the inde title and they gave it to X33 is criminal. Silk Song beat it on price and player count and arguably story.