Post A0C0PKeomILk7MsVRg by nahuelwexd@mastodon.social
(DIR) More posts by nahuelwexd@mastodon.social
(DIR) Post #A0BnckC1qjC1fxTeEK by xerz@fedi.xerz.one
2020-10-15T15:00:37.650001Z
0 likes, 0 repeats
deciding which distro to use based on "do I really need SELinux this much"
(DIR) Post #A0BnxP7jNbu2PaJnsW by xerz@fedi.xerz.one
2020-10-15T15:04:19.454627Z
0 likes, 0 repeats
yeah I guess I'll have to give up on the pure container dream for nowFedora 33 is releasing in 5 days so that's convenient, whereas Debian 11 is... far. And yeah, I don't feel comfy in Nix. And I wish I could consider Alpine but muh SELinux...
(DIR) Post #A0Bo5fgrfYEC6oh5iy by xerz@fedi.xerz.one
2020-10-15T15:05:49.394111Z
0 likes, 0 repeats
If anyone wonders "what about toolbox": no. It breaks too often (check the Github tickets) and the fact it's containers gives me a lot of the same trouble as userspace Nix.
(DIR) Post #A0Bo7G3xvEw7CqFvKy by tennoseremel@mstdn.io
2020-10-15T15:05:14Z
0 likes, 0 repeats
@xerz You don't :blobcatbox:
(DIR) Post #A0Bo7GJD0Z85y7O664 by xerz@fedi.xerz.one
2020-10-15T15:06:07.783742Z
0 likes, 0 repeats
@tennoseremel I thought security was important or something :blobcatthink:
(DIR) Post #A0BoAtAoxz6xNGC4lE by tennoseremel@mstdn.io
2020-10-15T15:06:38Z
0 likes, 0 repeats
@xerz Security? Yes. SELinux? Nope :blobderpy:
(DIR) Post #A0BoAtmOiHAXFnm5Ka by xerz@fedi.xerz.one
2020-10-15T15:06:46.692418Z
0 likes, 0 repeats
@tennoseremel why
(DIR) Post #A0BoJPCVm2Bx1P2shU by tennoseremel@mstdn.io
2020-10-15T15:07:14Z
0 likes, 0 repeats
@xerz Too painful to use for too small of a gain, IMO.
(DIR) Post #A0BoJU5FcSM4AKgeZs by xerz@fedi.xerz.one
2020-10-15T15:08:17.908402Z
0 likes, 0 repeats
@tennoseremel I mean as long as I don't have to deal with it, seems like a win-winand the fact is, I never have to modify anything as root other than global settings like /etc/passwd in the first place
(DIR) Post #A0BoKs3Ryu0wneVQi8 by codewiz@mstdn.io
2020-10-15T15:08:34Z
0 likes, 0 repeats
@tennoseremel @xerz Agree. I disable SELinux as soon as it blocks something legit, because fixing the policy and maintaining it is too much pain.
(DIR) Post #A0BoQCsvxhHCqt8Cm0 by codewiz@mstdn.io
2020-10-15T15:09:33Z
0 likes, 0 repeats
@tennoseremel @xerz But otherwise, Fedora is a fine distro. The days of slow yum and self-corrupting rpmdb are long gone.
(DIR) Post #A0BybIW8MQDB2zOUYy by zebranium@mastodon.xyz
2020-10-15T16:56:43Z
1 likes, 0 repeats
@xerz if SELinux or AppArmor is disabled in a derivative linux distro or a manual is started with "disable SELinux/AppArmor first" I avoid such distros and manuals.
(DIR) Post #A0Bz7uNX82ljjqvAsi by zebranium@mastodon.xyz
2020-10-15T17:04:32Z
0 likes, 0 repeats
@xerz with proper careful use Silverblue and Workstation provide almost similar experience. Just use Workstation as if you were using Silverblue, e.g with Flatpak apps, Podman containers and toolboxes.
(DIR) Post #A0Bz7uWkZm8qCREXFQ by xerz@fedi.xerz.one
2020-10-15T17:09:27.933001Z
0 likes, 0 repeats
@zebranium For dev stuff toolbox just doesn't do it for me (like, it actually is broken for me, can't even use it and this is an old known issue!), so I guess I depend on dnf for libraries. Everything else though, sure enough…
(DIR) Post #A0BzXFIuSvWzsRqAHg by nahuelwexd@mastodon.social
2020-10-15T17:10:12Z
0 likes, 0 repeats
@xerz funny, atm I'm entirely Toolbox based and no problem at least in my use casesI'm even using VS Code directly from Toolbox 🤔
(DIR) Post #A0BzXFUxk7AkTpTn4S by xerz@fedi.xerz.one
2020-10-15T17:14:01.725780Z
0 likes, 0 repeats
@nahuelwexd I'd send the specific ticket but I'm too busy deleting everything :blobcatderpy:
(DIR) Post #A0C0PKeomILk7MsVRg by nahuelwexd@mastodon.social
2020-10-15T17:16:55Z
0 likes, 0 repeats
@xerz the only one that I think can cause some problems is that Toolbox can't open GUI apps under XWayland until you do `sudo ln -a /run/host/tmp/.X11-unix/ /tmp/` in your toolbox
(DIR) Post #A0C0PKyJbnwh5q04ps by xerz@fedi.xerz.one
2020-10-15T17:23:48.755502Z
0 likes, 0 repeats
@nahuelwexd nope, it just can't create a toolbox at all, and it seems like a common issue