Absolutely essential is using a firewall and set it as strict as possible. Use MAC like SELinux or Apparmor. This is extremely overkill for a personal server, but you may also compile everything yourself and enable as many hardening flags as possible and compile your own kernel with as many mitigations and hardening flags enabled (also stripped out of features you don't need)
ramenu
joined 3 months ago
I've never heard of nsjail, so I wouldn't know. But there's also bubblewrap which is used by Flatpak for sandboxing. It's very small, although a bit annoying to use.
That's very wholesome to hear! :) Thank you for sharing. I'm glad it's not the case.
You can't teach old dogs new tricks.
Speaking of which, Debian users, how safe are distribution upgrades?
Sidenote: If you just want a nice web frontend for others to view your Git repositories, you can use cgit instead.
For me personally, it was mostly due to programming on Windows was a painful experience. I was using MinGW compilers, which were quite good but I wanted the latest and greatest GCC. The other options were using MSVC or clang, but I believe clang is just a frontend to MSVC (I'm not sure.. please correct me if I'm wrong).
WSL was an option, but I was doing graphics programming at the time. And I needed to upgrade to WSL2 to run GUI applications or something, which required Windows 11. So at some point I got fed up and just thought to myself, why not run the real thing. This is probably one of the few instances where the technical merits of Linux is what actually got me to switch in the first place. I didn't hear anything about software freedom, privacy, or even care about any of those reasons at all when I did the switch.
As a Windows user for a very long time, using it from my childhood, I wouldn't have switched no matter how unethical it was to use Windows if Linux was too difficult to use. So I'm glad that ended up not being the case. :)
I can understand why this may be a issue to some people. I think if they asked Windows users this, there wouldn't be as much of a strong reaction to this. Maybe it comes off as exploiting the good will of the Linux community, but I can't read minds.
I'm personally ok with this. If someone willingly volunteers and enjoys doing this, then what's the problem? But again, I'm not sure if that's the core issue at hand here.
I personally use Claws Mail.