Recent comments in /f/technology

emma wrote (edited )

i've been trying to disable that shit for like an hour, but the dashboard won't let me in

update: it finally let me in, and now it turns out let's encrypt isn't set up (we used cloudflare's origin certificates), so cloudflare has to be turned back on

5

emma OP wrote

Reply to comment by nitori in review of 'run0' (sudo replacement) by emma

Is there no way to disable that password time out behavior in run0?

i don't see an obvious configuration option. maybe it's in the documentation somewhere. i'll just keep on using sudo for now, which i've configured to not require a password anyway.

I'm not even sure why they even bothered having that behavior by default lol

going to guess this scenario just didn't cross their mind at all. it'd be better if it visually said the session had elapsed, but still required hitting enter to make the prompt go away.

3

emma wrote

you're being asked to train your replacement, right? so why not just query copilot for the information to pass on to them? after all, i'm sure your workplace's management is fully ai-brained and would absolutely appreciate you giving your replacement the benefit of ai-generated knowledge.

4

nitori wrote

Is there no way to disable that password time out behavior in run0? I'm not even sure why they even bothered having that behavior by default lol

Back when I daily-drove Devuan (now I'm back to Windows when I got a new laptop) I just used, IIRC the command parameters correctly, plain 'ol su -c -. It's pretty much just a simpler sudo (even more simpler than doas lol), just without the ability remember my password for a while (which is a bit annoying yea but I have fast fingers and I like typing anyway). Since I'm really the only user of that machine I thought I didn't really need something like sudo

3

flabberghaster wrote

Fuckin systemd wants to be the entire userspace though it's riddiculous. I like systemd, it's really good at things but they make everything from a boot loader to a DNS resolver. Knock it off, i don't want to sound like one of those init scripts hardliners being all "this violates the unix philosophy" but come on.

Systemd is trying to be too much and everything they add there's a good reason to add it but when you add it all together and step back and look at it it's like... Come on guys.

3

flabberghaster wrote

Yeah I installed alpine linux on my raspberry pi and it comes with doas instead of sudo, and I noticed that arch has doas available, and doas is the new hotness (i guess it's not that new on BSD but I don't use BSD much). It's smaller, less features and thus less attack surface, so I was like hey, yeah let me install that.

But arch has some hard dependencies on sudo, so you can't remove it (you can but not if you want certain build related packages to be installed)... so that means I would have both sudo and doas, which means i now would have two setuid programs, increasing rather than decreasing any hypothetical attack surface.

I will say there is a very good reason to do the auth daemon approach rather than a setuid root thing and I had to do a lot of work on a project at work due to the security aspects of it. We were shipping all these giant sudoers files that had the whole kitchen sink in them because we had to have some system setup stuff running, and it was a whole thing, so they ended up creating an auth daemon that sends an RPC request to a privileged server to actually execute commands as root; i don't think run0 existed then. Or we didn't know about it anyway. And it was for daemons, not users.

So like, there is a use case for that that's real but yeah there's a lot of people wanting to write everything from scratch and missing out of decades of minor bug fixes for things like you're talking about that have gone in to the core utils and such.

3

devtesla wrote

Reply to by twovests

Resilio Sync might be what you're looking for. They have an enterprise product and a free sync product. Closed source but I've used it for years with no issue. They have encrypted folders, which isn't something I use. I do selective sync tho and it's great at that. Here's a link to the personal app.

2

Ruby wrote (edited )

Reply to is this good? by emma

i think there's supposed to be fewer red numbers than that

5

emma OP wrote

Reply to comment by twovests in is this good? by emma

i wish my "bit" wasn't "ate".

also it just occurred to me that memtest86+ violates the geneva convention by misusing the red cross symbol.

6

flabberghaster wrote

Yeah I like dinking around and making a way overcomplicated homelab but I'll be god damned if I'm gonna learn kubernetes for this. The fun of a home lab is you can make your thing do all kinds of fun stuff without having to fuck around treating it as a SAAS startup with yourself as your only customer.

I'm just gonna manually put a systemd unit file in /etc/systemd/system. I'm not gonna run containers at all. And you know what, my setup is pretty good actually.

4