Yes, the kernel doing hardware things and another part doing rendering for example, interacting with the kernel.

Text mode isnt just the kernel… the first thing that starts after the kernel is the init system.

Boot means initramfs plus kernel. Any other part could do that, doesnt need to run in kernelspace. I dont think the initramfs runs in kernel mode either.

Linux is a big huge thing that is all very highly privileged. It works, very well, but it is kind of a security mess.

Press Esc when booting to see text

Shouls fonts be rendered in the kernel?

I guess they need to update their table

https://asahilinux.org/docs/platform/feature-support/m2/

The TPM could be used to generate a LUKS decryption key from a password or PIN.

That would tie that password to the hardware, but with LUKS you can have multiple ones, so a long password that directly unlocks the key should be possible in addition

Just learned that you can pipe tar into any compression tool, if that is not natively supported.

It has less integrity checks but huge performance benefits for sure

Thanks, I have to try that!

I am missing something to isolate my Browser(s) without using Flatpak (as that breaks everything)

https://codeberg.org/crabjail

Here is a sandboxing tool using that feature

TLDW on his hardware recommendations?

• chill interview, recommended to watch
• hardware recommendations see below

How is CRDroid? What changes do they make? Is it based on LineageOS or some other project?

Sounds like tmpfs would be more reliable than streaming data directly?

Yes and switch often caused issues which is why I only use it for very small changes after I just did an update (where a nix-shell might also just work)

Btw very funny how Guix is basically a 1:1 nix clone but in Libre

nixos-rebuild switch

I mostly use nixos-rebuild boot which is waay more stable

NixOS has something similar but very unstable. So exciting to see new approaches!

Recompile C projects with Zig

BTRFS is a fucking must. Tried resizing a EXT4 partition for a while and failed, no idea why

I also use Bottles with ProtonPlus on NixOS. Bazzite has better integration for crazy stuff too, and a lot is running with full privileges unlike Flatpak.

Just look at their features, they really add a ton. The goal is to become less and less ofc, but Steam will stay proprietary so that will always be a huge change to regular (or atomic) Fedora.

https://bazzite.gg/

https://github.com/ublue-os/bazzite?tab=readme-ov-file#about--features

So yeah it is bloated and less secure too, but “just works”

Error codes for complex things are an invention of proprietary software companies trying to hide what they are doing from you

Well codes are very simplified and not able to depict the extent of all messages