Search

Items tagged with: Debian


The PAM Duress is a module designed to allow users to generate 'duress' passwords that when used in place of their normal password will execute arbitrary scripts.

This functionality could be used to allow someone pressed to give a password under coercion to provide a password that grants access but in the background runs scripts to clean up sensitive data, close connections to other networks to limit lateral movement, and/or to send off a notification or alert (potentially one with detailed information like location, visible wifi hot-spots, a picture from the camera, a link to a stream from the microphone, etc). You could even spawn a process to remove the pam_duress module so the threat actor won't be able to see if the duress module was available.

github.com/nuvious/pam-duress

#security #Linux #Arch #Debian


SelfHosting week2, phase 1.
Setup: Hostinger provider, KVM2 VPS plan. 2 CPU cores, 8 GB RAM, 100 GB storage, Debian 12, YunoHost 12.1.39 stable, WordPress 6.9 branch.
WordPress procedure, I assumed it had to be the easiest, where I am mostly skilled in; obviously, it wasn't.
First of all, because YunoHost installs a plugin called "Companion auto update" which gives an error just on admin page. F-off to it. In that case I deactivated it through terminal, but I found the error's origin thanks to an LLM which interpreted the log for me. If I were unexperienced with web sites advanced configurations, I couldn't have figured it out.
My current multilingual approach on production website, has been a very satisfying experience but I'm noticing it requires too much attention in long term; full-site editing (gutenberg), manual template switch for each English or Italian post, some custom code to manage search and taxonomies. But any deep maintenance could break everything.

So I decided to follow an advice from @2ndkauboy a German blogger who wrote about MultiLingualPress, plug-in connected to MultiSite WordPress platforms during Advent period in his "Plugin Advent Calendar".
Having a VPS now I assumed to be 100% free to perform Multisite and began to build it: YunoHost's WordPress installer asked me if I wanted MultiSite or not, I confirmed YES.
The first obstacle was it did not work as I desired: my idea was to get "domain.extension/" as main site while "domain.extension/english" as second language website but YunoHost refused to place WordPress into the main directory, namely subdomain.domain.extension/, with multisite setup on.
So I removed WordPress from @yunohost by command: "sudo yunohost app remove wordpress"
Re-installed through the same script, sudo yunohost app install wordpress, this time answering "NO" to multisite option, and it accepted to provide the / directory as location.
Enabled MultiSite manually by editing wp-config.php file and installing it, then added extra-lines in the wp-config as well, after the network creation, using subdirectories for multisite setup. YunoHost uses nginx, so I went to modify the subdomain's WordPress nginx configuration; in that case as well, LLM helped me.
But then came trouble: I was logged off WordPress admin. No way to recover the password, no way to access its dashboard.
So, I gave up.
Tried another day: remove, re-install, set MultiSite manually. This time I used another e-mail address and when I got stuck, I managed to reset its password. But after setting main and secondary web sites, the result was wp-admin on main site worked, while /english/wp-admin returned an error: "ERR_TOO_MANY_REDIRECTS".
No way to make it work at all!
So, I resigned. Removed, re-installed with multi-site on natively, by setting the path to subdomain.domain.ext/wp/
having /wp/ and /wp/english/ seemed to be the less evil.
In the end the too_many_redirects error was still there, and disappeared only when I added this string:
try_files $uri $uri/ /index.php?$args;
into the nginx WordPress-specific configuration, under the "location" setting.
Not bad, I assumed it was OK.
But installing MultilingualPress, the plugin suggested by the German blogger of before, wp-admin returned a critical error. Maybe a database, or something else.
Increased the php memory to 256M in wp-config.php and the multilingual press then resulted as active, in the network setup.
So I tried to connect the two blogs, setting related languages and trying to flag relations one another.
But nothing worked. The relations weren't flagged, and going to network / plugins, returned an error again.
So, in the end, I've resigned at the moment, to create two subdomains. English and Italian. Where I have two separate WordPress installations.
I'd like to try again the Multisite experience, though.
#accessibility #a11y #debian #multilingual #multisite #SelfHost #SelfHosting #WordPress #Yunohost


I'm quite impressed how #EndeavourOS, despite not being _glamorous_ or hyped up as some of the rest in the list - is doing quite well at ~2.12% of the #Linux #Steam users. Not **that** far off from something like #Bazzite (~5.89%) and is higher even than #Fedora, #Manjaro, and #PopOS. EndeavourOS was the boat I chose when I decided to leave #Windows few years back, and it's still going strong. Despite #ArchLinux having a rep to 'break', my PC and all of my family members' have yet to go through such a thing lol. Its rep of being not user-friendly to noobs is also not that true seeing how a solution to a problem, if any, is often one search away from the incredibly documented Arch Wiki - better than relying on hundreds of conflicting information scattered through distros' forums. I'm perfectly aware everyone's experience is unique to their own, esp with something as fragmented as Linux, but I'd be remiss not to mention that while my EndeavourOS experience has been flawless, I've had broken/borked systems with 2 #Debian/#Ubuntu based distros (not gonna name, names), Manjaro (Arch based, though some might not agree), and even Bazzite (Fedora based). These were with #Intel/#AMD systems too that's supposedly 'ideal', at least 2 of my EndeavourOS systems meanwhile have #NVIDIA GPUs (i.e. 'not ideal'). These were a couple of years ago tho before reaching my 'final distro', EndeavourOS tho so things may have improved for these distros too. All in all, my point is, despite not being the glamorous, popular option... THANK YOU to the EndeavourOS team for clearly putting in a ton of work to ensure our (supposedly) broken-prone systems to keep running stably.


I can say, however, that I've reunited with an "old friend" who is still in great shape. Before I get dozens of replies about it being insecure: in theory, it is, but it's not accessible from the outside. It's isolated within its own network and is only able to connect and fetch backups for 'extreme disaster recovery' (only at specific times, restricted by specific firewall rules). It served its purpose today, and tomorrow, it might be even more useful.

18:33:01 up 3188 days, 4:47, 1 user, load average: 5.09, 4.73, 4.74

Debian, Btrfs, and zero internal dust.
It's kept in a sterile, extremely protected room.

#IT #SysAdmin #Debian #Linux #Uptime #ServerUptime


🚨 NEW VIDEO: The Windows Exodus Has Begun.

2025 was the breaking point. Forced hardware retirement and intrusive AI have sparked a mass migration to GNU/Linux. In this video, I explore:

📈 The data behind the 3.20% Steam high.

🇪🇺 How the EU is saving millions by ditching Microsoft.

🛡️ Why 2026 is the year of Digital Sovereignty.

Stop fighting your OS. Start owning it.

🔴 Full Video: youtube.com/watch?v=dLzdTgCXyR…

#TerminalTilt #WindowsExodus #Windows10 #Windows11 #Microsoft #WindowsEOL #Recall #Copilot #DigitalSovereignty #Privacy #DigitalPrivacy #NoAI #HumanMade #DeGoogle #EthicalTech #Autonomy #DataSovereignty #AntiSpyware #Telemetry #SurveillanceCapitalism #RightToPrivacy #Encryption #SoftwareFreedom #ExitWindows #Migration #LinuxGaming #GamingOnLinux #SteamDeck #Valve #Proton #Bazzite #SteamOS #HandheldGaming #PCGaming #ROGAlly #LegionGo #GamingCommunity #SteamHardwareSurvey #EWaste #Sustainability #RightToRepair #PlannedObsolescence #CircularEconomy #GreenTech #SaveThePC #Hardware #Environment #EUtech #PublicMoneyPublicCode #OpenStandards #SchleswigHolstein #GermanyTech #GovernmentIT #DigitalRights #Linux #GNUlinux #Debian #Trixie #FOSS #FLOSS #OpenSource #LibreOffice #Thunderbird #Nextcloud #SelfHosted #HomeLab #CLI #CommandLine #Terminal #Bash #FishShell #Dotfiles #SysAdmin #QueerTech #TransInTech #DisabledInTech #Accessibility #Queer #LGBTQIA #LGBT #HumanContent #ContentCreator #SmallYouTuber #SmallStreamer #YouTube #IndieCreator #SupportIndependent #LinuxUser #Tech #TechNews #OperatingSystems



FLOSS #MaintainerLife public service advisory:
If you're filing a potential bug upstream in #GNOME, particularly on rapidly-improving apps like GNOME Calendar, please test the latest version, unmodified by third-parties. #Flatpak helps.

Don't come at me with a 4-years-old version cowboy-patched against our will by #Linux distros like Mint; I will send you downstream, like this: gitlab.gnome.org/GNOME/gnome-c…

#FreeSoftware #OpenSource #QA #bugreporting #LinuxMint #Debian #Ubuntu #LTS #GNOMECalendar



#Molly app has a socks5 option but only #Orbot "VPN" mode will work. What if #Arti from @torproject could bind with Molly on socks5 via #Termux?

would be nice to have #systemd like @postmarketOS

*Termux @termux
pkg update (possible to plug in keyboard and display to #android #mobile app)
then proot-distro login --isolated debian
su - user because Arti will complain eventhough phone is not really rooted, change etc/resolv.conf to cloudflare, add dependencies needed for #rust rustup and cargo on #debian #trixie, chmod g-w ~/.config

* #Oniux --> E0560

* Arti --> Linux Scaffolding Log_Connections

* apkeep #EFF eff.org/pages/apkeep --> shared storage path, package manager chokepoint won't install

* network monitoring like Nyx with #tokio-console

In a way, like passwordless root in QubesOS. Some good customizations can be made in Dom0, though, unlike GrapheneOS.
#UbuntuTouch #Brax #Mobian #deGoogle #Tor #Linux #AOSP #GuardianProject #Calyx #Phone #Development



Ok so hey #SelfHosting

I want a #SelfHosted web-type Office Suite ala Google Sheets/Docs and I don't want it to be part of some gigantic resource-chewing albatross like #NextCloud

I would like to do all my Word Processing and Spreadsheeting and so forth through a web interface, which is served from my #Debian server (docker is fine) and saves the documents as normal files in a defined directory.

Does such a thing exist? I do NOT need feature-rich, I do not need it to save MSOffice docs that I can send to a printing shop with all bugs intact, I just want to stop losing shit to hard drive wipes, which I'm sorry but nuking my hard drive is a lifestyle choice at this point and I don't care what you think about it.

I have had the thought that maybe #LibreOffice has some sort of plugin or something which could store files in an Object Storage type thingy that I could self-host instead, cause I've been planning to get some sort of bucket online since forever...


With modern kernels and mature desktop environments (GNOME/KDE), is X11 finally dead for your daily Linux workflow in 2026?

#linux #wayland #x11 #opensource #gnome #kde #fedora #debian #ubuntu #blender #linuxgaming #software #gaming #gamedev #gamingonlinux #games

  • Full Wayland (It just works flawlessly) (71%, 160 votes)
  • X11 Only (Due to NVIDIA/Gaming issues) (6%, 14 votes)
  • X11 Only (Due to Workflow/Legacy apps) (12%, 28 votes)
  • Still Switching (No clear preference) (8%, 19 votes)
  • What is X11? (I'm new) 👶 (1%, 3 votes)
224 voters. Poll end: 1 month ago


@jarrodu @lexinova There are tons of moving parts in the diagrams: chatmail.at/doc/relay/overview…

When I see a bunch of moving parts like that, I get cold feet, that it'll be as easy as people make out. Is there a Youtube/Peertube video on this? If it's as easy as you claim, then I'd like to see a from-scratch install on #Debian 12, using python's uv for the package manager of chatrelay (in a uv venv). Including sending initial testing messages proving it's working in production.


I, for one, am waiting for them to support #Debian 13, not 12 (for chatmail relay). #Postfix changed their config variables as of 13; I'm concerned about an ugly upgrade path from 12 to 13.



$ sudo apt upgrade
... reboot
$ uname -r
6.12.57+deb13-amd64
- okay
"no space left on /boot"
$ sudo apt remove linux-image-6.12.48+deb13-amd64
-> installing linux-image-6.12.48+deb13-amd64-unsigned 👀
??😶 ??
$ ls -l /vmlinuz
lrwxrwxrwx 1 root root 32 16 nov. 06:57 /vmlinuz -> boot/vmlinuz-6.12.48+deb13-amd64
$ dpkg -l linux-image* | grep ^ii
ii linux-image-6.12.48+deb13-amd64-unsigned 6.12.48-1 ...
ii linux-image-6.12.57+deb13-amd64 6.12.57-1 ... (signed)
ii linux-image-amd64 6.12.57-1 amd64 ...

needed to :
$ sudo apt remove linux-image-6.12.48+deb13-amd64-unsigned
🤔 ??
#debian #TakeCare


After Debian archive was updated to 13.2 (yes, it's the second point release already!), the Debian CD team did the hard work of preparing and testing our installation medias to make sure everything is working correctly. Their work is now complete and the images are available at debian.org/distrib/ #debian #trixie #11




Mastodon folks, stay tuned because our micronews are back after a brief outage! And BTW did we mention there will a trixie point release next weekend?! #debian #trixie #11


A recent update in Debian broke usage of the compose key in @dino and @gajim and other GTK software. I have no idea what's going on, but I can no longer type "ü" or some other characters. :(

I'm not even sure where I would report such a bug.

#Debian



So there's a decades-old mechanism (and actual standard) how programs lock serial ports on unix-like systems in /var/lock. it's used in practice even in 2025 and #systemd >= 258 simply breaks it with "we don't care". I am not a systemd opponent, but that kind of behaviour [without a prior community-wide discussion or providing patches for known-affected projects and a grace period] is just alienating users and developers github.com/systemd/systemd/iss… bugs.debian.org/cgi-bin/bugrep… #systemd #debian




Yesterday was #DebianDay , celebrating the release of #Debian #Trixie !

So far, I have updated: 9 physical machines (including 7 Raspberry Pis running #Debian, not Raspbian), 23 Docker containers running full Debian including cron, systemd, and the usual services (thanks to my salsa.debian.org/jgoerzen/dock… ), and one other VM, for a total of 33 installations upgraded.

Yet to be done: 3 servers in the cloud, 3 laptops, and a Raspberry Pi 400 that's my daughter's computer.

1/


Thank-you to all the members of the #Debian project. You do amazing work.




@debian

I have been using #trixie in testing mode for a couple of months. Its been very stable and I'm so impressed that we are moving the company across from the snap-infested Kubuntu

#linux #debian #ubuntu