#linux

Creating distro build tooling for a small community https://lobste.rs/s/y5tke0 #linux https://chimera-linux.org/news/2026/10/the-case-for-cbuild.html

Calendar-validators/checkers for Linux? cross-posted from: lemmy.ca/post/71997210 Some events in my self-hosted calendars (CPanel) seems to have incorrect formatting, which gives problem to some calendar readers. Does anyone know of some calendar-validator or calendar-checker software for Linux? Cheers!

Hello. This is the account for Mise, a privacy focused browser I have been building, mostly for my own daily use. It has workspace isolation, a built in ad blocker, tab hibernation, split view, a PDF reader, dark mode, and a userscript engine among other things. Close to a 1.0 release now. Happy to answer questions, and always interested in which sites trip the fingerprint protections if anyone runs into that. https://rakosn1cek.github.io/Mise-browser/ #Introduction #FOSS #OpenSource #Privacy #Electron #Linux

Another Dozen Vulnerabilities Found In The X.Org Server & XWayland

Bonjour Mastodon ! 👋 Je suis Nawre], technicien informatique et administrateur système. Je travaille sous Linux au quotidien (openSUSE Tumbleweed + LibreOffice) et je tiens un blog tech : https://nawre-tech.log.bzh Je viens aussi de lancer KemmOS, une distribution bretonne basée sur openSUSE Tumbleweed 🦎 Je suis ici pour parler Linux, sécurité, logiciel libre et Bretagne. N'hésitez pas à dire bonjour ! #introduction #Linux #openSUSE #LogicielLibre #Bretagne

"Nothing to hide" doesn't mean "everything to share." 🔒 Take control of your digital life and reclaim your privacy with #OpenSource alternatives: 💻 OS: #Linux 📱 MobileOS: #GrapheneOS 💬 Social & Chat: #Mastodon , #Pixelfed , #Loops , #SimpleX , #Deltachat 📧 Core Workspace: @Tutanota@mastodon.social for E2E encrypted mail, calendar, and contacts (with an E2EE drive on the way!) #Privacy #DigitalSovereignty #FOSS #Fediverse

I can't get rootless xorg to work Nvidia, voidlinux, sddm. It doesn’t get past plymouth (I can still get to the console with ctrl alt functionthing ofc) I’ve tried setting the nvidia-drm.modeset=1 (i did xbps-reconfigure -fa after that) in console thing in /etc/default/grub. I’ve enabled elogind as a service. I obviously did /etc/sddm.conf.d/rootless-x11.conf [General] DisplayServer=x11-user sddm doesn’t work after that until i change x11-user for x11. I also did /etc/X11/Xwrapper.config needs_root_roghts = no allowed_users=anybody But that one doesn’t really seem to change much. I also removed the execs from some part of the xinit ig.

Need recommendations for a new laptop please I had bought an MSI laptop from Costco. Even though I was happy with the performance and with CachyOS I had to return it. Lucky for me that Costco has such a generous return window, 90 days. My main issues were that it lacked adequate cooling for the X7 358H, had no UEFI support from MSI on their website, and the build quality was atrocious. I was looking at the System76 Lemur Pro, but I can’t seem to find any reviews on the newer models. Build quality and performance is really important to me as my daily driver for the last several years has been a MBP14 with an M1 Pro. I’m not buying anything from Frame.Work as I’ve had two issues with them already which prompted me to cancel both orders, once for the desktop and once for the 13 Pro. Their customer service is lacking in my humble opinion.

Raspberry Pi Desktop now available for PC and Mac https://lobste.rs/s/6sogng #linux https://www.raspberrypi.com/news/raspberry-pi-desktop-now-available-for-pc-and-mac/

Is COSMIC DE mogging KDE Plasma? https://lobste.rs/s/7qjhic #design #linux https://thelibre.news/is-cosmic-de-mogging-kde-plasma/

Janet on x32: 32-bit Pointers, 64-bit Speed, 25% Less RAM https://lobste.rs/s/am1cuw #linux #performance https://alexalejandre.com/programming/lisp/janet-for-the-x32-abi/

Hibernation with encrypted root and swap using TPM and secure boot on Fedora 44 I’ve been trying to set up hibernation on my laptop while also maintaining an encrypted root partition and swap using secure boot and my laptop’s TPM. I’ve documented the steps I’ve followed below, but I still am unable to enable hibernation. I was under the impression that the only reason you can’t normally have both an encrypted harddrive and hibernation was because swap had to be encrypted as well, but if both the root partition and the swap are encrypted, I’m using UEFI secure boot, and they are automatically decrypted at boot using the TPM, shouldn’t that relieve those security concerns? After completing the below, entering systemctl hibernate errors saying hibernation is not set up for the system. Am I missing something or is it just not possible? I can confirm not needing to enter passwords for my swap or root FS due to the TPM unlock. Drop into root shell sudo su - Setup LUKS encryption with automatic unlock with TPM Install necessary components, regenerate initramfs and reboot dnf install -y clevis clevis-luks clevis-dracut clevis-udisks2 clevis-systemd dracut -fv --regenerate-all && systemctl reboot Identify swap and root partition devices, names, and luks UUIDs… lsblk -f cryptsetup luksUUID In my case, my home partition is on /dev/nvme0n1p4 and my swap is /dev/nvme0n1p3 # the encrypted home partition clevis luks bind -d /dev/nvme0n1p4 tpm2 '{"pcr_ids":"1,4,5,7"}' # the encrypted swap clevis luks bind -d /dev/nvme0n1p3 tpm2 '{"pcr_ids":"1,4,5,7"}' Set a timeout before the system asks for a password, to allow time for the TPM to load and enter the password for you systemctl edit systemd-ask-password-plymouth.service Add the below then ctrl+o ctrl+x to save and exit [Service] ExecStartPre=/bin/sleep 10 Create a dracut configuration file to install the systemd-ask-password-plymouth service: vi /etc/dracut.conf.d/systemd-ask-password-plymouth.conf Add the below, ensure there are spaces inside the quotation marks on either side of the filename install_items+=" /etc/systemd/system/systemd-ask-password-plymouth.service.d/override.conf " Regenerate initramfs and reboot dracut -fv ‐‐regenerate-all && systemctl reboot Edit crypttab file (/etc/crypttab)to specify decryption of swap file at boot, duplicate the already present line for your root FS crypttab entry and change the UUIDs to reflect the swap file, use cryptsetup luksUUID /dev/nvme0n1p3 and cryptsetup luksUUID /dev/nvme0n1p4 to get the luks UUIDs for your root and swap partitions. UUID= none x-initrd.attach UUID= none x-initrd.attach Regenerate initramfs and reboot: dracut -fv --regenerate-all && systemct reboot Edit fstab to include swap, append the following to /etc/fstab: UUID= none swap defaults,x-systemd.device-timeout=0 1 1 Rebind your home and swap partitions. You will have to do this every time you update the kernel. # encrypted home partition clevis luks regen -d /dev/nvme0n1... -s 1 # encrypted swap clevis luks regen -d /dev/nvme0n1... -s 1

IBM & Red Hat Find More Than 400 New Vulnerabilities In Popular Java Code IBM and Red Hat announced today they have identified and remediated more than 400 previously unknown vulnerabilities across popular Java libraries. Red Hat’s Lightwell open-source software supply chain initiative that relies on specialized AI agents was able to accelerate the discovery of 400+ vulnerabilities affecting popular Java code. They announced this feat today as part of their promoting Lightwell Clearinghouse to GA, which is an enterprise service for their customers to submit open-source software dependencies for priority review and remediation. From today’s announcement: "The milestone addresses a growing business risk. As autonomous AI agents become capable of combining several lower-risk software weaknesses into a more serious attack, companies need to do more than identify vulnerabilities. They need a practical way to develop, test and deploy fixes in the software that supports critical applications." Details are light on all the specific vulnerabilities uncovered. They appear to be ramping up fast in their Lightwell efforts as in the embargoed press release days ago was at 300+ vulnerabilities and then increased to 400+ vulnerabilities. Their AI laden press release announcing these 400+ vulnerabilities can be found on the IBM Newsroom.

Introducing Toolpak

Raspberry Pi OS Updated with Battery and Squeekboard Dock Widgets Today, the Raspberry Pi project released today an updated version of its Debian-based Raspberry Pi OS distribution for Raspberry Pi single-board computers with new features, improvements, and bug fixes. Based on the latest Debian 13 “Trixie” operating system series and powered by Linux kernel 6.18.50 LTS, the new Raspberry Pi OS release ships with battery and squeekboard widgets for the new dock, support for automounting encrypted drives, Control Centre debug code, and new, better-quality Raspberry Pi menu icons. The updated Raspberry Pi OS also adds tooltips to indicate the function of widgets in Control Centre’s Widget panel, a new color for inactive window titlebars to match window backgrounds, and a hook to update the list of shortcuts in Control Centre’s Shortcuts panel when the defaults are reloaded. On top of that, the Screens panel in Control Centre has been updated to apply system file changes immediately on confirmation rather than when closed, and setting the size of the taskbar and dock, and the location in Control Centre now automatically sets desktop top and bottom margins appropriately. Furthermore, the Main Menu will now only reload on cache update rather than before opening, the screen lock button was removed from shutdown options, the old source for standalone control panel applications was removed, and switching between taskbar and dock layouts no longer resets the system appearance. Numerous bugs were fixed in this new Raspberry Pi OS release to improve various functionality, such as the PCmanFM right-click option to open a terminal from the file manager, dropping files onto list views in the file manager, menu shortcut keys, panel pop-up windows, and local PCmanFM automount configuration overriding global settings. Also fixed are issues with system tray icons not displaying correctly on scaled screens or being hidden, an icon menu crash, swaybg desktop wallpaper files not loading, panel menus displaying off-screen, icon menu category view crash, a hotplug crash in the panel when no monitors were detected, and a crash when updating notifications. The new Raspberry Pi OS release also fixes possible segfaults on various Control Centre panel initialisation functions, LibreOffice icons in launchbar sticking after close, keyboard activation of top-level menu item not closing the menu, and application pop-up menu text in new window list containing literal markup. Last but not least, the updated Raspberry Pi OS release fixes a GTK4 colour representation manager reporting error, window count digits not shown correctly on new task list in Japanese locale, as well as an issue with opening of windows when mouse forward and back buttons were clicked in the file manager’s list view. You can download the Raspberry Pi OS 2026-10-06 release right now from the official website for all supported Raspberry Pi models, including Raspberry Pi 1A+, 1B+, 2B, 3B, 3B+, 3A+, 4B, 400, CM1, CM3, CM3+, CM4, CM4S, Zero, Zero W, and Zero 2 W. Existing Raspberry Pi OS users can update their installations by running the sudo apt update && sudo apt full-upgrade commands below in a terminal emulator or by using the built-in graphical package updater. If your system is up to date, you’re running the latest Raspberry Pi OS version.

Canonical Beefs Up Security for Ubuntu 26.10 with Slimmed-Down GRUB, Linux 7.3 Canonical is about to release its interim version of Ubuntu, the Stonking Stingray, a.k.a. Ubuntu 26.10, and they are doubling down on security with the upcoming Linux 7.3 kernel series, a slimmed-down GRUB bootloader, and more. Ubuntu 26.10 (codename Stonking Stingray) is scheduled for release next week, on October 15th, 2026, with the latest and greatest GNOME 51 “A Coruña” desktop environment, the unreleased Linux 7.3 kernel series (yes, Ubuntu 26.10 will ship with an RC (Release Candidate) kernel), OpenSSL 4.0, OpenSSH 10.5, and Rust-based core utilities. To beef up security, Canonical implemented a signed, slimmed-down GRUB bootloader with a reduced attack surface, TPM-backed encryption support on machines that don’t have a hardware root of trust, and dbus-broker as the default message bus with AppArmor mediation intact, using an event-driven architecture with better accounting, reliability, and scalability. On top of that, Ubuntu 26.10 will ship with ntpd-rs, a memory-safe time daemon that will be enabled by default in Ubuntu 27.04, certificate revocation with upki, authd support for MS MFA and identity-provider-based accounts, hardware-token VPN sign-in support in NetworkManager, and on-device speech recognition powered by AI. “Ubuntu 26.10 introduces Myna, a desktop speech-to-text feature. It’s designed to bring cutting-edge accessibility, without compromising security,” said Canonical in a blog post. “Myna performs speech recognition locally through an inference snap. Once the required models are installed, dictation works without an internet connection.” Linux kernel 7.3, which will be released later this month, will also bring numerous updates to the Landlock, AppArmor, SELinux, and Smack security modules for Ubuntu 26.10, along with TPM driver updates and BPF verifier fixes to prevent pointer leaks on speculative execution paths, NTFS3 security hardening, memory-safety fixes, and Rust support for PowerPC. Last but not least, Canonical doubles down on firmware updates via fwupd, which now asks for a recovery key only when the running system uses TPM-backed encryption and a firmware update could affect the measurements used to unlock the disk, instead of prompting unnecessarily on systems where the update doesn’t affect the TPM-backed unlock policy. As mentioned before, Canonical plans to release Ubuntu 26.10 (Stonking Stingray) on October 15th, but if you’re eager to try it right now on your personal computer, you can download the beta release. However, please keep in mind that it’s a pre-release version, not suitable for use in production environments.

We are making good progress on Desktop support for Pixelix. Today we were able to package the app as Flatpak. Now we are making the app responsive so it also looks good on larger screens. Once that is done we will publish Pixelix as Flatpak for Linux and as WebApp. #Pixelix #Pixelfed #Linux #Web #Flatpak

[14] Ace In The Hole: Unleash Thy Sexy Voice https://blurt.media/w/t7p6VzRHBVYiuqCGiVyMmF #podcast #retrogaming #indiedev #linux #fashion #photography #politics #blog #art #fediverse #monsterdon #ukraine #uk #usa #food #football #democracy #cat #tuneTuesday #music

Last rites for Gentoo's Chromium package https://lobste.rs/s/fpcicg #browsers #linux #practices https://lwn.net/SubscriberLink/1097760/2be4d9e3eeb59039/

Hi Mastodon 👋 We're VPSPioneer, a small hosting company serving customers across Europe: web hosting, reseller hosting and cloud VPS. Here we'll share practical, no-fluff guides on Linux, server admin, Plesk, DirectAdmin, WHMCS, DNS and email deliverability, and join conversations with the #SelfHosted and #SysAdmin crowd. Guides: https://vpspioneer.com/blog #introduction #Linux #WebHosting