• 11 Posts
  • 382 Comments
Joined 1 year ago
cake
Cake day: June 10th, 2023

help-circle

  • Sounds like you don’t know about the current security philosophy, which is “zero trust”. You don’t trust anything, not even managed hosts. We operate under the assumption that we are already comprised and that there are already bad actors with access to the network, and therefore the risk is managed accordingly, using modern security controls such as conditional access, RBAC, PIM/JEA, PAWs, AIP etc. Not to mention the use of SIEM and XDR solutions to detect and contain evolving threats. We even have a 24x7 security team who manually monitor all our environments.

    Also, our BYOD laptops connect via the Internet to cloud-based services, so it’s not like they’re connecting to some traditional LAN/VPN/domain etc.

    Our zero trust security model isn’t something we whipped up out of thin air btw, it was established in consultation with Microsoft and another security agency which specialises in this stuff. Many major organisations around the world now follow a zero trust model, so it’s been battle tested. We are a MSP who provide IT services to several organisations - so there are many regulations we need to adhere to, and compulsory external audits are done every year to maintain our certification status. Never had any major issues in any of our audits.

    Also citrix is a worse experience than any underpowered work laptop.

    Not really. Have you even used modern versions of Citrix Workspace recently? It works just fine. If you had a poor experience then it’s likely that whoever provisioned your VMs underspecced them, or your VM host was underspecced or misconfigured, or you were probably accessing some ancient version of Citrix.

    Also, it’s not like I’m in Citrix all the time, we only use it when accessing certain traditional apps or isolated environments. Most of our stuff, at least the stuff I mainly work with, is cloud-based.


  • Not OP, but it’s because I get to use Linux, a platform that I’m much more productive on. Also, with BYOD I can use a laptop that’s actually decent, instead of being forced to use a clunky, underspec’d work-provided laptop. In my case, I use a ThinkPad Z13 Gen1 (Ryzen 69xx, 32GB RAM) that’s also pretty decent for casual gaming and has excellent battery life and excellent Linux support.

    Luckily we have a pretty good BYOD policy at my current workplace, and my employer even compensates us for not using a work laptop.

    also you give your employer the oportunity of always being available on top of whatever insight they gather from your device using their software.

    I’m not using their software though (as in traditional apps), they’re all either web based (such as M365 apps) or via remote desktop (Citrix, for legacy apps). All the web-based apps are filtered with uBlock Origin to get rid of the tracking stuff. The other apps I use for work are all open-source, such as VSCodium, Git, Ansible, Ruby, libvirt etc, so I don’t have to worry about them.

    All my work stuff runs under a separate user account, with several work-related customisations in place - including a different, boring wallpaper. Once it’s home time, I log off, log back into my normal account and bam, it’s suddenly turned into a gaming machine, with nothing to do with work.

    The best part is, I’m the one fully in control over my machine and don’t need to go thru bs bureaucracy to get simple things installed or customised. For instance, back when I was new to the job and wanted to get Dark Reader (harmless browser extension) installed on my work machine, I got rejected with some bs excuse. Switched to BYOD and now I can use all the extensions I want.

    Finally, the next time I replace/upgrade my machine, both my personal and work experiences gets a boost. It’s a win-win situation.

    So yeah, BYOD is awesome and definitely something I’d get excited for.



  • I’ve only started using yadm recently so I may not be able to elaborate in detail, but for me the main draw for using yadm (as opposed to Ansible, which I use at work) is the simplicity. It’s basically just a bash script that uses git, so there’s no dependencies besides git and tools installed on most Unix systems. Ansible felt like overkill for what I needed, ie just something to manage and sync my dotfiles.

    Also, maybe it’s personal bias, but I really hate installing/using Python-based programs - they often tend to go wild with their dependencies and eventually break. I recall trying to install Ansible on a Raspberry Pi at some point (via pip) and it failed because one of the dependencies couldn’t be compiled for whatever reason. I gave up after trying to fix it for a while, and dropped the idea. I’ve had similar experiences with other large Python projects, there’s always some drama. Why is why I prefer compiled binaries or simple shell scripts like yadm.

    I’ve no issues using Ansible at work though. We use it on RHEL so it’s quite stable and doesn’t have the dependency issues you’d get on a bleeding-edge, ever-changing, end-user system. Plus it really shines at the Infrastructure as Code stuff so we use it to automate everything from networking gear to VMs. But I feel it’s overkill for something as simple as syncing a bunch of text files.


  • I am also thinking about making my own image based on silverblue. there is a video made by bigpod a youtuber about how to make your own custom ublue image

    Before you create your own uBlue image, I highly recommend checking out some of the existing images here: https://universal-blue.discourse.group/t/list-of-community-created-custom-images/340 or here.

    Personally, as a gamer, I use Bazzite, but recently I’ve rebased to a fork of it with my own customisations, and it’s been amazing.

    Distrobox > Toolbox btw. Both use podman behind the scenes but Distrobox is a bit more easier to use/fleshed out for desktop usage (eg makes it easy to export/integrate container apps with your the host).

    I’d also recommend checking out Nix for installing any packages not on Flatpak or your Distrobox distro, as Nix has its own advantages since it’s you’re running real application binaries directly on your host OS, instead of an exported script (as in the case of Distrobox), so you get better/direct access to system resources and won’t face some of the quirks/bugs you may get from running a containerised app.


  • That’s only true you succumb to the hardcore Nix fanatics and follow their recommended “declarative” way. However, Nix, as a package manager, is perfectly usable - and accessible - with the imperative way, without having to subscribe to their religion and learn their language and terminology.

    In the imperative path, Nix is as easy to use as any other package manager, yet it still retains many of the unique Nix features such as versioned packaged, instant rollback, non-root user-based installs etc.

    It’s a shame because Nix is actually really cool and very easy to use if used this way - and especially useful on immutable distros, locked-down systems or distros which have a limited number of packages - but unfortunately, most people are missing out because the fanatics keep preaching the declarative way as if it’s the only option out there.






  • As long as it doesn’t break I would take this over any alternative minipc

    May I ask why though? One of the biggest advantages of using a MacBook is the performance-battery efficiency. If you’re going to get a Mac mini and loading Linux, you lose that advantage.

    Unless you’re looking specifically for an ARM64 machine for whatever reason, I think an AMD mini PC, say something like the Minisforum EliteMini UM780 XTX would be technically a better option - you get dual NVMe, dual 2.5G network ports, USB 4.0, Oculink for even more b/w than Thunderbolt, and far more I/O options in general. Not to mention, excellent Linux support.





  • This isn’t exactly true. My guess is your app profiles are either bloated, and/or your measuring your RAM usage incorrectly/unfairly.

    On my M1 MBA for instance, a fresh profile of LibreWolf (+ child processes) uses 514 MB. Compare this with a closed-source browser like Opera (fresh profile) which takes up a massive 1183 MB. Vivaldi uses a but lesser RAM compared to LW, but it’s still a comparable amount (486 MB), whereas the new and fancy Arc browser uses 587.3 MB.

    Now, LibreOffice on the other hand does take up more RAM than MS Office by default - 475.4 MB - but it works a bit differently to MSO, because LO uses a single binary for all office applications, unlike MSO where each office application is it’s own app. But if I were to open a blank Word, Excel and PowerPoint documents, and a blank LO Writer, Calc, Impress documents, they use approximately the same amount of RAM in total (~750 MB).



  • not really seeing the benefit to me if they just record the data.

    I can’t speak for ListenBrainz, but Last.fm has been great for music discovery/recommendations. Also, unlike Spotify which only tracks your music till October, there’s no such limitations with Last.fm. You can also get a multitude of stats, which helps review your music tastes and discover new music. I also like sharing my stats with others on social media, and making connections with people having similar music tastes as me.



  • Parent comment is wrong. The default UX used in Ubuntu may actually be confusing for newbies, as it’s quite different compared to Windows. Just check some screenshots or videos and you can see for yourself. I’d instead recommend going for a distro which uses a more familiar UX (ie the Desktop Environment).

    Perhaps a distro which uses KDE, XFCE, Cinnamon, MATE or LXQt by default (these are “desktop environments” (DE) - which is a collection of the desktop shell components (eg start menu, taskbar, dock etc) plus default applications that go with it eg the file manager, document viewer etc). A desktop environment like the ones I mentioned above, in their default settings, should be familiar to most Windows users. Now whilst you can install any DE on any distro, it can be a daunting task for newbies, plus, the settings might not be optimal for you. So it’s better to go with a distro that comes with such easy-to-use DEs by default. Examples of such distros include Linux Mint and Zorin. These, by default, should look quite familiar to you, and should be even more easier to use than Ubuntu.

    Both Mint and Zorin are based on Ubuntu, so most of the documentation for Ubuntu should be relevant to Mint and Zorin as well. But if you’re not sure, just include quotes for your distro when you’re doing a web search, eg how do I do this in Linux "Mint" will ensure you’ll only get results with “Mint” in the page.