AMD published a list with the mitigation on Sinkclose on all their processor ranges, and the ComboPI version that will have a patch:

Security bulletin 7014

Use of hardware enablement package kernel might help here? It is called linux-generic-hwe or something like that. It will install a much newer kernel with more support for newer hardware.

You can easily selfhost Seafile and make a ‘dropbox’ like system with as many users you like, and as large a storage you can handle / afford. Although there is an enterprise version, the community edition provides with many features to make it really a great service. It is mighty fast, and has native clients for many different platforms, in addition to using the Seafile website to acces, upload and download files.

I never hosted Nextcloud, but from what I read, it is a beast with way too many features to fit my use case. Seafile is doing one thing very well.

Ah, that is a good point. I am using 6.5.0 kernel atm, as part of the HWE (hardware enablement) package, which supports QuckSync / hardware encoding of my 12th gen intel processor. I did a quick search, but did not find HWE for Debian is that correct?

Yes, I am running unattended-upgrades, and basically my current server is running 24/7 just fine! It is indeed like set and forget already. More reason to move to Debian!

It seems to be the most logical move to go from Ubuntu to Debian indeed. As I understand it maintains the core Linux system as I have it now (systemd / apt / stable kernel) while truly community driven. I have to look into transitioning into the latest stable Debian release.

interesting! So I should be able to throw my docker-compose yamls directly at Podman and be good to go?

just curious; why would you like to use podman over docker? I have a lot of docker containers running, wondering if I should switch to podman.

hmm, not sure why baca would need so many requirements. I installed baca using pip as per (https://github.com/wustho/baca), on a hedless ubuntu based server. Maybe on Arch it would need to install / update python packages?

You could also try epy (https://github.com/wustho/epy) which is also a terminal based epub reader.

baca is a terminal based epub reader. Quite nice.

If you are just looking for a way to SSH into your machines from outside your network, you can setup a more recent VPN or Wireguard yourself. If you have a Raspberry Pi lying around, using PIVPN makes things super easy. You can have both OpenVPN as well as Wireguard running if you want, using the same script. If that is the only thing you like to do, then there is no need to reverse proxy your servers and expose them. Just having a VPN or Wireguard connection should be enough to access your servers when outside of your network. It is recommended to have a fixed IP btw, to find your VPN/Wireguard server easily.

Also, you can leave all your servers locally (and not exposing them) when you can reliably setup a VPN/Wireguard connection. That is the most secure I guess.

you can automate a lot of the basc profile stuff in your dotfiles with some automation such as https://github.com/anishathalye/dotbot to bootstrap a new install. it makes your new distro right at home, and if you combine this with github to store your dotfiles, you’ll also have a backup of your environment.

Does this affect ubuntu and raspberry os releases as well? Since these are based on debian?

Not much gaming time, but i started Against the Storm which I liked.

Looks like a pretty straightforward install! And a fun project to have a personal message space with friends. It includes the ability to launch gameoso you could maybe set it up as a personal lobby for gaming buddies.

I think you would also need an initial run process such as systemd or the sysV runlevels.

This also looks similar to Tailscale (https://tailscale.com/). I have not used this but saw it popping up in youtube recently.

Interesting to see all replies! I’m curious to find new sources as well. I usually go through a set of bookmarks to sites such as eurogamer, kotaku, pcgamesN, ign (sorry for that), as well as checking reddit and lemmy.

This I understand, from a user space perspective the Flatpaks seems like a good thing; isolated from the OS. For a server only environment it seems to be less of an issue, provided that the sys admin knows what he/she is doing.

So what is the general consensus on package management these days on Debian based distributions? I may be old school by relying only on APT (DEB) for my Linux machines, and never really got into Snap, Flatpak, and what not. Is APT still most used? Or is there a significant movement towards Snap or something else. What I hated when I looked at Snap the last time is that distributions come with different concurrent architectures on package management, which from a point of view of organizing you system just doesn’t make sense. A difference between package management (APT/Flat/Snap) on the one hand and service management (Docker, k8, …) on the other hand I understand.