openSUSE

sandalbucket , in How to block applications from accessing the Internet

Use network namespaces :)

A brand new network namespace doesn’t have any network interfaces. When you start a process in a namespace, all its child processes will start there too. It’s like a little network jail, and the functionality is baked into the kernel / is kernel enforced.

I use this to keep certain processes on a vpn, with no need for interface-binding support from the process, or a vpn-killswitch.

Another fun fact, this is the functionality that enables containerization, like docker/podman

netwren , in Uhhmm this isn't supposed to happen?

Yay Obsidian user. I’m seeing it every nowadays. Glad to see useful software get big.

LunchEnjoyer OP ,

Yeah, although not fully open source, i trust it more or less. Nothing can compare with it as far as what I’ve tried.

netwren ,

Yeah I wish the Desktop app was fully open and they got funding through a commercial Multi-User hosted option.

sibannac ,

I haven’t personally tried it, but I have seen LogSeq put as an open source alternative to Obsidian.

Plopp ,

Yes, but they’re good for different things. LogSeq is great for bullet points, Obsidian for long form text.

sugar_in_your_tea , in openSUSE Tumbleweed Monthly Update - April

Not sure why they included random Python packages in the KDE Frameworks section.

Good work to everyone patching the various exploits, April was a spicy month. Oh, and I'm loving KDE 6, so awesome work getting the ready too (I think that was last month though).

Archaeopteryx OP ,
@Archaeopteryx@discuss.tchncs.de avatar

Yeah, don't know why the Pytnon stuff is in the Frameworks section. I just copy & pasted news.opensuse.org.

dogsnest , (edited ) in How to block applications from accessing the Internet
@dogsnest@lemmy.world avatar

First Solution Works

Also:

Firejail

eta: Firejail is available in most distros' repos.

The last reply in THIS thread includes a simple bash script to launch restricted apps.

Archaeopteryx ,
@Archaeopteryx@kbin.run avatar

Firejail is great. I can recommend it.

SFaulken , in First experiences with OpenSUSE (mixed, but I'll stay on it)
@SFaulken@kbin.social avatar

Yes, Printer setup on openSUSE is still a clusterfuck, for reasons. You're best off in openSUSE KDE to just point your webbrowser at http://localhost:631 and log directly into CUPS and setup your printers that way.

If you want all your web video and whatnot to work, you need to install the codecs from Packman, in their entirety, or use a flatpak'd web browser. openSUSE won't ship patent encumbered codecs from the official repositories.

Unless you really know what you're doing, with Leap, or Tumbleweed, stick with the OSS and non-OSS repos provided. They are the ones that have been through the openQA process, and are officially "supported". If you enable a bunch of home: devel: or other repositories, just assume that they're unstable, and use at your own risk. If you're looking at a repository on OBS, and don't see openSUSE_Tumbleweed as one of the build targets, then forcing the install with a Leap or SLE package, may, or may not break things.

Regarding zypper ref and autorefresh, I can't recall exactly, but there is the chance that just running zypper dup and hoping that it refreshes everything on it's own, with non-standard repositories may fail, which can lead to some weird edgecases.

Just in general, you're going to want to run zypper ref && zypper dup (not the other way round) As far as YaST being targetted more at Leap than Tumbleweed, you're exactly right. And there's a reason that we don't ship it with newer flavours of the distribution.

KISSmyOS OP ,

Thank you very much for the input. I did not expect to have my questions/gripes answered by one of the devs!

Amaterasu , in openSUSE Tumbleweed Monthly Update - May 2024

This is awesome work. Tons of necessary updates.

jokro OP , in openSUSE Tumbleweed – Review of the week 2024/13 – Dominique a.k.a. DimStar (Dim*)

Already wondered what’s causing a 5GB Update, but this explains it:

For snapshot 0328, Ring0 has been completely bootstrapped (as the attack vectors for xz were not fully known, we went the safest route) and for 0329 all of Tumbleweed rebuilt against that new base; Ezpect that snapshot to appear ‘large’ (even though many packages will not be different).

RelativeArea0 , in How to block applications from accessing the Internet

Heres my lazy and probably stupid way (im a nub btw)

  1. Only install flatpak apps.
  2. Install flatseal and manage every app using that.

Cons: might be a problem to manage if you got like 1000+ flatpak apps installed

sugar_in_your_tea , (edited ) in Leap 15.6 Unveils Choices for Users

Woo! Good work to everyone involved!

I'm excited to update, and will be playing with MicroOS in the meantime.

Edit: Just upgraded my NAS and VPS a few days ago and everything went smoothly. Good release everyone!

Archaeopteryx OP ,
@Archaeopteryx@kbin.run avatar

Yeah. Will do the update on my server playground today :)

jokro , in Aeon Desktop Brings New Features in RC2 Release

I'm thinking of switching to Aeon from Tumbleweed, but i always wonder how you would work with cli tools, like LaTeX or various compilers. Is distrobox the way to go? Does it work seamless?

sugar_in_your_tea OP ,

Same. I think you just use transactional-update instead of zypper when you're ready to install something permanently. I don't know what the package selection looks like though.

But anything that's going to need frequent updates should probably be installed outside of transactional-update. For compilers, I generally use some kind of compiler version manager (e.g. rustup for Rust), which would be outside of the immutable base.

MajinBlayze , in KDE Plasma 6

Soon™️

SFaulken , in KDE Wayland Screen Energy Saving Problem
@SFaulken@kbin.social avatar

The change shown in the upstream bug has been made in the openSUSE Tumbleweed Packages, months ago. Are you using Leap, or Tumbleweed?

edit:
I actually read the whole post. Since you're on Tumbleweed, this is indeed a bug, please file one at bugzilla.opensuse.org

pfaca OP ,
@pfaca@lemm.ee avatar

Tumbleweed.

sugar_in_your_tea , in openSUSE Community Readies for Release Party

I'm excited for this one. It seems to be the last 15.X release until whatever openSUSE ALP does. I'm probably going to switch my servers to MicroOS, but I'm happy that I get another year or so with 15.6.

Congrats on the hard work everyone! I'm out of town for the release, but I might upgrade my VPN server remotely to join in a little.

Amaterasu , in Aeon Desktop Brings New Features in RC2 Release

A lot of bold claims related to be better for gaming even compared to Tumbleweed. Does it really have a lead on it? Why Gnome instead of KDE?

sugar_in_your_tea OP ,

There's a KDE version as well called Kalpa.

The main benefit is that the base system is immutable, which should make it much more reliable. So to get new software, instead of doing a zypper install ..., you'd leave the base system alone and only install packaged apps (e.g. flatpaks). That way you don't get conflicts between package versions and upgrades can be predictable.

I don't have direct experience with it, so I don't know how well that works in practice. But I definitely like the idea of using it for my NAS, which doesn't need a lot of updates. It currently runs Leap, but MicroOS should be a relatively straight-forward switch.

HumanPerson , in Plasma update breaks updates

I installed lxqt and did supper DUP from xterm on there. Worked for me.

milicent_bystandr OP ,

I wanted to try a different DE to get things working, but with network manager down I couldn’t install anything else! Tumbleweed already had IceWM, but without any networkmanager control there either.

Course that was before I discovered I didn’t need any internet to finish the job and fix it. I assumed the update completed but broke something, and hoped against hope there’d be a fix issued quickly that I could further update to.


P.S. I assume you mean zypper dup, but perhaps you’re using the new Irish Culinary/Political Linux, and supper DUP is the right command.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • [email protected]
  • All magazines