IT Solution for Security and Compliance & Supporting Podverse

We did Proxmox dirty last week, so we try to explain our thinking. But first, a few things have gone down that you should know about.

Sponsored By:

• Kolide: Kolide is a device trust solution for companies with Okta, and they ensure that if a device isn’t trusted and secure, it can’t log into your cloud apps.
• Linode Cloud Hosting: A special offer for all Linux Unplugged Podcast listeners and new Linode customers, visit linode.com/unplugged, and receive $100 towards your new account.
• Tailscale: Tailscale is a Zero config VPN. It installs on any device in minutes, manages firewall rules for you, and works from anywhere. Get 20 devices for free for a personal account.

Support LINUX Unplugged

Links:

• 🎉 Alby — Boost into the show, first grab Alby, top it off, and then head over to the Podcast Index.
• ⚡️ LINUX Unplugged on the Podcastindex.org — You can boost from the web. Once Alby is topped off, visit our page on the Podcast Index.
• Unplugged Tuxies - 2023 — It's time to vote on the 2023 Unplugged Tuxies!
• ⚠️ Tuxies 2023: Did we miss something? Let us know!
• Fedora 39 Delayed To At Least 7 November — While Fedora 39 was aiming for an ideal "early final" release on 18 October, that didn't happen, it was delayed, and then delayed again. Now the earliest Fedora 39 will possibly shift is 7 November.
• Bug: F39 RC1.2 images have sometimes “RC” in their name
• Bug: Failed media check immediately disappears on bare metal, shows a black screen instead
• F39 Final Go/No-Go meeting
• Linux Mint Starts working on Wayland Support — The work started on Wayland. As mentioned earlier this year, this was identified as one of the major challenges our project had to tackle in the mid to long term.
• Cinnamon Wayland Trello
• Linux Mint Starts Working On Wayland For Cinnamon, Likely Not Fully Ready Until 2026
• Six Great Features With The Upcoming Linux 6.6 Kernel — While there were many last minute fixes this week, the changes don't appear to be too scary or invasive. In any event the Linux 6.6 kernel is bringing some exciting features.
• Linux 6.6 Features Include The EEVDF Scheduler, Shadow Stack, Intel IVSC, AMD DBC & More
• Btrfs For Linux 6.6 Brings Fixes, Partially Recovers From Scrub Performance Regression — David Sterba of SUSE sent out the Btrfs updates on Monday for the Linux 6.6 kernel merge window. There are no explicit new features this cycle but a variety of bug fixes, including work to address the Btrfs scrub performance following a rework back in Linux 6.4. The scrub performance isn't entirely restored but at least it's inching ahead in the right direction with Linux 6.6.
• EXT4 Lands A Nice Performance Improvement For Appending To Delalloc Files — I conducted tests in my 32-core environment by launching 32 concurrent threads to append write to the same file. Each write operation had a length of 1024 bytes and was repeated 100000 times. Without using this patch, the test was completed in 7705 ms. However, with this patch, the test was completed in 5066 ms, resulting in a performance improvement of 34%.
• XFS File-System Maintainer Stepping Down — My final act as maintainer is to write down every thing that I've been doing as maintainer for the past six years. There are too many demands placed on the maintainer, and the only way to fix this is to delegate the responsibilities. I also wrote down my impressions of the unwritten rules about how to contribute to XFS.
• XFS Begins Landing Online Repair, New Release Manager Takes Over — We now have in-memory pageable memory for staging btrees, a bunch of pending fixes, and we've started the process of refactoring the scrub support code to support more of repair.
• SELinux In Linux 6.6 Removes References To Its Origins At The US NSA — We've come a long way from the original NSA submission and I would consider SELinux a true community project at this point so removing the NSA branding just makes sense.
• Linux 6.6 To Bring Another Rust Toolchain Upgrade — Some of the other Rust changes for this imminent merge window include supporting the rust-analyzer for out-of-tree kernel modules, the Rust availability detection script has been improved, a new "paste!" proc macro, new pinned-init APIs, and a variety of other additions to continue to make Rust programming possibilities for the Linux kernel more robust.
• [SOLVED] - LXC Nvidia Passthrough | Proxmox Support Forum
• Contribute to Podverse
• Soltros' Nix Config
• SilverBullet — SilverBullet is an extensible open-source, personal knowledge management system. Indeed, that’s fancy talk for “a note-taking app with links.” However, SilverBullet goes a bit beyond just that.
• Nixpkgs supply chain security project — The focus of this project is on reducing our reliance on foreign binaries to compile Nixpkgs from scratch, ensuring we are are indeed running the code we compiled by leveraging existing security components in NixOS, and putting in place mechanisms that allow us to deliver the most up-to-date, secure software whenever it is available in a way that can be sustained given our maintainer capacities.
• Pick: kmon — Linux Kernel Manager and Activity Monitor 🐧💻
• kmon in nixpkgs
• LinuxFest Northwest Youtube
• LinuxFest Northwest 2023 Minifest: What’s New in Nextcloud?
• LinuxFest Northwest 2023 Minifest Videos
• docker-wyze-bridge — WebRTC/RTSP/RTMP/LL-HLS bridge for Wyze cams in a docker container.
• wzminihacks — Run whatever firmware you want on your camera and have root access to the device.
• Bitcoin Beach — The project Bitcoin Beach is creating a sustainable Bitcoin Economic ecosystem on the coast of El Salvador, where the majority of people do not have access to bank accounts and the local businesses could never qualify for merchant accounts needed to accept credit cards.