I think the problem is they analyze it by how it appears to work rather than measuring raw numbers. Because honestly, I don't really understand why zram compresses better either.

Because the interactive diagram on that blogpost below "LRU inversion" is interesting, and it's a great example of what should happen, but it's not accurate to my experience. What actually happens, IME, is that 1, 2, 3, 4, 5, 6, , 8, 9, 10, 11, 12 stay in zram forever and never get swapped to disk. Even when I had 8 gb of ram (on the mac mini) I had that experience.

I have the same experience. I don't really understand why tbh. I have looked at some of the kernel code but I wasn't able to understand it.

My experience is that zram has vastly more aggressive compression and can compress way more data. Zram will happily sit there and compress 7 gb of data into 1.5 gb, whereas zswap never hits those numbers.

So I disagree with the common takes about swap being needed with zram. Because zram will compress everything that would otherwise be put into swap, into the same amount of space zswap will use to store a fourth of that data, whereas everything else would be put into swap. And because decompressing is faster than swapping, it leads to a smoother experience.

Well, fuck. This is a way to learn that Vagrant cloud is dying. Although incus images offer every type of Linux there for me to install easily, Vagrant also provided premade boxes for Windows or other BSD operating systems. I'm probably going to miss that unless someone comes up with an alternative.

For projects, Forgejo has a Vagrant package registry so projects using Forgejo might find it easy to migrate to that.

It's very easy, consuming USB tethering support is built into all Linux distros.

You just enable it (on the Android phone), plug it in, and then your computer will detect it as an ethernet connection.

https://wiki.archlinux.org/title/Android_tethering

Android is easy and requires no config on Debian's side. Iphone's require some support, although I think many distros preinstall the needed tools: https://wiki.archlinux.org/title/IPhone_tethering

USB tethering from Linux (or a Linux phone) should be possible as well, via NetworkManager: https://fedoramagazine.org/internet-connection-sharing-networkmanager/

To be clear here, OP is mentioning that certain apps they are using no longer receive updates. Updating these apps are not an option. I'm not telling people not to update.

But I also think that telling people not to use apps that are no longer receiving updates is unreasonable, especially if those apps don't touch the network and are confined within the flatpak sandbox.

Threat models. I'm not going to care about an attacker both exploiting a niche app via a malformed file and also finding a 0day in the flatpak sandbox (which will be receiving continual updates). If someone can whip both of those up, while also predicting that I will open this file, or somehow feeding it to me, they are well resourced enough that it would take way, way more effort than just updating to stop them.

Flatpak sandbox is more than enough to protect the average user against an app that is no longer receiving updates.

An offline app, running unprivileged in a flatpak sandbox is the last the you should be worrying about.

Offline apps are only concerning when they give the opportunity to pivot, such as SUID apps which would let someone escalate to root.

While code execution via say, a file that is parsed incorrectly is interesting, it would be mitigated by the flatpak sandbox.

The trick is to get wordpress from debian's repos itself. That way your wordpress is managed by debian and receives automatic security updates.

It has the "recommended" add on badge on the extension page.

Start here: https://overthewire.org/wargames/bandit/

ssh is probably fine for 99% of things. I use ssh exclusively mostly

The features I load cockpit up for is:

• easier viewing of systemd/journalctl logs. You can click on services and see logs, search them, and so on.
• Partitioning a disk. Nothing too crazy, but I can format a disk, wipe them, via the GUI
• Networking configuration. If you are using networkmanager, cockpit will test the changes, attempt to connect, and then revert the changes if the connection fails (in like 15-30 seconds). This is legitimately insanely useful, I can change the ip address or something, connect via cockpit again, and only have the change stick if it's actually good. (See also, netplan try from the netplan configuration framework.)

Cockpit also offers a GUI for managing virtual machines (via libvirt) or podman contaniers. So someone else might want that, although I don't really use that. (virtual machines can be managed remotely via virt-manager over ssh by connecting to qemu+ssh://user@remote-host/system, I manage podman via the terminal).