West Asia - Communist - international politics - anti-imperialism - software development - Math, science, chemistry, history, sociology, and a lot more.

  • 32 Posts
  • 235 Comments
Joined 2Y ago
cake
Cake day: Dec 27, 2021

help-circle
rss

Arch works well for gaming. However, depending on what you’re doing, you should keep this in mind:

  • on any distro, updates may break things or change the behavior of apps. The difference in arch is that youll update no less than weekly on average, maybe biweekly at worst. This would matter more if you have a complex setup. If you’re just using steam, I wouldn’t worry
  • arch only uses the latest versions of software. If you ever install something from outside the arch repos, you have to make sure it is compatible with recent versions. Sometimes it may not be.

From a quick look into XMPP’s clients for android, they seem nice and some have modern features too.

Is there any technical limitation that would prevent xmpp client from having a WhatsApp-like UI?? WhatsApp started out with XMPP and probably still uses a variant of it. If anything, I’d imagine its harder with matrix given the complexity of the protocol.


Makes sense, but to me newness alone is not a benefit. In fact, it is a bit of a disadvantage. XMPP has more clients for example, and they are more mature.


[Question] Why is Matrix mentioned more often than XMPP in self hosted forums?
I'm looking into hosting one of these for the first time. From my limited research, XMPP seems to win in every way, which makes me think I must be missing something. Matrix is almost always mentioned as the de-facto standard, but I rarely saw arguments why it is better than XMPP? Xmpp seems way easier to host, requiring less resources, has many more options for clients, and is simpler and thus easier to manage and reason about when something goes wrong. So what's the deal?
fedilink

I just unpinned the post. I figured there may be others bothered by this, and plus its been enough weeks at this point. Thanks for voicing this to me :)


Outside of academia, would you say it still provides significant upside over markdown?


I’m sorry I don’t know of any way to do that :( does it appear even when you’re browsing your main feed??


Is it practical outside of academia? I heard the learning curve is kinda big


Markdown is awesome, I agree! I did not realize you could extend markdown with anything other than html. The html extension is quite nice to do anything that markdown doesn’t support natively, but I wish there was an easier way to extend markdown. Maybe the ones you listed are what I need.




Which communication protocol or open standard in software do you wish was more common or used more?
Whether you're really passionate about RPC, MQTT, Matrix or wayland, tell us more about the protocols or open standards you have strong opinions on!
fedilink

Yes you’re right. Did not realize that’s what you meant 😅


Wouldn’t you be able to do the same with NFS?


I do not have a lot of knowledge on this, but I suspect that nvidia does not support the GTX1070 that well on Linux.

AND supports Linux better. As for nvidia, newer cards have a bit better support but I bet there’s still some disparity.


What do you mean by other roots? Isn’t root only one?


To summarize: the major difference is that Arch Linux gives you the latest versions of all programs and packages. You can update anytime, and you’ll get the latest versions every time for all programs

Debian follows a stable release model. Suppose you install debian 12 (bookworm). The software versions there are locked, and they’re usually not the latest versions. For example, the Linux kernel there is version 6.1, whereas the latest is like 6,9 or something. Neovim is version 0.7, whereas the latest is 0.9. Those versions will remain this way, unless you update to, say, debian 13 whenever it comes out. But if you do your regular system updates, it will only do security updates (which do not change the behavior of a program).

You might wonder, why is the debian approach good? Stability. Software updates = changes. Changes could mean your setup that was previously working, suddenly isn’t, because now the program changed behavior. Debian tries to avoid that by locking all versions, and making sure they are fully compatible. It also ensures that by doing this, you don’t miss out on security updates.


wine is not a distribution. It is a program that allows running windows applications on Linux, and is available on most distributions.


Are you able to demonstrate with supporting evidence?


Why is that? It shows proof of the exact thing I said. If you don’t like that it’s on Reddit, I can copy paste it here.

If you want more examples, I’m happy to provide them. Here is another example:

https://security-tracker.debian.org/tracker/source-package/linux


Debian is not bad. It is just not suitable for newcomers using it for desktop. I think my arguments hold this stance.


I unfortunately don’t recall them by name, but there are distributions that are specific to Macbook and run better.


Running something at start-up can be done multiple ways:

  • look into /etc/rc.d/rc.local
  • systemd (or whatever init system you use)
  • cron job

Unpopular opinion, but Gentoo is perfect for ARM. Availability of pre built binaries for ARM can sometimes be an issue. Gentoo gives you the option to compile from source, so that if a package is available for x86, it will still most likely work with ARM


Here’s an example:

https://www.reddit.com/r/debian/comments/pgv3wc/debian_chromium_package_has_many_security_issues/

Being able to run a distribution on multiple machines does not mean it is free of vulnerabilities. You’d only know if you’re checking CVEs for each package you use.


Please feel free to make me a mod too. I am not crazy active, but I think my modest contributions will help.

And I can make this kind of post on a biweekly or monthly basis :) I think weekly might be too often since the post frequency here isn’t crazy high



Not sure what that is. Plesse explain more.


Lots of eyes is not enough. As I mentioned earlier, there are many popular programs found on most machines, and some actually user facing (unlike xz) where vulnerabilities were caught months, years, and sometimes decades later. xz is an exception, not a rule.


I disagree. Stable, yes. But stable as in unchanging (including bug-for-bug compatibility), which imo is not what most users want. It is what server admins want though. Most newbie desktop users don’t realize this about debian based systems, and is one of the sources of trouble they experience.

Debian tries to be secure by back porting security fixes, but they just cannot feasibly do this for all software, and last I checked, there were unaddressed vulnerabilities in debian’s version of software that they had not yet backported (and they had been known for a while). I’m happy to look up the source for you if you’re interested.


Unlike other commenters, I agree with you. Debian based systems are less suitable for desktop use, and imo is one of the reasons newcomers have frequent issues.

When installing common applications, newcomers tend to follow the windows ways of downloading an installer or a standalone executable from the Internet. They often do not stick with the package manager. This can cause breakage, as debian might expect you to have certain version of programs that are different from what the installer from the Internet expects. A rolling release distro is more likely to have versions that Internet installers expect.

To answer your question, I believe debian based distros are popular for desktop because they were already popular for server use before Linux desktop were significant.


This is not a good argument imo. It was a miracle that xz vulnerability was found so fast, and should not be assumed as standard. The developer had been contributing to the codebase for 2 years, and their code already landed in debian stable iirc. There’s still no certainty that that code had no vulnerabilities. Some vulnerabilities in the past were caught decades after their introduction.


The terminal world has Ctrl+C and Ctrl+(many other characters) already reserved for other things before they ever became standard for copy paste. For for this reason, Ctrl+Shift+(C for copy, V for paste) are used.


Why would one be discouraged by the fact that people have options and opinions on them? That’s the part I’m not buying. I don’t disagree that people do in fact disagree and argue. I don’t know if I’d call it fighting. People being unreasonably aggressive about it are rare.

I for one am glad that people argue. It helps me explore different options without going through the effort of trying every single one myself.


Doesn’t feel like that to me. I’ll need to see evidence that that is the main reason. It could be but I just don’t see it.


Xorg is a display server for Linux ecosystem. Every ecosystem has a display server. It is what makes it possible for you to have graphical applications with movable windows that can talk to each other, or have a mouse cursor that can click on things.

Wayland is a replacement for Xorg because Xorg is old and its developers said an alternative is needed. Wayland has differences that I won’t discuss here, but I’ll be happy to do so if you ask.

Hyprland is a wayland compositor. A compositor is basically an implementation of wayland (there are many) and gives you a windowing system that you can run graphical applications through. It is usually a lot more minimal than having a full graphical desktop like KDE or Gnome.

Hyprland belongs to a class of comositors called “tiling”, which forces windows to be in a tiling formation. In other words, windows do not overlap or stack on top of each other. Hyprland stands out in having a lot of eye candy and visual effects.

I use CLI for moving files, etc. After you use it for a while, you find out it can be more efficient, faster, and more pleasant to work with.


I have a feeling this is a joke. Either way I’m not following sorry 😭


A symlink works more closely to the first way you described it. The software opening a symlink has to actually follow it. It’s possible for a software to not follow the symlink (either intentionally or not).

So your sync software has to actually be able to follow symlinks. I’m not familiar with how gdrive and similar solutions work, but I know this is possible with something like rsync


Noob Question Thread: Ask Any Questions About Linux!
I thought I'll make this thread for all of you out there who have questions but are afraid to ask them. This is your chance! I'll try my best to answer any questions here, but I hope others in the community will contribute too!
fedilink

I didn’t look much into void, but when I did, gentoo’s repository is much larger and there are many packages that I’d call obscure that happen to be in the main repos.

The situations I’ve had to reach to guru are rare. I bet that gentoo has more obscure stuff in its main repo, though I don’t have the numbers to prove it.


GURU is source only

Is void different? Does it have a user repository that provides binaries directly?

My familiarity is with AUR, which does not provide the binaries directly. I suppose you can write a PKGBUILD that only installs a binary, but you could do the same with ebuild.

On binary support, I imagine you’re right. Binary support in gentoo is new. I imagine it will only get better.


You already said it, but even if you want mostly binaries, gentoo is becoming a distribution that can do that. So I don’t think this is something that sets them apart.

Plus, gentoo handles compilations so well, it is almost as simple as binary package managers.


The author would likely really enjoy gentoo. Imo it has all those benefits and a little more, plus its more popular.


Those who custom configure their kernel: what did you gain?
Curious to know the coolest things you achieved by configuring your kernel. I know kernel config can be boring, but I'm hoping someone will have an impressive answer. For me I have a very lightweight kernel that runs wayland on nvidia without any issues to date.
fedilink

Linux users with uncommon or unusual setups: tell us about it
I'll start with mine. yes part of this was to brag about my somewhat but not too unusual setup. But I also wanna learn from your setups! Anyways: I primarily use Gentoo Linux. I have two headless servers: a Raspberry Pi 4B and a Oracle cloud VM (free tier). Both running OpenRC, and both were running mainline kernel with custom config (I recently switched the Pi to PiFoundation kernel due to some issues). The raspberry pi boots from SSD and has no sd card inserted. Both servers were running musl libc instead of glibc for a while. This gave me a couple of random issues, but eventually I got tired and switched back to glibc. I have a desktop running gentoo and a laptop running arch, but hoping to switch the laptop to gentoo soon. Both are daily driving wayland (the desktop had nvidia card and used for gaming). The desktop is running a kernel with a minimal config that compiles in 2-3 minutes. What's your unusual setup like?
fedilink

Your journey with Lemmy: When and why did you join? When did you leave and come back? Are you finally settled?
My journey with Lemmy started in 2022 out of interest in the fediverse and paranoia around how much control social media companies have, and how little choice common people are left with over the Internet. Lemmy was much smaller back then. I really wanted it go get bigger, and tried to contribute to it. But it was small enough to be unsatisfying, so I would go back and forth between lemmy and Reddit. After the Reddit fiasco, I shifted more and more towards lemmy and less towards Reddit. I finally abandoned Reddit when third party apps broke. I only go there for specific questions in communities that aren't active on lemmy. What about you?
fedilink

Good price laptops with good build quality and lightweight? [US]
Can anyone recommend cheap laptops that have good build quality and see lightweight? I aim to use it for programming, but I connect to my desktop for most hefty work so it doesn't need to have solid performance. 8 GB RAM, 256 GB storage are enough for me. a lower grade CPU would still be good; a i3 that's 6 cores is enough. What's really important to me is build quality, especially the keyboard. I also don't want it to be big. 13" would be enough, but not too picky here. Any recommendations? And are there any communities that are better to ask this in? Budget: I am hoping to pay $400 or less, but willing to pay $1000 or even more if it's justified or the value is worthwhile OS: Linux. I can install it myself.
fedilink

How do you use your tiling window manager?
Tiling window manager users: how exactly do you use yours? Do you have advanced keybindings for bringing up frequently used programs? Are there less common layouts you use frequently? Do you use any advanced or fancy features?
fedilink

How to secure (podman or docker) containers for public-facing hosting?
## Context I want to host public-facing applications on a server in my home, without compromising security. I realize containers might be one way to do this, and want to explore that route further. ## Requirements I want to run applications within containers such that they - Must not be able to interfere with applications running on host - Must not be able to interfere with other containers or applications inside them - Must have no access or influence on other devices in the local network, or otherwise compromise the security of the network, but still accessible by devices via ssh. > Note: all of this within reason. I understand that sometimes there may be occasional vulnerabilities, like in kernel for example, that would eventually get fixed. Risks like this within reason I am willing to accept. ## What I found so far - **Running containers in rootless mode:** in other words, running the container daemon with an unprivileged host user - **Running applications in container under unprivileged users:** the container user under which the container is ran should be unprivileged - **Networking:** The container's networking must be restricted. I am still not sure how to do this and shall explore it more, but would appreciate any resources. ## Alternative solution I have seen bubblewrap presented as an alternative, but it seems like it is not intended to be used directly in this manner, and information about using it for this is scarce.
fedilink

Which kernel configurations for USB SD card reader (Genesys Logic) ?
EDIT: I enabled CONFIG_MSDOS_PARTITION and that caused it to work. It had nothing to do with the device itself but the partition type on the sd card. Thank you do much rattking for the help! Original post: Hi all, I am using a custom configured linux kernel (Gentoo), with very few things enabled. It has done me very well so far and taught me a bunch, but there's one small issue I have been having lately that is annoying. My SD-card reader (a USB device) is not working, but it works perfectly fine on my arch linux laptop without any kernel configurations. Is it possible to tell which drivers or kernel configurations I need by looking at the laptop that is working? ## More context about the issue On the machine where it is not working, after plugging the device in, I see this in `lsblk` output: ``` NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINTS sda 8:0 1 59.5G 0 disk nvme0n1 259:0 0 400G 0 disk ├─nvme0n1p1 259:1 0 1G 0 part /boot └─nvme0n1p2 259:2 0 400G 0 part / ``` The device does show `sda` but no `sda/sda1`. This is opposite to the laptop, where I do see a `sda1` below the sda device, which I can mount using `mount /dev/sda1 /mnt/point` ## What I tried I tried enabling the following kernel configurations: MMC MMC_BLOCK MMC_SDHCI MMC_SDHCI_PCI MMC_RICOH_MMC MMC_SDHCI_ACPI Still, this did not change the result. I tried looking into the logs, but could not find anything interesting. I am using the `sysklogd` system logger instead of systemd's journalctl ## The reader I bought I bought this a long time ago from amazon: https://algopix.com/products/B08N4N7Q7J-zhoubin-usb-30-sd-card-reader-for-sdxc-sdhc-sd-mmc-rsmmc-micro-sdxc-micro-sd Yes I know I cheaped out. But it worked for me until I tried it on this one computer, so I wish to make it work. ## Final Question How can I make this work?
fedilink

SBC’s with better mainline Linux support than Raspberry Pi?
Rasbperry Pi is a popular choice as a SoC / SBC Linux board. But you have to use their custom linux kernel. Are there Linux boards with decent mainline Linux kernel support?
fedilink

How can I make a smart TV streaming device (Chromecast, Kodi, etc) use speakers connected to my Linux computer?
Hello all, I have speakers of decent quality connected to my Linux pc which I use for gaming. I want to be able to use the same speakers when I watch TV. I currently have a Chromecast with Jellyfin client running. Jellyfin is actually running on the Linux pc I mentioned earlier. What would be the best way to play the audio from the tv content I'm watching from those speakers? I was considering if it's possible if pulseaudio could be used in a client server model, and somehow have something like Kodi use it? I am willing to replace my Chromecast with a raspberry pi or a similar device if it solves this issue.
fedilink

Does this exist: flatpak-like sand-boxing with gentoo-like source-based package management?
I assume it doesn't, but thought I'd ask. I really like the principles behind both gentoo and flatpak, but right now I can only do the gentoo way or the flatpak way (and I've opted for gentoo's for now). What I'd love to have from flatpak: - container like sandboxing and isolation - customizable sandboxing and permissions What I'd love to have from gentoo: - powerful build system building packages from source - global declarative management of compilation options - easy patches - easy to add packages that aren't in repos - support for many architectures or setups
fedilink

How can I run Xorg (with wine or Lutris) with filesystem isolation?
Hi all, I use a wayland Gentoo system, but I want to run Lutris for gaming. I would like to do this with at least some degree of filesystem isolation, as Lutris seems to install dependencies on its own and it pollutes the system in ways I cannot track. What is the best way to do this? is it possible to do in a chroot? or mount namespaces? will it give me a lot of trouble? It seems that merely installing things in a chroot and running it is not enough.
fedilink

What is the most impressive music video you’ve ever seen?
Most music videos, especially modern ones, are pretty boring.
fedilink

Projects that are experimental or daringly innovating the terminal and command line world?
What projects are out there seeking to innovate in the terminal and command line space, and improve or revolutionize the terminal environment? - NuShell is one such example, a shell that uses structured data in its pipelines. Many other experimental shells out there innovating in different spaces. - An even more daring example is DomTerm. It's a terminal emulator with more rich rendering. Supports rich text, images, etc while maintaining xterm compatibility. Please do not shy from answering projects that are very experimental, early stage, break a lot of backwards compatibility or radically change the current way of doing things.
fedilink

Scriptable configuration (with programming language) vs data / text configuration: what are the benefits?
Most applications provide you configuration files that are data / text based. Whether it is toml, JSON, yaml or some other format, you are usually defining values for pre-determined keys and that's all. This makes sense for many applications, but involved applications have explored configurations that make use of scripting. For example, vim uses VimScript, neovim uses Lua, but vscode uses json (as far as I remember), and Helix (vim inspired editor) argues editor configurations must be data, not scripting, and uses toml. many tiling window managers use various programming languages (Qtile uses python, xmonad uses Haskell, Awesome uses Lua) while others stick to data configuration (i3). Do you think that scriptable configuration is over-engineered and brings weaknesses, or is it warranted and grants the user power in these big applications? What are the benefits of scriptable configurations?
fedilink

(Neo)Vim alternatives: Kakoune is great! I am surprised that Helix is more popular
So apparently there are two editors inspired by vim, but built from the ground up (as opposed to neovim, a vim fork that seeks to improve on top of vim). I've heard of Helix several times prior, but it never quite attracted me. Seemed like vim, but different key bindings and much worse plugin system. It also has different visual and normal modes than vim, but it didn't quite click with me. I do like it's multi-cursor ability though. Then it turns out that Helix was also inspired by not just vim, but also kakoune. Kakoune also has different keybindings, and different modes, but its different modes make sense to me. It fuses visual and normal mode into one. Your normal mode is for both navigation and selection. Kakoune promotes the idea that you should visually see the text you're operating on before running the command. You know how in vim, "dd" deletes a line, "dw" deletes a word, and "d$" deletes to the end of the line? In vim, you don't see what you're deleting before its gone (which is fine and works for many). In kakoune, the selection happens first before the action. So you select the word or the line, and then you delete. But what I found to be Kakoune's killer feature was its shell integration. Kakoune seemlessly integrates into the unix shell, allowing you to offload many tasks to it. For example, instead of it having a built-in sort command, you use the unix sort command to sort your lines. I'm surprised kakoune isn't more popular. Yes, it is still in a much earlier phase than vim, and the ecosystem is far less mature, but I am surprised to see Helix gaining more traction. I'm still very new to kakoune and exploring it. But I like it a lot so far.
fedilink

Resources for learning Linux Networking (iptables, namespaces, firewall, NAT, interfaces…)? preferably text resources (books, articles, etc)
Hi all, I am looking for recommendations on resources to learn Linux networking. I am primarily hoping for text resources such as books, guides, blog series, articles, etc. I have trouble focusing on videos. I am mainly targeting linux networking topics, such as how the linux networking stack works, and things like iptables, network namespaces, network interfaces, sockets, NAT, firewalls, internal IP-addressing, subnetting, routing, proxying, internal DNS, and anything that I may not know exists but is related to these concepts and linux networking in general. Any recommendations?
fedilink

Alpine Linux (in lightweightness), but glibc?
Yes, I know so much of Alpine's lightweightness comes from not using glibc. But still, the other options I see are far from being slimmed down. Debian, Ubuntu server, CentOS... They all could use some cuts. What's the most slimmed down non-desktop distro that still has a glibc base? I honestly don't care if it has its own package manager (build tool handles this for me). Just wanna use it in containers for running server apps.
fedilink

EFISTUB: If I have both CMDLINE configured in kernel, AND via efibootmgr, which one gets executed / takes precedence?
suppose I enable `CONFIG_CMDLINE_BOOL=y` and `CONFIG_CMDLINE="..."`, but I also add a cmdline using efibootmgr via `-u` option, which one takes precedence and gets executed? Does an initramfs make this more complicated? does it also have its own cmdline?
fedilink

Opinion: Distributions that only change non-system pre-installed software or desktop environment should instead be packages or scripts
The majority of Linux distributions out there seem to be over-engineering their method of distribution. They are not giving us a new distribution of Linux. They are giving us an existing distribution of Linux, but with a different distribution of non-system software (like a different desktop environment or configuration of it) In many cases, turning an installation of the base distribution used to the one they're shipping is a matter of installing certain packages and setting some configurations. Why should the user be required to reinstall their whole OS for this? It would be way more practical if those distributions are available as packages, preferably managed by the package manager itself. This is much easier for both the user and the developer. Some developers may find it less satisfying to do this, and I don't mean to force my opinion on anyone, but only suggesting that there's an easier way to do this. Distributions should be changing things that aren't easily doable without a system reinstall.
fedilink

How to make it such that, when running command, it automatically does SOME_ENV_VAR=value command? (something cleaner than aliases?)
hello friends, I am looking for a way to do what I described in the title. When running command `command`, I dont want to have to type `SOME_ENV_VAR=value command` every time, especially if there are multiple. I am sure youre immediately thinking aliases. My issue with aliases is that if I do this for several programs, my .bashrc will get large and messy quickly. I would prefer a way to separate those by program or application, rather than put them all in one file. Is there a clean way to do this?
fedilink

Has anyone had success cross compiling from x86_64 glibc to aarch64 musl?
I have been having some trouble doing this and was wondering if it is a common theme or there is room to make it better. Sometimes packages wont compile at all and thats fine. But recently I cross compiled some system packages and it bricked my system and was no longer able to ssh into it. I am not asking for help in this specific issue, but want to ask if this is a common occurrence for this kind of setup? It does not seem to be a popular setup
fedilink

Which bittorrent client has the best command-line interface?
want to run a bittorrent client on a headless server. The server is a raspberry pi so it is limited a bit limited on resources. Whats your favorite bittorrent client with a good command-line interface?
fedilink

People don’t seem to realize how much power users have over their platform (Reddit)
It is so frustrating seeing how people received the protest. "it's not working" "Reddit doesn't care" "they can do whatever they want". Well yeah, if that's the attitude! How do people not see that the protest disrupted the entirity of Reddit? Just about every weekly active user felt it. How do they not understand the impact on revenue (especially ads), and how Reddit cannot feasibly sustain it, and were banking on the idea that it'll eventually die down? The fact of the matter is, if Reddit became worried that the protest will continue in strength indefinitely, they would be forced to roll back. The loss impact would greatly outweigh whatever measly profits they make from this API change that no one will buy. Yes, this was a lot more for Reddit than just profits. If Reddit had backed down, it would have impact much greater than just third party apps. It remind people once again that users hold the power when they're United. They can decide how to run their communities. But Reddit just could not afford this to happen, which is why they fought to convince you that the protest isn't working and you should back down. And unfortunately many of us did...
fedilink

I bet my roommate to stop pooping for 3 days. How can I manipulative them into pooping and make them lose the bet?
No I will not provide any details onto why I bet my roommate to do this. Please don't ask me because I will not answer.
fedilink

Most my search results that go to Reddit no longer work. Is there a way to view an archived version of those posts?
There's a lot of good information out there that would be lost otherwise. I don't want to give Reddit traffic anyways, so maybe it's good to only look at the archived versions going forward.
fedilink

Which Tiling Window Managers do you like, and why?
feel free to list other window managers you've used. I have been happy with bspwm, but considering trying something else. I love its simplicity and immense customizability. I like that it is shell scriptable, but it is not a deal breaker feature for me. I like how the binary split model makes any custom partition possible.
fedilink

State of Wayland gaming with Nvidia RTX? Is it good, or stick with Xorg?
Is wayland ready for gaming with nivida RTX series? I have RTX 3060 Ti. I wouldn't mind messing with it to make it work if I have to. Would want to use a window manager like sway or river.
fedilink

Is it a good idea to run windows in VM with gpu passthrough (nvidia RTX) for certain games, instead of dual booting?
I've been dual booting Linux and windows for about two years now, but in those two years, I have *never* booted into windows, except by mistake. This made me think about removing windows and just saving that wasted space for Linux. I only ever dual booted for the off chance the peer pressure to play anti cheat games was too great, but so far it hasn't. For the off chance where I want to play a game that doesn't run well on Linux, is it a good idea to do that via VM instead of dual boot, or is it too much hassle? Will there be performance hit or any issues with those games?
fedilink

I often read that (docker) containers are not good for security. What are secure methods of creating secure isolated environments to run questionable programs in?
I've read that standard containers are optimized for developer productivity and not security, which makes sense. But then what would be ideal to use for security? Suppose I want to isolate environments from each other for security purposes, to run questionable programs or reduce attack surface. What are some secure solutions? Something without the performance hit of VMs
fedilink