• 0 Posts
  • 7 Comments
Joined 2 years ago
cake
Cake day: June 8th, 2023

help-circle
rss
  • Hi to run into this problem. I have a Mac mini that I use as a bridge from my home network to my work laptop. Now, most workloads requiring horsepower, I will run in the cloud, but there are some workloads that I want to run locally. I can parsec into the Mac, but I can’t parsec into the Linux server I have. The state of media on Linux is not great, and there are understandable reasons as to why.


  • People really dislike it when you point this out, But the security model on Linux is lacking. Yes, we have things like apparmor and SELinux, but compare it to sandboxd on macOS. The windows sandbox isn’t perfect, but it’s really user-friendly, and it works in most cases. Linux doesn’t have a direct equivalent. We’ve made great strides with making immutable distros through things like flatpack, and snap, but something that they failed to do is implement a least privilege model that is as robust as sandboxd on macOS.



  • Even in the most stable distros I’ve had this issue. We had a RHEL 9 server acting as a graphana kiosk and it failed after an update. Something dbus related. I’d love to know why, as it’s been the only failure we ever had but nonetheless it shakes confidence. Windows 11 updates trashed three servers, one to the point we had a to fly an engineer out. My hope is that immutable distros fix this.