it only send the first 5 characters of the sha1 hash, thats pretty much useless for finding the password

thats what I meant. I was referring to setting PasswordAuthentication to no in the sshd_config.

just use ssh with password auth disabled, you can copy files over it with any sftp client or forward applications or an entire desktop session with waypipe. Way easier to set up and you’re not giving some silicon valley company full access to your home network nor are you affected by their services outages.

The web api for fido2/passkeys exposes attestation information.

Warning: Attestation provides a way for a relying party to determine the provenance of an authenticator. Relying parties should not attempt to maintain allowlists of authenticators.

from https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API

obligatorischer Hinweis zu cgnat https://www.rtr.at/TKP/was_wir_tun/telekommunikation/konsumentenservice/faq/FAQ_oeffentliche_IP-adresse.de.html

You could use a different homeserver like tuwunel (a conduit fork), which is wayy easier to setup than the official one.

Interesting, the Cloudflare CAPTCHA works for me, but I’m on the Fairphone 5. I haven’t tried supertuxcart but minecraft (java) works pretty well. Youtube works for me too, but that might be because of missing hardware acceleration drivers on your phone.

I wouldn’t call PostmarketOS that niche. It’s a phone distro, but also runs on SBCs and allows installing the non mobile version of DEs

I’ll give your packing tape technique a try. I really hope my ender 3 survives this.

How sensitive is pp to air drafts in your experience? Do I need an enclosure, some articles said I’ll need one, others said it’s optional?

only takes some samba :3

Does it show up as an interface in ip a? If it doesn’t it usually means, that you don’t have drivers for it / the drivers aren’t in mainline, but sometimes it’s the usb role switching of the phone being stuck in peripheral mode (a reboot with the adapter plugged in usually fixes it).

Depending on what you want to do with the phone and how permanent the connection is, an alternative method would be to connect it to the router with a usb cable. Enable the usb debug connection on in pmbootstrap when building the image (it might be possible to do this on the phone too) and set up routing on the router and add an ip address and a default route to the debug interface on the phone, it should behave as if it were a normal network card (but with a dhcp server running on it).

I’m sorry I didn’t read that you posted on this before before finishing this, I’m way too tired qwq

yip :3

These prices are terrible, even for Europe.

You can basically do it like luks does, but encrypting the files separately with gocryptfs, but like with all file encryption, you’re leaking directory structure.

Writing this from PostmarketOS on the fp5, it does run, but getting mobile data to work is an adventure (at least with my isp). I haven’t tried the WIP kernel to get the speaker working, the mic doesn’t work at all currently, so only calling with a bluetooth headset. Battery life is a bit less than android. I’ll probably dual boot with Ubuntu Touch or Lineage for the next while.

If your ok with the thickness of the fp5, then get it over the fp6. Linux and custom rom support is much better, also usb 3.

Zebra works with cups, the ppd files are included with cups

The performance drop from virtualizing nics shouldn’t be nearly as big. How are you passing the vlans to the VM? are you passing all over one virtio nic or one virtio nic for each.

The setup I ran for multiple years was basicly a bridge interface on the host for each vlan and a seperate virtio nic to the opnsense VM for each, I got almost 10 gbit/s like that with 8gigs of ram for opnsense and 4 or 8 cores (I cant remember) with hyperthreading of a 2nd gen epyc. I didn’t do any optimisations for virtio.

If you already have/can run a local server, then maybe storing the luks passphrase there and running a script on it which sshs into the remote server end enters the stored passphrase on command. Maybe a simple http server triggers it, which you could auth using forward auth of your reverse proxy, so you wouldnt need to implement auth in your script.

Of cause the passphrase is stored in plain text, but that will be the case in any case not using a tpm.

You could do notifications with a simple webhook of your favourite chat app, or by running a ntfy server (and app) and also sending the notification with a curl from a initrd script.

Nooo~

I’m currently running gnomes rdp server as a terminal server in a test VM. The rdp performance is so much better than x11 or wayland (with waypipe) forwarding for anything 3d.

Also you get gnomes login screen so you can do active directory/ldap login.

Changing servers is as simple as changing the server ip on the client.

Or if you want to move whole classes/users without user interaction, you can create a dns subdomain for that class/user which points to the correct server for that class/user, which you can change, of cause this only works if each class/user is only using one terminal server at a time.