Lmao this is amazing. The future is now…

The openSUSE matrix server had this happen last year, and the admins came up with a good solution of bots that seems to keep things very clean now. I’m sure they might be happy to help if you asked in their admins group

Yeah… I’m laughing at this guy saying the AUR is much better than installing from a random Github repo. Same level of trust haha.

Also, not everybody NEEDS to know how something works to use it. And, just getting someone onto Linux in the first place with a 90% working system seems better to me than them working hours and hours to build a minimal system in Arch … because it would take even more hours to replicate their workflow on Windows or Mac. I think this is a great example of “perfect is the enemy of good” when trying to get people to adopt something.

However, I definitely believe that if you want perfection, you go to Arch or a derivative and you do it yourself, no automation. But that should be a choice… I do plan on one day switching from Tumbleweed to Arch, but I am not ready for the time commitment. Plus, NVIDIA finally fixed their shit, so I want to enjoy playing games for a while now that the weird issues and visual artifacts caused by the old non-explicit-sync drivers are gone!

Relax and Recover for bare metal backup of the OS critical components and directories, and Deja Dup (or Gnome Backup) for user files

Best solution I’ve found that allows interacting with google drive files from any application and from the command line: https://github.com/astrada/google-drive-ocamlfuse

What are you using for the Unified Push setup? I tried using ntfy and could never get notifications to come through on GrapheneOS

Archive.org is essential. I donate regularly, they are a key part of the infrastructure of the internet now…

I use Lyx with a local Texlive install, and it works great (openSUSE tumbleweed)

Yea, and I’ve tried this before and had issues (Fedora 39). But seems to work just fine on Tumbleweed, which was a nice surprise!

Just to be sure, you should check whether SSHD is enabled: sudo systemctl status sshd.service If you never enabled it and it’s disabled+inactive, then no need to reinstall Tumbleweed per the current guidance. Also you can double check your version of xz to make sure it’s downgraded, the downgraded version for Tumbleweed should look like this:

sudo zypper search -vi xz
Loading repository data...
Reading installed packages...

S  | Name | Type    | Version               | Arch   | Repository
---+------+---------+-----------------------+--------+------------------
i+ | xz   | package | 5.6.1.revertto5.4-3.2 | x86_64 | update-tumbleweed
    name: xz

Fairly simple explanation by arstechnica: “The malicious versions [of xz], researchers said, intentionally interfere with authentication performed by SSH, a commonly used protocol for connecting remotely to systems. SSH provides robust encryption to ensure that only authorized parties connect to a remote system. The backdoor is designed to allow a malicious actor to break the authentication and, from there, gain unauthorized access to the entire system. The backdoor works by injecting code during a key phase of the login process.”

Also from the article, you should check if your distro is offering a downgrade from the affected 5.6.x packages. Right now the exploit is not fully understood. For example, openSUSE recommends a full reinstall of Tumbleweed if an SSH server was enabled, just to mitigate risk.

https://arstechnica.com/security/2024/03/backdoor-found-in-widely-used-linux-utility-breaks-encrypted-ssh-connections/

https://news.opensuse.org/2024/03/29/xz-backdoor/