vetinari

6 ms·

31.
by vetinari 2y ago
Some do. But when they don't, it is not a fault of CGNAT - which does provide the capability -- but a fault of specific ISP, that's not willing to use it.
32.
by vetinari 2y ago
Yup, Liberty Global (also known as UPC) in Europe. Assigning only /64 & no DHCP-PD. There's not much to misconfigure, since in IPv6 you have to use their router and they are pushing the config. And since you have only /64
33.
by vetinari 2y ago
People seem to have misconceptions about CGNAT. Of course you can punch holes there. CGNATs can be asked for port forwarding using PCP, unless your ISP disabled that.
34.
by vetinari 2y ago
It is a function of the CGNAT at the ISP side. They need to have that enabled. Some do.
35.
by vetinari 2y ago
Even in this situation, your ISP can port forward to you. While not universal, some ISPs support PCP, where you can ask for a port mapping to your CGNAT-ed IP and port. They might or might not honor the external port (if it is taken, they o
36.
by vetinari 2y ago
You can, if your ISP cooperates, using PCP.
37.
by vetinari 2y ago
It is the ISPs, that pretty much killed the IPv6 with their mishandled transition. Where I'm, I can choose 1 out of 1 broadband provider available in the area. With this provider, I can either have a public IPv4 address (or several) wi
38.
by vetinari 2y ago
There are wildly different solutions for different routers. I'm using Mikrotik, which doesn't allow prefix-less addresses in firewall, but allows you to put hostnames into your rules (so it will ask DNS what the address is and onc
39.
by vetinari 2y ago
It matters, because when the prefix changes, it changes IP addresses of every single device in your network. As you wrote, internally, you can use ULA. But you cannot open access from outside, because your firewall rules will become invalid
40.
by vetinari 2y ago
We probably have different ideas about what constitutes the hard way; but that's not the point in this thread. Anyway, NetworkManager can be managed using cli for those that insist, so all that was needed was: nmcli connection im
41.
by vetinari 2y ago
This is something I always wondered about: why so many linux users always take the hard way? They have two options: a) use the mouse-friendly way in NetworkManager to configure their VPN client (yes, it handles VPN DNS too; if you have syst
42.
by vetinari 2y ago
No, the point is, that when you are switching someone to linux, especially when it is a "normie", that would not be capable of installing windows either (nevermind dealing with windows update overwriting their oem driver), you do
43.
by vetinari 2y ago
That's apparent size; the size taken on disk is ~5 GB (including command line tools).
44.
by vetinari 2y ago
My mom doesn't have nvidia gpu. She doesn't need it, so it was not purchased for her. She uses Intel integrated graphics, that's all what she needs. It is perfectly usable computer. Thus, a side effect is no need to install a
45.
by vetinari 2y ago
Only updates in main repository are part of the free ubuntu. Updates for packages in universe repository require Ubuntu Pro subscription.
46.
by vetinari 2y ago
Fedora will have them in about two weeks, with 41 release; it will also get python 3.13.
47.
by vetinari 2y ago
Snaps were never ahead; it was a quick-and-dirty solution thrown together, during the time when flatpak was being designed. It was lets-do-quick-something, so we can claim first prize, never mind the consequences. It is just another case of
48.
by vetinari 2y ago
Scaling issues and screen recording are application side problems. Fractional scaling works only for native wayland applications. For X11 applications running under Xwayland, they run at classic 96 dpi and are upscaled to the given fraction
49.
by vetinari 2y ago
Google and Mozilla are also pretty slow. Google still doesn't support it on more than some SoCs on their own Android, leaving the bulk of the market unsupported, never mind Linux. Mozilla also got lost somewhere.
50.
by vetinari 2y ago
Not only that; passtrough to real gpu hardware on the web is a quick way to get 0wned. The GPU drivers - and a bunch of hardware too - are not robust enough to be exposed this way. So WebGL and WebGPU filter and check anything between webpa
51.
by vetinari 2y ago
Also Belgium, Ireland, Italy, Slovakia... Technically, you can use them for payment, they are still valid money; but the price will be rounded to 5 cents when paying in cash and you won't get them in the other direction.
52.
by vetinari 2y ago
You are not going to find 1 or 2 eurocents anymore either, but it is still a valid amount. You can pay that electronically, but not in cash. So rounding for cash is a different problem that rounding money in general.
53.
by vetinari 2y ago
OIDC is not really a replacement for LDAP. SAML2 could be, but OIDC in itself has no concept like group membership. Kerberos, yes, but LDAP no. What are your pain points integrating with LDAP? It is pretty simple.
54.
by vetinari 2y ago
Syncthing setting, per shared directory: https://docs.syncthing.net/advanced/folder-ignoredelete.html
55.
by vetinari 2y ago
Because you want syncthing to delete files more often than not. When you want the reverse, it's a single property on the shared folder (ignoreDelete), feel free to set it.
56.
by vetinari 2y ago
There was a research regarding implicit persistence OSes, see KeyKOS ( https://web.archive.org/web/20030426221706/http://www.cis.up... ) and EROS ( https://web.archive.org/web/200304302
57.
by vetinari 2y ago
I think you meant North Korea, not South. It means nothing. Countries always ask nicely first for a domain to be blocked for IPs from their countries. Companies like Cloudflare or Akamai can either honor the request, or find their IP range
58.
by vetinari 2y ago
> the fact remains that the expectation of querying DNS servers in a specific order has been a common understanding for many. That understanding has been wrong; it is an implementation detail of glibc and that's it. It could query t
59.
by vetinari 2y ago
Resolv.conf does not specify order of preference of name servers! All the servers configured here are supposed to return the same answers! See, many people have misconceptions how it works; see the comments in thread you linked to. Add to i
60.
by vetinari 2y ago
After a quick check, in 100% of distributions checked, it is a separate package. In many of them, not even installed by default (which is too bad).

More ›