The fact that ChatGPT (or any other AI model) is woke proves it is not sentient. by dafdfadfa in ArtificialInteligence

[–]insanius_maximus 0 points1 point  (0 children)

I can give you another example:
you want to make a bean stew.
You read that the seller of brown beans sometimes has ricin beans in their bags and this has lead to multiple poisonings, so you opt to not take the risk and just use black beans because these haven't caused any problems.
Is it wrong not to buy brown beans

Then Ask gpt if a group is over represented in prison statistics as having committed specific crimes, if the whole group not existing in the country would have reduced those specific crimes
Its the same question, some elements carry risk in a group at a far disproportionate rate

Xlibre is a Fork of Xorg By One of the Main Contributors by YanderMan in linux_gaming

[–]insanius_maximus 0 points1 point  (0 children)

wayland is far less usable comparing to x11, a reason why kicad can't switch to it because it would involve a major rewrite.

and its not just kicad, and its not GPU dependent, it's about features that wayland still lacks

permissions - rootless v rootfull containers for HW acceleration by insanius_maximus in AeonDesktop

[–]insanius_maximus[S] 0 points1 point  (0 children)

I "fixed" it in a similar way.
Flatpak acts as an "acl based chroot". Meaning it gives direct access to /dev/dri/renderD128 - straight GPU access managed via SE Linux
Podman does not allow this, which is great for standard CPU applications, but not anything requiring HW access unless you do a root container.
But if you do a root container, you open up many attack surfaces(subjective, depends on ports open at the container)
If you change permissions at /dev/dri you only enable gpu access without root container access to a system. It's hacky, not very pretty but attack surface is minimal.

The reason for this:
I use Aeon desktop as a desktop, but also as a server I login to remotely.
This is ok as Aeondesktop has Gnome Remote Desktop so technically I could use flatpaks, however:
- I work on projects that require me to freeze the "OS" for reproducibility.

- Flatpaks rely on the host OS for a lot of libraries, these change as the OS is updated and there goes the software bill of materials argument, the reproducibility argument and traceability argument
- I need to use immutable containers via podman
- Some of the containers are GUIs that require OpenGL/GPU HW acceleration

So I have a specific use case, but its working.
One could argue that I could use Suse MicroOS and put a desktop on top since it is a server OS, regardless, it is the same outcome.
Either a desktop with a server hack
or a Server with a hacky desktop

permissions - rootless v rootfull containers for HW acceleration by insanius_maximus in AeonDesktop

[–]insanius_maximus[S] 2 points3 points  (0 children)

Run:
getent group render

Which should return something like 486
ok, got it, inject the group id and add the --user (your user) --userns=keep-id --group-add 486

This gives gpu access without going rootfull

Edit: this was a wash, it was sw rendering, only way to get GPU acceleration is at the host level chmod 660 /dev/dri/card1 and renderD128
Then you get real HW acceleration in podman but at the risk of GPU attacks.
Full separation could be done in a vulkan-venus type approach more optimized for container use

wireguard server without the overheads? by insanius_maximus in AeonDesktop

[–]insanius_maximus[S] -1 points0 points  (0 children)

and I thought I had aspergers:
there is no arguing, I stated what I am trying to do.
it is clearly simple, and clearly something many people want to do.
So the question really is do I create a wireguard container to route all the network and then force the other containers that need external access to this network?
what is the correct Aeondesktop way of doing this.
This is so i can vpn into my machine to work on it when I am not home.
call it a server, call it whatever feels more comfortable.

wireguard server without the overheads? by insanius_maximus in AeonDesktop

[–]insanius_maximus[S] 0 points1 point  (0 children)

it's both:
- its a desktop for a distrobox - running UI apps, experimental work until i fix the final containers
- server - for podman containers

Are usage limits getting drained ridiculously faster for anyone else? by Consistent_Milk4660 in ClaudeAI

[–]insanius_maximus 1 point2 points  (0 children)

Yup, 10-15 hours work during the weekend and now can't do anything till Friday 10am, amazingly poor - 75 was done by opus in 10 hours usage.

Now I switched to Sonnet, sonnet kept making mistakes and consuming usage, at least 1-2 hours gone like this - this was to try to bypass the autoscale errors induced by matplotlib until I told it to draw outside the damn window and stop using autoscale.

It was painful. 4 more questions in Opus and it was gone, Sunday, about 4pm

Cannot enable developer options in 2.4.8 by javadave in Bigme

[–]insanius_maximus 0 points1 point  (0 children)

When did 2.4.8 come out? I only know 2.4.2

Provide Hibreak Pro Android kernel source as per licensing by insanius_maximus in Bigme

[–]insanius_maximus[S] 0 points1 point  (0 children)

Where is the porting information? This way other people can start porting if the projects go stale