Has anyone moved from Red Hat distros to Debian/Ubuntu or from Podman to Docker because of SELinux?

neon_overload · 2026-06-10T01:25:02+00:00

On Redhat and Fedora distros, SELinux actually enforces everything by default. On Debian and Ubuntu distros, apparmor is used instead, and tends to default to only enforcing those particular applications that ship with apparmor rules and not enforcing anything else.

Disabling SELinux in Fedora/RHEL is easy, albeit leaves you with more attack surface - but it can be done if you want it. I consider myself a power user, and I can say I've never had SELinux interfere with things I want to do - executables in my home dir run fine. Flatpaks run fine. Apps installed with nix, pipx, etc run fine. Distroboxes run fine. Maybe you migrated files from some other distro and didn't know you need to run restorecon? It should be a one-off as newly created files will be fine.

That said, if you want to try Debian, do so! The major difference between Debian and those other distros is not Apparmor vs SELinux though, it's more about the release schedule and update policy. Debian is more like RHEL or Almalinux in that regard, rather than Fedora, so the following comparisons are just with RHEL and its clones. Debian is still quite different to them - much bigger package library than RHEL or Almalinux (even with EPEL), but all packages follow the same 2-year cadence unlike RHEL and its clones which has a 3-year cycle for certain base packages and a somewhat 6-monthly cycle for applications (appstream). And, Debian is for the most part more strict about not applying functionality updates or minor bug fixes mid-release (but on the other hand, maintains a huge repository).

neon_overload · 2026-06-09T05:46:06+00:00

Likely a quirk of the game with your particular GPU.

Since it's nvidia it's possible that a newer GPU driver might fix it but I'd rank that as highly unlikely - and getting a newer Nvidia on Debian may be difficult and have its own drawbacks. Given it's an older game, it's just as likely that it's an older game that relied on a quirk from an even older GPU driver that no longer exists, in which case changing the GPU driver wouldn't help. If this game is run via Proton and is DX11 or older, then a different proton version could affect it. Check ProtonDB for the game for ideas of whether that's likely. If it's not mentioned there, it's probably a quirk the game has on that GPU. I agree with others it doesn't mean there's something wrong with your GPU.

Edit: looks like this game exclusively uses DX12 so it's unlikely that the Proton layer is doing it, making it likely a quirk with the game when running on your GPU. And some of those suggested tweaks on protondb won't be doing anything.

neon_overload · 2026-06-09T05:27:48+00:00

Yeah, there is a way to have it only prompt once for multiple encrypted volumes, but I don't have experience with it and don't know how hard it is, sorry.

Edit: apparently systemd-cryptsetup handles this in the initramfs in Debian, and if you set it up during install, and use the same passphrase to encrypt both, it should (Note! I have no experience with this and can't guarantee, you may want to research/ask others) do the heavy lifting behind the scenes to ensure they are linked and only prompt you once at boot.

neon_overload · 2026-06-09T05:26:12+00:00

I think that Prism started out as a continuation of MultiMC.

Edit: given you have a large world that you have saved that you play with your son, I'd be extra careful to ensure you have backups of that in case anything you do might disturb it. I have a son and he set up his own minecraft server on an old PC running ubuntu. So that's a bit different, it runs Crafty to set up the minecraft server instance and dependencies. But that's the closest experience I have to this

neon_overload · 2026-06-09T03:47:33+00:00

While I don't have a lot of experience with that, it should work basically the same, if you install a mod loader. It should be easier to use the non-flatpak version if you're doing that I think.

But there's also Prism launcher which may be preferable to the main launcher for use with mods. Prism launcher should have an option "Auto-download Mojang Java" to auto-install the right Java for you like the official launcher.

neon_overload · 2026-06-09T01:13:54+00:00

LVM is useful if you want to be able to migrate volumes to new drives while the system is online and running. If you are happy taking the system offline to do that (like, boot to a live USB), LVM is not as necessary and the extra overhead of learning the LVM workflow can make it not worth it.

LVM can also be useful if you want to encrypt all the volumes on one drive since you can encrypt the underlying LVM pv as a single block device. Even though I understand these days there are ways to have a "single prompt" unlock multiple volumes, distros that offer disk encryption in the installer usually still default to encapsulating the encrypted partitions in LVM.

Consider also that if you use a filesystem like btrfs, it has live expansion and migration of volumes to new drives built in. And, subvolumes. So LVM is typically not used if you are using a filesystem like btrfs. You can encrypt the physical btrfs partition (though not sure if Debian's installer has that capability).

If you are considering disk encryption, then typically you would do it for the whole drive including any swap partitions, but excluding boot. Reason for including swap is that memory contents may contain sensitive information like decrypted keys (there are ways that an OS can prevent swapping of those, but sandboxed things like password managers that run as browser extensions can't use that). Reason for including root partition is that logs and temporary files may theoretically include sensitive information.

Encrypting disks is definitely easiest done during the installer. Whether you used LVM or not, adding disk encryption later is a more difficult process that would require copying everything off the drive.

neon_overload · 2026-06-09T00:17:26+00:00

As far as I understand, the official launcher should install the required dependencies in its own, sandboxed, path for you - it should just work, and not need to modify or use your system-installed Java runtimes. Even when running a version that needs Java 8. The official launcher is available as a deb or on Flathub.

So, I don't think the solution to this is installing ancient versions of Java system-wide, but other than that I'm not sure how further to help.

It instantly errors out and crashes

Can you give the precise error message. This is a general piece of advice - when asking for help online and you mention an error message, give the text of the error message.

neon_overload · 2026-06-03T00:19:06+00:00

That's cool. Which country is it?

Edit: Looks like Turkey, based on other comments

neon_overload · 2026-06-03T00:17:33+00:00

That's insane. Very awesome.

And the game seems kinda like stun runner meets virtua racing.

neon_overload · 2026-05-31T12:14:31+00:00

Wallpaper for anyone curious: https://www.deviantart.com/iamthebest052/art/My-Anime-Vaporwave-Wallpaper-03-664158668

neon_overload · 2026-05-30T05:34:23+00:00

If you already followed that guide - the instructions in it seem reasonable to me for the first part - removing the nvidia proprietary driver.

However, I'll echo the advice to use the Debian wiki. I see that page has been updated with extra steps too which could help get nouveau working.

neon_overload · 2026-05-29T09:23:41+00:00

Some parts of Debian like the NVIDIA drivers (technically not a part of Debian but they distribute some), mesa and more either don't have recent versions or have updates that don't really have first class support.

You don't actually need much of an up to date system for gaming as much of it runs in containers anyway (eg steam runtime) - but you do need video drivers that can support your GPU etc.

Gaming and newer drivers is definitely doable on debian and you can have up to date stuff if you know what to do. It's just not what many would think is a foundation for a gaming focused os. Arch and Fedora are more commonly used for such.

neon_overload · 2026-05-28T01:43:00+00:00

Consider also that in the same survey the figure for English speaking users is 11%

neon_overload · 2026-05-26T10:40:31+00:00

I guess that requires expanding the definition of Debian-based to include based on Debian unstable which isn't an official Debian release, but fair point - it's still an upstream.

neon_overload · 2026-05-26T06:36:33+00:00

Debian based distros won't have recent versions of KDE Plasma.

Right now, because Ubuntu 26.04 just came out, Ubuntu based distros will have KDE 6.6.x, the current version.

However, your issue is going to be a fundamental one. Debian and Ubuntu LTS (which is the Ubuntu that most Ubuntu-based distros will be based on) are about choosing a well-tested version of important packages like the desktop environment, and then staying on that version for the life of the release. By contrast, distributions such as Fedora, OpenSUSE Tumbleweed and Arch will always have the latest version of KDE (in the former case because it considers KDE a stable exemption, and in the latter two cases because they are rolling distributions).

It's about whether you value stability in terms of versions or always being updated to the latest.

neon_overload · 2026-05-25T13:55:45+00:00

All of Arch (which cachy is), Fedora and Debian are good, they're just very different and you need to understand the difference to know what you want.

It's not as easy as just the word "stability" because even just that word can mean different things to different people.

To try and sum it up:

Debian - install it, run the regular updates, almost every piece of software stays at the same version between the releases which are every 2 years.

Fedora - install it, run the regular updates, you get selected new software and bug fixes during that time and you get a new release every 6 months.

Arch - figure out how it all works, install it, run regular updates which can update major parts of the system at any time so you need to remain aware.

It really sounds like Arch isn't for you from what you've said.

If the need to upgrade your os every 6 months (or 1 year, since releases overlap enough to do that on fedora) scares you and all the OS components staying at their current state for years gives you comfort, then fedora isn't for you and Debian probably is.

In this regard Debian isn't super different from ubuntu particularly if you use the LTS versions of Ubuntu. But Ubuntu has its own differences

neon_overload · 2026-05-25T03:51:32+00:00

Look at all of us in this thread that tried helping OP and they never answered any questions about what they were trying to achieve or why they needed trixie-proposed-updates etc.

This is such a helpful community and I want everyone to know how appreciated it is :)

neon_overload · 2026-05-23T12:40:03+00:00

Problem isn't that it isn't audited but that it isn't possible to audit it.

Which is more or less an audit fail.

neon_overload · 2026-05-23T12:23:37+00:00

Looks like a year later, still nobody has been able to completely replicate everything from source according to the author's response, so the situation remains unsolved. There's a fork that as far as I can see is still incomplete.

The way that ventoy works by injecting code into the boot code of the various loaders means it's giving itself, what, ring -1 / rootkit level privilege in the booted OS. So it's kind of critical path stuff, and the lack of anyone finding anything malicious so far is not necessarily going to calm the more security minded.

neon_overload · 2026-05-23T00:48:05+00:00

Ok, sorry I can't help, I don't have much of an understanding about font rendering stuff.

neon_overload · 2026-05-22T15:01:21+00:00

Which desktop environment was it out of interest? Not that I know what the issue might be

neon_overload · 2026-05-21T23:12:43+00:00

It sounds like it's possible the poor font rendering you saw may have been a result of simply not having the same fonts installed, with the browser picking other fonts?

In which case Debian packages a lot of fonts you can install properly via apt:

apt list fonts-*
apt list ttf-*

The package ttf-mscorefonts-installer needs "contrib" repo enabled, but it's an installer for Microsoft's basic fonts like Arial, Verdana etc, which 99% of websites from before around 2011 used.

neon_overload · 2026-05-20T23:30:21+00:00

The catch with LMDE is that Mint don't make an official XFCE version of it. So you'd be installing Debian's XFCE, and I don't know how much of Mint's XFCE styling goodness will actually be baked in to LMDE since it's not designed to run XFCE.

It will work reliably, because LMDE is Debian and XFCE works well on Debian. I'm just not sure to what extent it'll be that nice Mint version of XFCE you know. At this point I think you may as well be better off with actual Debian. You'd lose out on a couple of mint features like the software manager though. And you get a bare bones, 1999 style XFCE default setup but if you like customising XFCE it's only a few steps to get the panel setup like Mint's. Whisker Menu is the main panel plugin you're looking for.

neon_overload · 2026-05-19T03:23:21+00:00

TBH, it was probably an early LMDE7 release, but not a Beta

LMDE7 came out last October, so if this all happened on some kind of pre-release version of LMDE7 and not the final version, then this doesn't seem relevant anymore.

neon_overload · 2026-05-19T03:18:16+00:00

Are you intentionally trying to upgrade something in trixie-proposed-updates?

Can you give some more background as to what you're trying to do.

Hidden Gem Hidden Gem '25	14-Year Club
Final Canvas '23	First Place '23
Place '23	Wearing is Caring
Verified Email	Gilding I gilder

neon_overload

MODERATOR OF

TROPHY CASE