• 3 Posts
  • 215 Comments
Joined 2 years ago
cake
Cake day: December 20th, 2023

help-circle

  • Daily life…it depends. Overall, things as running as usual, except for some things that cause everyone’s anxiety.

    First is, obviously, heavy Internet censorship. Living without a VPN is so unbearable even older generations call the younger one for help. Government is currently high on pushing the state-controlled messenger Max, but no one, even the older folks, wanna join. So, they do everything in their power, from forcing government services to use Max as a communications platform, to blocking all other options. People keep using Telegram regardless, and find ways not only around blacklist, but even whitelist blocking. Max is nearly universally despised. VK remains a not-much-better alternative for those who didn’t yet find their way around whitelists. Unease grows about plans to use state-controlled apps to monitor VPN connections on Android phones and block respective IPs. iPhones are better protected in this respect, but other plans are devised as well.

    Second is war. The last 2-3 years of it were relatively chill for most Russians, but with drone strikes appearing as far as Saint Petersburg, the war knocks back home. The unease is amplified by Russia turning mobile connections to whitelist mode when drones appear. The appearance of circumvention methods (bridging through whitelisted resources into the wider Internet), on one hand, relieves the anxieties of losing last bits of access to the world, but on the other, shows governments inefficiency at maintaining the drone defense.

    Third is more broad and globally known - the cost of living crisis, which hits here just as everywhere else. Housing is practically unattainable for most, and rent goes through the roof. Food gets more expensive, and scandals arise about managing the existing supply, such as Miratorg claimed to push government’s hand in exterminating private farms’ livestock under the guise of disease prevention.

    Overall, plenty of room for anxiety and sense of instability.

    The Putin support has long switched from “go go Putin” to “who, if not Putin?” and then to “if Putin loses, the country is going to collapse”. So, over time it became less of actual support and more of added anxiety about war’s resolution and what it means for Russia going forward. Putin is often seen as a beacon of some, fainting, stability. But even with all that, support does indeed fade.



  • Alternatively, you can download Amnezia VPN client app on your phone or PC, and it has this amazing function where you provide the IP and root credentials, and it installs server software automatically.

    Obviously, only use it when you don’t have other things running on your server.

    Advantages:

    • No need to install anything manually, just direct Amnezia VPN client to a blank Linux server or VPS
    • You can install all sorts of protocols in this manner, not only AmneziaWG. Options include OpenVPN (basic and over Shadowsocks/Cloak), classic Wireguard, IPsec, Xray.

    Disadvantages:

    • It doesn’t show the SSH terminal as it goes installing things on your server and goes fully automatic, reducing user control and troubleshooting capabilities.

  • Alrightie, this worked! I did install Throne. As per sudo before rpm-ostree - it’s not necessary, it just asks for su password if you run it without sudo.

    So, Throne came up with another error, it was unable to change file ownership in /usr directory (of course it couldn’t, it’s an immutable system)…and then it got me.

    I read into the errors given by v2rayN, and checked it on a non0immutable distro…and indeed, my subscription list got blocked right when I started testing TUN on Bazzite a few days ago. Case closed, Bazzite has nothing to do with it.

    But, I learned something about Bazzite repo management, which will be valuable going forward. Thanks a lot for so much effort figuring things out!


  • I got stuck with Terra atm. Bazzite shows that terra-release is indeed installed, yet doesn’t seem to check the repo when installing packages. And, predictably, fails to install either Nekoray or Throne through rpm-ostree install throne

    Assuming it is disabled (as happened in https://github.com/ublueos/bazzite/issues/2580), I wanted to reenable it, but didn’t find any command to do this in rpm-ostree help.

    Attempting dnf5 install throne --enable-repo=terra predictably didn’t work as it’s an immutable system.

    Any ideas or help here? Your help is much appreciated.


  • Nekoray in particular doesn’t have .rpm, so I used the universal executable (NOT the AppImage which doesn’t have TUN capability). With TUN mode enabled, it shows outbound and inbound connections trying to be established, and exchanges of up to 300 singular bytes per second. Needless to say, no Internet resources work. The second I close the connection, everything gets back to normal.

    V2RayN does have rpm and can be installed using rpm-ostree, but enabling TUN and subsequent connection attempt lead to the following log messages appear (<fields> censored):

    <date> <time> from <local IP> accepted <external IP> [proxy-relay-<protocol> -> proxy] <timezone> <date> <time> ERROR [<something> <ping>] dns: exchange failed for <URL>. IN A: EOF

    Same continues for every connection attempt. No actual connection is established.




  • yt-dlp is amazing, but not everyone likes to use CLI tools (and, looking down the thread, not everyone prefers native packets as they may cause dependency issues and need extra tools for permissions control).

    Even in a geeky Linux space, many people just want to push a button in a nice interface and get what they want. This app provides just that.

    Abandon elitism, embrace variety. And use the tools you prefer - after all, plenty of Linux video/music downloaders have yt-dlp under the hood, and I use it on a regular.



  • No worries, answer anytime :)

    Since LXC works on top of the Linux kernel, anything that works with it can be easily used as an image. For example, you can just throw any distribution .iso into it, and it will handle it as a container image. Proxmox does all the interim magic.

    Say, you want to make a container with programs running on Debian. You take the regular Debian .iso, the one you use to install Debian on bare metal or VM, feed it to Proxmox and tell it to make an LXC container out of it. You specify various parameters (for example, RAM quotas) and boom, you got a Debian LXC container.

    Then you operate this container as a regular Debian installation: you can SSH/VNC into it and go from there. After you’ve done setting everything up, you can just use it, or export it and use somewhere else as well.





  • Proxmox can work with VMs and LXC containers.

    When you need to always have resources reserved specifically for a given task, VMs are very handy. VM will always have access to the resources it needs, and can be used with any OS and any piece of software without any preparations and special images. Proxmox manages VMs in an efficient way, ensuring near-native performance.

    When you want to run service in parallel with other with minimal resource usage on idle, you go with containers.

    LXC containers are very efficient, more so than Docker, but limited to Linux images and software, as they share the kernel with the host. Proxmox allows you to manage LXC containers in a very straightforward way, as if they were standalone installations, while at the same time maintaining the rest behind the scenes.


  • What exactly is proxmox?

    In layman terms, it’s a Debian-based distro that makes managing your virtual machines and lxc containers easier. Thanks to an advanced virtual interface, you can set up most things graphically, monitor and control your VMs and containers at a glance, and just generally take the pain away from managing it all.

    It’s just so much better when you see everything important straight away.