@domi @algernon ip6.arpa domain for maximum dots

@filmroellchen @nachtpfoetchen @domi can the UEFI secure boot menu often be circumvented by pulling the CMOS battery? I thought everything was stored in flash using smmstore now instead of nvram.

@domi @weirdtreething there is a patch series adding argon2 support that libreboot applies (and another patch series on grub-devel that updates libgcrypt which will also add argon2)

@nay b

what if we just took all the ai data centers and put them to work cracking firmware signing keys instead

Upgraded this chromebook to 8gb of ram

@esoteric_programmer @libreleah It’s not the complexity of setting it up that’s the issue, it’s the resource usage.

RocksDB, the database used by conduit and forks (such as continuwuity and grapevine) likes to use up all available memory, so it needs to be restricted by cgroups if you want to run anything else on your system. I initially used used a lower limit (first 1GB, then 1.5GB) and it would after a few days use it all up and become unusably slow (>10 minutes to respond to an HTTP request, at which point nginx would time it out) and had to be restarted. With a 4GB memory limit it runs relatively fine (still much slower than XMPP or IRC but that’s to be expected of a Matrix server), but that’s way more memory than it should need to use.

Compare the resource usage of my conduit server:

● conduit.service - Conduit Matrix homeserver
     Loaded: loaded (/etc/systemd/system/conduit.service; enabled; preset: enabled)
     Active: active (running) since Thu 2025-08-21 22:51:49 BST; 1 month 28 days ago
   Main PID: 638 (matrix-conduit)
      Tasks: 12 (limit: 9481)
     Memory: 1.6G (high: 4.0G max: 4.5G available: 2.3G)
        CPU: 6h 1min 42.506s

with prosody, an XMPP server:

● prosody.service - Prosody XMPP Server
     Loaded: loaded (/lib/systemd/system/prosody.service; enabled; preset: enabled)
     Active: active (running) since Thu 2025-08-21 22:52:04 BST; 1 month 28 days ago
       Docs: https://prosody.im/doc
    Process: 3296124 ExecReload=/bin/kill -HUP $MAINPID (code=exited, status=0/SUCCESS)
   Main PID: 1590 (lua5.4)
      Tasks: 2 (limit: 9481)
     Memory: 20.1M
        CPU: 1h 3min 32.677s

or unrealircd, an IRC server:

● unrealircd.service - UnrealIRCd
     Loaded: loaded (/etc/systemd/system/unrealircd.service; enabled; preset: enabled)
     Active: active (running) since Thu 2025-08-21 22:52:05 BST; 1 month 28 days ago
       Docs: https://www.unrealircd.org/docs/
   Main PID: 1605 (unrealircd)
      Tasks: 1 (limit: 9481)
     Memory: 28.8M
        CPU: 1h 49min 14.019s

@filmroellchen @domi JPEG XL is unfortunately not supported by most browsers (Chromium dropped support and Firefox requires an about:config option to enable it that does not seem to work on ESR)

@0x47df That's surprising. When I flew from LGW-BGO (and back) in a Boeing 737-800, I actually got a GPS fix with my phone much faster than I would indoors on the ground.

Trying to summarise my thoughts on what it takes to build an alternative mobile OS. There's some very important and imho rarely discussed reasons why using anything that depends on AOSP is fundamentally a bad idea.

It basically boils down to culture and politics. The way Android is built and maintained is so fundamentally anti-free-software and anti-community.
1/8

@fun @ElDeadKennedy @7666 @eloy Technically, with enough time and swap space, you can compile anything. It's just that by the time you're finished there might already be a new Android release. (They'll probably actually use a KGPE-D16 to compile it, that's what the FSF's servers are.)

@BluRaf NRI doesn't support anything newer than Haswell but there are Haswell (and Ivy/Sandy Bridge) Chromebooks.
The ARM Chromebooks currently supported in libreboot both use U-Boot, which does support UEFI (or the libreboot documentation is incorrect). Presumably other ARM Chromebooks would use the same, although it will of course take more work to make U-Boot work on them. (Also, the currently supported Chromebooks are both 64-bit (RK3399). The 32-bit (RK3288) Chromebooks were dropped because modern versions of U-Boot stopped working on them.)
Is there any other coreboot distro with support for ARM Chromebooks?

@BluRaf As far as I know, three reasons:

• Different payloads as you mentioned (libreboot has SeaBIOS, GRUB, and U-Boot)
• Libreboot will use libgfxinit rather than FSP GOP and NRI rather than MRC when supported. (I’m not sure if MrChromebox uses NRI or MRC, but IIRC it uses FSP GOP instead of libgfxinit)
• ARM Chromebooks

@craftyguy I don't have children, but as a former child and current school student:

My school uses Google services and Chromebooks. I have a school Google account, but I refuse to use it, instead I bring in my own laptop and teachers email me work in OpenDocument Format (to my self-hosted mail server, because school email is webmail-only and doesn't allow SMTP/IMAP/POP3 access), and I email it back to them in plain text/OpenDocument Format/PDF. I used to use the bring-your-own-device WiFi network, but they shut that down, so since then they give me a code to access the guest WiFi every day (there's a captive portal and you need a code which lasts one day).

During the COVID-19 pandemic, they did remote teaching via Google Meet and Google Classroom, which I refused to use. My parents would print out work from Google Classroom (or send it to me as OpenDocument Format), and sometimes teachers would either do 1:1 lessons with me over Jitsi, or there would be someone in both a Jitsi meeting with me and a Google Meet meeting with everyone else acting as a bridge, but I didn't really get much work done for other reasons (it's hard to concentrate on doing schoolwork at home and my sleep schedule got very messed up).

Stale GitHub issue bots can go fuck themselves

mrgrnfs, new vegan alternative to btrfs

@domi The more the better, as long as you don't get carried away and add an entire directory of 64 images, causing you to OOM and the OOM killer to kill your Linux build rather than GIMP (like I did, and now I have to start it again because Guix can't do incremental builds)