• 1 Post
  • 31 Comments
Joined 2 years ago
cake
Cake day: June 17th, 2023

help-circle
rss




  • I’ve run Yunohost for quite a while and a few of these are inaccurate

    1). maybe, if you’re putting it in a VPS. But there’s also VPN, Tailscale, and I believe Headscale apps available 2). I’ve barely ever run the CLI, especially for Yunohost commands. Even for system and package updates, its not necessary. I do wish there was a built in terminal tho 3). eh, I mean sometimes but its per-app and its either-or. so typically I’ll check the install page for subdomain and set that up. And remember, some of that is upstream constraints 4). yeah, that’s the most annoying one, tbh. But the ones that are starred or maintained are typically very good, 5). I’ve had good times and bad on the forums, about par for FOSS. heard gokd things about the chat. And for maintained packaged, github issues are answered quickly IMHO 6). I mean, its 12 now and you want it stable. Update your sources.list if ya want 7). this is only true of some few apps, but almost always its listed in the install screen.

    I kinda agree, but I’ve been very impressed with Cosmos Cloud. I ve got the full 400 package marketplace, and having all that on docker, auto-updates, and good user auth is nice.

    I’m using it as a frontend/services and Yunohost as a backend/datacloud/DevOps since it seems to be more robust and reliable long-term. The user management, email, XMPP, and (mostly) transferrable auth is top notch, not to mention default hardening like fail2ban, GUI ssh port shift, LEcerts, etc. Just wish they’d add in a docker system like Cosmos, it’d really fix most of the problems, IMHO











  • Most of this is right, but needs some things corrected.

    LOS is kept up by individual maintainers of the devices, and so it can cover more of them. But that also means you expand your attack surface to lineage, maintainer, microg, etc. And that’s just on supported devices. Unofficial devices are even more wild-west, having much delayed releases, OS updates, security updates, everything.

    Not only that, but Lineage requires that you unlock your bootloader and often have your phone rooted to be able to do everything. This introduces special points of insecurity and possible issues in the future.

    GOS is from a single source, for a single line of phones, and uses a designed method to load cryptographically signed ROMs onto the device, and then validate updates using the same method. The Play Services are sandboxed and disabled by default, so you can just never use them if you want. Overall, this makes for a more cohesive device. One that is more private and more secure. Especially so, when you can buy a new Pixel device and have guaranteed updates for as long as Google will do so for the same device.