• 5 Posts
  • 222 Comments
Joined 2 years ago
cake
Cake day: July 9th, 2023

help-circle



  • Telorand@reddthat.comtoLinux@lemmy.mlThe power of Linux
    link
    fedilink
    arrow-up
    12
    arrow-down
    1
    ·
    2 days ago

    I’m sure there are people aware but for the laymen this is such a massive vulnerability.

    This is only a vulnerability if you suspect a threat actor might physically access your computer. For most people, this is not a concern. There’s also the issue that it has processing overhead, so it might make certain operations feel sluggish.

    Encryption is not a panacea, because if someone ever forgets their password (something common for the layperson), the data on that drive is inaccessible. No chance for recovery. Certain types of software may not like it either. It’s one of many considerations someone should make when determining their own threat model, but this is not a security flaw. It’s an option for consideration, and most people are probably better off from a useability standpoint with encryption disabled by default.












  • Layering isn’t bad, but what happens is with each update, the system tries to re-layer each of those packages. If some are missing from the next deployment’s rpm database or have been superceded by another package, you’ll run into these kinds of issues.

    In my case, for example, my next deployment was missing java-17-openjdk, because it had been superceded by other metapackages.



  • For the “none of the providers can be installed” errors, there’s likely been a package name change or removal in 42. I ran into a similar issue with Bazzite. I uninstalled the offending package, then reinstalled after the update.

    The last one says there’s a package conflict. You’ll need to remove the one you have in order to proceed.