Linux - Reddit – Telegram
Linux - Reddit
751 subscribers
4.17K photos
207 videos
39.8K links
Stay up-to-date with everything Linux!
Content directly fetched from the subreddit just for you.

Powered by : @r_channels
Download Telegram
Resurrecting a 2010 Macbook Pro - with the right CPU governor(s)

I searched around a bit and couldn't find anything specific about old Core 2 Duos working on a modern distro, so I thought I'd leave this here:

To help our kids getting a bit more familiar with PCs, we recently pulled our old Macbook Pro's (one from 2010, one from 2012) from the storage, installed SSDs, upgraded the RAM and the 2010 machine also needed a new battery. I then installed Ubuntu 24.04 on both of them and the 2012 machine pulled it off quite gracefully. Reasonably fast boot times, decent usability and even Minecraft runs quite well (which is obviously the most important thing in the world for our kids).

The 2010 machine I wanted to keep for myself for some light workloads and browsing and that one was a bit of a problem. The old Core 2 Duo really doesn't like the year 2025, or so it seemed. It was constantly pegged at maximum CPU frequency and eating through the new battery like there's no tomorrow. Don't get me wrong, it was still quite impressive how smoothly GNOME's trackpad gestures worked and even modern websites like reddit or youtube render perfectly fine and smooth once javanoscript is done with its most Herculean tasks. Add a few nice GNOME extensions and it's mostly workable - certainly better than the alternative of letting it rot in some dump.

But the pegged CPU was still annoying me, so I tried to figure out why the CPU wouldn't scale down when the system was idle. Changing the Ubuntu power settings from Balanced to Performance and vice versa didn't do a thing. So I tried using cpufrequtils to set it to "powersave" at startup, but that would pin the CPU at it's minimum frequency and render it mostly unusable. Then, setting it back to "ondemand" would put the frequency at maximum again.

The only way I could get proper frequency scaling after some fiddling around was to have the global settings on regular "ondemand" as per Ubuntu "Balanced" without any changes, and then use cpufreq-set to enable the "powersave" governor for the current session. But why would this work and setting it to "powersave" at boot time wouldn't?

Checking with cpufreq-info, I finally found the problem: setting the governor globally with cpufreq-set would actually only change the governor of CPU0 while CPU1 would remain at whatever setting it got from the default settings. And it turns out: in order to have this CPU scale down on idle, you actually need CPU0 to run with the "powersave" governor but CPU1 with the "ondemand" governor. Any other combination and you're either trapped at minimum or maximum frequency.


So in case you ever come across a Core 2 Duo that won't clock down (or up), I recommend the following:

sudo cpufreq-set -c 0 -g powersave
sudo cpufreq-set -c 1 -g ondemand

Wrap it all, e.g., in a nice systemd service, and your 2010 CPU suddenly knows how to catch a break but is still prepared to react to any demands! And thanks to Linux and GNOME, it's actually way snappier and more usable than even back in 2014 when I last ran it on some version of Mac OS.

Now excuse me while I do some light browsing on my 2010 Macbook Pro while my kids are playing Minecraft on the other relic. :)

https://redd.it/1o1o5cl
@r_linux
Got my first kernel panic
https://redd.it/1o1rz64
@r_linux
Proxmox-GitOps: IaC Container Automation (+„75sec to infra stack“ demo video)
https://redd.it/1o1x4nb
@r_linux
Detailed The philosophy of computers

I deleted my main post talking about the art I saw in computers because it seemed to not make any sense. But coming back online I decided to detail the ideas. "The refined version is gone, but I still have one of the edits"

[undetailed\]

Computers are a manifested life cycle starting with an hourglass holding comsological interconnectedness of impulses. Intangible force of higher reasoning with the organized structure.

It seems quiet as it senses one's mind while it carefully rotates as a saviour called the magnetic absorbant, while slowly orbiting around your fusion energy, if you let it.

Infinite timelines flow through the gates of wind, except for terrestrial gates with rows of parasetic capacitance, formulating an outlook from the elevated phreaks for a generic outlook for the greedy freaks. iBilled out then wormed down the penguin of the free gnu. to become gnu free.




[detailed\]

I deleted it thinking the same. But I reread the last local save of this note again and I think I can make sense out of it:

Computers are a manifested life cycle starting with an hourglass holding comsological interconnectedness of impulses:

Sand symbolizes the passage of time. It is the first thing we walk on and experience live. Sand powers and gives live to CPUs which by then as users and machines are united through the same journey. Hourglass: Ability of a semiconductor made of sand to control time through revisiting the past; archives, posts made in a previous time being held through electric containers, again semiconductors, and revisited. So that is controlling time.

Intangible force of higher reasoning with the organized structure:

Computer's organized structure connecting our thoughts while separating our physical self in mostly idleness.

It seems quiet as it senses one's mind while it carefully rotates as a saviour called the magnetic absorbent, while slowly orbiting around your fusion energy, if you let it:

The rotary sensor, mobiles, smart watches, analyzing our behavior, first thought as a watchdog for helping our health and habits, so it acts like a magnetic absorbent for humans. Or it can measure impulsed energy of feelings thoughts. Which then knocks on your mind asking you to pick it up again so it can extract your energy "heat" as an orbiting planet around the sun.

Infinite timelines flow through the gates of wind, except for terrestrial gates with rows of parasetic capacitance, formulating an outlook from the elevated phreaks for a generic outlook for the greedy freaks. iBilled out then wormed down the penguin of the free gnu. to become gnu free.

In an alternate timeline, computers could've been used as a way to express one's self, back to where it all started with phreakers adjusting the invention to their liking, job's blue box and the start of a new world for everyone on this planet, not just cooperations. Then bill showed up as a parasite into apple's place, slowly formulating a plot which would alternate the current universe where the world was run by hackers expression the soul through these devices. Suddenly outlook and spreadsheets and soulless corporate cultures. Then recently wsl and windows. Which I can imagine how that was achieved through the same methods, maybe gnome will honestly explain what happened at some point. So Bill billed out from every possible legality and like a worm it continued straight down the penguin's mind, replacing a traditional GNU/Linux, taking away what's left in their quota.

English isn't my main language but this is what I could've interpreted so far. Maybe it makes a little bit of sense with these details now.



https://redd.it/1o1zz3x
@r_linux
Security hardening noscripts for Ubuntu/Kubuntu/Debian systems implementing DISA STIG and CIS compliance standards with enhanced error handling, dependency resolution, and desktop environment optimizations. ( Looking for testers ! )

[https://github.com/captainzero93/security\_harden\_linux](https://github.com/captainzero93/security_harden_linux)

Hey, I've just updated my security noscript and am looking for **some help testing / debugging**, I have a larger project in the works but it needs debugging, for this this is attempting to prepare / support 25.10 (Kubunutu / Ubuntu) and previous versions (20+) and Debian.

# Features:

# Core Security

* **Firewall (UFW)** \- Advanced configuration with rate limiting and desktop-friendly exceptions
* **Fail2Ban** \- Intelligent intrusion prevention with customized jail configurations
* **SSH Hardening** \- Key-only authentication, protocol restrictions, session timeouts
* **Audit System (auditd)** \- Comprehensive monitoring of authentication, network changes, and system calls
* **AppArmor** \- Mandatory access control with profile enforcement and complaint mode handling
* **Kernel Hardening** \- 20+ kernel parameters for memory protection, ASLR enhancement, and attack surface reduction
* **Boot Security** \- GRUB hardening with kernel parameter validation and optional password protection
* **Password Policy** \- 12+ character minimum with complexity requirements (PAM pwquality)
* **Rootkit Detection** \- Automated scanning with rkhunter and chkrootkit
* **File Integrity** \- AIDE monitoring with daily check reports
* **Automatic Updates** \- Unattended security updates with kernel package management
* **USB Protection** \- Intelligent logging/blocking based on environment and security level
* **Memory Security** \- Secured shared memory with noexec/nosuid/nodev flags
* **Security Auditing** \- Lynis integration with timestamped reports
* **Antivirus** \- ClamAV with desktop-optimized configuration

# Desktop Environment Support

* **Automatic Detection** \- Recognizes KDE, GNOME, XFCE, MATE, Cinnamon, and more
* **KDE Plasma Optimization** \- Preserves KDE Connect, Bluetooth, and system integration
* **Network Discovery** \- Optional mDNS/Avahi support for network browsing
* **Smart USB Policy** \- Logging on desktops, optional blocking on servers
* **Performance Tuning** \- No impact on GUI responsiveness or gaming performance
* **Service Preservation** \- All desktop features work at moderate security level

# Advanced Features

* **Module Dependency Resolution** \- Automatically resolves and executes prerequisites
* **Backup Verification** \- SHA-256 checksums for backup integrity
* **Execution Tracking** \- Real-time progress and success/failure monitoring
* **Comprehensive Reporting** \- HTML reports with system info, executed modules, and recommendations
* **Flexible Configuration** \- Security levels, module selection, custom configs
* **Dry Run Mode** \- Preview all changes without applying them

https://redd.it/1o20gd3
@r_linux
Super slow on Y410P

I just installed Fedora Aurora 42, KDE plasma 6.4.5 on an old Thinkpad IdeaPad Y410P (i7-4700MQ 2.4ghz, 8gb, Intel HD graphics 4600) and the performance is terrible.

It was a totally clean/fresh install that went off without any difficulties or challenges.

The wifi is limited to 2.4ghz, but the boot up time is terrible, loading time for firefox is terrible, using firefox time is terrible, even calling up System Setting | About is terrible.

I thought that it would perform much better, even on this old HW. Is there something I'm missing?

Thanks.

https://redd.it/1o23u48
@r_linux
zhathura + imv

I always thought that Zathura and imv should be the same project: the ultimate minimalist graphical viewer. Both have some nice features that the other should have (like reading from stdin, recolor, or open a bunch of files).

That's why tired to develop a plugin for zathura to view images using Gdk-PixBuf library: zathura-gdk-pixbuf. It turned out to be supper easy and functional. I couldn't find a complete list of the file formats supported by Gdk-PixBuf, but for now I have: PNG, JPEG, JPG, TIFF and GIF.

I'm thinking of making an SVG plugin. Any suggestion of more file formats?

https://redd.it/1o26mdt
@r_linux
Don't buy from NewEgg, installing Linux is considered 'tampering' with the product

Had a really bad interaction with NewEgg recently, ordered a Lenovo laptop, I did my research beforehand and several reviews on the site said it worked great in Linux, and when I arrived I installed popos on it.

Everything seemed ok except for the wifi and when the laptop went to sleep and awoke the keyboard stopped working. Updating the kernel didn't work and despite some reviews saying this laptop works great in Linux, some would mention that the keyboard/IO chip would be shipped with a newer firmware that breaks compatibility. At that point I was getting frustrated (and wish I had just spent the extra money with System76) so I started the return process, this was same day I received it. It was shipped back the next day.

Two weeks later I get a message that because I had installed a different OS on it that I was not eligible for a refund and they're shipping it back to me. It annoys me because last year I did mostly the same thing on Amazon and they refunded me no questions asked.

I did check and yes in their return policy they state that any 'customization' will make it ineligible for a refund, but for it annoys me that in the year of our lord 2025 something as simple as changing the software on your computer is reason enough to weasel out of a return.

https://redd.it/1o2eodl
@r_linux
A local Wendy's running Ubuntu
https://redd.it/1o2hme0
@r_linux
Xen compared to KVM?

What's the difference between them? And compatibility between guests OS? I know that they're bare-metal VM, and i also read that Qubes use Xen because that 'more secure'

And is there any Proxmox equivalent for Xen?

https://redd.it/1o2l4iy
@r_linux
Lol. Linux is the answer!
https://redd.it/1o2o0bn
@r_linux
Connecting in to a windows machine from another country

Hi, I have an Ubuntu laptop and a windows PC that I want to connect to (and WoL) I managed to do it while I was in the same network and tried to do some test with a VPN like tailscale but It's not working. Does anyone know a good video on how to do it.

Any tips are welcome.

Thank you for reading.

https://redd.it/1o2vgj9
@r_linux
What's good about Flatpak?

I'm just curious- while I'm exercising I thought, "why are there so many games on Flathub?" So I thought to ask this sub just to satisfy my curiosity-

What are the benefits of Flatpak for the devs? Is it the code? Or is it smth else that could be manageable? And what is it compared to other package managers?

https://redd.it/1o2w9ko
@r_linux
How to approach stability and security in Linux?

Hello lovely internet people. I am wondering how to approach security and stability under Linux.

Before you come on me with - this is just common question many times answered before, i have read many related topics and discovered very little substance beyond "just trust the cause bro" and "you will be fine bro"

Little bit of background: I used debian and ubuntu back in days when they still used Gnome 2 as DE (dualbooting for like three years), and later ubuntu when they used unity (only linux for like two years not touching other os). Now after some break from linux - seeing the direction windows is heading (i prefer if it was me not microsoft having control over my own computer) i consider to switch to linux fully (but once i do i want to make it the proper solution, not just a side hobby). I can get from a company Thinkpad t14 gen 2 or 3 (intel version) - preferably gen 3, and i want to put linux on it and eventually, if it worked as expected, making it possibly my daily driver. So i dont need the newest drivers etc... as those laptop have been around for some time, therefore i dont need rolling releases i think.

But i do have some questions beforehand:

1) For stability, as mentioned i want reasonable stable a secure environment. From my understanding those thinkpads are "linux certified" and therefore compatibility should not be a big problem. I am thinking that something debian based seems like the answer. From what i tried from modern distros, i liked the linux mint environment the best - seems pretty intuitive, supports native webapps (which i would take advantage of), supports all most used formats (deb packages, snaps, flatpaks).

Is there anything i should worry about or take some precautions (before things go wrong) while using linux mint, or any suggestions? What about using applets, gnome extensions, or any extensions in general - is there something to be concerned in terms of stability and security?

Another thing concerning stability, which distro would be considered most stable, and preferably having good battery life - because i was being told by the people using those thinkpads gen 3, that the battery life is pretty abysmal even on windows 11. I would be just fine with 4 hours with light use, some power saving mode - only lightly browsing, emails, occasionally opening pdfs, documents. Most of the time laptop being plugged into dock station, but when i need little bit battery, to have the option.

2) For security. How is security in linux being dealt with? From my understanding, The first thing one should do after installing linux mint is to turn on firewall. So it is not turned on by default, which seems wild to me. So firewall it is, what about virus protection, sandboxing etc...? Is there a security protocol other than "security trough obscurity"? From my understanding flatpak (and snaps perhaps) should sandbox the application running, is this correct?

And related topic- i have read that modern DE (namely gnome and kde) are moving from x11 to wayland - which is not the case with mint, and x11 is potential security issue as any app can essentially run as keylogger and listen to other apps. Is this true even for flatpaks if they are supposed to be sandboxed?

Another thing is, people say "just dont open pdfs and imgs in your email" - well that is not always plausible. I am getting many emails from potential clients with their offers and their problems, and it is harder and harder to tell apart legitimate client from some scams. Yes of course reasonable people dont click on "you won and iphone, please sent your passport info - your microsoft tech support", but some emails are way more sophisticated even with (seemingly) legitimate email addresses from actual clients. - this one is not linux specific question i guess, but i would appreciate any tips and tricks.

So please teach me your ways, but if i may ask, just dont come with "dont click on things" or "statistically the weakest link is the human user" etc... because while these are all