klaas- · HackerTrans

vor 4 Monatendiscuss

from a company (RHEL users) POV: EntraID support -- we're using https://learn.microsoft.com/en-us/entra/identity/devices/how... for SSH at the moment (not really happy with it but I don't have a better alternate) -- and that does not work for cockpit. So another way to authenticate against entra would be nice for corporate users

klaas-

vor 11 Monatendiscuss

maybe I missed that, but why not just combine ptp and ntp within chrony, it does support that.

klaas-

letztes Jahrdiscuss

I would guess nextcloud

klaas-

letztes Jahrdiscuss

I think a very short lived cert (like 7 days) could be a problem on renewal errors/failures that don't self correct but need manual intervention.

What will let's encrypt be like with 7day certs? Will it renew them every day(6 day reaction time), or every 3 days (4 days reaction time). Not every org is suited with 24/7 staffing, some people go on holidays, some public holidays extend to long weekends etc :). I would argue that it would be a good idea to give people a full week to react to renewal problems. That seems impossible for short lived certs.

klaas-

letztes Jahrdiscuss

I'd say the primary problem of framework is security updates for bios etc

klaas-

letztes Jahrdiscuss

yeah, that was my suspicion as well, seems that AI generated content is mixed with seo-spam or malware. I even tried to report feedback.azure.com as a deceptive site to the major browsers, but they don't share my concerns ;)

klaas-

letztes Jahrdiscuss

I think Microsoft has a general problem with getting rid of unwanted things within their eco-system. I keep complaining that their feedback.azure.com portal is filled with spam/malware comments and links, but even internally their teams can't reach anyone to get it fixed. Example https://feedback.azure.com/d365community/idea/9d0b22d8-c025-...

klaas-

letztes Jahrdiscuss

any of those switches in the right price range for home? I've been looking for a cheap SONiC switch for a long time but those on the supported hardware list are all rack/datacenter sized I would say -- and none do PoE which I really need for home usage (cameras, wifi APs)

klaas-

vor 2 Jahrendiscuss

I have a Framework 13 (12th Gen). I have no complaints about the hardware quality. I love the replace everything concept. I rarely do that though, my ports are always the same - 2x usb-c, 1x usb-a, nic (bulky I remove that one for traveling and replace it with another usb-c).

Having said all that, I would not buy another one right now. The software side of things is just not up to what I expect. They still have not figured out lvfs for this notebook; the last bios update I could install was a manual EFI installer (which is beta at this point it in time I guess, only really "production" ready update is windows based installer). Also the bios I have is now a year old, and there only has been one non-beta bios upgrade in the whole lifetime of this model (~2.5 years). So the software side of things is just miserable... At this point in time I guess the next machine will be something with coreboot+lvfs and regular, timely updates (still taking suggestions ...). I guess I would be willing to give a framework+coreboot situation another try in a couple of years. The main reason for buying this is reusablilty once I decide to move on to the next hardware generation.

klaas-

vor 2 Jahrendiscuss

yesterday they were also serving a update catalog index that did not match it's signature https://downloads.dell.com/catalog/CatalogIndex.gz // https://downloads.dell.com/catalog/CatalogIndex.gz -- but that was fixed after I complained

and their idrac based firmware updater downloads http(s)://downloads.dell.com/Catalog/Catalog.xml.gz without checking the signature -- and by default without verifying https certificates when using https :D

klaas-

vor 2 Jahrendiscuss

there is something similar for WD drives as well.

https://github.com/not-a-feature/wd_ssd_firmware_update/ https://github.com/not-a-feature/wd_fw_update

I really hope some day there will be a big disk manufacturer that natively supports lvfs - I would pay a premium for that.