As long as they continue to maintain the github repository and keep it free without any hidden ads/spyware or restrictions, I will continue to use their service.

Okay, thank you :)) too bad it looked liked a simple and elegant way…

Heyha ! Read about dd on makeuseof after reading your post, to see how it works.

Restoring from an image seems exactly what I was looking for as a full backup restore.

However this kind of 1 command backup isn’t going to work on databases (mariadb, mysql…). How should I procede with my home directory where all my containers live and most of them having running databases?

Does it work with logical volumes? Is it possible to copy evrything except /home of the logical volumes?

This post was about browsers but my feelings when I wrote It was a more general “conclusion”. I only found out recently about some “hidden” privacy concerns with browsers (WebRTC leaking your real ip, fonts fingreprinting…) But when I found out about android’s default keyboard sending samples, IOT weaknesses, smart devices data hoarding… It really feels like a losing battle while being connected to the world…

Do not overthink they want to know about you everything.

That’s true, they probably already have everything they need… It’s not only about my personal data, and my example only points out to the web technology, but everywhere around us are some data hoarding devices that are either used to targeted ads, campaign, profiling, IA dataset feeding… whatever !

It feels like we already lost our right to privacy and how personal data, telemetry is used as a whole in our society…

Thank you for your insights and personal experiences :) I love Debian stable as server, never had any issues on a old Asus laptop ! I have only 2 years of “experience” and started with Ubuntu. Good introduction to linux but switched to Debian (<3)

That’s way I’m asking arround I don’t wan’t to have a too bad experience with Debian as main personal PC !

Thank you for your personal blog post and the wiki link :) will surely read through before making my final choice !

Thank you for your nice write up and your link ! I think I will follow your guts and personal experiences ! Thank your for pre-saving my ass !! <3

Thanks :))))

Rethinkdns is probably your best bet! Right now they are missing an important feature where It takes wireguard’s DNS configuration into account, making it obsolete for those who have private dns in a local environnement with an upstream dns !

Can’t wait for version 0.5.6 😄

Thanks :) good to know I can switch between those two in KDE ! I need to test Plasma and xfce to see wich fits better my needs and has better suppport for my system !

Thanks for the clarification !!

Do you consider testing a better choice than sid for desktop/gaming environment?

I’m really not sure which one I should use. I only have experience with bare bone debian stable as server, I’m trying to find the best choice when switching from windaube to debian :)

Thanks for your insights and personal experiences !

Thank you !!

I’m currently looking into xfce vs KDE plasma, something I need to pay attention to is a DE with x11 because nvidia hasn’t fully supported wayland ?

Am I right to consider it that way? Or do both support nvidia drivers?

I’m sorry, I only use debian as bare bone on my server and currently considering to switch my main desktop from windaube to linux and alot of informations on the web seem contradictory or incomplete :/

Thanks OP for the question and your comment :) I was having the same question and you gave me hope to stay on debian :)

Which DE would you suggest with debian sid?

You probably have your reason to run Debian testing but I read somewhere that testing is somehow a bad idea as desktop environment !

If somehing is stuck and being updated in sid, and bugs are still happening, you could be stuck for month without the correct update in testing.

Sorry if it’s not clear, but I read it somewhere in the official debian documentation.

Are there any avantages of LMDE vs pure debian?

I mean LMDE is just plain debian with pre installed packages, GUI?

If LDME uses debian bookworm stable, their is not point in LMDE except for the ease of installation process?

Yeah wrong wording, but the fact that we have to depend mostly on NSA’s cryptographic schemes makes it very suspicious !

Strange enough TLS 1.3 still doesn’t support signed ed25519 certificates :| P‐256, NIST P‐384 or NIST P‐521 curves are known to be “backdoored” or having deliberately chosen mathematical weakness. I’m not an expert and just a noob security/selfhoster enthusiast but I don’t want to depend on curves made by NSA or other spy agencies !

I also wondering if the EU isn’t going to implement something similar with all their new spying laws currently discussed…

Yeah… and sometimes you find some uttery shitty people who use multiple account to comment shame you or think they are better than you while having a self conversation on your post ! Uhhhg !

If you want to run your own pki with self-signed certificate in your homelab I really encourage you to read through this tutorial. There is a lot to process and read and it will take you some time to set everything up and understand every terminology but after that:

• Own self-signed certificate with SAN wildcards (https://*.home.lab)
• Certificate chain of trust
• CSR with your own configuration
• CRL and certificate revocation
• X509 extensions

After everything is in place, you can write your own script that revoks, write and generates your certificate, but that is another story !

Put everything behind your reverse proxy of choice (traefik in my case) and serve all your docker services with your own self-signed wildcard certificates ! It’s complex but if you have spare time and are willing to learn something new, it’s worth the effort !

Keep in mind to never expose such certificates on the wild wild west ! Keep those certificate in a closed homelab you access through a secure tunnel on your LAN !

edit

Always take notes, to keep track of what you did and how you solved some issues and always make some visuals to have a better understanding on how things work !

Step CA is really nice if you want to learn more about how a real CA works. Had some fun playing with it but yeah it’s a bit overkill for home lab xD.

You can achieve the same result with openssl with less complexity !