Generally agreed, I would actually try using as many services with their progressive web apps.

The main reason I think they may need google services is the banking app. Mine will refuse to launch without google services installed.

You sound like the ideal candidate for a refurbished Pixel 7 / 8 from amazon.

Test its hardware thoroughly on the stock os in case you need to return it.

Install GrapheneOS using the Web installer.

Install Droid-ify into your main profile from the f-droid web page. It looks much better than the official f-droid client and actually has a working auto-update

Create a work profile. I use an app called Shelter as the work profile admin app. This allows you to auto freeze your big-tech apps to help with battery life / privacy. Install google services from the built-in GrapheneOS app store.

Enjoy.

BTW you CAN do DNS in a unifi gateway. It just requires making dnsmasq entries through shell. Perfect solution? No. But it gets you there with no additional hardware.

I’ve been using Linode (now owned by Akamai) for a couple years now and have enjoyed their pricing / service.

I mean speaking from experience, its resurrected a couple problematic CPUs for me. CPU pins no, pads on an LGA style CPU, sure.

I’m with catloaf. Consistent CPU soft locks point to a possible bad memory module or CPU.

Clear CMOS.

Try removing one memory module at a time.

See if there is an option to disable hyperthreading in bios.

Another thing to try is to remove the CPU, careful not to damage the LGA pins on the motherboard, and clean the CPU contacts with alcohol. Take care to ground yourself out and the case before handling the CPU out of socket.

You are correct, a VPN connection does not bridge to another profile. You can install a VPN in said work profile. The always-on VPN settings in grapheneos have the work icon to indicate what VPN is in your work profile.

See my other comment on this thread. Basically I have a shared mount point for the two containers and TubeSync writes video metadata to NFO files.

TubeSync has an option to write metadata to NFO files. Then you just tell Jellyfin to not run any scrapper and just use said NFO files. It’s not perfect but it gets you a title and description for the video.

I use TubeSync to do the downloading and then have Jellyfin as a frontend player. Seems to work pretty good for me and was pretty quick to stand up in docker.

I’ve been using fedora on a small intel 6th gen or newer mini pc. I then cook up some custom launch scripts that cause JMP to run at login. I use cockpit and a CMK agent for remote monitoring and management.

I got sick of the lack certificate management on Android TV and how much you need to do to make it reasonably private.

If you are on the latest mesa drivers (hence fedora over a more LTS release), and you install Jellfin Media Player via flatpak, everything should just work with hardware decoding.

https://kiwix.org/en/

You can self-host the kiwix server in docker and grab .zim files for whatever wiki you want to host. Wikipedia is one of those files.

I can also vouch that Android Auto works in a work profile.

That’s most likely the problem. In my experience, nearly all tor exit nodes are flagged as such and captchas are nearly impossible to “pass” when using such an exit node. I would try using a free VPN to test. Try protonvpn without an account and see if you can get past the captcha.

Are you using a VPN? It might be that changing your exit IP might help. I’ve noticed captchas get harder to pass if your on a VPN that has a lot of traffic trying to pass captchas. Probably DDoS protection.

I would cd into the user folder that you want to add / remove files from and see what the ownership is to begin with and simply replicate ownership to match what’s already there.

Generally, in my experience, modifying the backing storage for a nextcloud instance is more of a PITA than its worth. I would just mount the webDAV in your file manager. This way the nextcloud db stays in sync with the backing storage.

If you are going to be making direct modifications to the backing storage, check this form post on modifying the nextcloud config to have it look for changes on the filesystem.

As for the permission side of things, run ls -lh in the folder that you want to make changes and see what the user:group is for ownership of the existing files and make sure your new files match. Chmod and chown will be your friends here and chmod has a --reference option that let’s you mirror permissions from an existing file, a real time saver.

Hopefully this helps!

Thanks! Flatpak-KCM is perfect as I’m thinking I’ll move to fedora KDE in a couple days when f40 drops. I’m hoping that the Wayland experience on NVIDIA GPUs will be smoother there than on GNOME.

To add on to this, if you are using flatpak apps and want granular permission control, check out flatseal. Fedora (IMO) has one of the best flatpak integrations out of the box. Other “sandboxing” or containerized app deployments are snaps (made by Canonical), and appimage (I’m not entirely sure this qualifies as an app container).

From my experience, flatpaks is currently leading in adoption when compared to the other two.

For container management I use portainer CE and for the rest I use CheckMK.