Sponsored By:

• Nebula: Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.
• 1Password Extended Access Management: Secure every sign-in for every app on every device.
• CrowdHealth: Discover a Better Way to Pay for Healthcare with Crowdfunded Memberships. Join CrowdHealth to get started today for $99 for your first three months using UNPLUGGED. Promo Code: UNPLUGGED
• Unraid: A powerful, easy operating system for servers and storage. Maximize your hardware with unmatched flexibility.

Support LINUX Unplugged

Links:

• 💥 Gets Sats Quick and Easy with Strike
• 📻 LINUX Unplugged on Fountain.FM
• LUP's Great Holiday Homelab Form
• Old Fart Form (markdown)
• Jellyswarrm — Bring all your Jellyfin servers together
• LiveTV support · Issue #9 · LLukas22/Jellyswarrm
• pangolin — Identity-Aware Tunneled Reverse Proxy Server with Dashboard UI.
• Pangolin | Secure Access Platform
• NixOS Search - Options - Pangolin
• Youtarr — Self-hosted web app that automates downloading, organizing, and scheduling YouTube channel content with support for Plex, Kodi, Emby and Jellyfin
• Add ability to set subfolder for manual downloads · Issue #287 · DialmasterOrg/Youtarr
• Dawarich — Your favorite self-hostable alternative to Google Timeline (Google Location History)
• dawarich CHANGELOG.md
• CVE-2025-40090 | Ubuntu — Since commit 305853cce3794 ksmbd_session_rpc_method() attempts to lock sess->rpc_lock. This causes hung connections / tasks when a client attempts to open a named pipe.
• SMB3 & KSMBD See Performance Improvements With Linux 6.18 — KSMBD also now adds a max IP connections parameter to optionally limit the maximum number of connections permitted per IP address.
• ksmbd vulnerability research · Doyensec's Blog
• ksmbd - Fuzzing Improvements and Vulnerability Discovery (2/3)
• ksmbd - Exploiting CVE-2025-37947 (3/3)
• doyensec's KSMBD-CVE-2025-37947 PoC
• GrapheneOS bails on OVHcloud over France's privacy stance
• GrapheneOS exits France — what it means for encryption
• France's Encryption War Escalates: GrapheneOS Exodus Signals Dangerous Precedent for Open Source Privacy Tech
• Seems like the GrapheneOS phone collab may be with Motorolla.
• Rust For Linux Kernel Co-Maintainer Formally Steps Down
• Bcachefs Ousted from Mainline Kernel: The Move to DKMS and What It Means
• Red Hat Introduces Project Hummingbird for “Zero-CVE” Strategies
• Richard Hipp - Git: Just Say No - YouTube
• 2011 SouthEast LinuxFest - Richard Hipp - Fossilize Your Code - YouTube
• Pick: Gopher64 — Highly compatible N64 emulator.
• Gopher64 — simple64's official and spiritual successor - Libretro — It’s made by the same developer(s). Unlike simple64 however, it’s not based entirely on Mupen64Plus. And it’s aiming for a more LowSpec hardware overhang.
• Install Gopher64 on Linux | Flathub

Sponsored By:

• 1Password Extended Access Management: Secure every sign-in for every app on every device.
• Nebula: Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.
• CrowdHealth: Discover a Better Way to Pay for Healthcare with Crowdfunded Memberships. Join CrowdHealth to get started today for $99 for your first three months using UNPLUGGED. Promo Code: UNPLUGGED
• Unraid: A powerful, easy operating system for servers and storage. Maximize your hardware with unmatched flexibility.

Support LINUX Unplugged

Links:

• 💥 Gets Sats Quick and Easy with Strike
• 📻 LINUX Unplugged on Fountain.FM
• LUP's Great Holiday Homelab Form
• Old Fart Form (markdown)
• ngrok — Go from code to global in just minutes with a developer-friendly, idiomatic solution for managing traffic to your APIs.
• Jellyswarrm — Jellyswarrm is a reverse proxy that lets you combine multiple Jellyfin servers into one place.
• Sveske-Juice/declarative-jellyfin — This repository provides a Nix flake that allows for declarative configuration of Users, Libraries, Plugins, Settings, etc. Jellyfin 10.11 is NOT SUPPORTED.
• declarative-jellyfin full example
• Zigl3ur/jellyhub — JellyHub is a web app that allow you to fetch media from all of your jellyfin servers and regroup it in one place, so there is one place to search for specific media and tells you on wich server the desired media is located.
• Smiley-McSmiles/jellyman — Jellyman is a lightweight BASH CLI tool for installing and managing Jellyfin. As well as create a full backup (automatically or manually) so you can move or import all your metadata and user information to another machine.
• LSchallot/JellyRoller — JellyRoller is an open source CLI Jellyfin Controller written in Rust that works on Windows and Linux. Its primary purpose is to allow administration of a Jellyfin application from the command line.
• kjtsune/embyToLocalPlayer — etlp (embyToLocalPlayer) is a tool that lets Emby, Jellyfin, and Plex play videos using your local media players (like mpv or VLC) instead of the built-in web player, while optionally sending playback progress back to the server.
• Pick: subgen — Autogenerate subtitles using OpenAI Whisper Model via Jellyfin, Plex, Emby, Tautulli, or Bazarr.

Special Guest: Alex Kretzschmar.

Sponsored By:

• Bitwarden: Bitwarden is the easiest way for businesses and individuals to store, share, and sync sensitive data.
• Linode Cloud Hosting: A special offer for all Linux Unplugged Podcast listeners and new Linode customers, visit linode.com/unplugged, and receive $100 towards your new account.

Support LINUX Unplugged

Links:

• Microsoft Working On AMD GPU Hotplug Support For Linux Driver — Here is a combination not normally expected... Microsoft engineers have submitted patches for review enabling AMD GPU hot-plugging support with the Radeon "AMDGPU" Linux kernel driver.
• webtop — Alpine, Ubuntu, Fedora, and Arch based containers containing full desktop environments in officially supported flavors accessible via any modern web browser.
• Tea — The tools that build the Internet have steeped too long. It’s time for a fresh brew.
• FreeRDP — FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.
• Rust Pick: bore — a simple CLI tool for making tunnels to localhost.

Plus our reaction to RMS's return to the FSF, some big project updates, picks, and more!

Special Guests: Dalton Durst and Danielle Foré.

Sponsored By:

• A Cloud Guru: Hundreds of courses, thousands of hands-on labs.
• Linode Cloud Hosting: A special offer for all Linux Unplugged Podcast listeners and new Linode customers, visit linode.com/unplugged, and receive $100 towards your new account.

Support LINUX Unplugged

Links:

• Microsoft Said to Discuss Discord Bid for Over $10 Billion — “Microsoft possibly acquiring Discord makes a lot of sense as it continues to reshape its gaming business more toward software and services”.
• [Video] Richard Stallman is Back
• edw · elementary Developer Weekend — This conference is our way of reaching out to app developers, sharing the knowledge we’ve all collected over the years, and providing a space to ask questions and provide feedback.
• Ubuntu Touch OTA-16 Release — Today we are happy to announce the release of Ubuntu Touch OTA-16, our sixteenth stable update to the system!
• Linux Action News 181
• Forthcoming OpenSSL release — OpenSSL 1.1.1k is a security-fix release. The highest severity issue fixed in this release is HIGH.
• Initial Support For The Rust Language Lands In Linux-Next — While no fully-baked Rust kernel driver is ready yet, the initial merge to Linux-Next does include an example kernel module written in Rust.
• Linus Torvalds on where Rust will fit into Linux — Torvalds thinks "Rust's primary first target seems to be drivers, simply because that's where you find just a lot of different possible targets, and you have these individual parts of the kernel that are fairly small and independent. That may not be a very interesting target to some people, but it's the obvious one."
• Supporting Linux kernel development in Rust [LWN.net]
• Diversity, Flexibility, and Linux: Prioritizing Generous Transfer | Linode
• JB Telegram
• All Jupiter Broadcasting Shows
• Hoppy — Hoppy provides a unique public IPv4 and IPv6 address to each of your devices, allowing connectivity without limitations. If you are behind a restrictive ISP, constantly on the move, or self-hosting services, Hoppy is for you. All major platforms are supported.
• ngrok — Secure introspectable tunnels to localhost.
• Gist: Assign public ipv6 to wireguard clients
• WireGuard Routing and Port Forwarding
• Gist: Forward all traffic to server over WireGuard VPN
• Expose server behind NAT with WireGuard and a VPS
• How To Forward Ports through a Linux Gateway with Iptables
• FORWARD and NAT Rules
• Pick: dsnet — Simple command to manage a centralised wireguard VPN. Think wg-quick but quicker: key generation + address allocation.
• How to set up a wireguard VPN in minutes with dsnet
• Feedback: Raspberry Pi POCKIT
• Project POCKIT — PocKit is a computer made for the real, physical world. On top of its powerful, versatile Core, you can attach BLOCKS - any number of any kind - to suit your application.
• Video: A small, plug-and-play Linux computer — Project POCKIT
• GNOME 40’s Best New Features
• FreeBSD kernel-mode WireGuard moves forward out-of-tree