Plus our reaction to RMS's return to the FSF, some big project updates, picks, and more!

Special Guests: Dalton Durst and Danielle Foré.

Sponsored By:

• A Cloud Guru: Hundreds of courses, thousands of hands-on labs.
• Linode Cloud Hosting: A special offer for all Linux Unplugged Podcast listeners and new Linode customers, visit linode.com/unplugged, and receive $100 towards your new account.

Support LINUX Unplugged

Links:

• Microsoft Said to Discuss Discord Bid for Over $10 Billion — “Microsoft possibly acquiring Discord makes a lot of sense as it continues to reshape its gaming business more toward software and services”.
• [Video] Richard Stallman is Back
• edw · elementary Developer Weekend — This conference is our way of reaching out to app developers, sharing the knowledge we’ve all collected over the years, and providing a space to ask questions and provide feedback.
• Ubuntu Touch OTA-16 Release — Today we are happy to announce the release of Ubuntu Touch OTA-16, our sixteenth stable update to the system!
• Linux Action News 181
• Forthcoming OpenSSL release — OpenSSL 1.1.1k is a security-fix release. The highest severity issue fixed in this release is HIGH.
• Initial Support For The Rust Language Lands In Linux-Next — While no fully-baked Rust kernel driver is ready yet, the initial merge to Linux-Next does include an example kernel module written in Rust.
• Linus Torvalds on where Rust will fit into Linux — Torvalds thinks "Rust's primary first target seems to be drivers, simply because that's where you find just a lot of different possible targets, and you have these individual parts of the kernel that are fairly small and independent. That may not be a very interesting target to some people, but it's the obvious one."
• Supporting Linux kernel development in Rust [LWN.net]
• Diversity, Flexibility, and Linux: Prioritizing Generous Transfer | Linode
• JB Telegram
• All Jupiter Broadcasting Shows
• Hoppy — Hoppy provides a unique public IPv4 and IPv6 address to each of your devices, allowing connectivity without limitations. If you are behind a restrictive ISP, constantly on the move, or self-hosting services, Hoppy is for you. All major platforms are supported.
• ngrok — Secure introspectable tunnels to localhost.
• Gist: Assign public ipv6 to wireguard clients
• WireGuard Routing and Port Forwarding
• Gist: Forward all traffic to server over WireGuard VPN
• Expose server behind NAT with WireGuard and a VPS
• How To Forward Ports through a Linux Gateway with Iptables
• FORWARD and NAT Rules
• Pick: dsnet — Simple command to manage a centralised wireguard VPN. Think wg-quick but quicker: key generation + address allocation.
• How to set up a wireguard VPN in minutes with dsnet
• Feedback: Raspberry Pi POCKIT
• Project POCKIT — PocKit is a computer made for the real, physical world. On top of its powerful, versatile Core, you can attach BLOCKS - any number of any kind - to suit your application.
• Video: A small, plug-and-play Linux computer — Project POCKIT
• GNOME 40’s Best New Features
• FreeBSD kernel-mode WireGuard moves forward out-of-tree

Special Guest: Drew DeVore.

Support LINUX Unplugged

Links:

• VIMKiller: Exiting VIM is hard; sometimes we need to take drastic measures
• How to Boot Raspberry Pi 4 From a USB SSD or Flash Drive
• USB Boot Forum post announcement
• rpi-eeprom-update usage
• The default boot mode is now 0xf41 which means continuously try SD then USB mass storage.
• Raspberry Pi’s firmware master branch on Github
• Put Btrfs in my Pi Last Night...
• Know when we’re going to be live. Check out the calendar!
• Pay it forward: Help us give away 1,000 ACG subscriptions
• netdiscover
• nmap
• MAC Address Lookup Tool
• WiFi Analyzer (open-source) - Apps on Google Play
• WiFiAnalyzer on F-Droid
• LinSSID - WiFi Analyzer for Linux
• wavemon: an ncurses-based monitoring application for wireless network devices
• Your COVID-19 Internet problems might be COVID-19 Wi-Fi problems
• The Ars Technica semi-scientific guide to Wi-Fi Access Point placement
• How Ars tests Wi-Fi gear (and you can, too)
• Jim’s network-testing tools
• Home router: one option is to build it yourself!
• FireHOL and FireQoS - Linux firewalling and traffic shaping for humans
• SuperShaper-SOHO: Packet filtering / QoS setup for typical home/small office
• Throttle network bandwidth on Linux
• Dnsmasq - network services for small networks.
• smokeping
• vaping: a healthy alternative to SmokePing!
• speedtest: self-hosted speedtest
• Self-Hosted Podcast
• Feedback: A big thank you

Plus we debate if OpenWrt is still the best router solution, and chew on Microsoft's new SELinux competitor.

Special Guests: Alex Kretzschmar and Neal Gompa.

Support LINUX Unplugged

Links:

• Window Maker Version 0.95.9 Released
• Microsoft announces IPE, a new code integrity feature for Linux — Microsoft says that IPE is not intended for general-purpose computing. The IPE LSM was designed for very specific use cases where security is paramount, and administrators need to be in full control of what runs on their systems. Examples include embedded systems, such as network firewall devices running in a data center, or Linux servers running strict and immutable configurations and applications.
• OpenWrt - Opkg susceptible to MITM
• Brent sits down with Daniel Foré, founder of elementary OS
• Know when we're going to be live. Check out the calendar!
• Keep the conversation going join us on Telegram
• Fedora nightly compose finder
• Fedora 32 Looking At Using EarlyOOM By Default To Better Deal With Low Memory Situations — The oom-killer generally has a bad reputation among Linux users. This may be part of the reason Linux invokes it only when it has absolutely no other choice. It will swap out the desktop environment, drop the whole page cache and empty every buffer before it will ultimately kill a process. At least that's what I think that it will do. I have yet to be patient enough to wait for it, sitting in front of an unresponsive system.
• earlyoom - Early OOM Daemon for Linux — The oom-killer generally has a bad reputation among Linux users. This may be part of the reason Linux invokes it only when it has absolutely no other choice. It will swap out the desktop environment, drop the whole page cache and empty every buffer before it will ultimately kill a process. At least that's what I think that it will do. I have yet to be patient enough to wait for it, sitting in front of an unresponsive system.
• rfjakob/systembus-notify: systembus-notify - system bus notification daemon
• oomd — Out of memory killing has historically happened inside kernel space. On a memory overcommitted linux system, malloc(2) and friends usually never fail. However, if an application dereferences the returned pointer and the system has run out of physical memory, the linux kernel is forced to take extreme measures, up to and including killing processes. This is sometimes a slow and painful process because the kernel can spend an unbounded amount of time swapping in and out pages and evicting the page cache. Furthermore, configuring policy is not very flexible while being somewhat complicated.
• low-memory-monitor on GitLab
• low-memory-monitor — low-memory-monitor, as its name implies, monitors the amount of free physical memory on the system and will shoot off signals to interested user-space applications, usually session managers, or sandboxing helpers, when that memory runs low, making it possible for applications to shrink their memory footprints before it's too late either to recover a usable system, or avoid taking a performance hit.
• Nohang — Nohang is a highly configurable daemon for Linux which is able to correctly prevent out of memory (OOM) and keep system responsiveness in low memory conditions.
• Better interactivity in low-memory situations - devel - Fedora Mailing-Lists
• EnableEarlyoom - Fedora Project Wiki
• Nushell - The Unix philosophy of shells, where pipes connect simple commands together, and bring it to the modern style of development.
• Timekpr - simple and easy to use time managing software that helps optimizing time spent at computer.