If you’re mandated or regulated to implement MLS or MAC etc, SELinux is a security control that enables you to comply through expanded and expressive policy controls.

When I hear dislike for it, it’s usually because people are using SELinux as a “make my personal computer safer” tool rather than the “we’ve hundreds of thousands of differently classified sensitive documents and thousands of employees with different clearances”.

MAC/DAC/MLS isn’t designed for personal computing and if you think SELinux is the solution you personally need, you might need to reevaluate your threat model (as any external actor will seek to bypass kernel controls entirely e.g. CVE-2025-0078).

Linux also shows up more in CVE databases etc because many distributions also assign their own CVEs for the same bugs.

I thought Lepton was being built on top of Waydroid? So technically you can already use the core feature of Lepton today.

Stallman would disagree with you, I believe. The Free Software Moment has never been about not making money, it’s about liberty with the software you use. Free as in freedom, not free as in beer; free as in libre, not free as in gratis.

Quote from FSF:

Many people believe that the spirit of the GNU Project is that you should not charge money for distributing copies of software, or that you should charge as little as possible—just enough to cover the cost. This is a misunderstanding.

Actually, we encourage people who redistribute free software to charge as much as they wish or can.

Mozilla are still using Phabricator?! That stopped being maintained in 2021…

Have you had anyone with experience with security look at this thing? There’s a lot of really questionable practices in your schedule shell scripts. I especially find how you’re handling VPN secrets kinda worrying. And the backup_challenge_clients.sh script isn’t robust at all. Your nginx config has a few bad choices like lack of try_files, the regex \.php$. It’s definitely not hardened so I hope people don’t put this Internet facing.

I’ve spent like 5min in the GitHub to get a feel for the project maturity. Personally, I don’t think this is suitable for actual use yet.

If you’ve not done any security assessments on your project yet, you might not want to (a) call it “Safe”box and (b) might not want to start charging money for it until you do.

I worry you’re setting yourself up for a hard-to-shake-off embarrassment should a nasty vuln be found. Maybe a name like “selfbox” etc that drops the connotation of security would be safer.

Edit: Kudos on the project website though! Looks fricking gorgeous.

Hop on over to overclockers.co.uk as they sell plenty of AMD gaming laptops but I’d hit up their forums first and ask for advice or give them a call. Someone there will be able to point you towards a decent model that supports Linux well.

PCSpecialist laptops are usually easy to install Linux on. Just be sure to change the operating system to “No operating system required” to save some money by not paying for a Windows license.

Juno Computers ship theirs with Linux preinstalled.

Dell also sell theirs with the option of Ubuntu.

They pushed their own init system, Upstart, before jumping onto the systems bandwagon.

I thought the drivers were already merged into the kernel as hid-sony or hid-playstation?

Have you tried removing ds4drv and just trying to connect the pad via USB? If that works, you can try pairing via Bluetooth.

It could be your Mint kernel is old and doesn’t have the drivers. I’m on Arch so I’ve had no issues and the pads just work and Steam handles them with no issues.

What’s crazy is that while I used to know countless Maya / 3DSMax people, everyone seems to have switched to Blender. It’s crazy how fast the industry switched to Blender after that UI revamp.

I went wild and started using it for servers about 5 years ago and I shit you not, it’s far more stable than I would have thought. I parse the blog for update notes if there’s any big changes to anything I’m using but given most stuff is offloaded to containers, I pretty much yolo a yay -Syu every week. Zero issues.

I had more issues with Debian and Ubuntu due to bugs in stale packages or weird default configs than I have running bleeding edge vanilla via Arch.

Run Docker containers on it, one for media server, one for DNS sinkhole etc.

Agreed. They’re also solving problems that may not even exist, building a tech stack that needs to be maintained in addition to the game itself and adding all the baggage of supporting users who have needs that aren’t catered for with that stack (for instance a specific Windows-only tool).

The game engine should abstract most of these problems away. The rest can be solved with standards like what linter/formatter for code, art asset formats and specs, etc.

Solve problems as they arise. Time is best spent writing the game.