Migrating to AlmaLinux, podman and caddy

Finally rootless and confined containers

After my last blogpost about MAC, I felt bad for preaching water and drinking wine: I set up this blog in 2021 on an Ubuntu 20.04 LTS (🤮) with an nginx from the official Ubuntu repositories, and then didn’t do much to it except for the obligatory updates. What was already a bit backworldish in 2021 is a bit embarrassing in 2023. Since I’m planning to host more on the internet than this blog, I really wanted to look into containers. [Read More]

SELinux and Apparmor Overview

Mandatory Access Control (MAC) on Linux desktops

Motivation I’ve been using GNU/Linux distributions as my daily driver OS on desktop PCs and notebooks for more than 10 years. Linux is a great choice to me, because like most FOSS it values my privacy, it’s fun to use because of its customization options and because it is secure. Because it’s secure, right? If you thought you are better off with e.g Linux Mint than those Mac OS and Windows peasents beause of it’s superiority in terms of security… well, just read this article by madaidan or watch this (German) talk by lubro. [Read More]

Ungoogle your Android phone

GrapheneOS and LineageOS

This article will not explain why you would want to avoid Google on your mobile phone, it will only talk about an approach on how to do it. And if you unironically think an iPhone is a suitable solution, please leave this blog. Overview When it comes to smartphones you have the choice between Apple and Google which means you are caught between a rock and a hard place. Luckily Android is based on the Linux kernel, which forces Google to comply to GNU GPL v2 for the Linux kernel modifications. [Read More]

I hacked myself: Android edition

Besides a crappy Windows Mobile 6.1 phone I owned years ago, I bought my first smartphone in 2012 – a Lenovo A660 from a rather unknown Chinese Smartphone seller. (They did not only declare the package as a gift, they even wrote a gift card which stated ‘Merry Xmas, Yours Dan’) The device was already rooted and came with a custom ROM, which was a nice service, because all official images were Chinese. [Read More]