❌

Modalità di lettura

Late Night Linux – Episode 399

Guest hosts Chris from Linux After Dark and Sean from Hybrid Cloud Show tell Joe and Félim about bootc desktop Linux distros, how they build, deploy, and update them, and why this modern approach is so powerful. Plus another system information tool, cutting edge upscaling on the Steam Deck, and why Chris has switched to the KDE Plasma desktop.

 

Bootc desktops

bootc

Using Bootc to Manage Ubuntu Hosts

ubuntu-summit-26-demo

ubuntu-bootc 

Mono repository for all bootcrew images

How Steam Play/Proton makes Gaming on Linux Awesome

 

Discoveries

HWall

ProtonPlus

KDE Plasma desktop

 

 

 

 

 

 

Support us on patreon and get an ad-free RSS feed with some early episodes

 

 

See our contact page for ways to get in touch.

RSS: Subscribe to the RSS feeds here

  •  

poke @ Savannah: GNU poke 5.0 released

I am happy to announce a new major release of GNU poke, version 5.0.

GNU poke 5.0 release is now available at
https://ftp.gnu.o ... e/poke-5.0.tar.gz

The tarball is signed and you can get the PGP signature at
https://ftp.gnu.o ... ke-5.0.tar.gz.sig

  GNU poke (http://www.j ... rch.net/poke) is an interactive, extensible
  editor for binary data.  Not limited to editing basic entities such
  as bits and bytes, it provides a full-fledged procedural,
  interactive programming language designed to describe data
  structures and to operate on them.

I'd like to thank everyone who contributed to this release through code,
documentation, or testing.

What is new in this release:

User interface updates


  • Now hyperlink server can bind to a user-specified port for listening to

commands (-p, --hserver-port).

Poke Language updates


  • Floating-point arithmetic is now supported on uint<32>/uint<64> types.

  uint<32> will be interpreted as a single-precision floating-point number
  and uint<64> will be interpreted as a double-precision floating-point
  number as defined per the IEEE 754 standard.
  The following expressions are now supported:

    - Addition:       a .+  b
    - Subtraction:    a .-  b
    - Multiplication: a .*  b
    - Division:       a ./  b
    - Ceil-devision:  a ./^ b
    - Exponentiation: a .** b
    - Remainder:      a .%  b
    - Post-increment: a.++
    - Pre-increment:  .++a
    - Post-decrement: a.--
    - Pre-decrement:  .--a
    - Negation:      .-a

    - Less-than:                a .<  b
    - Less-than-or-equal-to:    a .<= b
    - Greater-than:             a .>  b
    - Greater-than-or-equal-to: a .>= b
    - Equal-to:                 a .== b
    - Not-equal-to:             a .!= b


Poke Runtime updates


  • Thanks to the great work of David Faust, poke now supports reactive IO

  spaces!  Extent of a PVM value mapped in a given IO space will be tracked
  and values will be re-mapped only if a write happens in their extent; which
  is a big performance win for read-intense programs.

  • A bunch of undefined behavior (UB) releated to left-shifts has been fixed.


  • Improved human-readable message of E_conv exception when verifying

  length/size of an array with dynamic bound(s) to help the user to
  understand the mistake.

Poke compiler updates


  • Now poke can properly handle writes to nested integral struct/unions

  fields.  Previously write to nested fields of integral structs did not
  materialize in IO space.

Standard Poke Library updates


  • Closure's pretty printer now adds closure's name (identifier) to output.


  • Two new functions to calculate square root of single and double precision

  floating point numbers: sqrtf and sqrtd.
  They accept uint<32> and uint<64> respectively as the IEEE 754 single and
  double precision floating-point numbers.

libpoke updates


  • Version of DSO is bumped to 2.0.0, and from this release onward, we try

  to not break the ABI, and bump the version components according to the
  libtool's recommendation (when needed).

  • To be able to keep the ABI backward-compatibility promise, all public APIs

  are now accepting either pk_compiler or pk_val.  This is the first step
  toward removing global state from libpoke to be able to have multiple
  instances of libpoke in a single process (and also to be able to accomplish
  thread-safety). We're not there yet, but we'll be there some day (hopefully
  soon)!

IO subsystem updates


  • IOS_F_TRUNCATE has been re-introduced (it was removed after release of

  poke 1.0 by the rationale that it's not that useful of a flag.  Turns
  out it's quite useful to start from an empty file when assembling binary
  files from scratch using poke.

Pickles updates


  • Improved ustar pickle and add tests.  Method get_last_mod_time has been

  fixed and the following methods has been added:
  get_{file,owner_user,group}_name.

  • Improved time pickle to print date and time properly (zero-padded), and

  also add ptime_str function to get date/time information as a string.

Platform supports


  • We tried to improve MinGW compilation situation by importing more Gnulib

  modules, but we still cannot have poke executable for MinGW platform.
  Help is very much appreciated in this area!

Documentation updates


  • Thanks to people who actually read the reference manual, this release

  includes a bunch of corrections to the documentation! Cheers to them!


Happy poking!
Mohammad-Reza Nabipoor

  •  

Impostare il firewall con Fail2Ban

Fail2ban ispeziona i log file (ad es. /var/log/apache/error_log) e banna IPs che mostrano un comportamento sospetto -- troppe password sbagliate, tentativi di  exploits, etc. Generalmente Fail2Ban è quindi usato per aggiornare le regole del  firewall al fine di rigettare gli indirizzi IP durante un intervallo di tempo settabile, benchè ogni altra azione (come l'invio di una mail di notifica) può anche altresì essere impostata. Tra le altre cose Fail2Ban mette a disposizione dei filtri per diversi servizi come apache, courier, ssh, etc.

Mostrerò brevemente come installare e configurare fail2ban per rigettare le connessioni di IP sospetti, specialmente quelli riguardanti la patch qmail-dnsrbl. Ciò evita di essere bannati noi stessi da spamhaus, che è gratuito solo fino a 100.000 query al giorno.

fail2ban richiede che si abbia un firewall come nftables o iptables attivo.

Changelog

  • Aug 16, 2026
    - Fail2Ban upgraded to v. 1.1.1 (changelog)
  • Nov 8, 2025
    - qmailadmin log file is now /home/vpopmail/log/qmailadmin-auth.log
  • Mar 14, 2025
    - dovecot filter updated for dovecot 2.4

  •  
❌