I deployed RocketChat on two different client installations (didn’t check the licensing you’re mentioning, I’ll have to look into that) and I run a Prosody instance (XMPP) on my own; tried Matrix for a short while and ran away from that mess as fast as I could. anyhow, although the messengers work without any significant issues or downtime, the amount of flak I get from non-tech normies about the client apps is staggering.

the apps just aren’t up to current UX standards. they’re used to Twitter and iMessage and Telegram quality UX, and getting used to these PoC-quality apps - both on mobile and desktop - makes them “feel icky”. I’ve had to intervene on a number of occasions when some of them transferred their business-related comms to other platforms because they just can’t/won’t get used to these apps.

check out dell latitude 5285/5290 2-in-1. they are Surface Pro lookalikes with detachable keyboards, but with way service-friendlier interior - easy to open and SSD, comms, battery can be easily replaced, whereas RAM is soldered. the screens (12" 1920x1200 IPS mutlitouch) are gorgeous and the hardware isn’t too shabby, kabylake (7xxxu) and kabylake-r (8xxxu), with standard UEFI BIOS so you can install Linux and have SecureBoot even. I can get them locally for $100-150, dependent on config and equipment (even less if they’re without battery and keyboard).

regarding the pricy enclosures, there are vastly cheaper eGPU solutions especially if you’re able to utilise the on-board M.2 or mini-PCI slot. if you don’t move the laptop around, it’s a viable option. this would be an example - not an endorsment. you’d need a $15 PSU to power the graphics and it works well in linux, with the hotpluggability being the primary issue; if you’re willing to shutdown before attaching the eGPU, close to no issues.

you can run it as graphics card (i.e. utilize its display outputs) or just use the laptop’s display with optionally switching between the onboard and discrete graphics.

using rsync:

why not btrfs send | btrfs receive? is there some advantage to rsync?

did you hotswap the drives after each btrfs replace or shutdown and then swap?

what’s your host OS and do the drives spin down if inactive?

thanks for the writeup!

I’ve set up a local mail archive with just dovecot + imap plugin. you don’t need the full mail server with postfix and whatnot, as it’s not intended to send anything anywhere, or even receive anything for that matter. it just sits there ready to be searched with thunderbird, no need for other complex solutions you’ve mentioned.

this right here. remove partition and apply and then start the installer. there is a way to map this partition in the installer, but that’s such a horrific UX mess that it’s a challenge even for experienced folks.

you can still run both tools, I do so on my main workstation. they stay in the status bar and don’t bother you none. when you’re done working and recline on your sofa, you can send e.g. youtube videos to the rig and they play fullscreen by way of mpv.

I’ve gone the other way - there is no interacting per se with the media PC; instead, it’s a dumb sink that plays back everything you send it, by way of macast and jellyfin-mpv-shim. you use android apps to send it stuff (e.g. newpipe share to allshare which connects to macast and jellyfin android app which connects to JMS) and to control playback (pause, skip, change subs, etc.). so, all media selection and playback control is done from the mobile device, no need to touch the media PC doing the playback.

not sure this will fit into your use case because of spotty internet, but that should prompt you to install jellyfin post-haste. then you have two options, the mentioned android app + JMS or just the jellyfin media player which can run in TV mode with a pared down controller (up/down/left/right/enter/back) - I’ve successfully repurposed an ancient Apple Remote that has just those six keys.

I mean, OK, it’s a vulnerability and there are interesting implications, but this is hardly significant in any pracitcal sense of the word.

the potential victim has to run their system without a firewall, has to print to the printer they’ve never interacted with before and then the attacker can run shit with whatever the printing system’s user id is, which shouldn’t be an issue on any reasonably modern distro.

I routinely remove cups and friends from any system I run because I have no need for printing and it bothers me to see it constantly during every system upgrade.

https://github.com/morgant/mlvwm

I wanted to write the same thing. have the notes app do the notes thing and handle encryption elsewhere.

as to apps, I suggest QOwnNotes. it’s markdown, highly configurable so you can make it minimalistic AF, stores notes in invidual files and folders. it also has a bunch functionality like syncing to nexctcolud and such, but I’d advise against it, just use it as a notes editor. you don’t have to selfhost anything, make it use the e.g. Documents/Notes folder and you can use syncthing to securely replicate it to other devices.

I’m trying to utilize a couple of core 2 duo macbooks for the same purpose and it’s not going great. I have twice the cores and RAM but they’re stuck at 800 MHz, because of no batteries.

anyhow, very slow and issues with a lot of codecs I throw at them. try mpv without a DE/WM.

if they run hardware that’s not cutting edge, by all means, that’s the best solution as a first distro.

ubuntu is important as a stepping stone. myself and everyone I know that’s on Fedora et al started with Ubuntu. we learned what’s what and how to go about doing things and after hitting the ceiling one too many times, we tried other stuff, found better havens and finally abandoned it forever.

so I’d caution against any action aimed at hurting it. leave it be and know that it’s still the most user-friendly solution out there and the one that’s most likely to “just work” for most people. it’ll convert people over, whether from Windows or MacOS. once they’ve crossed over, they’re more likely to wander further.

a combination; some have swap as a btrfs subvolume, some as a swapfile in root and those are encrypted, when the system boots it requests the encryption passphrase, regardless if it coldboots or restores. restores from swap are way faster than coldboot plus all your stuff is how you left it.

on some systems I have a separate swap partition outside of luks2/btrfs and that one’s unencrypted. when it restores from there, it doesn’t request the passphrase and the boot is even faster. that’s obviously less secure but my threat model is a lost/stolen laptop, I seriously doubt someone’s gonna forensic the shit out of my swap, it’s more likeky it’s gonna get wiped and sold.

to fully utilise this tech, it’s essential to set up suspend-then-hibernate, another awesome feature that’s way too cumbersome to set up. the laptop suspends for like 60 minutes and if it’s not woken up, it hibernates to disk.

I’ve made it work on arch, debian and fedora, on a T420s, T480s, T14 AMD, MBPr 2012, each on luks2 + btrfs with systemd-boot, and it works flawlessly on all of them. the setup is super-involved and cumbersome though but it’s easily accomplished once you get the hang of it.

the links posted here along with the arch wiki is what I used. it helps if it’s not your primary and only device, so you have time to retry until you get it right.

I don’t think any Thinkpads have AMI firmware, which is the source of this fuckup.

that’s radically different. although the serviceability is still nonexistent, that’s a very useable machine. just be prepared to toss the thing if anything breaks.

for me, that would be a deal breaker but I understand the itch to try it out. just make sure it’s not icloud locked.

the whole apple-bad thing aside, you’re getting a non-expandable 8 GB laptop, of which a significant portion goes to graphics. that’s pretty low today, and it’s gonna be worse down the road. speaking of graphics, although Asahi has basic functionality, the driver isn’t 100% yet.

I hope you don’t plan on torrenting a buncha stuff, as the SSD is small and non-replaceable and after years of use has an insane TBW number.

the battery longevity is a solid argument but you are buying a 4 year old battery that will show signs of aging.

I am all for repurpose/reuse/recycle, but unless you get it for free, or close to it, this thing s a bad idea. get a similarly aged business-class laptop (thinkpad, yoga, latitude, elitebook, etc.) that you can cram full of RAM and storage and replace practically every component if it fails.

CZ and dd and other “it’s 1998” tools copy the entire disk. like, you clone a 500 GB SSD with 50 GB used to another disk, guess how much data gets copied? correctomundo, the entire 500 gigs. that’s not super-healthy for the new drive and it recreates the same volume UUIDs on the target disk as the source drive, so you’re left with a mess if you keep both drives in a system.

you have a modern tool at your disposal, the mentioned btrfs send subvol | btrfs receive subvol that copies only what’s used. GRUB (you can use this opportunity to switch to systemd-boot) won’t pick up shit, you need to install it to the new drive (and remove it from the old one).

eons ago, macOS had the SuperDuper! tool, a free utility that clones the entire disk, resizing the partition in the process and copies only the data and it does that from within the OS, no booting off USB installers and such. sad to say, nothing close exists over here, you’ll just have to get good at doing things manually.

look up btrfs send and receive. you’ll be copying data from the old disk to the new. prior to that you create the same layout on the new disk (efi, boot, btrfs with LUKS, subvolumes root and home). sadly, there aren’t any readymade solutions that do this for you. big time NO on clonezilla and friends.