Adonnen

I use the Photon web client as a web app for Lemmy on my PC as there doesn't appear to be a usable desktop client. I notice the neutral theme already fits GNOME decently at least in neutral theme mode. Wondering if anyone is interested in sharing their color scheme for Photon or another Lemmy client on GNOME.

Glorious - not perfect yet but a massive improvement. Source Repo

I am trying to create a KVM/QEMU/Virt-Manager VM without exposing my IP/internet connection to it. I pay for a VPN subscription, and I typically access it through wireguard configs that integrate with my distro (Fedora 40 Workstation) and DE VPN menus. From my understanding, as I have them set up now, I can enable one of these configurations in my settings, and all of my traffic is routed through the VPN, except for my local network.

I want this VM guest to have all of its traffic sent to the VPN as well, with the exception of some connection between it and the host, so I could still access it from the host for utilities like ssh.

Is it possible to achieve this? When I looked online, it seemed to require some CLI configuration of IP routes, and I didn't feel confident not understanding the changes I was making, as I want to make sure it is impossible to leak; it just shouldn't have any access to my normal network. If my VPN is disabled on the host, then it simply shouldn't be able to access the internet.

Hello. I recently acquired a Surface Go (1st gen, 4 GB RAM, 64 GB EMMC) and installed Fedora Workstation (and Phosh as a second DE). I do not have a keyboard for this device, so usually, I have to use the on-screen keyboard. Entering a sufficiently secure password whenever I wake it from sleep or need elevated permissions/sudo is not practical, but I don't think a 6-8 digit numerical PIN is sufficient.

The Surface supports Windows Hello, but neither the vanilla nor the Linux-Surface kernel currently supports the IR camera. On my main laptop, I use a fingerprint sensor. I must use my good password to decrypt the drive (though this is bypassed by TPM) and unlock the keychain on first boot or after logging out, but afterwards, I can use my fingerprint to unlock from sleep, run sudo commands, and elevate my permissions.

It seems like there are PAM modules for smart keys and TOTP 2FA, though the latter is more cumbersome, and I don't know if I can authenticate FIDO or U2F from my phone over Bluetooth. I asked on the Linux-Surface matrix, and someone suggested KDE/GS Connect, which allows commands, but I would want something I could do near-instantly, either with a prompt or homescreen shortcut plus smartphone biometrics, and I want to be able to authenticate while logged in, i.e. for sudo, not just unlocking the homescreen.

I am not an expert, and security is not something I really want to go in blind on. Does anyone have experience, ideas, guidance or an up-to-date tutorial? I feel this is an acceptable compromise between usability and security, and it would make using it casually much easier.

EDIT: Adding link to extension https://extensions.gnome.org/extension/4574/activate_gnome/