vim

There is a repo for noble, I’ve checked this before writing my answer. It is always possible to edit apt sources config manually and specify any repo you want regardless your distro codename. IDK what is Mint Store, isn’t it about flatpacks that TS doesn’t want to use?

What do you mean by “won’t install”? If you install it with apt from repo, apt doesn’t check the distro codename, it just checks if the package dependencies are satisfied.

Well, first I need to note that blkdiscard is not more secure. But it is much more faster. It does not actually wipe flash memory, it just tells the controller to mark it as unused. So it will drop stored data at the moment it decides the best. Maybe immediately, maybe just before writing new data. But anyway it wont provide ability to read it. It would be still possible if you can get direct access to the flash memory bypassing the controller.

Second, you forgot that SSDs are not HDDs and data are not stored exactly at offset you write them. The controller remaps memory blocks as needed. And it has more blocks than actually available to user. So when you use dd (or cp, or any other program writing directly to block device) you only override blocks that are actually mapped, but some blocks can still keep old data. So using dd is also not secure in case someone can get direct access to the flash memory. But it takes much longer time and reduces the flash lifetime.

Several people here mentioned a secure erase feature of SSDs. I didn’t know about it. It should be more secure than both methods if implemented correctly by the manufacturer (i. e. clears all memory cells immediately). In the worst case it could be the same as blkdiscard, I guess.

/dev/random, seriously? This will take ages and have no advantages over /dev/zero. Even when you really need to fill your drive with random data, use /dev/urandom, there’s a chance that this will finish in couple days at least. And no, there’s no guarantee that it will wipe all blocks because there are reserved blocks that only device firmware can access and rotate. Some data on rotated blocks still can be accessible for forensic analysis if you care about this.

Just use blkdiscard.

I’m currently running mint cinnamon (how original, I know), and asking because i can’t seem to add mullvad-vpn stable repo.

What’s the problem? Mint is based on Ubuntu, use the corresponding Ubuntu repo (noble in case of Mint 22.1).

You can then combine this with s (substitute):

sed '/myregex/ s/from/to/ p'

This is not combining commands. In your example p is a modifier to the s/// command.

Just disable printing out with the -n option and add the p modifier to the s/// command to print out lines where substitution has occured. sed -n 's/your-regexp/replacement/p'

It’s practically unrealistic. Even for a distro governed by a US-based company there are a lot of download mirrors, so restricting downloads from all of them is extremely difficult (and anyway unrestricted foreign mirrors still could synchronize with official ones via VPN). Forbidding foreign developers would require identification of each developer, but few distros do this (Debian does, but e.g. Fedora does not).

Developers would understand that such restrictions effectively kill a project, so they would shirk them.

It’s a bad practice to log in as root even for administrative tasks. You need to run numerous commands, some of hem can be potentially dangerous while not requiring root privileges. So normally you have an admin user in the sudo/wheel group and need to login to this account. Also, this adds some protection in case your key has leaked.

The best way is to disable password login and use SSH keys only. Any further steps are not required, but you may additionally install fail2ban or sshguard.

Your idea is correct, but I don’t know how to do this in Wndows (while this is pretty simple in linux). However I want to warn you that if the partition that you are dumping is used by the OS, the resulting image will most likely be corrupted. Better use a linux live system and ensure that the partition is not mounted.

find / -lname '/path/you/are/looking/for/*'

Note that the -lname option is a GNU find extension and may not work with other find implementations.

It asks for a path to a root directory of a bootstraped container. You can create it with debootstrap, rinse, pacstrap, alpine-chroot-install, virt-bootstrap etc.

virt-manager is able to work wit lxc. Add a new connection of type Libvirt-LXC.

Yes, you can.

Nope. Free beer ≠ free speech.

#!/bin/sh
printf 'ABC %s: ' "$(date --rfc-3339=date)" | xclip

Do you really need OPNsense? Buying a OpenWrt capable router would save your money, place and silence.