@mangeurdenuage >trembles in front of something as basic as a keepassxc. >These sort of people should not use computers. That's completely normal outside IT companies and even those usually don't have company-wide password manager rules. And hardware security tokes for 2FA are even rarer (usually everyone forces MS Authenticator as they are already in the ecosystem)
@vaartis@hj It has some for web push notifications and signing salts for stuff like the Phoenix dashboard. The main one is probably the secret key base used for captcha and I think the media proxy.
OVH isn't an option as their secondary storage might as well run on old IDE HDDs. Hetzner wanted my ID. And Contabo isn't that good either, or so I've heard multiple times on here.
@SuperDicq@kaia@grillchen@sun No my point is that the modularity of the ecosystem is going away and it makes it harder for maintainers to maintain software on systems with non-mainstream dependencies removed.
The user probably does not care that much what is running, unless they are a power user. The problem is that packaging the software properly is becoming harder.
In other words, the free software written today isn't portable. You can no longer run ./configure on various esoteric Linux distros, *BSDs, Solaris,... and expect it configure and build without much problems. Everybody just targets the most known configuration and usually ignores the rest.
@SuperDicq@kaia@grillchen@sun The distros abstract away the problems, because they already patched the packages. The reality is different.
Just to give a few examples for badly behaving programs that don't work properly without mainstream dependencies: - Firefox (build on a system without dbus; requires somewhat extensive patching) - systemd v239 (disable seccomp, pam and most unneeded parts; kinda old but still used version (rhel8) - will fail to build because nobody tested it without these two dependencies apparently) - get network settings working in a desktop environment on a system without NetworkMamager (probably doable on KDE, likely impossible on GNOME)
And from a non-Linux world, Erlang had broken TLS1.3 support detection on systems using LibreSSL basically since it was introduced (fixed a few months ago).
@SuperDicq@kaia@grillchen@sun Sure it is free, but the support for the more non-mainstream choice is getting worse on a monthly basis. Yes, you can modify the software to work, but when half of the software stack hard depends on something you don't want, be it dbus, systemd or anything else, it just becomes completely impractical to do so.
You are still free to choose whatever you want, but centralization of dependencies has made it a choice between something that probably does not work, or something you don't want.
@sun@grillchen@kaia@raccoon If even Microsoft completely messed up the compatibility of its own format than nobody can. It's an undocumented mess that breaks with version N+-1.