sam
@sam@cablespaghetti.dev
819 following, 771 followers
https://cablespaghetti.dev/hosting-a-fediverse-instance-on-an-original-raspberry-pi.html
🚨 Trivy is under attack again.
Attackers force-pushed 75 of 76 tags in aquasecurity/trivy-action, impacting 10K+ workflows and turning trusted GitHub Actions into malware.
Any version ≠ v0.35.0 may execute an infostealer in CI.
Analysis forthcoming: https://socket.dev/blog/trivy-under-attack-again-github-actions-compromise
Been working on a small decentralised music search tool https://squirrel.band/, initially indexing sites using faircamp (by @freebliss).
Currently grabs the sites listed on https://simonrepp.com/faircamp/ and in the webring (https://faircamp.webr.ing/) using each pages available RSS feeds, keen to add more sources if anyone has any suggestions.
An appropriate T-shirt for today.
@neil where can I get one I absolutely need it
@wombatpandaa @neil you steal the design from Neil :-)
And make sure to use the rip off (“stolen”) version of the font like they did on the original campaign….
@neil “steal”
@jonathankoren I don't understand? Is this a t-shirt that you've got?!
@neil think it’s fairly obvious that it’s a commentary on the facile billionaire backed idea that maximal intellectual property laws are anything except transparent rent seeking.
By reading this toot, you agree to a revokable license. Failure to pay 100 USD to Venmo jonathan-koren-1 for a license will result in prosecution resulting in 20 years imprisonment and 250,000 USD fine.
Ageless Linux: Software for humans of indeterminate age. We don't know how old you are. We don't want to know. We are legally required to ask. We won't.
@nixCraft This website is such an excellent rebuttal to the nonsensical parameters of the Californian law. Funny read!
@nixCraft love this, but the website is very US-centric. This age verification madness is sweeping the whole world.
@nixCraft Here's the #Debian #SystemDCensorD proposal, using D-Bus - "On installation, the user will be required to enter their location. ... This location and user data will be managed by a new daemon, systemd-censord, ... For example, ... a unit for China will implement keyword scans ... debian will need to switch to being a binary-only distribution ... with ... controls to prevent any non-signed software from being installed , written, or compiled, ..."
[1] https://lists.debian.org/debian-legal/2026/03/msg00018.html
@nixCraft is this a joke? or i don't get it. when it requires first the download or e.g. debian, but debian itself requires the age check on install, how can ageless linux work, when you have to run the conversion script after the debian installation?
@nixCraft I love this solution, but what are the plans for hardware providers? I feel like companies that offer Linux pre-installed will be the ones on the hook for ensuring the age verification is there. Will there be California editions that come with no OS?
@nixCraft linux can’t fundamentally do age verification because how it’s built into the system to be local by default and even if something was made you could literally strip it out of the source code so even if a company like Ubuntu added it into something a dev team like Linux Mint would remove that crap anyway.
The law makers really are showing their age being out of touch with technology like my mother and grandmother.
Or comply in the worst way.
aged. Age daemon.
Reads ~/config/age.conf for self-set date of birth.
Thats it.
@nixCraft One can assemble your own linux-based operating system from scratch... how's blocking that gonna work?
@nixCraft Aye, going to drop Ubuntu and switch to Ageless Debian. I don't mind if I build up fines in California.
I would like to drop armhf (armv6) support in #AlpineLinux. The only current hardware I am aware of that is armv6 is Raspberry Pi Zero series (EOL 2030). I don't think it is worth the extra effort to support both armhf (armv6) and armv7 at this point.
Do you think we should drop armhf to free up some resources?
| Lets drop both armhf and armv7 (no 32 bit arm): | 54 |
| Lets drop armhf (armv6) but lets keep armv7: | 67 |
| NOOOOO! Lets keep both armhf and armv7!!!!!: | 52 |
Closed
@ncopa In the embedded/industrial space I'm still seeing a surprising amount of ARM9 and expect those to go on quite a while, but that'd be v5, so even older. v7 seems like a more sensible target for Alpine 32bit support than trying to keep that /and/ v6 on life support together.
@ncopa I have AlpineLinux on an RPi 1 running pi-hole (head-less). More efficient and such a nice experience compared to RaspberryOS.
@mjwin yeah, I guess what I have been thinking so far is that if you still use RPi 1, which OS would make sense to run?
Even if we'd drop armhf now, you could still continue to use alpine 3.23 for a while.
@ncopa i wonder how apk would react if an edge system were to upgrade an upstream had no packages for it. i say that because i upgraded my pi0w 1.1 to edge because i was trying to get mdns to work and i read that avahi2dns and unbound worked.
@ncopa Removing armv7 would have major impact on postmarketOS as we still have many people actively working on devices with such CPUs. On the contrary armhf is pretty much dead.
@ncopa Didnt get to vote so just leaving a comment. I recently started running alpine on my rpi 2 zero for some small services. It would be a shame if i couldn't use alpine on it as the combination of openrc musl and busybox is something you can't find anywhere else. I would propably move to gentoo with external compiling machine or void, maybe bsd. All of these i would consider downgrade in one way or another.
armhf (and armv7) are very heavily used in education: many schools/universities are using lots of devices in labs to teach computing/coding, as they are so cheap and powerful-enough for this.
That's many users: 1 teacher admin => lots of silent students, and probably new users down-the-road...
#AlpineLinux is ideal distro to learn (small, simple, secure), and one of the last one to support those arch (is a feature, not a reason to give-up).
(poll seems closed now...guess my vote 😉 )
The UK Government has launched a public consultation which is seeking views on whether to ban children from using social media. This consultation will run until 26 May 2026.
It is highly likely that later this year, the establishment will attempt to introduce legislation which forces social media platforms (potentially including Mastodon) and VPNs to verify the age of their users. Therefore, this consultation is likely to be the only opportunity we will have to push back against these authoritarian measures.
Please take the time to read the consultation and answer the questions (especially if you are the parent or carer of a young person):
https://www.gov.uk/government/consultations/growing-up-in-the-online-world-a-national-consultation
@Mandrake "children aged 21 or younger"
I thought we called them "adults" once they got to 18.
@revk Always vindicating to see the Government's mask slip and reveal their determination to infantilise young adults
You can only pick one
| Custard creams: | 146 |
| Bourbons: | 118 |
Closed
And since we're doing some brit posting
| Daddy: | 18 |
| Chips: | 128 |
Closed
@babe daddy? 
@sidd_harth0_5h4h or chips
@babe who are these heretics voting custard creams?
Are they all non Brits who think this is some kind of cold set dessert vs whiskey battle?
@mgleadow If I could vote I would go for the custard creams ngl, although I am partial to a bourbon, especially with a good brew
@babe they are all acceptable biscuit, but are not as tolerant as bourbons are to overconsumption - the taste becomes a bit sickly and cloying
My favourite biscuit of the moment is plain chocolate digestive, and for tea dunking it's a three way fight between gingernuts, and the basic staples of rich tea and unmolested digestive
@babe Normally Bourbon 100% of the time, but the new Marks and Spencer chocolate coated custard creams are something it's worth treating yourself with!
@babe Bourbons are good, but only one of these choices is worthy of the elegant carving of artisan biscuitmasons.
Highlight of the #GortonAndDenton #byelection: The #DailyTelegraph sent their man out to talk to Green Party #GPEW canvassers.
It did not go well for him. 😅🤣
@2legged Imagine telling strangers (or even your Mum) that you ended up being a ‘reporter’ for the Telegraph.
@christineburns "Son, i get that you want to go your own way. Be your own man.
But couldnt you have toned it down a bit?
Just become a pornographer, or a granny-mugger, or a war criminal, or a cannibal?"
@2legged Famous quotes there from mothers addressing Richard Desmond or Nigel Lawson or Tony Blair. Match the quotes as you think fit
How many times have you moved house?
| Still live at my first abode: | 0 |
| One time I moved: | 0 |
| 2-5 times: | 2 |
| 6-10 times: | 4 |
| 11-20 times: | 4 |
| 21-30 times: | 0 |
| 31-40 times: | 0 |
| More than 40 times: | 0 |
Is moving servers/apps as challenging as moving house?
| Yes: | 1 |
| Yes, but…: | 1 |
| No: | 22 |
| No, but…: | 3 |
How many servers have you hopped on since coming to #fediverse ?
| Still rockin .social: | 0 |
| Moved once since .social: | 0 |
| 2-5 times: | 0 |
| 6-11 times: | 0 |
| +12: | 0 |
| Self host: | 0 |
@MamaLake I’ve never server hopped and have never been on .social so I have no checkbox on this poll. :)
Sky News: Porn company handed record £1.3m fine by Ofcom over failures to age verify
8579 LLC, a pornography provider with a clutch of popular sites, was fined a record £1.35m for not having age checks in place, plus £50,000 for failing to respond to an information request.
Linux 7.0 launches with enablement for Intel Nova Lake, AMD Zen 6 — major kernel update expected in Ubuntu 26.04 LTS and Fedora 44 first
A major kernel update, Linux 7.0, has been officially released. Although it'll take some time to show up in various Linux distros, the kernel comes with preliminary support for AMD's upcoming Zen 6 and Intel's Nova Lake.
#hardware
https://www.tomshardware.com/software/linux/linux-7-0-launches-with-enablement-for-intel-nova-lake-amd-zen-6-major-kernel-update-expected-in-ubuntu-26-04-lts-and-fedora-44-first
UK's Hinkley Point C new nuclear plant delayed to 2030 as costs climb to €56 billion*, i.e. €17,500 per kW.
EDF said the first reactor at the site in Somerset will begin operations in 2030, a year later than in the last update – almost 13 years after construction work began – after a series of delays to the project.
https://www.theguardian.com/uk-news/2026/feb/20/hinkley-point-c-delayed-to-2030-as-costs-climb-to-35bn?CMP=Share_AndroidApp_Other
*) £35 bn in 2015 prices = £49 bn now = €56 bn
Costs of Hinkley Point C could have been even higher if not for EDF charging £1.6 billion to the parallel Sizewell C nuclear project for sharing expertise gained from Hinkley, helping to mitigate similar issues and delays.
https://www.bitget.com/news/detail/12560605210256
So the real actual estimate of Hinkley Point C investment cost is €58 billion. That's €18,000 per kW.
Two of those for the Netherlands (the equivalent of the four new nuclear power plants considered of 1.6 GW each) would then require €115 billion, to be put up by a new state-owned energy company.
And on that new delay, what's a year in this project?
In 2007, EDF Energy CEO Mr de Rivaz predicted that UK citizens would be cooking their Christmas turkeys with power from Hinkley by 2017.
https://www.constructionnews.co.uk/peoplemoves/edf-energy-chief-executive-to-leave-this-year-14-06-2017/
@Sustainable2050 Meanwhile, our local supplier of solar power kits (not the cheapest in the country) will sell you 1 kW of panels plus inverter and cables ready to plug in for €400. Retail price:
https://webshop.cedel.nl/nl/Zonnepanelen-Set-2-Panelen-1000-Watt
You could order today and pick them up and install them on Monday. No need to wait until 2030.
So, £17500 / kWh vs €400 / kWh.
2030 vs Monday.
Need to buy uranium to run it vs uses the sun.
Tell me how this makes sense.
@hembrow @Sustainable2050
@martinvermeer
@urlyman
I think the answer to that, and this applies to the new round of UK nuclear approvals as well as the old ones, is that only reactor designs that produce plenty of plutonium for weapons use after reprocessing get approved in the UK.
No thorium pebble bed low-waste safe design for you, there’s always bags of money to keep the plutonium economy going.
SMRs fit into that perfectly, hence the govt interest.
@hembrow @Sustainable2050 But, intermittency. And those are prices per kilowatt nameplate, not kWh. Still a good deal even at 10% capacity factor.
@martinvermeer Tell me about the intermittency for Hinkley C before 2030 (if it even opens on that date). Solar panels installed today are a lot more useful than nuclear at some not yet certain date.
Hinkley C has been going on so long that it's a total farce now. I used to live nearby and I protested against the original plans for the third nuclear station on that site (for a Westinghouse PWR) when I was a teenager. More than 40 years ago, in the early 1980s !
Our protests didn't change anything. Thatcher went on to cancel it on the grounds that the electricity produced by Hinkley C would be far too costly. I didn't agree often with Thatcher, but on this point she was right.
Anyway, it's truly an ill wind that blows absolutely no-one at all any good. My sister still lives nearby and she's been doing quite well by letting out rooms to people who work on the Hinkley site ;-)
@Sustainable2050
Unfortunately plug-in/balcony solar isn’t legal in the UK at this point. There has been talk of legalising it but I don’t think any of it has made it into law.
@EF @sam @hembrow I know that in the UK, the inverter needs to be a separate unit - I believe the small ones in the German systems are not approved for use in the UK. There is an interesting, if brief discussion here of fitting in a British home
https://www.renewsolar.co.uk/projects/integrating-solar-into-your-home/
@Wen @sam @hembrow thanks for the reply and linl. Interestingly, the inverter on the Renew site looked (visually) the same to the Dutch link posted earlier but do get standalone inverters will likely not have the relevant technologies to directly connect to a third party supply.
So syncing to the mains and inverter approval seemed to be the issues mentioned. Sounds interesting.
Syntax debate time! How many spaces to indent YAML lists with? zero:
ingress:
- fromEndpoints:
- matchLabels:
app.kubernetes.io/instance: k8s-monitoring-alloy-metrics ingress:
- fromEndpoints:
- matchLabels:
app.kubernetes.io/instance: k8s-monitoring-alloy-metrics| zero: | 16 |
| two: | 48 |
@rachel Ooooh, I think you've found the DevOps equivalent of tabs vs spaces.
Also, "two" is obviously the only correct answer. 😉
@mmeier@social.mei-home.net I have a horrible mix of both accross my cluster configs, most use two spaces, but some helm charts can with zero spaces and within those I left it alone. whatever I decide on I want to just run a big linter script and fix things, then add a pre-commit hook to enforce it
@atxulo@techhub.social @homelab@fedigroups.social aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
Reminds me of this: https://www.youtube.com/watch?v=FJUqI9TMgZ4
"Characters Welcome:
A Plastic Bag Filled With Plastic Bags"
The UK has announced plans to fast-track legislation requiring “age verification for VPN use”. The correct term, however, is not age verification but identity verification.
A law like this would require everyone to identify themselves in order to use a VPN. This would pose a risk to whistleblowers, violate human rights, and represent yet another step toward an authoritarian society.
@mullvadnet "A law like this would require everyone to identify themselves in order to use a VPN" yeah… but no.
Please kindly stop spreading FUD. There are ways (ZKP) to do that...
@mullvadnet
but.. didn't Starmer have this to say? https://trashfuturepodcast.podbean.com/e/preview-double-tap-high-school-tf-live-at-the-fringe/
The 2026 Barkley Marathons is over. There are no finishers. #BM100
@atoponce Ubuntu has more engineers, but Debian has *zero* engineers pushing shit that only the CEO wants
Happy Sunday! What projects did you manage to take care of in your homelab this week?
@sam My tests are up to about 150/80Mbit up/down with the lowest at about 75/30. Depends on utilization, weather etc. Still need to mount it outside. Just run the cat7 cable inside the house, with rest being planned for next week.
@sam Indeed it has failed me for this particular notification probably due to vary short “in stock” status (less than 12h in total) but I could be wrong.
Try this: https://discord.gg/ubiquitistockalerts
The first loop 2 finishers: Sébastien Raichon in 22:35:40; Mathieu Blanchard :42; Damian Hall :44. At the same time, another loop 2 runner has quit and is tapped out. #BM100
Ohhh Iain and Damian are running and the rumor mill is talking about a certain Kilian might be running #BM100 #UltraRunning #BarkleyMarathon
Ohhh and it sounds like Jasmin (not on list) is there too and Emma from Ireland (on list) and some French dudes ;)
Oh 10 women in total, but who is the Lead Woman?
Barkley marathon is brilliant in the way that it annoys you with the lacking and mystical information floating around ;)
Damian started loop 3 barefooted and Max did so in plastic bags!!
Two runners left and out on loop 3
Under an hour to get back and start loop 4 for the last two runnners and I need to sleep
@woollypigs where are you following this?
@jerzone in Spain and you?
@woollypigs haha, I should phrase things better. What website/video are you using to follow the race.
@jerzone hashtags - #BM100 and #BarkleyMarathons on Instagram and here and @keithdunn along with https://barkley.ferrett.io/ but as always Barkley is a mystery and you get details afterwards ;)
The 2026 Barkley Marathons began with one of the strongest fields ever. The starting field came from 15 Counties as well as 15 States, and included ten women. The course seemed not to care. Over 70% of the field is done. #BM100
Water Ballon Guy has begun loop 2, followed quickly by another French guy. Seven runners are on loop 2. #BM100
The Tattooed Nonna 🧙♀️ [She/her] » 🌐
@Tattooed_Mummy@beige.party
Peanut butter.... #poll
| Smooth: | 44 |
| Crunchy: | 61 |
Closed
Deploying the Polestar2’s top secret takeout hook.
@dan ooooo the Honda N One has one too! For noodles!
Moltbook was peak AI theater, less of a glimpse at the future and more of a mirror simply reflecting society's current obsession with AI (Will Douglas Heaven/MIT Technology Review)
https://www.technologyreview.com/2026/02/06/1132448/moltbook-was-peak-ai-theater/
http://www.techmeme.com/260208/p18#a260208p18
Legal quandary...
A web site clearly targeting and selling to UK users - with "UK" in the domain name, pricing and charging in £, and no indication on the site that it is not UK based...
Does UK consumer protection law still apply if it turns out they are actually overseas (Hong Kong)?
Using Amex to buy, does normal UK consumer credit law still apply - i.e. Amex liable for a breach of contract / goods not as described?
Is this a known thing?
@revk the consumer protection is unlikely to be meaningful as it can't be enforced overseas.
Your Section 75 rights are enforceable - so your (UK based) credit card provider will be jointly liable.
@revk I think it doesn't matter what they pretend to be. They are a foreign company, so will be treated as such legally. But you do have a strong argument that they have intentionally misled, which should support whatever protections there are left (e.g. s75 and any other anti-fraud protection that might apply to a UK consumer dealing with a foreign company.)
@revk I don’t believe what they pretend to be matters, if they’re selling to a UK consumer, then that law applies. In the same way that the Online Safety Act applies worldwide to sites accessed from the UK.
But as others have noted, enforcement is quite another matter.
@revk IANAL: but IIRC, if the item is sold to a consumer in the UK then the UK consumer act etc apply (something like https://www.gov.uk/hmrc-internal-manuals/digital-services-tax/dst33000 )- enforcement may be a different issue. I *think* I recall a case where "illegal" TV sticks were sold to UK customers, UK law therefore applied, courts ended up asking some ISPs to block the site.
@revk no idea. This is a huge problem in Canada. Whole businesses trimmed in Canadiana. The domain. Names, currency etc. and secretly just Americans. Sigh
@revk That sounds a bit grey - I mean do they claim anywhere to be UK based? If they did that would be deception; but hmm many companies have sites targeting UK customers and if it was a legal (but not UK produced thing) that would be OK; if it's just the UK in the domainname that's hmm - I mean if it was full on union jacks, bulldogs and claiming to be a UK company that would be obvious.
I'll never not love seeing #coreboot and #nixos logos on a #chromebook
#nixbook loading...
@codemonkeymike interesting. I'm due for another laptop since mine broke, so I'll be checking this out. Probably can grab a Chromebook or something else from a local pawn shop for a decent price
I would advise shelling out just a little bit more money for a newer generation with a little more grunt. For me the 4GB RAM is often the limiting factor.
@codemonkeymike hows support on arm chromebooks these days on most distros? (or has everything just kinda ingnored them and only touches the x86 ones?) They were pretty common early on and are super efficient, I have one with a pretty custom install that was...frankly, one of the hardest linux installs I've ever done.
@raptor85 arm Chromebooks are a non starter. Only x86 ones work as far as I know
@codemonkeymike I figured as much :/ I have one of the Lenovo arm ones and it's fantastic little machine, solidly built, battery lasts forever and they were SUPER cheap even new. It took me a solid week to even break into it to allow me to get root and ATTEMPT to install anything, and even then there weren't drivers for half the devices, took a ton of hacking to even get it functional. It's a shame they're likely all slated for landfill due to this :/
The World Health Organization has advised that dogs cannot transmit the measles virus, and do not need to be quarantined.
W.H.O, “Let the dogs out!”
RE: https://mastodon.social/@fafofm/114099978706427841
We disabled TikTok posting and reenabled Mastodon 🐘
Hey everyone (all 7 of you) we removed Mastodon from our automatic posting
Buffer would charge us to keep the account connected and we get a lot more engagement and traction on other websites
We'll still poke in occasionally to see what you all are up to. For now you can find us at
https://bsky.app/profile/fafo.fm
https://www.instagram.com/fafo.fmOfc you can find the podcast on YT https://youtube.com/playlist?list=PLuuxpDWxclfJF9W1CwT_mTLy1LdVCmiL5&si=v9BP5jZUX8WqI99- And posts on Linkedin via @jgarr https://www.linkedin.com/in/justingarrison/
What this means is that Duck Duck Go, alongside basically every search engine that is not google, has completely delisted Neocities.
Which feels like something a lot of y'all should know!
@literalgrill Last I heard, Geoshitties was closed down long ago. I guess not.
@ObeseSpaceLizard @literalgrill was this really necessary?
Do you carry photo id with you when you leave the house, every single time?
| Yes: | 85 |
| No: | 74 |
Closed
@Tattooed_Mummy I answered yes because my ID card is usually in my wallet which is in my purse that I never leave house without, but there are a few cases where I deliberately leave it home, mostly when I go to a demonstration.
@Tattooed_Mummy
I always have my driving licence with me so I guess yes.
@DoubleTreble I do if I take my purse but I often go out without my purse. To walk the dogs for example
@Tattooed_Mummy Not really on purpose, but I do have my driving licence in my wallet all the time.
@DJDarren @Tattooed_Mummy Same. I need it to prove that I can use our tip for free, so it stays in my wallet
@Tattooed_Mummy
I often don't carry a wallet or phone either, just a bag of garden tools and cat treats!
@Tattooed_Mummy The only photo ID I have is my passport (I've never learned to drive), and I only carry that on holiday overseas.
@Tattooed_Mummy Anything further than a walk from the house to the shed, yes. My father had been in the air force and we were stationed overseas. We were told to always have our ID on us. It is now extreme force of habit.
@Tattooed_Mummy Well, yes, but that's because pretty much the only way to leave my house is by driving a car, and I'm required by law to carry my driver's license when I do that, and it's a photo ID.
@Tattooed_Mummy I feel like this will end up split between places where you have to drive everywhere you go (and therefore need to carry a driver's license) and places where you don't
@Tak you don't need to carry a driver's licence in the u.K if you drive everywhere, you just need to be ready to take it to the police station the following day.You don't have to carry it.
"If a police officer asks you to, you must be able to show:
your driving licence
a valid insurance certificate
a valid MOT certificate (if your vehicle needs one)
If you do not have the documents with you at the time, you may be asked to take them to a police station within 7 days."
@Tattooed_Mummy I missed the poll, but my answer would be yes. It used to be common to be asked for your driving licence at checkpoints during the Troubles, so keeping it with you just became a habit.
@Tattooed_Mummy
Yes. I'm in Germany. ID is required. I carry a small, soft card holder with ID, bank card and a few notes.
looking for a -simple- tool that will inform me when a service is down (e.a. doesn't respond to ping, port is closed or doesn't return right result). informing me via e-mail or maybe chatbot. For linux/debian, and things running on linux.
I do not want to install a whole ecosystem. the simpler&smaller the better.
Looking for self-hostable and floss tools only.
Update: got enough tips, thanks! Muting thread. ❤️
@wmd I pay $5 per year to hetrixtools.com for this. They ping or check whatever and then they alert when stuff is down. They have pretty much every possible web hook plus other options like SMS.
@paco ah sorry, wasn't clear. Only looking for floss and self-hostable.
@wmd Fair enough. But it’s hard to have infrastructure monitor itself. If it is down, it can’t tell you.
Either you self host in multiple, independent locations, or you get something that is independent of what is being monitored. My stuff is not reliable enough to monitor itself.
@wmd Sounds like a job for a simple shell script that runs ping and sends out an email?
I've been using nagios, but I wouldn't call that simple though. It doesn't require an ecosystem though, and for simple monitoring of whether things are up or not it isn't that complex. But you do have to navigate the configuration files etc, so probably not what you're looking for.
duckduckfedi: opinions on Kubernetes Gateway API implementations?
I have this weird #IPv6 problem and it's driving me crazy.
So, hear me out.
I have a #wireguard tunnel set up to a VPS because my ISP doesn't offer IPv6. So all IPv6 traffic is routed over the tunnel. Obviously, this means the MTU should be reduced, so I've configured radvd to broadcast an MTU of 1420.
All fine. IPv6 works. I can visit websites, stream audio and video, ssh all over the place, all over IPv6.
Except for #thunderbird. It'll take ages trying to send an email, then complain the server timed out. It'll be unable to save drafts or sent mail to the imap server, complaining about server timeouts.
So I try sending mail with msmtp from the same machine, all is well, no timeouts whatsoever. It's just thunderbird that's being difficult.
I've been staring at this problem for weeks now, done all sorts of tcpdumps along the path from my computer to my mail server. Double-checked that ICMP6 type 2 is passed along neatly across all firewalls involved.
It's got me stumped.
I'm not expecting anyone reading this to be able to provide a solution, I just wanted to share that it's driving me crazy!
@gmc Instead of advertising a lower MTU, consider using nftables to clamp the TCP MSS. In your forward chain:
tcp flags syn tcp option maxseg size set rt mtu
This means you can use the full MTU on the LAN and the right thing should happen when packets cross to the limited interface.
@gmc I have basically the same setup, IPSec tunnel for my IPv6 subnet, and radvd says MtU 1280. I can't remember why 1280, but Thunderbird works so maybe try that?
Does the client actually set mtu correctly? What does tracepath6 say?
OK, so, turns out my weird #IPv6 problem wasn't a weird IPv6 problem afterall. It was a weird #thunderbird problem. I deleted all it's config and cache on one machine, reconfigured my account details in a fresh new profile and the problem seems to be gone.
What the f*ck, what kind of software does this to its users? I don't even...
Ah well, I guess it's now usable again. Except I need to spend some time restoring all settings and accounts etc. And do the same on the other machines where I use thunderbird.
@gmc @thunderbird Hmmm.... Thunderbird does have some at least utterly annoying things.
Still busy adding mailboxes again. Got plenty in the hosting package, but 2GB each for most.
@gmc Thanks for all the tiraging and troubleshooting you did. even if we're sorry you had to do it at all! bugzilla.mozilla.org would be the best place to report this so our bug triage team and developers can look into this more deeply. We also have a bug writing guide (https://bugzilla.mozilla.org/page.cgi?id=bug-writing.html) to help!
@gmc I think I read about this issue with Thunderbird here the other day.
What is the mail server software?
https://mastodon.ctseuro.com/@kmj/115826221928633003
in reply to »looks like this is a long standig problem (2014?) with #dovecot with #thunderbird client
https://dovecot.dovecot.narkive.com/21yzgqvo/imap-ipv6-problems
Thinking about removing the AAAA for the #mailserver to use #ipv4 only and not let the client connect to #ipv6
@goetz Hmm interesting, but probably not it either, as there is a successful setup of the IPv6 TCP connection in my case, and also the SMTP transaction gets underway but then just stalls before completing.
The SMTP server is sendmail btw, the IMAP server is cyrus-imapd.
Also, I refuse to remove the AAAA record, I want IPv6 to work :)
Looks like I remove the #IPv6 AAAA now because of hanging "Copy to sent folder". Thunderbird again sent the mail, hangs now on copy. I forgot to CC: myself so killing Thunderbird now will make me loose a importand mail. Netstat shows IPv6 to P993 is established, and tcpdump shows some, not much, traffic from pc to mailserver on p993. This make me nut. I can connect to mailservers sogo web ui with IPv6 without problem too and mobile from same lan has no problem to read mails.
@gmc I will remove AAAA for now, but I do think AI is needed as much as a defect toilette.
will most likely end pretty bad for masses of humans. I hope one can deactivate #AI in #Thunderbird, otherwise I maybe have to follow your way. @goetz
It looks like I solved the #Thunderbird #IPv6 #problem by setting
mailnews.tcptimeout 100-> 250
in Thunderbird #config . Unsure this is permanent fix, but till now the problems are gone. Unsure what Thunderbird does, because network is fast here and the sogo/dovecot/postfix mail server is locally here.
Their primary claim to fame seems to be constructing just about everything with (unstable) advanced robotics and software. From doors to lifts, to toaster ovens, drinks machines, vacuum cleaners, and "personal massage units"—everything has been built with a full GPP or Genuine People Personality. This means that even a set of airlock doors has emotions, hopes, dreams, intelligence, and worse of all, the capacity for boredom. It should come as no surprise then, that the majority of these devices have a neurotic streak a mile wide.
The company motto is "Share and Enjoy." This is widely adaptable, from synthesised drinks to the company of a robot, or "Your plastic pal who's fun to be with", as their robots are described as by the aforementioned Marketing Department.
The Hitchhiker's Guide to the Galaxy describes the Marketing Department of the Sirius Cybernetics Corporation as: "A bunch of mindless jerks who'll be the first against the wall when the revolution comes."
Curiously, an edition of the Encyclopedia Galactica which fell through a rift in the time-space continuum from 1000 years in the future describes the Marketing Department of the Sirius Cybernetics Corporation as: "A bunch of mindless jerks who were the first against the wall when the revolution came." #hhgttg #HitchhikersGuide
You prob know this already, but if you duck-search, you can go to a slightly different entry point at https://noai.duckduckgo.com to do web searches without AI slop dumping on you.
I see they've dressed up the landing page there! Now more obviously non-AI. I mean, it's a selling feature, so yeah, go to town guys.
(if you still google things, consider the duck search! it's worked well for me for years, and the non-ai version is a nice step forward).
How Accurate is a 125 Year Old Resistance Standard?
https://hackaday.com/2026/01/16/how-accurate-is-a-125-year-old-resistance-standard/