2026-05-07T01:08:04Z https://yabu.me june ✿ (6a756e65) https://yabu.me/npub1jskpqy269nw53zrfpyncvjelel8f5pzdlmq8gzsyz6gqfzkyx84qk8ssgw https://ublog.kimapr.net/media/3792318aeb36d6ea6864ec9477c7d443113eaf7b52bc93242f08debee712ffab.jpg https://ublog.kimapr.net/media/3792318aeb36d6ea6864ec9477c7d443113eaf7b52bc93242f08debee712ffab.jpg https://yabu.me/nevent1qqsqxvxyca2teecued59aywysnaefvgvm6yawza0r0tddt2hr8nw7jqzyz2zcyq3tgkd6jygdyyj0pjt8l8uaxsyfhlvqaq2qstfqpy2csc75t93rc8 In reply to <a href='/nevent1qqsw8v4tgetn02xdr6fc9c969m0dyx5mpmpptq55uh8uyujpy8duepgvqmfps'>nevent1q…mfps</a><br/>_________________________<br/><br/>please go away cis man. your queerphobia is Really Showing. a random wiki is not the all mighty source of truth for the entirety of queer folks. <br/> <br/>so please block me if i seriously upset you that much over our consenting, loving relationship with my sister instead of making yourself look like a fool more and trying to derail my thread here 2026-05-06T05:22:10Z https://yabu.me/nevent1qqsvz482jszqy2g2hscnn8yysaf4mkrh3xljxvnphqu34av693zkhkqzyz2zcyq3tgkd6jygdyyj0pjt8l8uaxsyfhlvqaq2qstfqpy2csc75qr2w9y In reply to <a href='/nevent1qqs8d0qheucwf3q3x8hx6z7j3x9flerwlty6lxsjghce4s4uket3zxqncjf0z'>nevent1q…jf0z</a><br/>_________________________<br/><br/>i dont need to be mansplained either so yeah please go away <br/> <br/>consang isnt bad either btw &lt;3 2026-05-06T05:07:23Z https://yabu.me/nevent1qqsw6s3e60rhxyyx9msev2lmq2yg5gxsad7wq8a4m9vgql4sps86l9qzyz2zcyq3tgkd6jygdyyj0pjt8l8uaxsyfhlvqaq2qstfqpy2csc75zsgss7 In reply to <a href='/nevent1qqs0kvlnf9lzldyp0xe68fdpezry4r32ulm7vgnlu0646flvfgu3h9sv333yf'>nevent1q…33yf</a><br/>_________________________<br/><br/>this doesnt really explain or help anything other than making a blind assumption that bubblewrap can do everything there, and there still isnt an example. 2026-05-06T04:36:30Z https://yabu.me/nevent1qqsfug2waxudzcsqnvhfza2tawp8qdq558lx6j3nczems0xnk4vz5zszyz2zcyq3tgkd6jygdyyj0pjt8l8uaxsyfhlvqaq2qstfqpy2csc75ny5f9l one thing i *really* like about systemd is the unit sandboxing capabilities and how convenient it is <br/> <br/><a href="https://wiki.archlinux.org/title/Systemd/Sandboxing">https://wiki.archlinux.org/title/Systemd/Sandboxing</a> <br/> <br/>heres an example from my tuwunel matrix systemd unit <br/> <br/>``` <br/>[Unit] <br/>Description=Tuwunel Matrix homeserver <br/>#Requires=tuwunel.socket <br/>Wants=network-online.target <br/>After=network-online.target <br/>Documentation=<a href="https://tuwunel.chat/">https://tuwunel.chat/</a> <br/> <br/>[Service] <br/>User=tuwunel <br/>Group=tuwunel <br/>Type=notify <br/>ReloadSignal=SIGUSR1 <br/>WatchdogSec=30 <br/> <br/>TTYPath=/dev/tty25 <br/>DeviceAllow=char-tty <br/>StandardInput=tty-force <br/>StandardOutput=tty <br/>StandardError=journal+console <br/>TTYReset=yes <br/># uncomment to allow buffer to be cleared every restart <br/>TTYVTDisallocate=no <br/> <br/>TTYColumns=120 <br/>TTYRows=40 <br/> <br/>Environment=&#34;TUWUNEL_CONFIG=/etc/tuwunel/tuwunel.toml&#34; <br/> <br/>ExecStart=/usr/sbin/tuwunel <br/> <br/>ReadWritePaths=/var/lib/tuwunel /etc/tuwunel <br/> <br/>AmbientCapabilities= <br/>CapabilityBoundingSet= <br/> <br/>ManagedOOMPreference=avoid <br/> <br/>MemoryHigh=3G <br/>MemoryMax=4G <br/> <br/>DevicePolicy=closed <br/>LockPersonality=yes <br/>MemoryDenyWriteExecute=yes <br/>NoNewPrivileges=yes <br/>#ProcSubset=pid <br/>ProtectClock=yes <br/>ProtectControlGroups=yes <br/>ProtectHome=yes <br/>ProtectHostname=yes <br/>ProtectKernelLogs=yes <br/>ProtectKernelModules=yes <br/>ProtectKernelTunables=yes <br/>ProtectProc=invisible <br/>ProtectSystem=strict <br/>PrivateDevices=yes <br/>PrivateMounts=yes <br/>PrivateTmp=yes <br/>PrivateUsers=yes <br/>PrivateIPC=yes <br/>RemoveIPC=yes <br/>RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX <br/>RestrictNamespaces=yes <br/>RestrictRealtime=yes <br/>RestrictSUIDSGID=yes <br/>SystemCallArchitectures=native <br/>SystemCallFilter=@system-service @resources <br/>SystemCallFilter=~@clock @debug @module @mount @reboot @swap @cpu-emulation @obsolete @timer @chown @setuid @privileged @keyring @ipc <br/>SystemCallErrorNumber=EPERM <br/>#StateDirectory=tuwunel <br/> <br/>RuntimeDirectory=tuwunel <br/>RuntimeDirectoryMode=0750 <br/> <br/>Restart=on-failure <br/>RestartSec=5 <br/> <br/>TimeoutStopSec=2m <br/>TimeoutStartSec=2m <br/> <br/>StartLimitInterval=1m <br/>StartLimitBurst=5 <br/> <br/>[Install] <br/>WantedBy=multi-user.target <br/>Alias=matrix-tuwunel.service <br/>``` <br/> <br/>how can i replicate that kind of stuff with openrc? 2026-05-06T01:37:47Z