Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Omarchy: Any User Process Can Escalate to Root

0xcc.io

Post reply on HN
Print view View original

61–70 of 584 posts

Re: Omarchy: Any User Process Can Escalate to Root

#61

Post by kennywinker »

sva_ wrote: post #43
thehamkercat wrote: post #24

I think people shouldn't just jump to distros which are getting heavily hyped in media/Youtube, cachyOS had similar wave, and now Omarchy does. (example: NetworkChuck, Primeagen? and a few others) also, archlinux is much easier to install nowadays with archinstall [1], so i'm not sure you really need another opinionated layer on top of it [1] - https://wiki.archlinux.org/title/Archinstall

I think this is more about the UI, rather than the install. I haven't tried it myself though. I think nowadays using quickshell anyone who is so inclined can vibecode their own UI though. I recently made the switch to Wayland/hyprland and rebuilt my polybar on quickshell, even adding widgets that allow getting system info/fine grained system control (interactive Bluetooth, WiFi, Volume, Brightness etc).

Ah yes, the solution to software with massive security holes is for everyone to vibe code their own software with massive security holes.

But in all seriousness, I am running omarchy now, and I will almost definitely be switching to arch at some point in the future.

Re: Omarchy: Any User Process Can Escalate to Root

#63

Post by maleldil »

dimitarbogdanov wrote: post #39
delduca wrote: post #10

Is it not better to run a VM just for Docker, like we have to do on macOS?

Damn, I did not know you need a VM for Docker on macOS. That's kind of ironic, isn't it XD Every day I wake up and thank the universe for MS making WSL2

WSL2 is also a virtual machine.

Re: Omarchy: Any User Process Can Escalate to Root

#64

Post by anglesideangle »

dimitarbogdanov wrote: post #39
delduca wrote: post #10

Is it not better to run a VM just for Docker, like we have to do on macOS?

Damn, I did not know you need a VM for Docker on macOS. That's kind of ironic, isn't it XD Every day I wake up and thank the universe for MS making WSL2

WSL2 is also a VM. docker relies on the linux kernel apis, so it must be ran inside a linux VM on macos or windows

Re: Omarchy: Any User Process Can Escalate to Root

#65

Post by pibaker »

esskay wrote: post #55
thehamkercat wrote: post #24

I think people shouldn't just jump to distros which are getting heavily hyped in media/Youtube, cachyOS had similar wave, and now Omarchy does. (example: NetworkChuck, Primeagen? and a few others) also, archlinux is much easier to install nowadays with archinstall [1], so i'm not sure you really need another opinionated layer on top of it [1] - https://wiki.archlinux.org/title/Archinstall

Add that annoying theo guy to that list. Cant stand these people, they confidently push out videos like they're experts, a week later it turns out whatever they were talking about was total crap and they've already abandoned it - case in point OpenClaw. Look at the mess of videos those named above put out about it, not a single one uses it anymore.

There is only so much a human can master in his lifetime. And if you choose to master the art of video production, then you are probably not spending that much time on mastering the thing you yap about on camera…

Re: Omarchy: Any User Process Can Escalate to Root

#66

Post by kennywinker »

bundie wrote: post #36
thehamkercat wrote: post #24

I think people shouldn't just jump to distros which are getting heavily hyped in media/Youtube, cachyOS had similar wave, and now Omarchy does. (example: NetworkChuck, Primeagen? and a few others) also, archlinux is much easier to install nowadays with archinstall [1], so i'm not sure you really need another opinionated layer on top of it [1] - https://wiki.archlinux.org/title/Archinstall

Just use Fedora. It just werks (most times).

I like the very non-windows very non-mac ui of omarchy.

Re: Omarchy: Any User Process Can Escalate to Root

#67

Post by bigyabai »

quadrifoliate wrote: post #42
thehamkercat wrote: post #24

I think people shouldn't just jump to distros which are getting heavily hyped in media/Youtube, cachyOS had similar wave, and now Omarchy does. (example: NetworkChuck, Primeagen? and a few others) also, archlinux is much easier to install nowadays with archinstall [1], so i'm not sure you really need another opinionated layer on top of it [1] - https://wiki.archlinux.org/title/Archinstall

[flagged]

> In a different way you can see this in this thread where instead of discussing why Omarchy has the bug

There's nothing interesting to discuss. Rootless OCI-compliant containers exist, and Omarchy ignored them. The "convenience" of the solution they chose simultaneously opens an enormous attack surface that the maintainers didn't consider.

This is why I don't believe the "give me a macOS distro" people - even Apple wouldn't do this. If you want a preconfigured Mac-like distro, then you should use GNOME and not a pre-riced desktop with hundreds of dotfiles. You don't have to use Arch either, you can go with a graphical install of Fedora or CachyOS if you want. This will give you a system that you can understand, maintained by people with a minimum standard of quality, that actually resembles the workflow of macOS. There is no Niri or Sway rice that will magically make your system make sense, and this is why I think a lot of the Mac and Windows expats should just use a normal desktop.

Re: Omarchy: Any User Process Can Escalate to Root

#68

Post by isityettime »

phoronixrly wrote: post #13
ecshafer wrote: post #7

Earlier quoted context omitted.

Come on. I am sure you don’t like DHH. But he’s always taken security seriously in Rails.

As I said, podman requires effort and thought on the user's side, as the rootless part incurs complexity. I do not think that this aligns with the omakase mantra of omarchy. I do not think that DHH does not take security seriously. I think that Omarchy is not meant to sacrifice devex for security.

Rootless Podman (and rootless Docker for that matter) is not difficult to set up automatically. There is a little complexity involved, namely in configuring subuid and subgid mappings, but not much.

That said, I think Arch Linux itself has a culture that values the wrong kind of simplicity (implementation simplicity) that perversely leads to a failure to adequately grapple with inherent complexity. This leads to brittle implementations, "buyer beware" norms, "you should have run the notes", "this command should never be used", etc. Omarchy inherits all of that from Arch. It also, it seems, carried its own perverse notion of "simplicity".

Re: Omarchy: Any User Process Can Escalate to Root

#69

Post by fny »

quadrifoliate wrote: post #42
thehamkercat wrote: post #24

I think people shouldn't just jump to distros which are getting heavily hyped in media/Youtube, cachyOS had similar wave, and now Omarchy does. (example: NetworkChuck, Primeagen? and a few others) also, archlinux is much easier to install nowadays with archinstall [1], so i'm not sure you really need another opinionated layer on top of it [1] - https://wiki.archlinux.org/title/Archinstall

[flagged]

Why doesn't Ubuntu fit the bill? You can even install hombrew on it. Everything works like a mac with no fuss.

Also the only reason I left Linux was due to hardware. Ubuntu was convenient enough.

Re: Omarchy: Any User Process Can Escalate to Root

#70

Post by pixl97 »

exitb wrote: post #15

It’s not great, but I’m not sure this should be framed as Omarchy-specific, when it’s a very common setup to add regular user to the docker group.

This also seems like one of the more common things LLMs use to priv escalate themselves when not given root access, seems like a rather common misconfiguration.
Post reply on HN