AskUbuntuHow do I fix my /home directory on my server? #permissions #ssh #directory #homedirectory
Shoe BillSorry if I'm not so eloquent here, tired.
Just had a wierd idea for security on, well, basically any Linux distribution AFAIK. I thought: what if you set up two users (for yourself), both "normal" as in non system users.
One is for convenience and not for security; we'll call the convenience user A.
Now, here's the catch: user A needs user B to log in, in order to do access their own secrets.
Unless I'm not understanding something here, you could probably do this by letting A login automatically but not user B, and making A's home directory exactly that normally, and use systemd-homed for B's home directory. Especially if you have full disk encryption anyway, just figure out some setup with a systemd service that unlocks A's keyring automatically, and also keep it in B's home directory, which is encrypted until they log in. So A logs in automatically, but they're logged out of everything in their own session until B logs in.
I simply cannot be the first person who's ever had this idea.
OSTechNixMX Linux keeps your /home directory safe! Learn how to migrate to MX Linux from another distribution without losing /home data.
Read more details here: https://ostechnix.com/migrate-to-mx-linux-without-losing-home/
#Mxlinux #MigrateToMxlinux #HomeDirectory #Linuxdistribution #Debian
Alright, time for me to quit thinking about this and actually do it now. Having said that, I want any and all reasonable advice from anyone who's done anything like this before, so by all means—especially if you've tried doing something like this and went wrong at some point, because I would really like to know what not to do.
I'm about to set up an external ssd—one of those orange LaCie drives that's borderline indestructible and also connects over USB C, so also pretty fast, for USB at least—for my home directory as well as some other things related to that.
Already on NixOS, so Home Manager is already there, so continue using it, obviously. Also planning on making a new user that is separate from my current one, and also keeping the current one as-is, just it case; new one will use systemd-homed unless I happen to run into some reason why that's doesn't work, which I doubt, but I should also assume that's a non-zero chance until after I've already done all of this; assuming that works, which it should AFAIK, I want LUKs encryption, and out of the three available options (for systemd-homed, which are ext4, btrfs, and XFS), I want either btrfs or XFS if only to try something new (haven't used either of them before, already using ext4), and I'll consider any reasonable argument one way or the other in terms of which is better and why. Current idea is that splitting the drive into two partitions and symlinking between them is probably the best move; I suspect I'll find out soon enough. I also want Git and nothing else, as opposed to whatever fancy dotfiles manager; I'll make the few symlinks I'll actually need myself.
Thoughts?
Hacker NewsClaude CLI deleted my home directory Wiped my whole Mac
#HackerNews #ClaudeCLI #HomeDirectory #DataLoss #MacIssues #TechSupport
