So, now it is a week with Fedora. I stopped using Gnome and I am using again i3. I learned about copr which offers unofficial repositories that can be easily integrated in your Fedora install via “dnf copr enable repo/name”. That way I got again current versions of vim (Patch 1194, which is like 300 builds ahead of the official Fedora-vim) and tmux. For tmux this means that I can use again the new way to handle a mouse. And there is a repo for hugo, the blogging-engine I use. Copr feels a bit like the AUR but is not as complete as the AUR. I guess you can’t host there repos for software that use patented stuff like handbrake or makemkv. And the built for khal and vdirsyncer is not very current, so I still can’t use that. But the maintainer knows that but doesn’t have the time for rebuilding all the necessary packages. Anyway, copr makes me a happier person :)

I also got my first contact with the community in the IRC besides lurking. And I got fast answers on my shamingly stupid question without any mentioning of RTFM or some wiki. I could have answered it myself with the manual though…shame on me.

I get updates nearly daily on my system, which is more often than with Manjaro but not as often as with Arch. In the end this means hopefully more security and stability.

Btw. after a short chat on Twitter yesterday I looked again into switching to FreeBSD for my laptop but it still seems not ready for my use case. Netflix is still a problem and the proposed solution I found is running Linux or Windows in a VM and using there Chrome…yeah… Skype and Steam seems only available via Wine, no Dropbox afaik, Spideroak might work…it seems to be a further step back from using Linux in terms of available software and compared to running OS X. But maybe I upgrade my CentOS5-servers to FreeBSD instead of CentOS7. But actually I want an environment that is as heterogen as possible since it makes life easier…

When you read my blog posts, you know that I switched not that long ago from Manjaro, an Arch-based distribution to Arch. And now I switched again - this time to [Fedora]. Even so I was really satisified with Arch. It worked, it was fast and the Arch User Repositories are awesome. I rarely had to google how to install a software. I just had to use a wrapper to search them. And when I googled the first hit was often the Arch Wiki. Right now the Arch Wiki is probably the best documentation for Linux-related software.

But, yes there is a but, recently I started to look more into securing my system. Following more and more ITSec-people on Twitter, I got a bit paranoid and want to have a securer system. At work most of my servers run CentOS and usually I deactivated SELinux because it always meant annoyances. To be honest I didn’t know a thing about it and so when it made a problem I just deactivated it. I wanted to play with some new software, not learn how to troubleshoot some security system I do not need for my internal systems. Now I started to look into SELinux and the tools for redhat-based systems are really good and SELinux isn’t that hard and my systems get more secure[footnote]I really recommend to watch the talk Security-enhanced Linux for mere mortals. And I actually need it also for my internal systems. If there is a breach, this could make life harder for the intruder.[/footnote].

So I wanted to have more security for my system. I tried Grsecurity but I couldn’t get Chrome to run and hibernation wouldn’t work either. Then I tried to install SELinux but I failed. And when I asked on the forums and on the mailing list, I got not very satisfying answers and felt like I got hit by the infamous pseudo-elitism of the Arch-community. Henceforth I thought I try a redhat-system. CentOS is a bit too stable for me and I want regularly new packages. So I decided to go Fedora.

It has a nice installer which worked out of the box. I could use my full encrypted disk and keep my home-directory. After installation I got booted into Gnome which is ok. I like Gnome but I prefer tiling window managers nowadays. When I opened a terminal and typed vim, I got my first surprise. vim wasn’t available but I got offered that it is available in this and that package and if I want to install it. I did and it got installed. Neat. DNF, the package manager of Fedora, is quite nice. I really like that when I remove software dependencies from that software get usually removed as well. What I don’t like is the available software in the repositories. You need extra repos for non-free software (like codecs with patents), I need to google for a way to install software and sometimes it takes quite some time etc. I really miss the AUR. And I didn’t know that a lot of sotware is available for debian-based distros, but not so much for rpm-based distros. Another problem I didn’t expect was that I had now older software than before with Arch and that this could become a problem. I do encrypted backups with Backintime. For the encryption it uses encFS. Well, Arch has encFS 1.7.5, Fedora 23 1.7.4 and that meant that I couldn’t open my backup. I googled but I couldn’t find a way to install it. Maybe if I compiled it from source. I tried Linux Brew but that stopped when there was a dependency that needed XCode. What the…‽

Then I learned to know about Fedora Rawhide which seems to be some kind of beta-channel for Fedora and is closer to a rolling distribution. But when I wanted to switch to it, I would have lost Handbrake and the repo I am using offers only packages for Fedora 23. Probably it is for the better.

Another problem I had was with Japanese input. It was a lot of hassle and I thought it is the beginning of the 2000s. According to the internet it should have been easier, but it wasn’t for me. さて、 今日本語を入力できます[footnote]Well, now I can type in Japanese.[/footnote]。

Other small things are that I switched my login-shell to zsh but all the terminal emulators didn’t respect that and that some packages or the software they provide have strange names. For example the package that provides gvim (graphical vim) is called vim-X11. Or I installed “rxvt-unicode-256color-ml” because I wanted a urxvt with 256color-support. It isn’t started with urxvt like I am accustomed to but with urxvt256c-ml. And I wondered what went wrong when my mutt complained about missing colors. I understand the reason because then you can have standard urxvt also installed, still it is a bit weird imho.

So far, it doesn’t sound well. But, and here is a but again, there is some stuff I really enjoy. Using SELinux is a breeze. There are great tools that show you that something went wrong and how to fix it. IPtables is installed and pre-configured. There is a graphical tool to configure it further and it makes it really easy, even if you have no knowledge about IPtables. I like DNF as a package manager so far. Easy to use, good search, I like that it also removes unneeded dependencies by default etc. Fedora also uses Gnome-software which is like an App Store for Linux-software. It looks really nice and is easy to use. I will not really need it, since I like the command line but for browsing and finding new software it is nice.

I will need more time to get to a final conclusion. Thanks to the AUR Arch feels a bit more easier to use for me. But I like that I have now a more secure system. And I can experiment with stuff on my home machine I can later use at my job. Arch is nice for a desktop but I’d never install it on a server. There it will always be CentOS or Debian I guess…or some BSD. Thus for the time being I will stay with Fedora and I wonder how the upgrade to 24 will work out.

Some more experiences one week later.

Recently I switched to Linux. At first I used Linux Mint but it’s philosophy that there shouldn’t be dist-upgrade but a clean install every six months was not very comforting. Then I heard about Manjaro in an episode of Going Linux about Sonar GNU/Linux. Sonar is a distribution which is specialized for disabled people and they just switched from some distribution to Manjaro. In the episode I heard phrases like “Manjaro does for Arch what Ubuntu does for Debian”. Quite a claim. And since Arch is a rolling release and thus I didn’t have to worry about dist-upgrades anymore and Manjaro is based on Arch but in user-friendly, I gave it a try. Right on the frontpage of the Manjaro-website they boast there is the following sentence in big fat letters:

"Professional and user friendly Linux at its best."

Sounds great, so I tried it for a short time and my laptop worked with it fine. Thus I decided to abandon the Mint-install and switch to Manjaro and stay with it. I do not want to waste time with switching distributions, even so it is tempting.

Unfortunately Manjaro is user friendly for various degrees of user friendly. Let’s compare it to other distributions, I would call user friendly like Mint or Ubuntu[footnote]Ok, Mint is based on Ubuntu, so well…[/footnote]. I installed Mint and everything worked out of the box. I connected my external hard drives and could read and write to them, I connected my secondary display and in contrast to OS X it directly detected the correct resolution, if I needed some software, I could usually find a deb-package except Gnome Shell, stuff like i3 worked like I would expect it from the manual etc.

Then I started to install Manjaro. I know that it does not yet have reached the state of a 1.0 but it boasts to be user friendly. The graphical installer couldn’t be used by me because when I chose English as UI-language, I couldn’t choose a German locale. Thus I used the command line-based installer which is menu-driven. It worked but I needed the help of Google to set it all up with an encrypted hard drive. I ended up with an XFCe-desktop like I expected. Then I installed Gnome3 because that is actually the desktop I wanted to use and missed from Mint. That worked but suddenly the splash-screen was messy and when I switched to the TTYs I could see parts of the splash screens. The only way I could get rid of it, was to edit my grub-file, thus the splash-screen doesn’t show up anymore.

I tried using the graphical install-tool called Pamac which also supports AUR. AUR are the Arch User Repository. As far as I understand it there are official repositories but those have not a lot of software. So users can add new software via the AUR and with the package manager of Arch, you can easily install them. Unfortunately Pamac had quite often the problem that when I tried to install more than one package from the AUR or had to install dependencies, then it usually stopped working. But I could never got it fail consistently enough to write a bug report. Henceforth I abandoned it and started using the command-line tool called pacman. And learned how to use AURs. Later I found out about yaourt and packer which made my life easier. But really user-friendly is something else.

For more fun: I just learned about how to remove orphans with pacman in manjaro and it just removed git from my system.

Next thing: I installed vim. And when I installed it, it was quite a recent version, nothing like the old stuff Mint gives you (350 patches behind or so). There I had to compile my vim from hand to get something fairly recent. When I opened the first time a markdown-file my vim gave me errors that it is not compiled with python. Thus I had to google and found out that I have to install gvim because the vim-version just gives you a watered-down version and only gvim is compiled with (probably nearly) everything possible. Why? An Ubuntu or CentOS have for example various vim-packages like vim-tiny, vim, vim-gnome etc. So you can quite easily see what you get. I just wondered why my vim won’t work with python and had to google again. Please Manjaro, be friendlier to the user and tell her straight what she gets.

When I wanted to dip my foot into i3, I found a meta-package called i3. I thought that this is great and easily installed. Then I started i3, pushed win+d which should call up dmenu and nothing happened. I really wondered what the problem is. Searched the i3-manual and yes, that should call up dmenu. Well, dmenu wasn’t installed. The i3-meta package handles dmenu as optional because it isn’t required to install dmenu to run i3, even so the i3-user manual on the i3-website prominently speaks about dmenu. When you offer something like a meta-package, you shouldn’t offer a piece of software that is mentioned in the manual of that software only as an optional install but just install it. I didn’t install i3-wm, I installed i3. Yes, I oversaw that dmenu is optional but it shouldn’t be optional in the i3-package but should be included.

When I installed Openbox, it was pretty barebones, too. I expected the full experience since there is a Manjaro-edition with Openbox but nope, not really. And I cannot even find packages that give me a decent configuration.

After installing Gnome 3 I had to set up by myself that the laptop suspends when the lid gets closed. It is configured correctly in XFCe, so why don’t they apply configurations like this to other desktop environments as well?

My secondary display is not detected correctly and shows the same problem as in OS X. Now I have to figure out, how I get it to work in 1280x768 :(

But my absolute favorite is how Manjaro handles external hard drives. I have several disks that are formatted with ext4 and several with HFS+. When I connected the ext4-disks in Mint, I could just use them. Manjaro mounts them by default with user root and group root and the permissions that only they can write to them. Asking in the forums just led to what I could find easily: change by hand on the command line owner and permissions. I know that I can configure it somehow with udev and udisks. But why do I have to? Manjaro claims to be user friendly. It should work as a user expects it who comes from user friendly distributions or beware from Windows or OS X.

I do not expect behavior like that what I described above from Arch or Gentoo. Those distributions are not aiming to be user friendly in my opinion. But Manjaro states that it is. Thus the distribution developers/maintainers should think about the needs of true users. Right now Manjaro is like Arch but at least you have a ready available desktop environment and some applications after installing it. That makes it a bit more user friendly but it is far from user friendly.

I really like Manjaro. It is some work and I have to tinker and learn more about my system. And things work mostly the way I want them to work[footnote]There are some pieces of software I cannot get to work but I had the same problem on Mint with other pieces of software like Gnome 3.[/footnote] but I would not dare for example to install it on the laptop of my brother-in-law who asked to install Linux instead of Windows on his new used laptop. There I installed Ubuntu since I know from several non-technical persons that they have no real problems with it and could fix their problems easily. With Manjaro, well, I do not waste my time on more inner-family-support calls. But I will keep it on my laptop.

I had the problem that just using fprintd on my system as an authentication-method lead me to a state where I always had to input my fingerprint or fail three times until I could finally type my password. In the pam.d-config-files not fprintd should be used but fingerprint-gui. That works then also for the TTYs and when you have registered several fingers, you can use them all and not only your right index-finger for authentication. There is an Arch-How To for this: https://wiki.archlinux.org/index.php/Fingerprint-gui

When I installed the Android Developer Studio and started it, I got the message that OpenJDK has performance issues and that one should install the JDK/JRE by Oracle. Oracle offers only tar-balls and rpms, thus I needed to find a way to install it. Thanks to Google the solution wasn’t far away but for making it easier findable for me, I post the way I did it in the end here as well in a more generalized way.

Download the JDK from Oracle, then start by removing OpenJDK:

sudo apt-get update && apt-get remove “openjdk”

Then go to your downloads-directory and untar the tar.gz (tar -xzvf jdk-$version)

Create a folder in /opt for the jdk:

sudo mkdir -p /opt/java

Move the JDK to the folder:

sudo mv ~/Downloads/jdk$version /opt/java/

Make the JRE and JDK the default sudo update-alternatives –install “/usr/bin/java” “java” “/opt/java/jdk$version/bin/java” 1

sudo update-alternatives –set java /opt/java/jdk§version/bin/java

sudo update-alternatives –install “/usr/bin/javac” “javac” “/opt/java/jdk$version/bin/javac” 1

sudo update-alternatives –set javac /opt/java/jdk§version/bin/javac

First: huge thanks to @thatswinnie and @PhilippeLM . Winnie for pointing me to Philippe and Philippe for pointing me to the right forum-entries and his helpful posts to get it to work in Linux with 1Password 4 and Firefox. Supposedly it works with the Chrome-extension, too.

Please take note that this solution is not officially supported by AgileBits and can probably break with any update. But let’s hope that it doesn’t.

So 1Password is a pretty popular password-manager for OS X and there is also a version available for Windows. In addition there are great companion apps for iOS and Android[footnote]I am syncing the different installations with the help of Bittorrent Sync. OTA-sync with my own infrastructure. The iOS-version gets synced via iTunes.[/footnote]. Since I have licenses for all the versions, I wanted to continue to use it on Linux. But how?

First you have to install Wine. There should be a package for it in the package manager of your distribtion. Then start Wine once, so it can configure itself.

Next up, download 1Password for Windows and open the downloaded exe. It should be opened by Wine and start the installer. Just let it do its thing. Then you have to edit the following file ~/.wine/user.reg[footnote]The reg-files are representations of parts of the windows-registry for Wine.[/footnote] for disabling browser validation. Search for [Software\AgileBits\1Password 4] and add beneath it a new entry:

“VerifyCodeSignature”=dword:00000000

Save the file, open 1Password and restart the 1Password Helper. This option is in 1Password in Help - Restart 1Password Helper.

Then you have to download and install the Browser-Add On/extension from AgileBits. Restart your browser and it should work. I had to restart the 1Password Helper once more and after that it worked flawlessly for me.

Update: I have now my real machine and couldn’t get it to work even with this manual. To get the 1Password-extension working I had to open the preferences of 1Password, had to go to the Browsers-tab and check “Unlock on Secure Desktop”. After a restart of Firefox, it worked.