Sandboxing in systemd? I would’ve shown my (somewhat manual) method but then I was strolling through the GitHub and saw shh (systemd hardening helper). It uses strace to generate suggestions. You’ll need to be extremely careful, playing inside a sandbox summons debugging hell. I tried it briefly.

Another wandering soul whispering into the void. If you are looking for my blog you are in the wrong place. The profile and header pictures are brought to you by cdd20.

Another wandering soul whispering into the void. If you are looking for my blog you are in the wrong place. The profile and header pictures are brought to you by cdd20.
The nix
packages collection has a
neat library repository. A small
nudge can
make it completely standalone.
Basically it allows experimenting quickly with configuration patterns for custom
stuff without an expensive evaluation.

Another wandering soul whispering into the void. If you are looking for my blog you are in the wrong place. The profile and header pictures are brought to you by cdd20.
Why dabble with Firefox? Everything is customizable. How long will this be so? Who knows. , I have custom stylesheets that hide comments everywhere (Firefox/Chrome) among other things. “Experts” only?
about:debugging#/runtime/this-firefox
chrome://browser/content/browser.xhtml
toolkit.legacyUserProfileCustomizations.stylesheets true

Another wandering soul whispering into the void. If you are looking for my blog you are in the wrong place. The profile and header pictures are brought to you by cdd20.
This graph is from Grafana. It’s moreso for developer operations. I used to use qtiplot for random stuff, but nowadays I use gnuplot for scriptability (not GNU, see demos). Then, there’s Microsoft Excel .