this post was submitted on 21 Jan 2026
210 points (97.7% liked)
Linux
61465 readers
389 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 6 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
My biggest challenge is really around Podman on Bazzite. It is just different enough from Docker to be annoying. I had the system lock up, and the Podman containers / pods (whatever you want to call them) would not launch. In fact, the system claimed they didn't even exist. I was looking for the files and logs all over to try to figure it out. I ended up doing a clean shutdown and restart and then the container started without issue.
The second issue I have is also related to my Jellyfin container/pod. I have gone through all the recommended settings and troubleshooting, adding permissions exceptions, all the podman settings, and I still cannot get it to take advantage of the Nvidia acceleration unless I put SELinux in permissive mode, which the Internet says is a bad thing.
Other than, honestly Bazzite has been great as my daily driver for about 4 months now.
I am also The Internet, and I say unless it is an internet-exposed service, just do it. More security is never bad of course, but process isolation and privilege escalation prevention is pretty low on the list of security measures you should focus on. First thing, unless it's meant to be a "public" service (one that someone without pre-authorization may access), it shouldn't be exposed to the internet at all, and that alone brings the threat model from "definitely will be scanned and automatically attacked, decent chance it gets pwnd if you don't have good passwords and update often" to "someone needs to be both skilled and targeting you". Spend an afternoon or two setting up a VPN so you can access your services from wherever, and share them with select people.
SELinux is the cause of many headaches, and its main proposition is against untrusted code or in a shared system. If it's your box, in your network, and you're not aiming for a Red Hat certification, it's ok to disable it.