If I understand correctly, one of the big concerns about LLM is the loss of control. In practice, this is already happening on a small and medium scale. I’ve seen teams that repeatedly generate the code for an entire package just to change details, simply because they lost control over the code. Fortunately, some are already aware of that risk.

The other thing is that this technology is very resource-intensive, especially memory and storage. This will make it even harder for many people to acquire new hardware. It’s interesting to see how the NetBSD community is already taking steps to avoid unnecessary hardware upgrades:
https://mastodon.bsd.cafe/@stefano/117184030718497114

mkfs.vfat /dev/sda1
mkdir /boot/efi
mount /dev/sda1 /boot/efi
mkfs.ext4 /dev/sda2
mount /dev/sda2 /home
mkfs.ext4 /dev/sda3
mount /dev/sda3 /root
mkswap /dev/sda4
swapon /dev/sda4
mkfs.ext4 /dev/sda5
mount /dev/sda5 /

pacstrap /mnt base base-devel
genfstab -U /mnt >> /mnt/etc/fstab
arch-chroot /mnt /bin/sh
nano /etc/fstab
ln -sf /usr/share/zoneinfo/*/* /etc/localtime
hwclock --systohc
nano /etc/locale.conf
nano /etc/locale.gen
locale-gen
nano /etc/hostname
nano /etc/hosts
passwd

Now I need to install the refind and probably efibootmgr packages, but then what? If I simply enter refind-install the kernel will not start (which is logical).

LoongArch is an alternative choice to x86. It is a clean, libre-friendly RISC architecture with good performance.

It has no nonfree firmware shipped by the CPU by default, and the official PMON and UEFI are both libre.

# Maintainer (Arch): Maxime Gauduin <alucryd@archlinux.org>
# Contributor (Arch): Bartłomiej Piotrowski <bpiotrowski@archlinux.org>
# Contributor (Arch): Ionut Biru <ibiru@archlinux.org>
# Contributor (Arch): Tom Newsom <Jeepster@gmx.co.uk>
# Contributor (Arch): Paul Mattal <paul@archlinux.org>
# Maintainer: André Silva <emulatorman@hyperbola.info>
# Contributor: Tobias Dausend <throgh@hyperbola.info>

# edit by irina, take 5. lv2, glslang, rubberband, flite don't work. update to 4.4.5. avcodfec-arm pre-patch

pkgname=ffmpeg
pkgver=4.4.5
pkgrel=1
epoch=2
pkgdesc='Complete solution to record, convert and stream audio and video'
arch=(x86_64)
url=https://ffmpeg.org/
license=(GPL-3)
depends=(
  alsa-lib
  aribb24
  avisynthplus
  bzip2
  celt
  fontconfig
  frei0r-plugins
  freetype2
  fribidi
  gmp
  lame
  ladspa
  libass
  libavc1394
  libbluray
  libbs2b
  libcaca
  libcdio
  libcdio-paranoia
  libdc1394
  libdrm
  libgme
  libiec61883
  libmodplug
  libomxil-bellagio
  libopenmpt
  libraw1394
  librsvg-legacy
  libsoxr
  libtheora
  libvorbis
  libx11
  libxcb
  libxext
  libxml2
  libxv
  mesa
  openal
  opencore-amr
  openjpeg2
  sdl2
  speex
  twolame
  v4l-utils
  vid.stab
  vmaf
  x264
  x265
  xcb-util-cursor
  xcb-util-image
  xvidcore
  xz
  zimg
  zlib
  zvbi
)
makedepends=(
  clang
  nasm
  quilt
)
source=(
  "https://ffmpeg.org/releases/ffmpeg-${pkgver}.tar.xz"
  "0001-libavutil-clean-up-unused-FF_SYMVER-macro.patch"
  "0001-ffbuild-libversion.sh-add-shebang.patch"
  "vmaf-model-path.patch"
)
sha512sums=('70df4e63ef507a7ec76da34438142499139769728fd5130d9cf48d56c110ec82c3d6a7e6d1622da03c70167fa861d901d016bbe52c21d2b284b8a0d9f30811dc'
            '1047a23eda51b576ac200d5106a1cd318d1d5291643b3a69e025c0a7b6f3dbc9f6eb0e1e6faa231b7e38c8dd4e49a54f7431f87a93664da35825cc2e9e8aedf4'
            '38443b570cf32b2ba8ffa9ecc5480425c7da9f93f9773fbb3f9ec5f603b369b6225f4329a1b1f34d0ef30b2c9730f25ff9cff31315ed0a89a600df8e53bd54bf'
            'd3675fdba67f91c7af7a891f98e5284986107acc333ac29512d4797ca42cf7ebd99025df3a91c76a3f4325d806f94a63ba6ffb1a2edf80bf9ce09c350b3cd06e')

prepare() {
  cd ffmpeg-${pkgver}

  patch -Np1 -i "${srcdir}"/0001-libavutil-clean-up-unused-FF_SYMVER-macro.patch
  patch -Np1 -i "${srcdir}"/0001-ffbuild-libversion.sh-add-shebang.patch
  patch -Np1 -i "${srcdir}"/vmaf-model-path.patch
}

build() {
  cd ffmpeg-${pkgver}

  if [[ $CARCH = i686 ]]; then
    EXTRAOPTS="--disable-lto --disable-libvmaf --enable-pic --disable-asm"
  else
    EXTRAOPTS="--enable-xlib --enable-zlib"
  fi

  ./configure \
    --prefix=/usr \
    --disable-debug \
    --disable-static \
    --disable-stripping \
    --fatal-warnings \
    --toolchain=hardened \
    --enable-alsa \
    --disable-amf \
    --disable-appkit \
    --enable-asm \
    --disable-audiotoolbox \
    --disable-avfoundation \
    --enable-avisynth \
    --disable-bsf=av1_frame_merge \
    --disable-bsf=av1_frame_split \
    --disable-bsf=av1_metadata \
    --disable-bsf=opus_metadata \
    --enable-bzlib \
    --disable-chromaprint \
    --disable-coreimage \
    --disable-cuda-llvm \
    --disable-cuda-nvcc \
    --disable-cuvid \
    --disable-d3d11va \
    --disable-decklink \
    --disable-decoder=av1 \
    --enable-decoder=libvorbis \
    --disable-decoder=opus \
    --disable-decoder=vorbis \
    --disable-decoder=vp8 \
    --disable-decoder=vp8_v4l2m2m \
    --disable-decoder=vp9 \
    --disable-decoder=vp9_v4l2m2m \
    --disable-decoder=webp \
    --disable-demuxer=av1 \
    --disable-demuxer=obu \
    --disable-demuxer=webm_dash_manifest \
    --disable-demuxer=image_webp_pipe \
    --disable-dxva2 \
    --enable-encoder=libvorbis \
    --disable-encoder=opus \
    --disable-encoder=vorbis \
    --disable-encoder=vp8_v4l2m2m \
    --disable-ffnvcodec \
    --disable-filter=arnndn \
    --disable-filter=derain \
    --disable-filter=dnn_processing \
    --disable-filter=nnedi \
    --disable-filter=sr \
    --enable-frei0r \
    --disable-gcrypt \
    --enable-gmp \
    --disable-gnutls \
    --enable-gpl \
    --enable-hardcoded-tables \
    --enable-iconv \
    --disable-jni \
    --enable-ladspa \
    --disable-libaom \
    --enable-libaribb24 \
    --enable-libass \
    --enable-libbluray \
    --enable-libbs2b \
    --enable-libcaca \
    --enable-libcdio \
    --enable-libcelt \
    --disable-libcodec2 \
    --disable-libdav1d \
    --disable-libdavs2 \
    --enable-libdc1394 \
    --enable-libdrm \
    --disable-libfdk-aac \
    --disable-libflite \
    --enable-libfontconfig \
    --enable-libfreetype \
    --enable-libfribidi \
    --disable-libglslang \
    --enable-libgme \
    --disable-libgsm \
    --enable-libiec61883 \
    --disable-libilbc \
    --disable-libjack \
    --disable-libklvanc \
    --disable-libkvazaar \
    --disable-liblensfun \
    --disable-libmfx \
    --enable-libmodplug \
    --enable-libmp3lame \
    --disable-libmysofa \
    --disable-libnpp \
    --enable-libopencore_amrnb \
    --enable-libopencore_amrwb \
    --disable-libopencv \
    --disable-libopenh264 \
    --enable-libopenjpeg \
    --enable-libopenmpt \
    --disable-libopenvino \
    --disable-libopus \
    --disable-libpulse \
    --disable-librabbitmq \
    --disable-librav1e \
    --disable-librist \
    --enable-librsvg \
    --disable-librtmp \
    --disable-librubberband \
    --disable-libshine \
    --disable-libsmbclient \
    --disable-libsnappy \
    --enable-libsoxr \
    --enable-libspeex \
    --disable-libsrt \
    --disable-libssh \
    --disable-libsvtav1 \
    --disable-libtensorflow \
    --disable-libtesseract \
    --enable-libtheora \
    --disable-libtls \
    --enable-libtwolame \
    --disable-libuavs3d \
    --enable-libv4l2 \
    --enable-libvidstab \
    --enable-libvmaf \
    --disable-libvo_amrwbenc \
    --enable-libvorbis \
    --disable-libvpx \
    --disable-libwebp \
    --enable-libx264 \
    --enable-libx265 \
    --disable-libxavs \
    --disable-libxavs2 \
    --enable-libxcb \
    --enable-libxcb-shm \
    --enable-libxcb-xfixes \
    --enable-libxcb-shape \
    --enable-libxml2 \
    --enable-libxvid \
    --enable-libzimg \
    --disable-libzmq \
    --enable-libzvbi \
    --enable-lto \
    --disable-lv2 \
    --enable-lzma \
    --disable-mbedtls \
    --disable-mediacodec \
    --disable-mediafoundation \
    --disable-mmal \
    --disable-muxer=opus \
    --disable-muxer=webm \
    --disable-muxer=webm_chunk \
    --disable-muxer=webm_dash_manifest \
    --disable-muxer=webp \
    --disable-network \
    --disable-nvdec \
    --disable-nvenc \
    --enable-omx \
    --disable-omx-rpi \
    --enable-openal \
    --disable-opencl \
    --enable-opengl \
    --disable-openssl \
    --disable-parser=av1 \
    --disable-parser=opus \
    --disable-parser=vp8 \
    --disable-parser=vp9 \
    --disable-parser=webp \
    --disable-pocketsphinx \
    --disable-rkmpp \
    --disable-schannel \
    --enable-sdl2 \
    --disable-securetransport \
    --enable-shared \
    --disable-sndio \
    --disable-vaapi \
    --disable-vapoursynth \
    --disable-vdpau \
    --enable-version3 \
    --disable-videotoolbox \
    --disable-vulkan \
    --disable-w32threads \
    $EXTRAOPTS \

  make
  make tools/qt-faststart
  make doc/ff{mpeg,play}.1
}

package() {
  cd ffmpeg-${pkgver}

  make DESTDIR="${pkgdir}" install install-man
  install -Dm 755 tools/qt-faststart "${pkgdir}"/usr/bin/
  install -Dm 644 COPYING.GPLv3 "${pkgdir}"/usr/share/licenses/${pkgname}/COPYING.GPLv3
}

I looked through all of the interior FFmpeg options and tried to suss out enabling/disabling stuff to explicitly deny neural net code/opus/webp/vp8/vp9 and related kinda stuffs, also removing jack going for pure ALSA, while also enabling some thing i remember being not included in Hyperbola's ffmpeg such as celt, caca, and such. those could be re-disabled to bring in line with stable Hyperbola, but I'm proud of all the explicit enable/disable options ^^ I wanted my ffmpeg to be made completely free of AI type code and to report on all options when called with "ffmpeg -v"
i think i did this before 4.4.5 came out for Hyperbola? so wonder if i'm missing a patch or something from there, too.

compared against: https://git.hyperbola.info:50100/packag … g/PKGBUILD

mostly i believe options such as

 --disable-filter=arnndn \
    --disable-filter=derain \
    --disable-filter=dnn_processing \
    --disable-filter=nnedi \

and related settings are my primary contributions that could possibly be added to the baseline FFmpeg, maybe?
I'm aware i could clean up that pkgbuild and will later once i manage to get Hyperbola reinstalled... i ignored i686 options but could rewrite it so that they can cleanly be parsed again. maybe could install a 32bit version on my 64bit laptop to see afterwards too. a primary goal was keeping the options alphabetized for easier reading

wxgtk3.2 PKGBUILD:

# Maintainer (Arch): Eric Bélanger <eric@archlinux.org>
# Maintainer: André Silva <emulatorman@hyperbola.info>
# Contributor: Tobias Dausend <throgh@hyperbola.info>
# Maintainer: Allen123456hello
# Based on wxgtk package

pkgbase=wxgtk3.2
pkgname=('wxgtk3.2-gtk2' 'wxgtk3.2-gtk3' 'wxgtk3.2-common')
pkgver=3.2.9
_debver=$pkgver
_debrel=1
pkgrel=1
arch=('i686' 'x86_64')
url='https://wxwidgets.org'
license=('wxWindows-Library-3.1')
makedepends=('gst-plugins-base' 'glu' 'gtk' 'gtk2' 'quilt')
options=('!emptydirs')
source=(https://github.com/wxWidgets/wxWidgets/releases/download/v$pkgver/wxWidgets-${pkgver}.tar.bz2
        https://deb.debian.org/debian/pool/main/w/wxwidgets3.2/wxwidgets3.2_${_debver}+dfsg-${_debrel}.debian.tar.xz)
sha512sums=('6fe5caa3deaa02df0ef1891e417625b7719cffc9968a2d43e5fbca349ec9fdb8d4fc85fb422f835df751af3a816f946fb9d0d008163924be1669e54ce2346df7'
            '9905ad6dd8c73ceecae6125916b6fb37691b0a91710f95717dd5881bb3e12328f0dab55e4a1844471931ee2e41ccb9e08b4830bb5094b6a648387110557609c5')

prepare() {
  cd wxWidgets-$pkgver

  if [[ ${pkgver%.*} = ${_debver%.*} ]]; then
    # Debian patches
    export QUILT_PATCHES=debian/patches
    export QUILT_REFRESH_ARGS='-p ab --no-timestamps --no-index'
    export QUILT_DIFF_ARGS='--no-timestamps'

    mv "$srcdir"/debian .

    quilt push -av
  fi

  cd ..
  cp -r wxWidgets-$pkgver wxWidgets-$pkgver-gtk3
}

build() {
  cd wxWidgets-$pkgver
  ./configure --prefix=/usr --libdir=/usr/lib --with-gtk=2 --with-opengl --enable-unicode \
    --enable-graphics_ctx --enable-mediactrl --with-regex=builtin \
    --with-libpng=sys --with-libxpm=sys --with-libjpeg=sys --with-libtiff=sys \
    --disable-precomp-headers --with-libnotify=no
  make
  make -C locale allmo

  cd ../wxWidgets-$pkgver-gtk3
  ./configure --prefix=/usr --libdir=/usr/lib --with-gtk=3 --with-opengl --enable-unicode \
    --enable-graphics_ctx --enable-mediactrl --with-regex=builtin \
    --with-libpng=sys --with-libxpm=sys --with-libjpeg=sys --with-libtiff=sys \
    --disable-precomp-headers --with-libnotify=no
  make
}

package_wxgtk3.2-common() {
  pkgdesc='Common libraries and headers for wxgtk2 and wxgtk3'
  depends=('zlib' 'gcc-libs' 'expat')

  cd wxWidgets-$pkgver
  make DESTDIR="$pkgdir" install
  rm -r "$pkgdir"/usr/{bin/wx-config,lib/{wx,libwx_gtk*}}

  # Fix conflicting files
  mv "$pkgdir"/usr/bin/wxrc{,3.2}
  mv "$pkgdir"/usr/share/aclocal/wxwin{,3.2}.m4
  rm -r "$pkgdir"/usr/share/bakefile

  install -D -m644 docs/licence.txt -t "$pkgdir"/usr/share/licenses/$pkgname
}

package_wxgtk3.2-gtk2() {
  pkgdesc='GTK+2 implementation of wxWidgets API for GUI'
  depends=('gtk2' 'libgl' 'gst-plugins-base-libs' 'libsm' 'libxxf86vm' 'wxgtk-common')

  cd wxWidgets-$pkgver
  make DESTDIR="$pkgdir" install
  rm -r "$pkgdir"/usr/{include,share,lib/libwx_base*,bin/wxrc*}

  mv "$pkgdir"/usr/bin/wx-config{,3.2}
  
  install -D -m644 docs/licence.txt -t "$pkgdir"/usr/share/licenses/$pkgname
}

package_wxgtk3.2-gtk3() {
  pkgdesc='GTK+3 implementation of wxWidgets API for GUI'
  depends=('gtk' 'gst-plugins-base-libs' 'libsm' 'libxxf86vm' 'wxgtk-common')

  cd wxWidgets-$pkgver-gtk3
  make DESTDIR="$pkgdir" install  
  rm -r "$pkgdir"/usr/{include,share,lib/libwx_base*,bin/wxrc*}
  mv "$pkgdir"/usr/bin/wx-config{,3.2-gtk3}
   
  install -Dm644 docs/licence.txt -t "$pkgdir"/usr/share/licenses/$pkgname
}

tenacity PKGBUILD:

# Maintainer (Arch): Christian Heusel <christian@heusel.eu>
# Contributor (Arch): Frederik “Freso” S. Olesen <archlinux@freso.dk>
# Contributor (Arch): Luke Huckman (Darkpelz) <lukeh@outlook.my>
# Contributor (Arch): Fabio 'Lolix' Loli <fabio.loli@disroot.org> -> https://github.com/FabioLolix
# Contributor (Arch): fossdd <fossdd@tutanota.com>
# Contributor (Arch): Ong Yong Xin <ongyongxin2020+github AT gmail DOT com>
# Contributor (Arch): Bernhard Landauer <oberon@manjaro.org>
# Contributor (Arch): Eric Bélanger <eric@archlinux.org>
# Contributor: Allen123456hello

pkgname=tenacity
pkgver=1.3.4
_nyquistver=20260523
pkgrel=1
pkgdesc="A free/libre easy-to-use multi-track audio editor and recorder without telemetry, forked from Audacity"
arch=(i686 x86_64)
url="https://tenacityaudio.org"
license=("GPL-2.0-or-later")
provides=('audacity')
replaces=('audacity')
conflicts=('audacity')
# Hyperbola already uses ffmpeg 4.4.*
depends=('expat' 'gcc-libs' 'gdk-pixbuf2' 'glibc' 'libmad'
         'libsoxr' 'portsmf' 'soundtouch' 'vamp-plugin-sdk'
         'twolame' 'wxgtk3.2-gtk3')
makedepends=('alsa-lib' 'cmake' 'ffmpeg' 'flac' 'glib2' 'gtk' 'jack' 'lame'
             'libid3tag' 'libogg' 'libsndfile' 'libvorbis' 'lilv' 'lv2' 'portsmf' 'suil'
             'twolame' 'vamp-plugin-sdk' 'git' 'nasm' 'quilt')
optdepends=('ffmpeg: additional import/export capabilities')
source=(${pkgname}-v${pkgver}.tar.gz::"https://codeberg.org/tenacityteam/tenacity/archive/v$pkgver.tar.gz"
        libnyquist-snapshot-v${_nyquistver}.tar.gz::"https://codeberg.org/Allen123456hello/libnyquist-snapshot/archive/v${_nyquistver}.tar.gz")
sha512sums=('75adae4da374084fd93063d146b4d7d97812e28bedb6c0c7699afc1e543352734b92072ed0bfc800eb79ba8f71695ff823b70f3469cf4dd157f36e24c0f52d10'
            'b0d39b2461d0a6dade6d829649599422ba194212f5a3026e51657725bd6bec6471e8a633df2c4fb0069d36bda14341cf5ac830daafc08ca79a7bb46e152072be')

prepare() {
  cd ${srcdir}
  mkdir build
  mv ${pkgname} ${pkgname}-${pkgver}
  cd ${pkgname}-${pkgver}/lib-src/
  rm -d libnyquist
  ln -s ../../libnyquist-snapshot libnyquist -rv
}

build() {
  cd ${srcdir}/build
  export WX_CONFIG=wx-config3.2-gtk3
  cmake ../${pkgname}-${pkgver} \
    -D CMAKE_BUILD_TYPE=Release \
    -D CMAKE_INSTALL_PREFIX=/usr \
    -D VCPKG=Off \
    -W no-dev
  make
}

package() {
  cd ${srcdir}
  make -C build DESTDIR="$pkgdir" install

  test -f ${pkgdir}/usr/tenacity && rm ${pkgdir}/usr/tenacity # remove unused launch script

  install -Dm644 ${srcdir}/build/bin/Release/plug-ins/*.ny -t "${pkgdir}/usr/share/${pkgname}/plug-ins"
  install -Dm644 ${srcdir}/build/bin/Release/nyquist/*.lsp -t "${pkgdir}/usr/share/${pkgname}/nyquist"

  mv "${pkgdir}/usr/share/pixmaps/gnome-mime-application-x-audacity-project.xpm" \
     "${pkgdir}/usr/share/pixmaps/gnome-mime-application-x-tenacity-project.xpm"

  install -Dm644 "${pkgname}-${pkgver}/LICENSE.txt" -t "${pkgdir}/usr/share/licenses/$pkgname"
}

Tested using a public

exp.c

Not providing the exploit here because it does not have a license.

Solution:

Cherry-pick patches to fix the kernel, or alternatively, update the kernel.

Workaround:

sh -c "printf 'install esp4 /bin/false\ninstall esp6 /bin/false\ninstall rxrpc /bin/false\n' \
  > /etc/modprobe.d/dirtyfrag.conf; \
  rmmod esp4 esp6 rxrpc 2>/dev/null; \
  echo 3 > /proc/sys/vm/drop_caches; true"
reboot

Some of you may have heard that GTK2 is being revived. Since Hyperbola already prefers GTK2 software, I thought this might be interesting here.

The repo is currently hosted on Devuan's Git server:
https://git.devuan.org/Daemonratte/gtk2-ng

The goal of gtk2-ng is simple: keep GTK2 alive, modernize the code where needed, fix compiler and deprecation warnings, and make sure it keeps building and working on modern systems.

The important part is that we do not want to break ABI. If a program built for vanilla GTK2 does not run properly with gtk2-ng, we consider that a bug in gtk2-ng.

There are also bigger plans around this. We want to revive GTK2-based versions of desktop environments like LXDE, GNOME 2 and XFCE, and also fork / maintain GTK2 versions of programs that moved away from GTK2, such as GIMP, Inkscape, AbiWord, Gnumeric, and others.

Another idea is to bring GtkMozEmbed back for Pale Moon's engine. That could make it possible to revive Galeon as a real GTK2 browser again.

This is still early work, but testing, feedback, ideas and patches would be very welcome.

Edit:
In case this helps with packaging for Hyperbola, someone already added gtk2-ng to the AUR:
https://aur.archlinux.org/packages/gtk2-ng-git

They seem to have applied a patch that was already merged on our side, though.

I think our kernel is affected right now.

Would be wise to update it.

I also tend to find myself replacing selfhosted services with public ones. And I have realized that this is an antipattern for me because i realized that there is always a trade-off when you use a public service instead of a selfhostted one. This has made me motivated to selfhost alot more and pay the time and money to do so because if i dont pay the selfhosting tax which is predictable i will get unpredictable results from public services and selfhosting well is the most proper way anyway

https://drewdevault.com/2026/03/28/2026 … rsync.html

  https://codeberg.org/small-hack/open-slopware

https://drewdevault.com/2026/03/25/2026 … g-vim.html

All the best

All the best

I believe Dragora and Hyperbola are the only self-hosting and online-capable (meeting these two criteria is crucial for development) distributions that are 100% free of udev and blobs by default? Another question I had is that Dragora seems to be considered the only independently compiled FSF-approved distribution for PCs, but I thought that Hyperbola also is.

It is not perfect as a few softwares such as Only Office are marked as free even if they are not. However, a lot of FLOSS softwares are now using only Flapak as an official way to install them.