rockedge wrote: ↑Tue Feb 23, 2021 9:16 pm
I am putting together a NoteCase document on how to set up a Fossapup64 with the apt add-on SFS and install a LAMP and Zoneminder.
I've done it now more than a several times and am working on writing it down since I've noticed my notes on doing these things are lacking.
A question that just today comes to my mind is whether you arrange for zoneminder (and LAMP and so on) to run as root user or can it also be run as non-root, such as spot in the case of Puppy Linux?
The reason I suddenly ask is because I personally am about to change my habit of over a decade, in that I plan in future to autologin as non-root user and work from there. As you know, @rockedge, my usual desktop distro is WDL_Arch64, which can autologin by default as either root or weedog user. To change is a simple matter of running StartMenu -> userswitch. That will continue to be the case, as far as WDL_Arch64 is concerned - just that I am choosing to autologin personally as 'weedog' user from now on. Basically, I am going with the flow (mainline Linux distros) for various reasons: it has become complicated to run many apps if logged in as root user (for example: many browsers, including those that are chromium-based, Microsoft Teams and Skype - Arch AUR versions); despite never having been hacked whilst using Puppy or DebianDog or WDL_Arch64 when auto-logged-in as user root, I personally do not doubt it is safer to use any OS as non-root user.
It's true that it is wonderfully easy/convenient to pretty much always be user root... permission issues never arise and no need to type that word 'sudo' (though it is fair to say that using sudo in WDL_Arch64 is easy - unlike using sudo under the likes of, say, full Ubuntu, which is a horrible experience since Ubuntu seem to do everything to make that painful...). However, for those occasions when I really want to be root all the time, with WDL_Arch64, it is as I said a simple userswitch (which does not involve any reboot) to become so. Also, I can easily create a folder anywhere on my system (outside the save changes area) that can be owned by weedog user and group and contain as many sub-directories as I like - that way, for most of the dev work I do I don't even need to resort to 'sudo'.
Truth to tell, the reason this change of flow has come about is:
1. I noticed my two kids (8 and 15 years old) had independently adopted the habit of autologin as weedog (following an initial userswitch). This, it turns out, occurred naturally because they self-discovered that some large games and various animation software apps were only working out-of-the-box if run as normal user. And also because a lot of what they install comes from Arch AUR repo, which also only allows installations by non-root user; I think that's the main reason actually for their adopting 'weedog' user autoboot as their preference.
2. My partner uses WDL_Arch64 for all her business needs and, as I said, neither Skype nor Microsoft Teams would work out-of-the-box unless logged in as non-root user. Also, running business-critical software as root user does somewhat worry me in the ever-more-dangerous online world - particularly with web-browsers - more and more exploits out there now. She has been running as user root for a long time, so the issue is that her saved work is all owned by user/group root. Again, however, it was simple enough to create a /mnt/home/weedog directory owned by user/group weedog and copied all her previous work directories into that and recursively changed their user/group ownership from root:root to weedog:weedog. That /mnt/home/weedog folder can of course be shared with any other distro I use (albeit with the caveat that the user/group is best being weedog:weedog (which would be a problem to arrange for Puppy installs of course, but for the most part it is easier for me to work around that Puppy issue via chown root:root to weedog:weedog whenever I finish using Pups with that 'shared' weedog directory).
May sound complex, but actually simplicity itself. Much harder in practice to arrange Msoft Teams, Skype, ChromXXX browser, etc etc to run as user root.
Admittedly, I am also a fan of pulseaudio...
and I find that systemd works very well and is less messy to configure and administer than old SysVinit, though I actually 'really' like runit alternative too (as used in Void Linux, and thus by default in WeeDog Void variants). Though, therefore, I am not against systemd, I nevertheless do like choice, so very happy not every distro uses systemd (though runit a far better alternative than old messy sysvinit to be frank).
So, despite my distro designs being far from conventional and weedog overlayfs being independent and unique, I am becoming almost embarrassingly conventional when it comes to my preference for non-root login, pulseaudio, and (when not using runit) systemd. As we know, it is tricky to use the likes of apt on non-systemd machines - though of course that can be done and improved upon via appropriate dummy package apt pinning.
Of course there is nothing to stop WeeDog distro users choosing to autologin as root user and use the various established mechanisms for running apps such as chromium-based browsers from that --no-sandbox or special non-root-user perspective and so on... just that it is easier, I feel, to go with the conventional non-root user flow in this case IMO. An alternative approach is to use 'containers', such as in EasyOS. Void Linux provides a lean/lightweight container implementation (as a Void package)
https://github.com/void-linux/void-pack ... s/template
https://github.com/arachsys/containers
in addition to the alternative of using LXC or Docker (and also, therefore can be adopted by WeeDogLinux Void variants) though I've never tried it since that additional layer of complexity is more than I personally feel the need for.
wiak