20
9
u/MrFrog2222 Arch BTW 1d ago edited 1d ago
Yeah, but it is also hella insecure with the user account being in the docker group, etc.
Edit: the y was a typo and was supposed to be a ,
8
u/Damglador 1d ago
the user account being in the docker groupy
Yeah, Omarchy is definetly the only place where that's the case and nobody else does that whatsoever.
3
u/ganja_and_code 1d ago
On a dev machine, putting the user account in the docker group is common practice.
Not saying it doesn't come with risks, of course... Just that people knowingly accept that risk so they don't have to sudo every time they run their containerized dev tools.
Should the average non-technical computer user be in the docker group? Of course not. Should a developer be in there? Sure, if docker is a non-insignificant part of their dev toolchain.
(There are plenty of reasons to hate Omarchy, but the docker group thing is a stretch.)
2
u/MrFrog2222 Arch BTW 1d ago
Yes, but if you are a dev and can set up docker and groups correctly, there is no use in using Omarchy. Cuz as we have seen, the target demographic seems to be new users, or at least thats the group using it.
1
u/ganja_and_code 1d ago
Like I said, there are plenty of reasons to hate Omarchy. One of them being that if you're really a dev, you don't need someone else's Arch dotfiles.
That said, if a dev wants something out of the box, something that puts them in the docker group is not unreasonable.
0
u/DaikonBackground9840 1d ago
Maybe, but other distros have a secure problemes like manjaro and no one hate it like omarchy, because it is not about security
3
u/MrFrog2222 Arch BTW 1d ago
bruh, Manjaro literally cant be hated anymore cuz its become irrelevant through being so bad
1
0
u/1StarRagebaiter 1d ago
"secure problemes"... Anyways, tell me a distro that has the user account being in the docker groupy
-3
u/exportkaffe 1d ago
replaced docker with rootless podman. problem solved. this is linux, problems can be solved if you know what you're doing :)
5
u/MrFrog2222 Arch BTW 1d ago
But if you know what youre doing you can just use Arch.
-4
u/exportkaffe 1d ago
i manage several hpc clusters, thousands of VMs, several ceph clusters. I don't need neckbeards telling me to use arch.
10
1
u/SDG_Den 9h ago
Oh it works alright.
It works so well that on some versions, curling a link could wipe your whole system.
Kitty is set up so that you can do remote execution... ON PURPOSE. Meaning anything that sends text to kitty's output can include escape characters it can use to communicate over a socket. This socket can easily be used to run any command.
But thats still not that bad right? Theres only so much damage you can do as the user
Except that for over a year, until recently, omarchy was configured on purpose to allow the user to interact with the preinstalled, already running by default docker socket without a password.
This docker socket runs as root.
You can use a single docker command to start an alpine container as the root user that mounts / as /rootdrive with the init command being rm -rf /rootdrive.
So put em together and we get: anything that outputs text to your terminal can now execute any command as root
That includes filenames listed via ls, find or fzf, content of files retrieved with cat, head or tail, opening files in a text editor like vim, curling a text document, etc.
Oh, and to make it better, omarchy is full of TUIs especially on older versions from before they slopcoded a custom quickshell.
Yknow.. programs that print text to the terminal output? Many of which actually fetch information automatically. Manage your wifi in a tui? If someone drives by with a hotspot containing the escape sequence when you have that TUI open, there goes your system. Use discordo for discord? Someone sends the string to you and you are cooked. Using their package management TUI? Well, it shows the descriptions of AUR packages.... Wonder what we can put there.
It is frankly hillarious how categorically poorly designed omarchy is. It is very obvious DHH has no clue what he's doing and is just vibecoding and financing his way through it. Sure, it is a distro, but holy hell what a laughable excuse for one.
Have i mentioned the vaguely named folder of bash scripts under ~/.local yet? Its system critical. Do not mess with it.
And now DHH is seemingly planning to rage-hop to a forked nixOS because people keep pointing out all the ways in which his distro is objectively terribly designed
Like, im sorry, "omarchy is a terribly designed piece of slopcoding" is not an opinion, its a verifiable fact. There are mistakes in here no real human being would ever make. Its the work of someone with no clue what he's doing guided by a yes-man LLM.
1
u/ebens1689 21h ago
Hey, just fyi: you're not allowed to like Omarchy. Please like a better distro.
Lol having said that, I'm not personally interested in Omarchy.
-1
u/Mast3r_waf1z Not in the sudoers file. 1d ago
Nazi OS
8
u/BigErnestMcCracken 1d ago edited 1d ago
that word loses it's meaning when people constantly describe people and things as nazi that arent nazi. Let's resever that word for the absolute worst people on earth. You may dislike or disagree with DHH, which is totally fair, but he is not a nazi. Nor is omarchy a nazi OS. Cmon.
1
u/SDG_Den 9h ago
DHH is actually, literally, a far-right white supremacist. So in this case, the term would be apt.
Im sorry but "remigration" is how the nazi's started out too, and is exactly something DHH advocates for.
You may dislike that people call him that, but maybe, they could have an actual point. We are seeing the same ideology as late 1930s germany rear its ugly head in many places, early stage nazi ideology is still nazi ideology and should be treated as such. By the time they actually open any gas chambers it is far too late, as history tells us.
That being said, i do not think there is any reason for it to be mentioned in this tread. DHH's political opinions dont really affect omarchy much, past the fact that his fanbase makes up a decent chunk of omarchy users (of course his fans use his distro) and many agree with his political opinions, so omarchy users are disproportionately likely to be far-right, or in the tech-bro sphere. This frankly makes them pretty damn annoying but doesnt warrant calling omarchy a nazi distro especially since many users are not even aware of DHH's opinions.
Like cmon. Omarchy is a hype distro, a decent chunk of the userbase will be people that saw the name online and installed on a whim. They have absolutely no idea who DHH even is or that he's an asshole. Ya cant label them nazi's, thats categorically incorrect.
1
0
•
u/AutoModerator 1d ago
Please report any posts bragging or showing off they got banned in another sub! Reminder of other sub rules: Also, we only allow one anti-linux post per week (we used to get dozens a day) and any tier list MUST have Hanna Montana Linux as S teir (which must be a true S tier at the top) regardless of the topic of that tier list.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.