Fosstodon

Thomas Liske<a href="https://ibh.social/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a> 3.11 was recently released: <a href="https://github.com/liske/needrestart/releases/tag/v3.11" rel="nofollow noopener" translate="no" target="_blank">https://github.com/liske/needrestart/releases/tag/v3.11</a>This small release fixes warnings if no cgroup could be determined for processes. It also allows to ignore containers by their names and to customize the globs used to search for linux kernel images.It was uploaded to Debian unstable just in time before the soft freeze for Debian trixie started on 2025-04-15 😅 Today it has migrated to trixie 🥳 <a href="https://ibh.social/tags/debian" class="mention hashtag" rel="nofollow noopener" target="_blank">#debian</a> <a href="https://ibh.social/tags/trixie" class="mention hashtag" rel="nofollow noopener" target="_blank">#trixie</a> <a href="https://ibh.social/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a>

Christian PietschPSDer Autor von <a href="https://fedifreu.de/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a> ist hier: <a href="https://ibh.social/@liske" class="u-url mention" rel="nofollow noopener" target="_blank">@liske</a> Und ganz nebenbei hat er die <a href="https://dresden.network/@dd_ix" class="u-url mention" rel="nofollow noopener" target="_blank">@dd_ix</a> mitgegründet!

Christian PietschLately I've been doing more <a href="https://fedifreu.de/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a> again due to the current situation. Of course, I'm paying particular attention to power consumption and noise. After good experiences with the <a href="https://fedifreu.de/tags/ARM64" class="mention hashtag" rel="nofollow noopener" target="_blank">#ARM64</a> architecture, even with power-hungry applications such as <a href="https://fedifreu.de/about" rel="nofollow noopener" target="_blank">Mastodon</a>, I'm now using the smartphone technology for my homeservers, too.There are <a href="https://fedifreu.de/tags/SBCs" class="mention hashtag" rel="nofollow noopener" target="_blank">#SBCs</a> with more open hardware, but the <a href="https://fedifreu.de/tags/RaspberryPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPi</a> is widely available, well documented, powerful and inexpensive. And it is available with up to 16 GB of RAM.Anyone operating a server on the Internet must install <a href="https://fedifreu.de/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> updates quickly. However, many people forget to restart running software so that the new version runs instead of the old one. The <a href="https://fedifreu.de/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a> tool helps with this on Debian-based Linux systems, which unfortunately is usually not pre-installed.On my Raspberry Pi 4, <code>needrestart</code> always runs correctly (automatically after <code>apt upgrade</code>). On my Raspberry Pi 5, however, I first had to create a configuration file as described by the main developer here: <a href="https://github.com/liske/needrestart/blob/master/README.raspberry.md" rel="nofollow noopener" translate="no" target="_blank">https://github.com/liske/needrestart/blob/master/README.raspberry.md</a> Previously, the tool always claimed that a reboot was necessary because it thought an outdated Linux kernel was running.Next, I want to activate <a href="https://fedifreu.de/tags/LUKS" class="mention hashtag" rel="nofollow noopener" target="_blank">#LUKS</a> hard drive encryption on both raspis. Unfortunately, this is not as easy under <a href="https://fedifreu.de/tags/Raspbian" class="mention hashtag" rel="nofollow noopener" target="_blank">#Raspbian</a> or <a href="https://fedifreu.de/tags/RaspberryPiOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPiOS</a> as on other Debian systems. If you have managed this: Please let me know how you did it!<a href="https://fedifreu.de/tags/rpi" class="mention hashtag" rel="nofollow noopener" target="_blank">#rpi</a> <a href="https://fedifreu.de/tags/rpi5" class="mention hashtag" rel="nofollow noopener" target="_blank">#rpi5</a> <a href="https://fedifreu.de/tags/raspi" class="mention hashtag" rel="nofollow noopener" target="_blank">#raspi</a> <a href="https://fedifreu.de/tags/raspberrypi5" class="mention hashtag" rel="nofollow noopener" target="_blank">#raspberrypi5</a> <a href="https://fedifreu.de/tags/homeserver" class="mention hashtag" rel="nofollow noopener" target="_blank">#homeserver</a> <a href="https://fedifreu.de/tags/encryption" class="mention hashtag" rel="nofollow noopener" target="_blank">#encryption</a> <a href="https://fedifreu.de/tags/selfhost" class="mention hashtag" rel="nofollow noopener" target="_blank">#selfhost</a> <a href="https://fedifreu.de/tags/selfhosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#selfhosted</a>

Aurin Azadî<a href="https://fedifreu.de/@chpietsch" class="u-url mention" rel="nofollow noopener" target="_blank">@chpietsch</a> Oh, <a href="https://mastodon.de/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a> klingt gut, ich glaub, das kleb ich mir auch auf den Server. 🤓

Christian PietschIn letzter Zeit mache ich aus gegebenem Anlass wieder mehr <a href="https://fedifreu.de/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a>. Natürlich achte ich dabei besonders auf den Stromverbrauch. Nach guten Erfahrungen mit der <a href="https://fedifreu.de/tags/ARM64" class="mention hashtag" rel="nofollow noopener" target="_blank">#ARM64</a>-Architektur selbst bei leistungshungrigen Anwendungen wie <a href="https://fedifreu.de/about" rel="nofollow noopener" target="_blank">Mastodon</a> setze ich jetzt auch zuhause auf auf die aus Smartphones bekannte Technologie.Es gibt zwar <a href="https://fedifreu.de/tags/SBCs" class="mention hashtag" rel="nofollow noopener" target="_blank">#SBCs</a> mit offenerer Hardware, aber der <a href="https://fedifreu.de/tags/RaspberryPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPi</a> ist überall erhältlich, gut dokumentiert, leistungsfähig und preiswert. Und es gibt ihn mit bis zu 16 GB RAM.Wer einen Server am Internet betreibt, muss zügig <a href="https://fedifreu.de/tags/Sicherheitsupdates" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sicherheitsupdates</a> einspielen. Viele vergessen aber, laufende Software neuzustarten, damit die neue Version läuft statt der alten. Dabei hilft auf debianbasierten Linux-Systemen das Tool <a href="https://fedifreu.de/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a>, das leider meist nicht vorinstalliert ist.Auf meinem Raspberry Pi 4 läuft <code>needrestart</code> schon immer korrekt (automatisch nach <code>apt upgrade</code>). Auf meinem Raspberry Pi 5 musste ich aber erst eine Konfigurationsdatei anlegen, wie es der Hauptentwickler hier beschreibt: <a href="https://github.com/liske/needrestart/blob/master/README.raspberry.md" rel="nofollow noopener" translate="no" target="_blank">https://github.com/liske/needrestart/blob/master/README.raspberry.md</a> Bis dahin behauptete das Tool immer, dass ein reboot nötig sei, weil ein veralteter Linux-Kernel laufe.Als nächstes will ich auf beiden Raspis die Festplattenverschlüsselung aktivieren. Das ist unter <a href="https://fedifreu.de/tags/Raspbian" class="mention hashtag" rel="nofollow noopener" target="_blank">#Raspbian</a> bzw. <a href="https://fedifreu.de/tags/RaspberryPiOS" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPiOS</a> leider nicht so einfach wie auf anderen Debian-Systemen. Wenn ihr das geschafft habt: Schreibt gern eure Tipps!<a href="https://fedifreu.de/tags/rpi" class="mention hashtag" rel="nofollow noopener" target="_blank">#rpi</a> <a href="https://fedifreu.de/tags/rpi5" class="mention hashtag" rel="nofollow noopener" target="_blank">#rpi5</a> <a href="https://fedifreu.de/tags/raspi" class="mention hashtag" rel="nofollow noopener" target="_blank">#raspi</a> <a href="https://fedifreu.de/tags/raspberrypi5" class="mention hashtag" rel="nofollow noopener" target="_blank">#raspberrypi5</a> <a href="https://fedifreu.de/tags/homeserver" class="mention hashtag" rel="nofollow noopener" target="_blank">#homeserver</a> <a href="https://fedifreu.de/tags/howto" class="mention hashtag" rel="nofollow noopener" target="_blank">#howto</a> <a href="https://fedifreu.de/tags/til" class="mention hashtag" rel="nofollow noopener" target="_blank">#til</a>

Thomas Liske<a href="https://ibh.social/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a> 3.9 was released: <a href="https://github.com/liske/needrestart/releases/tag/v3.9" rel="nofollow noopener" translate="no" target="_blank">https://github.com/liske/needrestart/releases/tag/v3.9</a>Many thanks to all the bug reporters and contributors! 🙏 It has already migrated to Debian Trixie and and I appreciate (timely) feedback so problems might be solved upstream before trixie freeze (2025-04-15) begins 😉 I'm already aware of a dash related issue with the changes for a better systemd --user support. You can track known upstream issues which will be fixed in 3.10 here: <a href="https://github.com/liske/needrestart/milestone/15" rel="nofollow noopener" translate="no" target="_blank">https://github.com/liske/needrestart/milestone/15</a><a href="https://ibh.social/tags/debian" class="mention hashtag" rel="nofollow noopener" target="_blank">#debian</a> <a href="https://ibh.social/tags/Trixie" class="mention hashtag" rel="nofollow noopener" target="_blank">#Trixie</a> <a href="https://ibh.social/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a>

Thomas Liske<a href="https://mastodon.social/@jpmens" class="u-url mention" rel="nofollow noopener" target="_blank">@jpmens</a> <a href="https://mastodon.social/@antondollmaier" class="u-url mention" rel="nofollow noopener" target="_blank">@antondollmaier</a> You could add -k to only check the kernel, so needrestart did not need to scan all the processes.(<a href="https://ibh.social/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a> -vkp shows the found kernel files and their version string)

HabrLinux LPE через Needrestart (CVE-2024-48990)19 ноября 2024 года компания Qualys публично раскрыла информацию о пяти уязвимостях в утилите Needrestart . Эти уязвимости касаются локальной эскалации привилегий( LPE ) и были найдены в бинарном файле. CVE-2024-48990 затрагивает версии Needrestart до 3.8 . В Ubuntu она применяется по умолчанию с версии 21.04 . Также проблема актуальна для Debian , Fedora и других дистрибутивов Linux . LPE ( Local Privilege Escalation ) позволяет злоумышленнику повысить свои привилегии в системе, получив доступ к действиям, доступным только администраторам (например, root -доступ). Это может использоваться для установки вредоносного ПО, управления системой, обхода ограничений безопасности и доступа к конфиденциальным данным. Основная цель — получить полный контроль над системой. Уязвимость имеет оценку в 7.8 баллов по CVSS .<a href="https://habr.com/ru/articles/866582/" rel="nofollow noopener" translate="no" target="_blank">https://habr.com/ru/articles/866582/</a><a href="https://zhub.link/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a> <a href="https://zhub.link/tags/lpe" class="mention hashtag" rel="nofollow noopener" target="_blank">#lpe</a> <a href="https://zhub.link/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a> <a href="https://zhub.link/tags/cve" class="mention hashtag" rel="nofollow noopener" target="_blank">#cve</a> #2024

Julien M.<a class="hashtag" href="https://pleroma.autogeree.net/tag/infosec" rel="nofollow noopener" target="_blank">#InfoSec</a> <a class="hashtag" href="https://pleroma.autogeree.net/tag/needrestart" rel="nofollow noopener" target="_blank">#needrestart</a> <a class="hashtag" href="https://pleroma.autogeree.net/tag/qualys" rel="nofollow noopener" target="_blank">#Qualys</a> <a class="hashtag" href="https://pleroma.autogeree.net/tag/securityadvisory" rel="nofollow noopener" target="_blank">#SecurityAdvisory</a> <blockquote>Local Privilege Escalations in needrestart We discovered three fundamental vulnerabilities in needrestart (three LPEs, Local Privilege Escalations, from any unprivileged user to full root), which are exploitable without user interaction on <a class="hashtag" href="https://pleroma.autogeree.net/tag/ubuntu" rel="nofollow noopener" target="_blank">#Ubuntu</a> Server (through unattended-upgrades) </blockquote><a href="https://www.openwall.com/lists/oss-security/2024/11/19/1" rel="nofollow noopener" target="_blank">https://www.openwall.com/lists/oss-security/2024/11/19/1</a>

HabrSecurity Week 2448: десятилетняя уязвимость в утилите needrestartНа прошлой неделе специалисты компании Qualys сообщили об обнаружении достаточно серьезной уязвимости в утилите needrestart . Данная утилита используется, в частности, в ОС Ubuntu Server начиная с версии 21.04 и запускается после установки и обновления программных пакетов. Ее задача — определить, что система или отдельные программы должны быть перезапущены в результате произведенных в системе изменений и инициировать перезапуск. Ошибки в коде программы обеспечивают сразу несколько способов выполнения произвольного кода. В результате получается надежное средство повышения привилегий обычного пользователя до root, так как сама needrestart выполняется с привилегиями суперпользователя. Формально в утилите были зафиксированы пять разных уязвимостей. Часть из них получила достаточно высокий рейтинг по шкале CVSS — 7,8 балла. Все уязвимости закрыты в версии needrestart 3.8, причем существовали они как минимум начиная с версии 0.8, выпущенной в 2014 году. Именно тогда в утилиту была добавлена возможность отслеживания интерпретаторов языков высокого уровня. Если сам интерпретатор был обновлен, вполне логично, что необходимо перезапустить программы на этом языке программирования. Отсутствие необходимых проверок позволяет в теории запустить не настоящий, установленный в системе, интерпретатор кода на языке Python или Ruby, а произвольную программу, путь к которой может задать атакующий.<a href="https://habr.com/ru/companies/kaspersky/articles/861020/" rel="nofollow noopener" translate="no" target="_blank">https://habr.com/ru/companies/kaspersky/articles/861020/</a><a href="https://zhub.link/tags/ubuntu" class="mention hashtag" rel="nofollow noopener" target="_blank">#ubuntu</a> <a href="https://zhub.link/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a>

Thomas LiskeThere is a regression that reports false positives for processes running in a chroot or some mountns (read: container). This only happens if the process binary does not exist in the root mountns.This is tracked upstream in issue #317 <a href="https://github.com/liske/needrestart/issues/317#issuecomment-2495949384" rel="nofollow noopener" translate="no" target="_blank">https://github.com/liske/needrestart/issues/317#issuecomment-2495949384</a>A patch proposal is already available and awaits feedback and (security) review. This should be finished in the next few days.Sorry any inconvenience caused by this regression 😟 <a href="https://ibh.social/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a> <a href="https://ibh.social/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a>

Marcel SIneM(S)US<a href="https://social.tchncs.de/tags/UbuntuServer" class="mention hashtag" rel="nofollow noopener" target="_blank">#UbuntuServer</a>: Root-Lücke durch <a href="https://social.tchncs.de/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a>-Komponente | Security <a href="https://www.heise.de/news/Ubuntu-Server-Root-Luecke-durch-needrestart-Komponente-10083933.html" rel="nofollow noopener" translate="no" target="_blank">https://www.heise.de/news/Ubuntu-Server-Root-Luecke-durch-needrestart-Komponente-10083933.html</a> <a href="https://social.tchncs.de/tags/Patchday" class="mention hashtag" rel="nofollow noopener" target="_blank">#Patchday</a> <a href="https://social.tchncs.de/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> :tux: <a href="https://social.tchncs.de/tags/Ubuntu" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ubuntu</a> :ubuntu:

Felipe Molina 🔵Ok, PoC and post of Qualys <a href="https://infosec.exchange/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a> <a href="https://infosec.exchange/tags/CVE" class="mention hashtag" rel="nofollow noopener" target="_blank">#CVE</a>-2024-48990 <a href="https://blog.felipemolina.com/posts/needrestart/" rel="nofollow noopener" translate="no" target="_blank">https://blog.felipemolina.com/posts/needrestart/</a>

Felipe Molina 🔵Heh, got the poc for <a href="https://bird.makeup/users/qualys" class="u-url mention" rel="nofollow noopener" target="_blank">@qualys</a> <a href="https://infosec.exchange/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a> CVE-2024-48990 in a couple of hours 😄

Ricardo Martín :bsdhead:Upgrade to version 3.8 or later of needrestart *now*"We discovered three fundamental vulnerabilities in needrestart (three LPEs, Local Privilege Escalations, from any unprivileged user to full root), which are exploitable without user interaction on Ubuntu Server"<a href="https://www.qualys.com/2024/11/19/needrestart/needrestart.txt" rel="nofollow noopener" translate="no" target="_blank">https://www.qualys.com/2024/11/19/needrestart/needrestart.txt</a><a href="https://mastodon.bsd.cafe/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a> <a href="https://mastodon.bsd.cafe/tags/ubuntu" class="mention hashtag" rel="nofollow noopener" target="_blank">#ubuntu</a> <a href="https://mastodon.bsd.cafe/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a>

Christian Schmidt<a href="https://norden.social/tags/Mastodon" class="mention hashtag" rel="nofollow noopener" target="_blank">#Mastodon</a> Instanzbetreiber aufgepasst!»Seit <a href="https://norden.social/tags/Ubuntu" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ubuntu</a> 21.04 bringen Ubuntu-Server standardmäßig eine installierte Komponente Namens "<a href="https://norden.social/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a>" mit. IT-Sicherheitsforscher haben darin nun fünf Sicherheitslücken aufgespürt, durch die Angreifer ihre Rechte auf "root"-Zugriff ausweiten können.« <a href="https://www.heise.de/news/Ubuntu-Server-Root-Luecke-durch-needrestart-Komponente-10083933.html" rel="nofollow noopener" translate="no" target="_blank">https://www.heise.de/news/Ubuntu-Server-Root-Luecke-durch-needrestart-Komponente-10083933.html</a>

Thomas LiskeBesides the security fixes the <a href="https://ibh.social/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a> 3.8 release contains a new feature and a bunch of bug fixes.@cjwatson@debian.org has contributed support for <a href="https://ibh.social/tags/Incus" class="mention hashtag" rel="nofollow noopener" target="_blank">#Incus</a> based containers.@lelutin contributed a fix to make the OpenMetrics output <a href="https://ibh.social/tags/prometheus" class="mention hashtag" rel="nofollow noopener" target="_blank">#prometheus</a> compatible.@onyxmaster has provided fixes for nasty bugs.<a href="https://ibh.social/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a>

Thomas Liske<a href="https://ibh.social/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a> 3.8 was released: <a href="https://github.com/liske/needrestart/releases/tag/v3.8" rel="nofollow noopener" translate="no" target="_blank">https://github.com/liske/needrestart/releases/tag/v3.8</a>This coordinated release contains 4 security fixes for local privilege escalations found by the Qualys Security Advisory team: <a href="https://www.qualys.com/2024/11/19/needrestart/needrestart.txt" rel="nofollow noopener" translate="no" target="_blank">https://www.qualys.com/2024/11/19/needrestart/needrestart.txt</a>An local attacker can trick needrestart to execute arbitrary code as root. Debian and Ubuntu already shipping security updates.You should apply these updates in a timely manner. These issues can be mitigated by disabling the interpreter heuristic.<a href="https://ibh.social/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a> <a href="https://ibh.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://ibh.social/tags/qualys" class="mention hashtag" rel="nofollow noopener" target="_blank">#qualys</a> <a href="https://ibh.social/tags/debian" class="mention hashtag" rel="nofollow noopener" target="_blank">#debian</a> <a href="https://ibh.social/tags/ubuntu" class="mention hashtag" rel="nofollow noopener" target="_blank">#ubuntu</a>

Thomas LiskeAfter more than two years , I have finally managed to release needrestart 3.7! 🥳 <a href="https://github.com/liske/needrestart/releases/tag/v3.7" rel="nofollow noopener" translate="no" target="_blank">https://github.com/liske/needrestart/releases/tag/v3.7</a>I am always overwhelmed by the many contributions to this project - did I mention that it is written in perl5? Many thanks to all previous and first-time contributors, without whom it would not be possible to maintain this project! 🤝 🙏 <a href="https://ibh.social/tags/needrestart" class="mention hashtag" rel="nofollow noopener" target="_blank">#needrestart</a> <a href="https://ibh.social/tags/perl" class="mention hashtag" rel="nofollow noopener" target="_blank">#perl</a> <a href="https://ibh.social/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a>

MsDropbear 🌈♀:arch: :plasma:Just did a small batch of <a href="https://fosstodon.org/tags/ArchLinux" class="mention hashtag" rel="tag">#ArchLinux</a> updates, a couple of days after the bigger last lot that included lovely <a href="https://fosstodon.org/tags/KDEPlasma" class="mention hashtag" rel="tag">#KDEPlasma</a> 5.27.0, logged out & toggled to tty2, used <a href="https://fosstodon.org/tags/needrestart" class="mention hashtag" rel="tag">#needrestart</a> to restart the various services sans-reboot, toggled back to <a href="https://fosstodon.org/tags/SDDM" class="mention hashtag" rel="tag">#SDDM</a> & logged back in, then before relaunching my <a href="https://fosstodon.org/tags/FirefoxNightly" class="mention hashtag" rel="tag">#FirefoxNightly</a>, <a href="https://fosstodon.org/tags/Goodvibes" class="mention hashtag" rel="tag">#Goodvibes</a> & <a href="https://fosstodon.org/tags/Thunderbird" class="mention hashtag" rel="tag">#Thunderbird</a> [all in <a href="https://fosstodon.org/tags/Firejail" class="mention hashtag" rel="tag">#Firejail</a> ofc] i took a moment to gaze contemplatively at my <a href="https://fosstodon.org/tags/Wayland" class="mention hashtag" rel="tag">#Wayland</a> desktop, & reflected for the umpteenth time; how GREAT is <a href="https://fosstodon.org/tags/FOSS" class="mention hashtag" rel="tag">#FOSS</a>!! 🎉 <a href="https://fosstodon.org/tags/PlasmaParadise" class="mention hashtag" rel="tag">#PlasmaParadise</a>

Recent searches

Search options

Administered by:

Server stats:

#needrestart