Could also run pihole or adguard on your network to just start blocking ads all across your devices as a starter step. Get an OpenWRT router to make it super easy, or just run a standalone pi as a DNS server.

Well if you don’t have a static IP, then your reverse proxy is going to break when your lease changes anyway. Not sure what your intended goal is for access and to what, but this is certainly a more costly and complex setup than needed for whatever it is.

Monitor Ansible automations? I’m not sure why you’d need timeseries capable metrics and graphing for that. If you just wanted a prebuilt solution, look at Chronograf.

No, I’m saying the way ISOs are written, you couldn’t just, say, inject changes via text tools or whatever like the xz attack.

I’m not aware of HOW a binary blob not knowing specifically what it was going to attack COULD attack anything in a resting and isolated state like it would be with Ventoy.

Well anything that is linux-first WITH stylus support isn’t going to be cheap.

The cheapest Linux tab I can think of is the DC-Roma II ($250), but it’s RiscV and meant as a development platform. No stylus support.

Similar in features is the Juno Tab 3 ($699), but it’s an n100 based tablet, and I don’t think it has stylus support.

Maybe you can find a used Lenovo Tab and root it to install Linux? I know you’re unlikely to do so on a Samsung.

Zero complaints with mine. Linux daily driver, no issues at all. If OP didn’t actually mean a FULL Linux experience, then that’s something else, but this is the best one out there in tablet form with stylus afaik.

https://www.minisforum.com/page/v3/index.html

What an odd target.

https://github.com/nocodb/nocodb

You might be looking for Nocodb

Wut

Unfortunately, that’s how you get there. Lying and harming people.

Travel router and VPN.

The xz issue is something totally different though. That was a software library running and executing against flat files. I’m just not sure there’s a way to alter an ISO image before boot, undetected in the case of Ventoy.

If the goal is to alter files to provide access to something, this must be some sort of ingenious way that bypasses checksums, and targets something universal, which doesn’t seem quite possible in the case of a substitute bootloader.

Running any service as a dedicated user with limited permissions is more secure than not. It’s not just transmission. This is a very basic method of increasing security on any running machine. https://en.m.wikipedia.org/wiki/Principle_of_least_privilege

I understand the concern raised, but unless I’m reading this wrong there is an assumption that Ventoy may be doing something untoward, but I’m not sure how at this level. It can’t inject anything into the ISO files at rest without bricking then, and I don’t know if an OS that doesn’t verify it’s own image before booting.

Just sounds like super lazy project administration. Maybe I’m missing something?

They have enough trouble with their drivers and software ecosystem. I’m surprised they’re adding more onto that pile.

Few things:

• What is the output wattage of your charger? You need something that can keep up with the output of the battery, so Id guess 85W or higher while gaming or under heavy util.
• ensure your CPU governor didn’t get locked to ‘performance’ mode after gaming. Make sure you have power-profiles-daemon or similar installed to switch profiles.
• run the reset process for the battery from Framework. You may just have. Battery that crapped out.

There is no such thing as “distro agnostic” when you’re describing the thing that makes a distribution what it is. That’s like saying “I’m trying to make a package manager that integrates with all other package managers”.

Why would you do that when they already have working package managers?

What you’re actually describing in sharing layers and state changes is not possible the way you want, at least not with generic systems. In order to share a layer that is applicable to another system, you’d have to ensure that every single piece of that system is exactly the same, from the BIOS up. Think phones getting updates, as that’s very similar.

Recommended specifications from developers are highly subjective, so it would be kind of pointless to really create a database of what “works” because it’s different for who is writing the reviews/reports. If there was a database of what was reported solely from the developer, I guess you’d at least know what it was tested on for the best experience, but that doesn’t mean someone else would rather just get it to play on the lowest settings and experience just to have it work.