without any distro or configuration caveats.

In those cases, they generally have the Ubuntu version that’s supported in the specs section

Both GNU and GrapheneOS have staunch requirements and will accept no compromises.

This is a situation where their requirements don’t align, so they’ll never reach an agreement.

GrapheneOS, for example, is also strictly against making the Fairphone line of phones a little more secure because it doesn’t meet all of their security requirements

In this case GNU won’t certify GrapheneOS as fully open because it includes binaries that aren’t open

The FSF is more along your line of improving the situation where they can

I’d used Linux a bit out of curiosity in the Windows XP era

Windows Vista came out and was completely unusable on the computers I or anyone around me owned. It was also harder to configure than Linux and the new UI looked worse than the Linux UIs at the time

So I switched and haven’t been back to Windows since

If an attacker gets access to your system, they will be able to ensure you can’t get rid of their access

It will persist across operating system installs

However, this requires them to get access first

The summary here and in the paper isn’t very helpful to check what CVEs are relevant

The kernels referenced aren’t supported, and it says the issues were reported upstream

Checking some of the references of the paper, it says

By the time we posted this writeup, all the distros have patched this vulnerability.

Do you know what CVEs users should check against?

It’s a strange suggestion after very recently working closely with openSUSE to ensure Leap can use the same binaries as SLE, though

It looks like an alternative to LocalSend rather than Syncthing

For the Steam Folders, you can use Flatseal to declare other folders any Flatpak you install is allowed to access

Thanks! That sounds like exactly what I’d want to run mpd. I’ll check it out

For virtualization, I’m all good since I went with uBlue instead of Silverblue for now - the developer images come with lxc/lxd/qemu/libvirt :)

Hey! Thanks!

I’ve installed Aurora to my new drive based off the comments here so far, and it’s been pretty smooth bringing my configs over :)

Immutable is new to me, so I’m wondering how you manage host daemons and cli applications, such as mpd for music and password-store for password management

Is the best practice to keep one Fedora <current release> distrobox with them?

Also, are there any issues with upgrading a distrobox to a new major release over time?

So far my mindset has been make sure I don’t layer anything, but maybe some things like mpd do make sense to layer?

I also see brew as another option. Perhaps that’s the preferred way for those types of tools? However, it seems like the system upgrade script updates distrobox and not brew?

Sorry for the rambling question - just trying to understand best practices with an immutable distro 😅

When I check out the ISO for microOS, it lists microOS Kalpa as “alpha”

Is it ready to be used as a primary install?

The developer image, dx, includes rocm-hip and rocm-opencl:

https://github.com/ublue-os/bluefin/blob/main/packages.json

The packages under “dx” are the main reason I’m considering it over stock Fedora

How does bluefin fit in the dependency chain here - is this just the repository that builds official uBlue images?

Part of my confusion is trying to understand how these projects are related to each other

Edit - oh, I guess bluefin is the Gnome variant

Wow! I didn’t expect sched_ext to be accepted based off historical precedent of not allowing multiple schedulers

I thought the focus would be on optimizing EEVDF now

They’re saying that it only works if your browser is installed natively and your password manager is sandboxed, which is the exact opposite of what you’d want

The browser is the vulnerable software that needs sandboxing

Both being sandboxed would be fine, too

The software has improved a lot since I got the phone in 2022 (I pre ordered it in 2017)

I would be willing to use it as a daily driver if it had better battery life

As the other poster said, the camera is kind of crap, but I don’t take many pictures. At least you don’t have to manually set the exposure/balance/focus to take a picture now, though

The updater has been a little flakey and I’ve just fallen back to update via command line frequently

Fairly thick, but it feels quite sturdy to me. SD card slot and headphone jack are great. Charging speed is kind of slow

Netflix is limited to 720p on Linux due to the DRM they use… maybe OP was confused because of that?

They do when Qualcomm wants to use their processors in Android phones

Qualcomm has, so far, been extremely against upstreaming drivers. Google has told them they can’t touch the kernel anymore over it

If that’s actually changing, it could be huge for a real alternative

I don’t use PIA, but /opt and /etc are both r/w in Silverblue/Kionite