• 19 Posts
  • 627 Comments
Joined 2 years ago
cake
Cake day: June 2nd, 2023

help-circle
  • Lemongrab@lemmy.oneto196@lemmy.blahaj.zoneLinux rule
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    5 months ago

    Should I like tell you that ur like wrong or sumthin? Cus I will lol /j

    OK critique:
    Ubuntu is relatively closed/restricted compared to some other Linux distros. Its reliance on Snaps is concerning because its a closed ecosystem (open source client, closed source backend, no option to add other source repos).

    Bad critique:
    Um🤚🤓, actually you should be using security hardened NixOS using your own custom kernel sysctl config 🥵, using GrapheneOS’s hardened-malloc and chrony.conf 🥸, and Tor Browser installed inside a kata-container and sandbox with Bubblejail🤯. All compiled from source, duh. 🥱













  • The steam deck uses the desktop environment called KDE Plasma if I remember correctly. I recommend using the Fedora KDE spin since, right after Debian, most apps will support Fedora. It is user friendly, feature rich, stable, secure (with massive community and corporate backing for timely Security updates), and simple.

    Dual booting is a smart decision. If you opt to dual-boot, I recommend encrypting your system through the built-in OS installer. This stops Windows (or malicious software) from spying on your new install. It is also just a good idea in general.

    Pop!OS doesn’t yet support Wayland, which supersedes the old and slow X11 with better security (on X11, any app can capture what you type, their is no isolation).

    Bazzite seems neat but I wouldn’t go for a gaming focused distros in my experience.

    Canonical, Ubuntu’s parent company, is trying hard to create a closed ecosystem. Even though Ubuntu is Debian based, they are making it hard to install native applications, instead enforcing the use of Snap, which uses a closed-source backend to provide the app repository. Snaps are also slower than native or Flatpak apps.

    If you need any help, explanations, suggestions, or other thoughts about Linux, I am willing to help best I can or point you in the right direction. Ive installed linux maybe 50+ times on most of the major families of distros (Debian, Ubuntu, Fedora, openSUSE, Arch Linux, and some others), and have personally used many distributions that are derivative of these. I’m not like crazy experienced, just familiar (with a focus on Security).



  • Sorry, misunderstood. Proxmox Free broke my containers on updating a while ago.

    Now I use Docker-style application containerizing, but I think LXC (the base technology powering Incus/LXD) is useful in a number of situations and perfectly viable for use. I think Incus-containerized applications are easier to upgrade individually (like software updates of your apps, no need to recreate the container image) and gives a closer to native experience of managing. You do lose out on automated deployment of applications from widely available image sources like docker.io, but the convenience-loss is minimal.






  • DivestOS is the most thoroughly degoogled of the android ROMs (it removes the most proprietary binary blobs). DivestOS is also decently security hardened, better security hardening than any other Android ROM other than GrapheneOS. But since it removes more of these proprietary blobs, it further reduces the attack surface of the ROM. Both GOS and DivestOS are good options. As commented by another user, /e/OS falls behind on security updates often, which is quite bad for a security or privacy focused OS.