Surprised nobody mentioned Yakuake. Just discovered it's just for kde. Been using it for years. It hides at the top of my screen and slides down when the cursor hits the top. Full desktop when not used and can access it no matter which app I'm using.

While what you're saying is theoretically true, don't forget that as far as I know, most attacks are perpetrated by bots. And while it is true that in a fedora based version one could run ostree admin unlock etc... this particular command would need to be included in the attack script.

Now if the script has to be modified to include all possible different immutable systems that could possibly run it would increase the complexity and most importantly the size of said script making it easier to detect.

I'm not saying that its a bulletproof method, I'm just saying that by itself it greatly minimizes the risk, at least until all servers run immutable systems. And even then it still complicates matters for potential attackers quite a bit. So therefore reducing or at least greatly minimizing the potential of the system being compromised.

Thank you for the tip. Unless my understanding is wrong both OS are similar, Coreos targeting more precisely Kubernetes and cluster management. Had a quick look, but definitively will read more about it.

Thank you, good to know. Not as straightforward as directly installing distro but certainly worth considering.

As to why it reduces attack surface please see answer provided to other comment.

This runs a combination of both. Been using this for years and works like magic

Not for myself but a client who was running a game server. He wanted to tweak the number of ticks/second that the kernel interacted with CPU. Didn't even know that this was a parameter and after a few attempts, according to him, never went on that server myself, made a huge difference and he claimed having grabbed a good part of the market because of that.

After that familiarized myself more with the stuff in there. But that was a good while ago, before most of you guys were born.

IMO best newsletter for self hosting. Lots of stuff and updates on updates. Very good.

Second Zabbix. Been using it for years and it just works.

Tried various smartwatches and the problems always came down to one thing: battery.

Some of the watches batteries last a few days or a week but the screen remains dark and to see time you have to touch the screen our flip your wrist which gets on my nerves.

Now wearing a regular watch and each time I look at the time I'm in awe of the miracle of seeing the time displayed clearly.

When they come up with a watch that can keep the screen lit for at least a week without recharge I'll reconsider...

I often see wireguard and adguard or pihole mentioned. There's a service that provides a combination of wireguard and pihole in 1 docker compose file and has a web interface for wireguard clients (wgeasy) called wirehole. Been using our for 2 years or so, very happy with it.

In my opinion the most elegant solution for an ad blocking VPN.

Why not try docker rootless? Been using it for 2 years and does everything docker does.

Not sure why this post doesn't have a ton of comments. It illustrates the fundamental problem with KPIs and performance measurement. When it comes to measuring human production with digital tools, because the binary measure is so restrictive, it leaves out a universe of values and information that is just ignored as a result. And this very often has dramatic consequences.