I agree, but you could have posted the link with your comment, no?

90% sure wireguard (the VPN server) is going to need an open port if you want to connect from the outside.

I used the Lemmy Ansible method to deploy. At the time that I first installed it, it was the recommended method vs a docker compose. It is a little bit of setup, but is pretty simple to get going. Just follow the instructions and it should just work.

Ah, I didn't think about sideloading for remote desktop apps. How do you interact with your PC? Do you have a keyboard and mouse hooked up to the headset?

Immersed is pretty solid. It is quite involved though, which is kind of its greatest strength and weakness. I like this look of native quest 3 windows. It feels very light.

We are all tired on this day.

An attacker escaping from a container can’t be system root as Podman runs rootless (without some other exploit or weak password).

That would be true of podman running anywhere, and is not unique to an immutable distribution.

The filesystem itself is also read-only.

You can change that real quick if you have root access.

You're the one who replied "any google hardware" though.

If you're happy with Racknerd, they have deals on LEB all the time. Right now, even

https://lowendbox.com/blog/kvm-vps-specials-by-racknerd-from-12-88-year-in-new-york-seattle-san-jose-and-ashburn/

You can seed without port forwarding

Not sure how this thing will compete when there are mini PC's like the Beelink SER7 out there.

What an attitude you have. He made a suggestion, and wasn't gatekeeping anything.

There exists VanillaOS btw.

If I just had one more synthesizer...