Is this eduroam?
bsergay
To me, Endless OS seems to be the best fit for you; install it once and you never ever have to give it a second glance for troubleshooting or whatsoever. It achieves this through using "a read-only root file system managed by OSTree with apps installed using Flatpak.". This translates to:
- The most important system-related files being protected from change by yourself and others.
- Ensurance that your base installation is exactly the same as the one tested and used by its developers. And thus an (in-)direct quality control and maintenance by the very people that work on it.
- As the base system is not changing beyond what is provided by the devs, installation of applications is relegated to flatpaks (see Flathub for the App Store).
- Flatpak is a packaging format that doesn't interact with the base system to install software; think of it like how applications are installed on your phone. With this, you can still install software you need without compromising changes to the base system.
filesystem based encryption is really cool.
Can't agree more.
Sorry to be that guy, but you should just sit down and go over Qubes OS' documentation. Some specific entries that might prove useful:
- How to organize your qubes
- How to install software
- How to install software in dom0
- Creating a Kali Linux TemplateVM
If you ask me, read a lot more beyond these. But if you really got no time, then at least suffice with the aforementioned.
Wish ya good luck!
Mandatory read on the subject for the curious (also goes over Secure Boot, Boot Guard etc):
The pursuit of Freedom led me to Linux.
Are you referring to Qubes OS? If so, what do you mean exactly with hardware support?
IIRC, it stops working whenever you disable JavaScript.
I think we’ve probably already spoken on the matter.
That's definitely possible. Unfortunately, I don't recall it 😅.
Indeed, Lemmy has a serious dearth of users interested and using secure distros over the averages.
It's definitely better at this than the platform that starts with an "R" and rhymes with "shit".
Thanks for your efforts; I do not know how to follow users on Lemmy but if I did I’d follow you. Do you have a blog/any other forum you’re more active on?
That's such a compliment. This is definitely one of the nicest things I've read on Lemmy. I really appreciate it.
Unfortunately, I'm only somewhat active on Lemmy. FWIW, consider checking out the following places if you haven't yet:
- dataswamp.org/~solene
- privsec.dev
- tech.michaelaltfield.net/
And, of course, Qubes OS' forums.
Personally, I find it difficult to justify the time to learn Secureblue (especially the immutable part) or NixOS on Qubes because custom DispVMs with curated salt states work so well already. I’m interested in use-cases that will improve my security but I haven’t found any dialogue on this yet. If you do have opinions on this and know where I can look, I would greatly appreciate it!
As I've previously alluded to, I don't have any hands-on experience with Qubes OS yet. So, I don't think I can contribute meaningfully in this discussion. However, IIRC, there are some discussions found on the forums/discussions page for Qubes OS.
Aight. I'm glad to hear that that has been resolved. I'd love to hear about your experiences on secureblue, so consider to report back. Finally, note that as a hardened distro, some things might work differently from what you'd expect. So be prepared to relearn a thing or two 😉.
In a lot of educational institutions over the world, they truly on eduroam for their bidding. While it's not perfect, it does offer a python script by which proper connection to the network is established. I guess it's unfortunate to know that it's not eduroam then, as I wouldn't know what the solution would be.