Maybe I can move to the moon someday.

  • 0 Posts
  • 8 Comments
Joined 2 years ago
cake
Cake day: October 9th, 2023

help-circle

  • OpenWrt usually supports a device until it’s infeasible or has no maintainers I believe. Beware of small flash!

    Personally I recommend getting either a MediaTek Filogic device or one of those x86 boxes. They have the best FOSS support right now and having ARM A53 cores means you can do QoS at fairly good speed. Don’t expect good Wi-Fi if you went with devboards like OpenWrt One.





  • Qubes OS gives him high security with relative ease.

    Fedora Silverblue with auto update and Flatseal tightened apps is a nice middle ground.

    RHEL minimises supply chain attack risk and provides features like kernel hot patching. He can use free developer subscriptions. Also try SUSE.

    Security wise Chromium is a bit better than Firefox. Try to seal it up with SELinux. Red Hat only supports Firefox however.

    SecureBlue can be used as a reference, but it’s still downstream so personally I’d avoid using it in case of supply chain attacks unless securing Silverblue is too much of a hassle.

    Keep in mind that Flatpak sandbox interferes with browser sandboxes.