Which is what I was talking about when I said immutable systems need a first party solution. Meaning the system itself needs to implement it, you can’t bolt it on with packages or services

Setting the label is the mutation

Windows 10. It just didn’t run on hard drives, when I turned off constantly scanning the drive and the firewall, it refused to update because the update service requires the firewall. Then I forgot how I did it so I never booted into it again.

Windows 7 was the last offline Windows and the last one that was tolerable

Well, that’s because it’s a first party solution. From NixOS point of view SELinux is mutating the store which is forbidden

I think the preferred approach is AppArmor because SELinux is not supported on immutable distros. I’m not a security expert either, but I would not share environments between two clients at all, I would put them in separate VMs

You can try to just make a hardened NixOS config. The only requirement is systemd to use NixOS options. Other components you can freely interchange.

Can’t you just bookmark the page?

Okay, but have you tried actually installing it? VMs just have worse performance

I can log on to my bank through a website

If only we had things like 1tb storage in a tiny chip

I hope one day we could develop something like this

Or in some cases wine

I played computer games since I was like 5 years old, it’s not so hard to figure out when you just get to play a few hours a day. I figured stuff out by myself even though I didn’t even speak English and everything was in English

Games might be a place to start, but a kid will think “tablet is easier”.

If you play RTS games it’s really hard to do it without mouse and keyboard, so that’s a point for a desktop or laptop

I would just like my inputs to be separate from the outputs. Anyone write a split pane thing?

Yeah, but only when you build with lto+pgo which will take even longer

https://wiki.gentoo.org/wiki/Project:Mozilla/Firefox_Benchmarks_2025_Q1

spend an hour building to save 1ms per page load

This is probably the most polished one I’ve found

Surprised Lemmy has a reasonable reaction ti this. People shouldn’t have to do brainless warehouse jobs

So they could do it for pixels and this open source firmware could be used by Graphene OS, for example?

Ubuntu is gross, don’t recommend. It works until it doesn’t. Expect questions like “why doesn’t USB access work in chromium” and having to try to explain what snap is

I wish everyone would just switch to standard OTPs