Disclaimer: I don’t know much about securing the container itself. The considerations I discuss here are mostly networking.
What I’ve personally been doing is using k3s with Cloudflare Tunnel (routed using DNS like in this documentation) as an ingress.
With Cloudflare Tunnel, if you create an application in front of it, you can require authentication and add a list of allowed emails.
I could replace k3s with a different Kubernetes distribution, and/or replace Cloudflare Tunnel with a different ingress (e.g., Tailscale Funnel or more common ingresses like nginx).
Use anything you want. All distros should support those packages, use what you’re the most comfortable with.
I personally would recommend Fedora Silverblue/ it’s other atomic variants or uBlue especially.
It’s pretty much unbreakable, modern and supports ALL distros’ package managers through Distrobox. It’s also pretty simple in my opinion, since you pretty much don’t have to worry about traditional package management.
I think you’re searching something reliable and simple, so this would be a solid choice.
Automatic updates, they install Software as Flatpaks, GNOME is good for Tablets.
As the RAM is very low, maybe regular Fedora Workstation though. Or you layer all the Packages as RPMs, which is also totally possible.
Depends entirely on how many things these tablets should do.
webbrowser: Brave or Firefox
drm video: available in both
social media: easy as webapps with chromium/brave
youtube: freetube
signal, other messengers: flatpak best
In general Flatpak apps are often working better, on Ubuntu and Fedora base for me. Arch may be something different, but no way unless its controlled like on steamOS. Immutable Arch with tested updates would be great.
I’ve been really interested in this project for a while now and even more excited when they announced 2.0. I can’t wait to try out the beta once it’s released
Gaming is not important if you do video editing. Hardware doesnt need to be very powerful if you dont do 4K or something, which tbh is not needed.
I would say look for a Clevo NV41 laptop as they are supported with Coreboot by 3mdeb, Novacustom, System76, Nitrokey etc. But flashing coreboot requires some knowledge and a hardware programmer.
I cant recommend other brands really. Thinkpads are just a name, good Linux support but their support is nonexistent if you dont pay, and the software updates are not long.
You may want AMD graphics, but I have had bad experience with amd mobile CPUs.
You will want to use
tlp
system76-scheduler (or this power management thing)
autocpufreq
Either one of these.
As a Distro I highly recommend ublue.it they are supporting many models with custom setups like Razer etc, but also main (intel, amd, no extras) or nvidia (proprietary drivers).
Especially if you go with an NVIDIA card, which has advantages, I recommend the system76 tool for switching between internal GPU and dedicated one. And I also recommend only ublue’s *-nvidia images, as you can rollback if an update with the drivers breaks something.
Foobar2000, which is a Windows application but available as a snap using wine.
I really want to use DeaDBeeF because it is Linux native and has similar customization features (I like big album art, for example), but sadly its library management leaves a lot to be desired compared to Foobar’s. I don’t want to have to generate a playlist every time I want to listen to an album, nor do I want to have to clear that playlist when I’m done.
I haven’t found any other player with even remotely similar customization available.
linux
Top
This magazine is from a federated server and may be incomplete. Browse more on the original instance.