From all the comments it looks like it’s quite a challenge to go native Linux.
One option, run a VM using KVM (Kernel Virtual Machine, native to some distros).
You can install Windows IOT LTSC (Long-term Servicing Channel), which receives only security updates 2x/year, no others. It also doesn’t have all the bloat. It’s what I run for daily use.
Win10 LTSC. It gets updates 2x/year, has very minimal bloat.