I’m happy my company basically issued a ban on Windows without pre-authorization. We’re entirely a macOS and Linux shop.

As a fellow Mint enjoyer who is too fucking old to be fixing their desktop all the time…yes

Really? Nice. Didn’t know that about Flatpaks.

While I prefer Debian packages, what’s wrong with Flatpaks other than a bit of bloat caused by redundant dependencies? They’re not Snaps.

I’m using a Ryzen Mini PC running Debian and Flex Launcher.

Works well as both a media consumption machine and light gaming rig.

Xfinity/Comcast hijacks DNS, even if you use another DNS server (they just redirect DNS requests to them). I suspect that they’re using it for analytics data to sell while disguising it as “security”.

They also block access to root DNS servers, so you can’t use a full DNS Resolver run locally. It’s super f***Ed.

If you want to ensure they don’t do it, use your own modem and always force DNS over TLS.

It looks like it’s going to be a staging ground for things to be merged into Weston proper, along with potentially some newer and better features coming to it exclusively or first.

As long as it’s open source, sounds like a win to me. More AMD embracing Linux as a first party OS is good in my book.

Every endpoint device I use is using full disk encryption, yes.

This is the way

Server is rebooted, as needed, for updates. I think it just got a kernel update two weeks ago, so it probably only has ~14 days of uptime.

My desktop and laptop are shut down when not in use. Leaving them on when not in use is pointless.

Never understood obsessions with “uptime”. If you have high numbers for uptime, you’re a bad sysadmin/maintainer of your hardware unless the appliance is purpose-built to be always up and air gapped.

In my experience, the updates are quick as long as you boot it once every few months. I have a work laptop that I rarely use unless I’m travelling (I work primarily on a desktop, but I will keep it charged and update it once every 2-3 months so it’s ready for action.

For Brother Laser printers, I highly recommend the brlaser package over using the Brother-provided drivers.

Welcome to full time Linux!

Yeah Mint being the “Just works” distro is why I use it these days. Debian is best for servers/low maintenance systems, Mint is best for desktops IMHO.

Doesn’t matter who makes the software, as long as it’s open sourced and audited.

Just because you can doesn’t mean anyone does. I’ve never seen an ISP hand out “private” IPv6 addresses. Ever.

If you’re doing NAT on IPv6, you’re doing it wrong and stupid. Plain and simple.

Network Prefix Translation isn’t the same thing. That’s used for things like MultiWAN so that your IPv6 subnet from another WAN during a failover event can still communicate by chopping off the first half and replacing the subnet with the one from the secondary WAN. It is not NAT like in IPv4 and doesn’t have all of the pitfalls and gotchas. You still have direct communications without the need for things like port forwarding or 1:1 NAT translations.

I’m a Network Engineer of over a decade and a half. I live and breath this shit. Lol.

CGNAT only applies to IPv4. You cannot NAT IPv6 effectively. It’s not designed to be NATed. While there IS provisions for private IPv6 addressing, nobody actually does it because it’s pointless.

It’s why IPv6 is important, but many didn’t listen.

Yes, but OP mentioned nothing about Cloudflare.

Sweet. Both OPNSense and pfSense firewalls have the ability to tie into MaxMind’s GeoIP service. Not sure what your perimeter device is, but it’s pretty easy on those. And free.