lpf-spotify-client VS ostree

I imagine the answer probably involves downloading a kernel driver module for your wifi adapter - may be able to get it from rpm-fusion.

After I installed my system, I went to rpmfusion.org/Configuration and applied their repro install steps.

AFAIK that format is no longer supported by official Fedora packages. Decoding HEIC files supposedly works when the packages libheif-freeworld and heif-pixbuf-loader from the RPM Fusion repos are installed (cf. https://discussion.fedoraproject.org/t/fedora-38-heic-problem/81790/6).

Only thing I can think that might throw you off if you use one of the Fedora spins (e.g KDE) is that it doesn't give the option to enable RPMFusion during setup. You'll likely want this as without it your system will be missing a ton of proprietary media codecs or access to non-free programs (e.g Steam or Discord). If you've installed stock Fedora Workstation you'll likely already have this I think.

In the case of the RHEL family, "large" updates only occur every six months when a new minor release is cut, otherwise there's not a lot of updates outside of security or immediately impacting bug fixes. Plus as a desktop it can be rock solid (if a bit more bare-bones) and Flatpaks can be used to get software not in the primary repos, which can be expanded via EPEL and RPM Fusion. Non-GNOME desktop environments are provided via EPEL, and RPM Fusion contains useful software like drivers and patent encumbered codecs (usually installing ffmpeg-libs will solve all your problems).

Package management on this system is bewildering. Tried to install ffmpeg via rpm-ostree, got dependency conflicts. Tried to install ffmpeg via dnf inside a Fedora 37 toolbox, got "no match". Can't find it in Flatpak. Not sure how to enable RPMFusion repos. Not sure if/how should enable COPR repo, and if that would help. https://ffmpeg.org/ sends you to https://rpmfusion.org/ , but instructions there don't say how they apply on this distro. [From someone on reddit: "Copr repos are user repos like the AUR or personal ppas for Ubuntu. ... But codecs and all are on rpmfusion."]

Possibly related to Nvidia. Did you try it on X11? Nvidia drivers from RPM Fusion might make a difference here.

Will rpmfusion.org have a guide on this or will I have to remember about this post every time I reinstall Fedora?

Ansible makes mutable changes to the OS, task by task.

Nix is immutable. A new change is made entirely new, and only after the build is successful, all packages are "symlinked" to the current system.

Fedora Silverblue is based on ostree [1]. It works similarly like git, but on your root tree. But it requires you to reboot the whole system for the changes to take effect. Since Nix is just symlinked packages, you don't need to reboot the system.

More detailed explanation here [2].

[1]: https://github.com/ostreedev/ostree

[2]: https://dataswamp.org/~solene/2023-07-12-intro-to-immutable-...

This one is for the ostree bug currently ongoing: https://github.com/ostreedev/ostree/issues/2900

This sounds related to the ostree bug.

I definitely agree that immutability offers considerable value in regards to improving security. But arguably it's insufficient to pull the win over mutable Fedora due to the losses caused by the inability to install the kernel-hardened package and the lack of UKI (Unified Kernel Image) support.

Other hardening guides mention a Unified Kernel Image as another measure to further improve security. Unfortunately, once more, this is (currently) not supported on Fedora Silverblue. I haven't seen it being done on openSUSE Aeon either. Though, once again, I'd love to be corrected!

The fedora crew is working on it through ostree though, so both fedora Silverblue and flatpak will be getting it (as well as true immutability) in the future: https://github.com/ostreedev/ostree/issues/2867

Aside from what has already been mentioned, Unified Kernel Image isn't supported (yet).