qubes-mirage-firewall VS manjarno

2) https://github.com/mirage/qubes-mirage-firewall is by far a better firewall for Qubes than OpenBSD ever will be - unikernels are far more secure than a traditional operating system is and you can read all about it on https://mirageos.org/

That's correct. It does mean that the closest to a self-contained program you can run is a unikernel like the mirage-firewall, unfortunately. On the upside, those remain easily portable to essentially anything that can run VMs so long as you adjust the image format.

That sounds similar to a unikernel. There are actual uses for those in seL4 and Qubes OS such as a firewall-qube (in theory unikernel qubes should be able to take far less system resources to run than full Linux+distro qubes).

Here's one that is "production" ready: the Mirage-Firewall microkernel running on Qubes OS.[0]

[0] : https://github.com/mirage/qubes-mirage-firewall

sys-net, sys-firewall and other administrative vms should slowly migrate to unikernels instead of running linux, which should help with ram usage. The mirage.io project seems to build a couple qubes vms, for example https://github.com/mirage/qubes-mirage-firewall is a firewall which they indicate to give 64Mb of ram.

Manjaro downsides : list

Manjaro: just avoid it even if it is (apparently) newbie firendly.

Dude is a bot replying "Manjaro on x86 crashes and breaks alot". I would say Manjaro breaks a lot regardless of the architecture: https://manjarno.snorlax.sh/

windows: forces major updates to a new not yet ready major version windows: every app has a auto-launch and randomly updates in the background or is outdated windows: updates get stuck and happen right before meetings, etc windows: adds ads to your filemanager during updates and overall is more of a downgrade linux: i tell it t update when it fits me and dont even have to restart (ok its better to reboot after major updates, but i can also tell it to download&install everything and apply it during the next reboot) linux: if for some reason anything breaks i can just undo the update within grub/systemd-boot - meanwhile updating thunderbird killed one of my windows installations permanently manjaro: a burning shipwreck on all sides minimal-distros and other ones i wouldnt recommend for average users: updates require the terminal mint/pop/ubuntu/fedora: updates are neat little pop-ups and just offer it and work

Sets out to be an easy entry to Arch with sane defaults. It tries to achieve this by making the installation of Arch easy, adding GUI-tools to ease you into Linux, own repos with less bleeding-edge software and it ships a configured Btrfs+Timeshift for easy rollbacks to a working system. Unfortunately, the team behind Manjaro has some troubles...