rpm-hardened_malloc VS ublue

It mostly only affects bank apps, but in my experience most of them work without issues, however Gpay won't work at all no matter what.

Personally the only worry I have with GrapheneOS is its crazy dev, he said he will step down (3), but he still does a lot (4).

1. https://grapheneos.org/usage#sandboxed-google-play

2. https://grapheneos.org/usage#banking-apps

3. https://news.ycombinator.com/item?id=36089104

4. Just check the commit logs in any of the grapheneOS repos.

For example https://github.com/GrapheneOS/hardened_malloc

There exists a COPR to get the earlier mentioned kernel-hardened package on Fedora. Furthermore, I forgot to mention the hardened_malloc package as (yet another) measure for hardening is offered for Fedora as well. But you might have started to notice a pattern; these (and many other projects) are not ported to openSUSE (or at least not in a way that a mere layman like myself can access them) and this is hurting the legibility of using openSUSE over Fedora. Even if Silverblue doesn't yet provide support for anything I've just mentioned; at some point it will. And at that point, I'm sure that I can get those packages installed easily and go on with my life. Unfortunately, with openSUSE, I just don't know if that ever will be the case. So either I'd have to reinvent the wheel myself, or opt for the easy option....; use Fedora instead. And this is merely just an example of this, for a lot stuff that go beyond the base install you might have difficulty with getting it done on openSUSE. Simply because it's not there yet and it lacks the community to do it for openSUSE. The aforementioned uBlue (a community project) provides a lot of different Desktop Environments to be used with Fedora Silverblue. Unfortunately, with openSUSE Aeon, you're kinda stuck with GNOME (to be fair Kalpa and Greybeard do exist, but use these at your own discretion). Which shouldn't be a problem if you enjoy using GNOME, but what if you don't enjoy using GNOME...

I myself use Fedora Silverblue with a https://ublue.it/ -based custom image, and I use home-manager for shell configuration. Sure, my GNOME layout isn't declarative, but basically everything else is. Pair that with one of the best NVIDIA driver experiences and the strong feeling of stability, it's better than most other Linuxes rn.

Take a look at ublue.it

This is a fundamental misunderstanding of immutable systems. You still have full control over what’s on your computer, you just don’t exercise that control by making irreversible changes to your core system while it’s running. You can use e.g. rpm-ostree, or even better, build a custom image with exactly the changes you want that updates and ships directly to your computer whenever you want it to.

Have you considered the Sericea(Sway) immutable Fedora spin at ublue.it?

Have you considered the nvidia images at ublue.it? They make silverblue and nvidia easy.

Try the ublue images, they have one for deepin. It’s a variant on fedoras immutable silverblue image, you could either use their iso on http://ublue.it or install silverblue and rebase to the deepin image via:

ublue.it

This is indeed a blind spot. Thanks for pointing that out! Silverblue -to my knowledge- doesn't do a lot to address this. Though, 3rd-party tools like Home Manager and the suite of applications developed by the folks over at uBlue might be able to limit this to a minimum. Though I'm not sure if it surpasses NixOS in this regard; for the uninitiated. Though, to my knowledge, this requires special attention and depends on the specifics of the NixOS system in question.

This hasn't been for nought as even openSUSE's Aeon (and all their immutable offerings) ship Distrobox instead. Vanilla OS also ships Distrobox instead of Toolbx. Heck, even the folks over on uBlue\1]) always mention Toolbx with Distrobox and vice versa. And it wouldn't surprise me if most of them prefer to use Distrobox instead.