ashirviskas
10 hours ago
> KDE Linux is an immutable distribution that uses Arch Linux packages as its base, but Graham notes that it is ""definitely not an 'Arch-based distro!'"" Pacman is not included, and Arch is used only for the base operating system.
So it's basically a SteamOS sibling, just without Steam?
keyle
10 hours ago
Sounds like a good distro to use with your parents and grand parents, if they're not solely using iPads...
That might be their target audience.
What appeals to me about linux is the hackability and configurability. This takes it all away in some way, but that's not to say that they won't find a market for it.
nine_k
9 hours ago
Seems targeted at office workplaces. A locked-down system that cannot even be corrupted or tampered with. Consider a workplace of a receptionist at a medical office, or a library computer.
Linux is wonderfully flexible, which allows to create distros like that, among other things. Linux is also free as in freedom, which may be very important for trusting the code you run, or which a governmental official runs.
I bet that past the alpha stage they will offer a configuration tool to prepare the images to your liking, and ways to lock the system down even more. Would work nicely over PXE boot.
macco
3 hours ago
The problem for this use case is that certain businesses, like medical offices, use specialized software that is often Windows only.
Beretta_Vexee
3 hours ago
More and more of this software is moving to the cloud and only requires a web browser. A distribution that is very difficult to break and can launch a web browser would already meet many use cases for receptionists, hotels, consultation stations, etc.
Wowfunhappy
2 hours ago
In that case, wouldn't ChromeOS actually make the most sense?
Beretta_Vexee
an hour ago
Because Chrome OS is offered on low-cost laptops that are unsuitable for office work.
What's more, it's Google, so we're not safe from a ‘Lol, we're discontinuing support for Chrome OS. Good luck, Byeeee.’.
Some offices still have bad memories of Google Cloud Print, for example. I'm not saying that being an early adopter of a distribution that's less than a year old is a good solution. Just that Google's business products don't have a very good reputation.
lproven
22 minutes ago
> Because Chrome OS is offered on low-cost laptops that are unsuitable for office work.
ChromeOS Flex exists, it is free of charge, and it runs on more or less any x86-64 computer, including Intel Macs.
Nordic Choice got hit with ransomeware and rather than paying, just reformatted most of its client PCs with ChromeOS Flex and kept going with cloud services.
https://www.bitdefender.com/en-us/blog/hotforsecurity/nordic...
Loic
2 hours ago
Because ChromeOS is not an open base?
bb88
3 hours ago
Yes, but doctors offices are still the last places in the US to use a fax machine.
dotancohen
an hour ago
The fax protocol provides a real-time recipient receipt. Email doesn't.
Seriously. That's the reason that fax is still popular in the medical industry.
alex_suzuki
2 hours ago
Not just in the US, they‘re surprisingly popular still here in Switzerland. I‘ve written interfaces to fax gateways (convert incoming fax to pdf, extract metadata, save in DB) multiple times.
Beretta_Vexee
2 hours ago
The United States is not the only country in the world. In France, it is almost impossible to make an appointment without using Doctolib, which is SaaS software for booking consultations (and lots of other things).
mschuster91
3 hours ago
Wine/Proton gets better every day though.
FirmwareBurner
2 hours ago
Doctors have better things to do that learn Linux and Wine.
Their office buys their stuff from a supplier which ships them a Windows box with all the batteries included.
freehorse
2 hours ago
And that supplier could decide to bundle their box with such a distro, if this can save them money either due to licencing or better stability (=less support).
It is possible for somebody to make this into a workable bundle targeting specific professions/environments. A doctor would not care if double clicking X icon open an app through wine or not.
mschuster91
2 hours ago
Wine makes for zero difference in how the application looks and behaves, that's the point.
KETHERCORTEX
26 minutes ago
Until there's a bug in Wine that affects the software that you use or new update of your software that uses stuff incompatible with Wine.
FirmwareBurner
2 hours ago
Are you working as a doctor? Or do you work in tech?
akk0
an hour ago
Are you a doctor?
uneven9434
an hour ago
What you want may be an "immutable" distro (KDE Linux also is). And there have be some immutable distros now. Such as Fedora Silverblue.
Blikkentrekker
8 hours ago
That seems like a good niche to exist indeed and many people would probably misunderstand its purpose by it being called a “KDE distribution”. It would perhaps have been better if it were created by some independent group for this purpose and just happened to settle upon KDE as its interface, or rather offer multiple choices to be honest.
DoctorOW
5 hours ago
I disagree, KDE needs both a distro and a niche for that distro to fill:
> KDE is a huge producer of software. It's awkward for us to not have our own method of distributing it
sho_hn
9 hours ago
It doesn't necessarily take much hackability away. You might find it makes it easier.
You can overlay changes to the read-only rootfs using the sysext mechanism. You can load and unload these extensions. This makes experiments or juggling debug stuff a lot easier than mucking about in /usr used to be.
A lot of KDE Linux is about making updates and even hackability safe in terms of making things trivial to roll back or remove. A goal is to always be able to unwedge without requiring a reinstall.
If you know you can overlay whatever over your /usr and always easily return to a known-good state, hackability arguably increases by lowering the risk.
RossBencina
6 hours ago
This overlay feature sounds attractive. It bothers me that there is no easy traceability or undoability when I perform random system-level Ubuntu configuration file edits to make things work on my system. Maybe I'm doing it wrong. Sure I could do the professional sysadmin thing and keep a log book of every configuration change, or maybe switch to NixOS and script all my configuration changes, but something with lower effort would be welcome. Ideally you want the equivalent of "git commit -m<explanation>", "git diff" and "git log" for every change you make to system configuration.
stakhanov
5 hours ago
CachyOS and openSUSE have you covered with btrfs and snapper pre-configured to take snapshots before/after doing potentially damaging things (and, of course, you can make them manually, whenever the thought occurs to you that you're entering the "danger zone"). You can boot into a snapshot directly from the boatloader, then rollback if you need to.
Immutable distros just one-up that by trying to steer the system in a direction where it can work with a readonly rootfs in normal operation, and nudging you to take a snapshot before/after taking the rootfs from readonly to read-write. (openSUSE has you covered there as well, if that's your thing; it's called MicroOS).
Both of those distros use KDE by default, so the value-add of KDE having its own distribution is basically so they can have a "reference implementation" that will always have all the latest and greatest that KDE has to offer, and showcase to the rest of the Linux world, how they envision the integration should be done.
If I were to set up a library computer or a computer for my aging parents, I would choose openSUSE Leap Micro with KDE, as that would put the emphasis on stability instead.
vanviegen
3 hours ago
There's also https://getaurora.dev/ - another immutable KDE-based distro. I've been using it as my daily for ~half a year now. It just works.
codethief
2 hours ago
> Ideally you want the equivalent of "git commit -m<explanation>", "git diff" and "git log" for every change you make to system configuration.
If you already commit all your changes, anyway, what keeps you from using Nix and running one more command (`nixos-rebuild switch`)?
albertzeyer
3 hours ago
I keep my /etc under Git. When the system does changes automatically (via an update or whatever), I make a Git commit with a special distinct message, and so I can easily filter out all my own changes.
mikae1
an hour ago
> something with lower effort would be welcome
This is a major reason I ended up with https://getaurora.dev. I layer a few things, but it comes with bells and whistles (like NVIDIA drivers, if you need that).
I can't see myself going back to a "normal" distro. I don't want to spend time cosplaying a sysadmin, I have things to do on my computer.
rollcat
an hour ago
> What appeals to me about linux is the hackability and configurability.
Innovation happens on stable foundations, not thru rug pulls.
Yes, you have the freedom to make your system unbootable. When Debian first tried to introduce systemd, I've replaced PID 1 with runit, wrote my own init scripts & service definitions, and it ran like this quite well, until... the next stable release smashed me in the face.
It's absurd how hackable the Linux distros are. It's also absurd to do this to your workhorse setup.
sandreas
8 hours ago
I think Aurora Linux[1] is more suitable for this purpose.
However, while I love the approach of having an immutable distribution, I don't see the attack vector of ransomware handled in a good way. It does not help, if your OS is intact, but your data is irrecoverably lost due to a wrong click in the wrong browser on your system.
I think the backup and restore landscape has enough tools to fix this (cloud + restic[2] or automated ZFS snapshots[3]), but it takes a bit time / a script to setup something like this for your parents in your favorite distro.
erremerre
4 hours ago
I have just checked, and Aurora Linux does not offer support for any Nvidia card older than 16xx.
Looks like they used to, so they have removed the option.
ThatMedicIsASpy
2 hours ago
Strange since Bazzite still has 900&1000 driver options.
Building your own is an option https://github.com/ublue-os/image-template
LelouBil
8 hours ago
I mean, nothing stops you from building your image of KDE Linux (or any immutable distro) with a built-in restic config.
This is more about preventing the user from messing up their computer than it is about data safety.
I've been using Bazzite for 2 years now (an immutable distro based on Fedora Silver blue) and I just love the fact that I can "unlock" the immutability to try something that could mess up my systemd or desktop environment, and I can just reboot to erase it all away.
I also have a github action to build my custom image with the packages I want, and the configuration I want.
And this makes adding a backup setup even easier, it can be baked-in the distro easily with a custom image ! Your grandparents don't have to do anything, it will auto update and auto apply (and even rollback to the n-1 build if it fails to boot)
RossBencina
6 hours ago
> nothing stops you from building your image of KDE Linux
Isn't the main point that you delegate curating and building the system image to the KDE project?
sirspudd
an hour ago
No, the main point is they provide a reference image using mkosi, and you can clone kde-linux and trivially make spins. At some point I expect just about everyone is gonna find a spin which scratches all their itches and which they are devoted too.
sandreas
8 hours ago
> I mean, nothing stops you from building your image of KDE Linux (or any immutable distro) with a built-in restic config.
I hear you. The problem is, that basically nothing stops you from building anything yourself. The difference is, that there is no easy-to-use build-in solution (like time machine) and ease of use is what makes the difference. Especially a TIME difference. Of course there is software SIMILAR to time machine, but it seems to be hard to write something rock solid and easy-to-use.
In fact I also have built it myself: https://github.com/sandreas/zarch A script that installs Arch on ZFS with ZFSBootMenu and preconfigurable "profiles" which packages and aurs to use. Support for CachyOS Kernel with integrated ZFS is on my list.
I already thought putting together a Raspberry PI Image that uses SSH to PULL backups over the network from preconfigured hosts with preconfigured root public keys and is easily configurable via terminalUI, but I did not find the time yet :-) Maybe syncthing just is enough...
hulitu
5 hours ago
> However, while I love the approach of having an immutable distribution, I don't see the attack vector of ransomware handled in a good way
The phylosophy of security in "modern" OSs is to protect the OS from the user. The user is evil and, given so many rights, it will destroy the (holy) OS. And, user data ? What user data ? /s
abhinavk
7 hours ago
It makes hacking easier in some ways too. Overlay any hacks. It will be gone by reboot unless you want otherwise. Also see blue-build.org <- It helps you to put all your hacks in the immutable image.
999900000999
7 hours ago
I like hacking Linux too.
But some people just want a computer to work.
It's not like you can't try a simple distro and move on to something more complex later.
FirmwareBurner
2 hours ago
>That might be their target audience.
Seems like a lot of effort and fanfare for such a niche market.
dangus
3 hours ago
I don’t mean this as a gotcha, but have you tried an immutable/atomic Linux distro?
Immutable/Atomic Linux doesn’t take away any ability to hack and configure it. It’s just a different approach to package and update management.
There really isn’t anything you fans do with it that you can do on other Linux distros.
I’m using Bazzite which is basically in the Fedora Atomic family and all it really changes is that if I want to rpm install something and there’s no flatpak or AppImage then I just need to decide on my preferred alternate method to install it.
I find Bazzite’s documentation on the subject quite helpful: https://docs.bazzite.gg/Installing_and_Managing_Software/
At the very worst case I’m using rpm-ostree and installing the software “traditionally” and layering it in with the base OS image.
Now you might be thinking, what’s the benefit of going through all this? Well, I get extremely fast and reliable system updates that can be rolled back, and my system’s personalization and application environment is highly contained to my home directory.
I’m not an expert but I have to think that there are security benefits to being forced into application sandboxing as well. Applications can’t just arbitrarily access data from each other. This isn’t explicitly a feature of immutable/atomic Linux but being forced into installation methods that are not rpm is.
zahlman
9 hours ago
If a distribution is immutable (and thus omits the package manager) and pre-configured for a specific purpose (here, ensuring that KDE works), how much does the base really matter?
tannhaeuser
an hour ago
Hopefully they also integrate SteamOS/Proton and easy Wine configs and they might have a winner.
ryao
10 hours ago
It sounds like how ChromeOS is Gentoo based but does not ship the package manager.
seiferteric
9 hours ago
Your telling me google uses Gentoo for ChromeOS but doesn't even host a Gentoo mirror? jeez...
apfsx
3 hours ago
If that's true I think its genuinely disrespectful. Truly.
FirmwareBurner
2 hours ago
Won't someone please think of the multi trillion dollar company?
Blikkentrekker
8 hours ago
It does I believe? I've never tried it myself but I've heard multiple voices say that once you go into the terminal the entire Gentoo stack is just there with portage, equery, qapps and such.
In fact, from what I understand it is in fact not really Gentoo based but Portage-based, as in they for the most part write their own ebuilds and software and from what I know have their own custom init system and display system that's not in Gentoo but they found that Portage was simply very convenient for automating their entire process. The claim that “gentoo is just Portage” is not entirely true, there's still a supported base system that's configured as offered by Gentoo but it's far more flexible than that of most systems of course, granting the user choice over all sorts of fundamental system components.
shmerl
5 hours ago
Bazzite is more general purpose example like that.
jasonfrost
10 hours ago
But without the steam side