I’ve become a big fan of mini PC’s for home server use these days (with NAS systems for storage duties). Low power, low heat, low noise, and very affordable.
Beelink on Amazon makes a good selection of them. Always watch for sales. I have several of their machines and have been pleasantly surprised by all of them. The latest addition was one of their N95 systems with 8GB of memory. It hosts Jellyfin, Deluge, Wireguard (client and server), dns, forgejo, etc.
Your comment also contained
The filesystem itself is also read-only.
Which is what led to the further discussion of root making that not so.
I don’t believe that to be the intent of the OP’s comment, given their second sentence, but they are welcome to state otherwise. I just don’t want them thinking that an immutable distribution gives them some kind of bulletproof security that it doesn’t.
An attacker escaping from a container can’t be system root as Podman runs rootless (without some other exploit or weak password).
That would be true of podman running anywhere, and is not unique to an immutable distribution.
The filesystem itself is also read-only.
You can change that real quick if you have root access.
If you’re happy with Racknerd, they have deals on LEB all the time. Right now, even
I have no experience with Windscribe other than that I recall looking into them when I was personally looking to replace Mullvad.
All I can offer is that their pricing is pretty much on par with ProtonVPN, who I have found to be very solid.
Proton also has a free tier, though I’m not sure how well P2P works on it.
Never mind “being covered”. We have taken the tiniest of baby steps towards coverage. Seniors with no current dental insurance only. Then it will get rolled out based on income, and for many, will still require copay. Any existing dental insurance keeps you out of the program, despite many people having terrible dental benefits.
Few thoughts:
You son of a bitch, I’m in.