I run Gentoo as my main distro, and have for a couple years now. It’s a pretty stable rolling release (IMO more stable than Arch), and since you’re already an advanced user, the experience should be pretty rewarding!

The wiki is great, and the installation handbook is top notch.

You get to control exactly what features each package is compiled with, so no bloat at all.

KDE 6 just landed too!

Linux is whatever the Linux Mark Institute says it is.

It’s FOSS. It’s pretty normal for it to be a passion project or a community effort.

I am aware. What processing is only possible in the cloud, and not locally?

Edit: My apologies, I didn’t realize you weren’t the same person I originally replied to. Please disregard!

Until homeomorphic encryption becomes a thing, cloud can’t be secure or private.

Why do you need homeomorphic encryption? Isn’t client-side encryption good enough for most use cases?

Using your shared libraries is always a good thing, no? Like your distro’s packages should always have the latest security fixes and such, while flatpaks require a separate upgrade path.

Access to your entire filesystem, however, I agree with you on.

Unpopular opinion: Gnome software is pretty solid, and if your computer usage patterns overlap with their design, it is quite a lovely DE. I’d rather have something that works well, even if it doesn’t do everything under the sun.

This requires an Apple iPhone XR or newer, as the face scan utilizes the TrueDepth sensor.

I’d rather take a plaster mold of my face than have to use a specific phone to order a VR headset.

Right? That’s the thing. Car thieves don’t care if the tool is illegal; they’re already planning on stealing a car.

If you make the tool illegal, you’re just making it harder for security experts who do care about the law.

Corrupted initramfs?

Yes we should allow them, because the problem isn’t that this tool is available. The problem is that cars and other devices aren’t more secure.

If you broke into a bank vault with a screwdriver, you don’t ban screwdrivers; you get mad at the bank.

I’d like Gentoo ebuilds to run in a fully isolated namespace/container with only the dependencies explicitly enabled by portage configuration. Something like a mix of nix but with the ebuild syntax.

You use cards for offline authentication (bars/festivals/etc.), and use a different process for online authentication.

Proving someone has the physical card in their possession (which is what a reader does) isn’t really useful for proving identity when you can’t also check the picture.

Yes, this. Don’t put your whole home directory in git.

Pine and BeagleBoard have some decent options, but they’ll always be more expensive than rpi because of the economy of scale.

Chiming in to also recommend Gentoo. It’s a pretty stable rolling release distro, with access to pretty new packages when necessary.

Snaps just aren’t ready yet.

Go for it then! Gentoo is a blast (if you enjoy this sort of thing) and is surprisingly stable once you get it set up.

One tip, before I forget, is to save your firmware from MacOS before wiping the drive. Unfortunately I don’t remember where it’s located, and no longer have access to try and find it 😅

You’ll need to be a bit more specific about the iMac. What year is it?

If it’s pre-2017, I’d expect some difficulty with the WiFi. If it’s newer, you might have luck with https://wiki.t2linux.org/distributions/gentoo/installation/ . I haven’t followed that guide, so YMMV.

Bit of pedantry, but ~/boot expands to something like /home/username/boot.

/boot is a folder at the root of your filesystem, while ~/boot is a directory in your home folder.