I thought about rebasing from other uBlue-variants to it, but quickly disregarded the option for me.
Often, and in this case too, it’s often a spectrum of compromises between convenience vs. security.
I personally, as a casual user, feel absolutely safe enough already with Fedora Atomic.
It just works without any hassles, and with the stuff that comes with it (SELinux, containers, immutable base, etc.) I think I am mostly safe.
Secureblue on the other hand is pretty locked down, and as someone who isn’t a professional Linuxer (™), I think fixing stuff is too hard (or annoying) for me, e.g. if KDE Connect can’t find devices, because of some hardened network connection stuff or whatever.
I just wanna watch YouTube and play some games, not having 30 tabs open because basic things don’t work as I want.
I just want something that works ootb without any issues, and Secureblue just isn’t it for me. I prefer Bluefin and Bazzite because of that.
Also, I’ve heard about the dev(s) and community being a bit toxic, or at least not being a pleasure to collaborate with. But I can’t verify that.
This is why I like GrapheneOS on phone. It is hardened and secure, but never gets in the way of your work. Everything works as it should. Kicksecure is the closest on the desktop space, though Fedora is also reasonably secure.
Also, I’ve heard about the dev(s) and community being a bit toxic, or at least not being a pleasure to collaborate with. But I can’t verify that.
FWIW, this hasn’t been my own experience. If anything, it may give of some “know-better”-vibes like one might recognize from engaging with some of GrapheneOS’ community members.
I thought about rebasing from other uBlue-variants to it, but quickly disregarded the option for me.
Often, and in this case too, it’s often a spectrum of compromises between convenience vs. security.
I personally, as a casual user, feel absolutely safe enough already with Fedora Atomic. It just works without any hassles, and with the stuff that comes with it (SELinux, containers, immutable base, etc.) I think I am mostly safe.
Secureblue on the other hand is pretty locked down, and as someone who isn’t a professional Linuxer (™), I think fixing stuff is too hard (or annoying) for me, e.g. if KDE Connect can’t find devices, because of some hardened network connection stuff or whatever. I just wanna watch YouTube and play some games, not having 30 tabs open because basic things don’t work as I want.
I just want something that works ootb without any issues, and Secureblue just isn’t it for me. I prefer Bluefin and Bazzite because of that.
Also, I’ve heard about the dev(s) and community being a bit toxic, or at least not being a pleasure to collaborate with. But I can’t verify that.
This is why I like GrapheneOS on phone. It is hardened and secure, but never gets in the way of your work. Everything works as it should. Kicksecure is the closest on the desktop space, though Fedora is also reasonably secure.
FWIW, this hasn’t been my own experience. If anything, it may give of some “know-better”-vibes like one might recognize from engaging with some of GrapheneOS’ community members.