Are you sure QubesOS is the correct distribution for you?

My devs prefer Docker, and don’t want Kubernetes! We have a fix for that: Portainer-D2K. Portainer-D2K is a Docker translator for Kubernetes

As someone who was using mostly podman and is now switching to kubernetes I can confidently say that the cli interface was not what was holding me back. Instead it was the sheer amount of setup and complexity kubernetes can bring into an environment. Kubernetes is great when you want most or all the features it offers, it is horrible if you want to deploy 3 containers for your application on one host.

Oh well, not like I have to care, I wasn’t interested in portainer to begin with.

What are the assigned subuids and subgids for userA and userB?

I see you’re a project manager. Have you considered running the ai at 1200% for one month instead?

systemctl list-dependencies --reverse anydesk should show if any other services depend on them

Add renovate bot (self-hosted or not) or a similar not to your nixos repository to automatically update your lock file. Enable automatic system rebuilds (not live, nixos-rebuild boot…) to keep in sync with the repo.

Include multiple nixos systems in one repo, then reuse configuration or even make them reference each other (if you want that)

Find an issue to report upstream (or even add a pull request)

Fully automate your reinstall using disko and nixos-anywhere (don’t forget luks)

Be happy (optional)

Go over everything you’ve written in your repo so far, realise it’s formatted wrong and spend 2 hours fixing it until it no longer works

Build a derivation for something that doesn’t exist (also add a pull request if applicable and you’ve got time to maintain it)

Add a little nixpkgs-unstable, as a treat (use overlays)

Backups

Build a server so convoluted, kubernetes is easier to manage (I am here)

Wasn’t this the case for a long time? Since they started deduplicating the root partition and making it read-only/ a pain to write to?

Edit: https://github.com/Universal-Debloater-Alliance/universal-android-debloater-next-generation/wiki/FAQ

Tldr: You couldn’t uninstall from /system, only from /data and now you can only disable them. Looking at the wiki also shows that there’s not much difference between a data-only uninstalled system app and a data-only disabled app.

Huh? You don’t like strong copyleft licences?

Use a VPN, it’s not ideal but it’s secure.