Debian voted to not ban AI. Proposal E won:

https://www.debian.org/vote/2026/vote_002#texte

I have a positive experience with Reolink. Not connected to internet at all currently.

Not sure if I will. If I do, will definitely try some firewall stuff. Another part of me is considering not connecting the NVR itself, but taking the video stream from the HDMI and somehow making it so I can see that stream from anywhere. Would miss out on alerts that way though.

Phoronix’s more real world testing didn’t have Gnome performing badly: https://www.phoronix.com/review/cachyos-desktops-july-2026

Doesn’t KDE kinda have that same refresh rate issue on Wayland? I remember seeing a bug that Qt has a limitation in this regard, In the video I saw the workspace transition ran at the lower refresh rate when multiple monitors were used.

Thankfully I stopped using multiple monitors so I can’t personally confirm.

Personally, I wouldn’t recommend Vanilla OS.

• They released v1 based off a non-LTS Ubuntu released and then quickly stopped supporting it while they worked on v2. No security updates.
• They released v2 with no upgrade path from v1. v2 was based on either Debian Testing or Sid. It did not regular receive updates. Right now the website says that last updates were released in January. Presumably they stopped working on it to work on v3.
• I’m not sure if you can upgrade from v2 to v3. A fresh install is probably necessary.
• Mirko founded Vanilla OS but his main focus now seems to be Sinty OS.
• On a petty note, the website makes you opt out of sharing and selling your personal info to third parties.

That’s a lot of churn and issues for such as young project that advertises itself to new users.

Wonder how much of that is going towards Hyprland: https://omarchy.org/news/2026/08/omacom-foundation-to-be-exclusive-hyprland-sponsor/

You absolutely can sandbox using SELinux. Red Hat even has a tool called “sandbox” for just that: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/7/html/selinux_users_and_administrators_guide/chap-security-enhanced_linux-securing_programs_using_sandbox

Edit: and Android sandboxing is built heavily around SELinux: https://source.android.com/docs/security/features/selinux

I don’t believe the Steam flatpak is responsible for those issues

openSUSE recently added some more security policies. By default, Wine cannot run normally. There’s a package you can install that sets SELinux security policies to allow it to work. If you install the openSUSE Steam rpm, that security policy automatically gets installed too.

This is a downside of flatpak’s approach to sandboxing. It aims to work everywhere on every distro, using bubblewrap instead of something like SELinux or AppArmor. But it also does not interact with AppArmor or SELinux, so if they block something, flatpak can’t override that.

Meanwhile, snap uses AppArmor for sandboxing. So even if there was a policy like openSUSE’s that prevented Wine from working by default, since snap speaks AppArmor, it can give itself the necessary permissions to make Wine work.

Bazzite uses the Steam rpm, not flatpak.

Though I think other launchers like Heroic may be flatpaks. But that’s no different to SteamOS.

Overall probably closer to the truth.

I wish people didn’t obsess over these large numbers as much. Like when Linux suddenly hit 5% on Steam when that was clearly just an outlier and was destined to fall right back down.