It can happen because of simple things such as a hardware failure or because the kernel was removed 3 weeks prior. Its unlikely but it always will come at the worse time.

Also rebooting after any update makes sure that all services have been restarted and are using the newest libraries.

Are they though?

This isn’t the 90’s. All it needs to do us produce an analog stream.

They just focus on the dollar value

Reminds me of this https://www.youtube.com/watch?v=yMGJLZDLpUg

Is that a big concern in 2024? Devices are much more powerful and audio is cheap and easy.

Heart disease

Are you setting up a big bank?

That’s what pretty much everyone uses

Also your probably don’t even need vlans. Sure it is nice but you are being way paranoid. You need to define a threat model before you do anything or else you are just going to spend lots of the protecting the wrong things.

I normally am all for security but if you are this paranoid you probably shouldn’t be putting things on the internet. Realistically there is a low threat even if someone manages to exploit a service. Try to come up with where a exploit is likely to happen and how you would prevent lateral movement. From an attack perspective it is extremely unlikely there is a person behind the attacks. If anything a container will be exploited and then it will be used as either a proxy or cryptominer.

It might not come back up after power loss.

Also you do want security updates. It is a bad idea to not install them.

Technically that’s not entirely true. I’ve met some talented Windows Adkins and some terrible Linux people. If someone has been using Linux for decades they tend to become complacent and errogant. Good luck trying to get them to even acknowledge containers or that systemd. It sad since both containers and systemd have been around for decades at this point.

Give me someone who is really to learn. Those are the best people to work with.

It seems fit for them to get burned because of it

It also phones home to China so I personally wouldn’t use it

That’s bizarre

I want it to work with libp2p. Imagine controlling your machine from anywhere securely.

Can we just drop this already

You just buy them

Your billion dollar corporations aren’t running dedicated hardware. That would be very expensive and impossible to manage.

What about VPNs

Use defense in depth when possible. What you are describing wouldn’t work for any bigger setup as Proxmox clusters trust the underlying hosts. Also the chances of a hypervisor escape is very very small as in almost impossible. Chances are your weakest point will not be the hypervisor. I would focus on the network level with containers to separate workloads.

Not to mention it is a utter pain in the ass.

With that being said, if just the package manager was a config file and there was a reasonable CLI then I could get on board.

That’s a healthy solution