What is your base system in your home server?

Link: > MicroOS with Podman seems amazing! You can enable automatic updates for both the server and pods/containers Something you can do easily on any OS. Auto-updates are easy. What’s more work is implementing secure automatic decryption of user data during boot with attestation or something like clevis/tang. Link: > Podman containers are rootless so way less attack surface Can also be done on any OS. Also I would rather use gvisor for untrusted containers, which is more painless to use with other solutions like Docker. Link: > it even rolls itself back if an update makes it not boot Nice goody, but not as important as it sounds. I haven’t had an unbootable Linux system in years, despite doing automatic updates. I really don’t see what microos has to offer. If I was using an immutable OS, I would rather use one with strong integrity guarantees via UKI plus verity protection for everything important, including security ciritical config files.