icedterminal

It’s a version of Windows 10 targeted at businesses that choose to run Windows on “Internet of Things” devices. It is a “Long Term Service Channel” release that receives primarily security updates (little to no features updates), because the devices that will use this need to be in service for a very long time. Enterprise Windows typically activates with a licensing server that’s subscription based. But you can use the “Microsoft Activation Scripts” to activate it as if it were a retail copy you pick up the store.

I have absolutely no idea. Whenever people say it’s the oldest or the birth of democracy, I just chuckle and tell them to read a history book.

Office doesn’t have native Linux binaries. You either have to use a VM or Wine. You’ll find most people recommend a VM. There are Office web apps, but they’re not as robust as the Windows native offerings. Microsoft doesn’t really want to offer Office on Linux. Stick with Windows for the remainder of your education. Once you’ve finished, you can sink time into learning Linux.

Exactly.

If my device is compatible, does it automatically have access to Google Play and branding?

No. Access isn’t automatic. Google Play is a service operated by Google. Achieving compatibility is a prerequisite for obtaining access to the Google Play software and branding. After a device is qualified as an Android-compatible device, the device manufacturer should complete the contact form included in licensing Google Mobile Services to seek access to Google Play. We’ll be in contact if we can help you.

https://source.android.com/docs/setup/about/faqs

Google services are entirely missing from Android open source. The Google Play package is what contains the entirety of Google’s services.

Not sure if anyone remembers but back when cyanogenMod was the go-to, early versions had Google services included. Google sent a cease and desist notice and said it was a license violation. You cannot distribute it as part of the OS by default. The next release of cyanogenMod had it removed. Users had to flash the package if they wanted it.

The Feedback Hub was introduced to fix this gap in user reports for Windows. Microsoft does actively monitor this. They respond when necessary, merge topics, deny or approve bugs/suggestions, etc. For their software, such as Terminal or VS Code, you can use GitHub issues.

Keep in mind, like most companies, Microsoft has guidelines on what employees can say when responding to any user feedback. This is why we typically see a lot of copy and paste. When it is more than that, wording is selective and you may not get more than one or two responses in total.

I know of at least one employee on Reddit who participates every so often. https://www.reddit.com/user/jenmsft/

Try using virtual machines. You can do this entirely free. Install then take a snapshot. You can learn about the OS in a safety net. If you fuck up too badly, roll back to the snapshot and try again.

Nope. Side loading extensions doesn’t work on Stable, Beta or Nightly.

Yup. Mount your disk and chroot into it.

but the containers are still running as root, as the daemon itself raises the access to root.

No. The daemon can run without root, as such the containers don’t have root. My docker install doesn’t have root access. None of my stacks / containers need any root access tbh. I don’t have any troubles with deplyong stuff.

https://docs.docker.com/engine/security/rootless/

Arch can do this too. https://wiki.archlinux.org/title/archinstall

archinstall --config [/path|http://]

Pg has significantly better performance in a smaller self hosted environment. Notably because you’re doing a balance of reading and writing, or mostly writing since data changes regularly. For large scale operations where reading data is the primary use, MariaDB/MySQL is faster.

You should for sure move away from a proprietary OS. There are many ways to go about it. I personally use Arch minimal with hardened kernel. Everything runs in non-root docker containers. Commonly used distros are Ubuntu and Fedora. But there are many more to choose from. https://distrowatch.com/search.php?category=Server

To bypass their CDN (referred to caching) you need to setup a Page Rule for the entire Plex domain.

https://developers.cloudflare.com/support/page-rules/how-do-i-include-or-exclude-a-specific-url-from-cloudflares-page-rules/

Cache Level set to Bypass for https://plex.mydomain.me/*

Thanks for the information. Although Argo still greatly reduces latency if a user cares to reduce communication time.

Once you agree to letting friends and family access your hosted services, you become the tech support for any problems. Whether that be your fault, user error, etc. You should absolutely limit who you give access to. In my case, only three people can and that’s immediate family. No friends, no extended family. I don’t wanna deal with all that mess when I deal with it at work. Don’t over extend yourself by being nice.

Using Cloudflare is against the ToS when used for services like Jellyfin. Your account can be limited, closed, or find yourself getting a several hundred dollar bill for data usage because you’ve breached the terms of service. Additionally, streaming content on free accounts incurs higher latency which I’ve confirmed myself Argo smart routing massively reduces. https://github.com/jellyfin/jellyfin/issues/9295 - Don’t abuse what’s free or you may lose it.

Google shouldn’t be indexing your domains anyway. If it’s flagged your domain, it’s been indexed and scanned. Alternatively, it could indicate you have a weak point somewhere on your server and you’ve been breached. Google’s scan picked up whatever it was. Though I doubt this is the case and just a false positive. Double check your robots.txt files and disallow everything. Most index bots respect this. You can use a community sourced bot blocker. https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker

I’ve been running my own self hosted services for almost a decade. Though I have a background in IT directly doing this kind of stuff daily at work. As long as you have a strong firewall, modern TLS, relevant security headers, automatic tools like fail2ban, and have a strong grasp on permissions, you should be fine. Before I moved everything to non-root docker, it was given its own service user and SELinux policy. Using direct DNS isn’t so much of a problem. You shouldn’t have any issues. Feel free to reach out if you have any questions.