Their point was to not have fully encrypted drive, so it boots without a prompt

You can achieve this even with full disk encryption with Secure Boot and TPM. That’s how Bitlocker does it. I have this setup on my Desktop — One single root partition with LUKS, Secure Boot on with sbctl and cryptenroll for tpm unlocking. Takes less than 5 mins to setup.

Yes. Just encrypt /home partition only

This is dangerous. As some data like cache and logs are stored in the root partition. So some of your data from home partition might trickle up the root partition in that form.

why encrypt it in the first place?

My threat model doesn’t include someone gaining direct access to my home desktop. I have Arch Linux with Secure Boot and TPM 2.0 enabled on fully encrypted drive and this chain’s existence makes it easier to know that no one has tampered with my system. On my laptop I am one step further with requirement of BIOS password.

storing the encryption keys in TPM, but others say then you can lose your keys if the mobo dies

That doesn’t mean you can’t decrypt your drive. It is just that it won’t be automatically decrypted at boot.

Debian. With unattended-upgrades installed. I ssh monthly just to update the docker images and clean up old logs.

this is the way

You should add a disclaimer stating that you have used an LLM. I have done so for a tool I built with an LLM that I needed, because I don’t know jackshit about coding and I am not gonna pretend I do.

You are delusional, take yourself to the infirmary.

GIMP ftw

It is the only reliable

JF becomes better or Plex becomes worse

Both will happen.

Besides.

some subtitles work on one, but not the other and vise versa

For me it has worked everywhere. All of my media is in .mkv so it already contains the subtitles. It works in all browsers clients, Desktop clients, TV and Mobile clients. Works in VLC and MPV as well on desktop, TV and Mobile. Works with Kodi as well. Works on same network (via both host IP and reverse proxy) as well as remotely via Pangolin.

So you can try putting everything in one MKV Container or maybe change the subtitle formats (if that’s a thing).

I use Arch BTW — just in case if Arch has that in their terms.

I am a simple man. I don’t look anything beyond vanilla Arch, Debian and Fedora.

I didn’t know the website lol. I just searched “anonymous file sharing”.

“Windows Linux”

Maybe your bank login just in case.

The commit will never be allowed😂

Wallpaper

Activate Linux Overlay

Ik that. I was talking in terms of a layman.

No lol. SearXNG. But would look up what you mentioned

I host my own search engine lol.