SayCyberOnceMore

Security is the output of removing vulnerabilities and insecure configs

So, the real answer is: what’s the minimal software you need and the most regularly updated.

So, my choice is Arch.

Yep, installation takes a little longer and needs more technical skills, but only install the bits you need (also learn a little more this way) and then updates are tiny and can be done as often as you’re comfortable with.

Whatever you choose, it will break / die / be deleted or corrupted one day, so always backup your data separately than the OS (separate drive partitions can help) and you’re done.

Nice. Glad you’re on to something.

I can’t help you with docker files as I don’t use it, but, there’s usually a way to find out who / what owns a file, so I hope docker utils can tell you if it’s safe to delete

du -hs * won’t find “hidden” (.) files and folders, you’ll need a slightly sifferent regx (which I will leave as an exercise for you / I don’t have that info here)

And also both du and df show different results depending on the underlying filesystem, ie btrfs (and maybe ZFS?) won’t show how much deduplication is happening.

Also, you might be looking at sparse files too, and from memory, you’ll need another option for du or df to report those correctly.

Kinda hijacking this a little: what do the cool kids use on a “normal” TV as a client to watch Jellyfin?

Chromecast? A PI plugged into the HDMI port?

This hasn’t been on my radar, but with Winter coming (John Snow) I’m thinking this might be something to look into…

I don’t have any evidence to backup my statement, but for my usecase (Linux booting troubleshooting toolkit) Kingston sticks last a fair while (~10 years), but Sandisk fail sooner (<5years?)

The main thing I’ve noticed for all brands: there’s no warning before failure. They’re like nicad batteries… all good, then one day - completely dead. So never keep any data on them that you can’t lose.