themes and funny cursors I could find. And that was unfortunately the point where I learned the price you pay for stability. At that time, I was reading news about the release of Plasma 6, with all the fancy features I needed, but all I could get from the repos was 5.27. Welp.

I love Mint. It has a special place in my heart now. I cannot stress enough how much I love the devs. Their default answer to any question I looked up seemed to be "Our professional opinion is that you shouldn't, but if you still want to, here's how." The level of respect you feel as a user is just something you don't get on Windows, or even many other distros. I still maintain one doesn't choose Mint over Ubuntu for any technical differences, but because of the amazing developers.

Anyways, at that point I have lurked enough on the subreddits and watched enough Linux Youtube to know about rolling release distros, and to have seen the Arch memes. I guess it wouldn't hurt to check it out. "Rolling releases..." Yep. "...targeted at the proficient GNU/Linux user, or anyone with a do-it-yourself attitude who is willing to read the documentation..." Okay, that's fine. "...a pragmatic distribution rather than an ideological one ... Evidence-based technical analysis and debate are what matter, not politics or popular opinion. " You know what, I love that. Add new VM.

It took hours of reading the installation guide, but actually, the installation difficulty was not as high as expected. Download the iso, format the drive, set locale, create a user, install the packages. Same steps as Mint, just without a GUI. Add Plasma on top, and it largely feels the same as my beloved Mint. But now everything is more up to date. Yeah I can do this. Time for the bare metal install.

The move

Exactly one year ago, I unplugged my Windows drive just to be sure. Picked an older SSD out of storage and plugged that in instead. Still wanted to keep my Windows drive, just in case. I copy pasted all commands I used in the VM into a text file and sent that to my phone, so the second time around very little reading was needed. The installation time dropped from hours to minutes. Pretty sure that was less work than clicking through a GUI installer. Kinda starting to enjoy this terminal thing.

With the install finished, I plug my Windows drive back in, set up my boot order to prefer Linux, and boot into my fresh system. Everything seems fine except... My mainboard and RAM are lit up like a christmas tree. The RGB versions were on sale and cheaper than the blacked out components, but the software I used on Windows to disable them doesn't exist on Linux. Ah. Didn't consider that.

Quick search later I learn about OpenRGB. Long search later and some help from the OpenRGB Discord, I learn that my RAM brand needs a specific kernel module blacklisted to work with OpenRGB, whatever that means. It does work though, and using the HardwareSync plugin, I can even mirror my Windows setup and have my RAM light up when my CPU reaches critical temperatures. Brilliant!

Next on the order of business, the horizontal scroll wheel on my Logitech mouse doesn't control the volume anymore. I tested this in the VM, I guess it was just properly passed through. On Linux, Logitech software doesn't exist, but Solaar does. Highjack the wheel, bind "XF86AudioRaiseVolume" and "XF86AudioLowerVolume" to "up" and "down" respectively et voila! Neat.

Next. My external drives aren't recognized. Quick rummage through the Arch wiki, and an install of ntfs-3g later, that issue is gone too. Everything else? Just... Works? Wifi works, GPU works, gamepad works, Euro Truck Sim Works, Flight Sim works, Stardew Valley and OpenTTD too. Don't really need much more. I could get used to this.

The Bash excursion

I used the terminal quite a bit to solve the arising issues by now, so at this point I wasn't afraid of it anymore and excited to explore it. Reading guides, looking at cheat sheets, watching "Top 100 console commands on Linux you NEED to know! You won't believe #69!" is great fun and I start to pick up

[LONG] My First Year on Linux – A Retrospective

Today my daily driver turned 1 year old! I thought I'll take this opportunity to celebrate, reflect on how it's been going and share my experiences so far.

https://imgur.com/hqDOOW4

**The why**

I knew the end of win10 support was looming, and I was less than excited about the prospect of moving to win11. The removal of features previous versions of Windows had, and the addition features I did not want, the lower performance in games compared to win10, the horror stories of breaking updates, had me holding off the move for as long as I could. The gradual but consistent removal of user agency already had me frustrated on win10, and it only seemed to get worse with 11.

"Do you want to update and restart? Your options are Yes, and Yes, but later. Do you want me to ask again? Just kidding, I will anyways. Unless of course I notice your PC idling for an extended period of time, in which case I'll just do it without asking." Great.

"Oh you want to install the OS without logging into our servers? Nooo, no, I can't let you do that. Oh you're doing the little rain dance ritual in the terminal? Allright. Just this once. Oh now you want to have a vertical task bar? Lol. Lmao even. Not on my watch. Now get back to work on those documents I helpfully uploaded to my cloud servers for you." Ugh.

Then MS Recall hit the news. That one was a bit too much even for me, but at least I didn't need to care until I upgraded, right? Well, one article mentioned a command to check the service state. I punched it into the console for fun and.... "Feature Name: Recall. State: Enabled." Wait. What? On Windows 10? I didn't see anything? I went snooping around the system files, and there was only a skeleton folder with nothing functional in it, but in my mind that clearly meant they were preparing for something. Now a year later, it still hasn't manifested, so maybe it was just an accidental inclusion, who knows. Either way, that was the last straw for me.

**The what**

So. Now what. Apple was a contender, but the lack of user agency and vendor lock-in stays the same, barely any gaming is possible as far as I know, in addition to the rather high upfront cost for the hardware, and my desktop was barely a year old at that point, so that was out of the question. I don't hate on Apple, don't get me wrong, it's good hardware and their OS does many things right, it's just not ideal for the cheapskate tinkerer and gamer in me.

I was aware Linux existed though, from having rescued my win98 data from a broken drive using KNOPPIX over a decade ago. I also played around with Ubuntu on my Raspberry PI and ran a webserver for a while, so I knew how to "apt update && apt upgrade" and even "reboot", but that was pretty much the extent of my knowledge.

So I figured, If I'm going to do this, I'll have to start from the ground up with something easy, and I'll do it in a virtual machine, just to make sure I can handle it and see how I like it. Not knowing much about distros at that point, I just made sure to choose one from the debian family to keep the familiar package manager, and went with the one I saw recommended a lot- Linux Mint. So I spun up a VMWare VM, and for about two months, I booted into Windows, then immediately opened the VM and fullscreened it, and then just went about my daily business from there.

And that phase was surprisingly frictionless. The updates went through the familiar apt without a hitch. Installing Discord and Cinny went fine. Thunderbird synced mails from all my providers with ease. Brainrotting on Youtube worked just fine too. I did install Steam and tried gaming, but lacking proper GPU passthrough, that wasn't exactly a smooth experience. The games I tested did start though, so that was a good sign for the bare metal install.

So instead I spent some time just getting comfortable with the system, installing software, replacing parts of the system, breaking things and trying to fix them. I got rid of Cinnamon and installed Plasma for its customizability and just binged on all the

themes and funny cursors I could find. And that was unfortunately the point where I learned the price you pay for stability. At that time, I was reading news about the release of Plasma 6, with all the fancy features I *needed*, but all I could get from the repos was 5.27. Welp.

I love Mint. It has a special place in my heart now. I cannot stress enough how much I love the devs. Their default answer to any question I looked up seemed to be "Our professional opinion is that you shouldn't, but if you still want to, here's how." The level of respect you feel as a user is just something you don't get on Windows, or even many other distros. I still maintain one doesn't choose Mint over Ubuntu for any technical differences, but because of the amazing developers.

Anyways, at that point I have lurked enough on the subreddits and watched enough Linux Youtube to know about rolling release distros, and to have seen the Arch memes. I guess it wouldn't hurt to check it out. "Rolling releases..." Yep. "...targeted at the proficient GNU/Linux user, or anyone with a do-it-yourself attitude who is willing to read the documentation..." Okay, that's fine. "...a pragmatic distribution rather than an ideological one [...] Evidence-based technical analysis and debate are what matter, not politics or popular opinion. " You know what, I love that. Add new VM.

It took hours of reading the installation guide, but actually, the installation difficulty was not as high as expected. Download the iso, format the drive, set locale, create a user, install the packages. Same steps as Mint, just without a GUI. Add Plasma on top, and it largely feels the same as my beloved Mint. But now everything is more up to date. Yeah I can do this. Time for the bare metal install.

**The move**

Exactly one year ago, I unplugged my Windows drive just to be sure. Picked an older SSD out of storage and plugged that in instead. Still wanted to keep my Windows drive, just in case. I copy pasted all commands I used in the VM into a text file and sent that to my phone, so the second time around very little reading was needed. The installation time dropped from hours to minutes. Pretty sure that was less work than clicking through a GUI installer. Kinda starting to enjoy this terminal thing.

With the install finished, I plug my Windows drive back in, set up my boot order to prefer Linux, and boot into my fresh system. Everything seems fine except... My mainboard and RAM are lit up like a christmas tree. The RGB versions were on sale and cheaper than the blacked out components, but the software I used on Windows to disable them doesn't exist on Linux. Ah. Didn't consider that.

Quick search later I learn about OpenRGB. Long search later and some help from the OpenRGB Discord, I learn that my RAM brand needs a specific kernel module blacklisted to work with OpenRGB, whatever that means. It does work though, and using the HardwareSync plugin, I can even mirror my Windows setup and have my RAM light up when my CPU reaches critical temperatures. Brilliant!

Next on the order of business, the horizontal scroll wheel on my Logitech mouse doesn't control the volume anymore. I tested this in the VM, I guess it was just properly passed through. On Linux, Logitech software doesn't exist, but Solaar does. Highjack the wheel, bind "XF86_AudioRaiseVolume" and "XF86_AudioLowerVolume" to "up" and "down" respectively et voila! Neat.

Next. My external drives aren't recognized. Quick rummage through the Arch wiki, and an install of ntfs-3g later, that issue is gone too. Everything else? Just... Works? Wifi works, GPU works, gamepad works, Euro Truck Sim Works, Flight Sim works, Stardew Valley and OpenTTD too. Don't really need much more. I could get used to this.

**The Bash excursion**

I used the terminal quite a bit to solve the arising issues by now, so at this point I wasn't afraid of it anymore and excited to explore it. Reading guides, looking at cheat sheets, watching "Top 100 console commands on Linux you NEED to know! You won't believe #69!" is great fun and I start to pick up

nice qol tips here and there. "sudo !!" reruns the previous command with elevated privileges without the need to retype the whole thing. "!<number from history>" reruns the given command. "\^old\^new" reruns the previous command with the given part replaced. The time savings!

Learning about .bashrc was great fun too. I spend hours googling other people's files and set up one letter aliases for my most used commands. I can even have if statements, so I can do things like this, and not even have to think about which of my systems I'm on currently:

if [ -f /etc/arch-release ]; then
# Arch
alias u='sudo pacman -Syu'
alias i='sudo pacman -S '
alias f='pacman -Ss '
alias r='sudo pacman -R '
alias rr='sudo pacman -Rs '
alias rrr='sudo pacman -Rns '
alias c='sudo pacman -Sc'
elif [ -f /etc/lsb-release ]; then
# Debian
alias u='sudo apt update && sudo apt upgrade'
alias i='sudo apt install '
alias f='apt search '
alias r='sudo apt remove '
alias rr='sudo apt purge '
alias c='sudo apt autoremove && sudo apt clean'
else
echo "Unsupported distribution or cannot detect distribution."
fi

Functions work too. A quick one-liner to cd into a directory and list the contents immediately makes the whole thing feel more modern. Why isn't this a default? Whatever, the ability to just add that myself gives me a small taste of the potential power.

cd() {
builtin cd "$@" && ls -AF
}

And while we're at it, why do I need to type out "cd ~/.config/fastfetch/" every time I want to go there? Zoxide exists, sure, but that requires precaching, and if I usually only visit a config directory once after installing the package, what even is the point? But Google tells me fzf and fd exist, and a bit of copy pasting snippets from stackoverflow later, I can just "fz config fastfetch" at a barely noticeable performance penalty. Now we're talking.

fz() {
local dir
dir=$(fd --type d --hidden \
--exclude '.git' \
--exclude 'node_modules' \
--exclude '.cache' \
--exclude '/mnt' \
--exclude '/run' \
--exclude '/proc' \
--exclude '/sys' \
--exclude '/dev' \
. / 2>/dev/null \
| awk '{ print length, $0 }' | sort -n | cut -d' ' -f2- \
| fzf --query="$*" --select-1 --exit-0 \
--extended-exact --no-sort --height 40% --reverse \
--preview 'tree -C {} | head -n 20') \
&& cd "$dir"
}

Being able to just change the behavior of the shell like that is amazing and makes it feel much more like "home". At this point I wanted to write a bit more than just snippets, and having dabbled in game development before, I decided to take what I know and apply it in bash, adding [a leveling system](https://github.com/Divinux/linux-terminal-gamifier) from RPGs to my terminal. It tracks used commands and gives out experience points for using the terminal, and displays fun little messages on level ups, to make using the computer just a little bit more fun. I'll have you know, I'm a lvl 50 currently.

https://imgur.com/AvD0bZU

**The unhealthy obsession**

Now, this is the part I'm not proud of. I've come to love Arch. It's philosophy speaks to me and I can't imagine there is a distro that is a better fit for me. But what if... What if there is one and I just don't know it? And anyways, what IS the difference between distros other than the release schedule? How much do the installations actually differ? I've seen the GUI install, I've seen the CLI equivalent, is there something else? And how do the footprints compare, is there anything more lightweight than Arch? Something more challenging? I don't really want to distrohop, but I *do* have VMs at my disposal. I've heard some big names, Fedora exists, openSUSE exists, and there's fancy gaming focused Bazzite and Garuda too! I'll just quickly install those and have a look around,

that can't hurt, right?

I spin up a couple VMs and install the big ones, check out the preinstalled packages, the package managers, install fastfetch and take a screenshot of the package versions and footprints. A dozen VMs later, I have a neat looking little folder with fastfetch screenshots, I compare the ASCII art and plot the package amount and memory footprint in a spreadsheet. I look into increasingly more obscure distros to add to my little digital stamp collection. Instead of gaming after work, I spend my time installing new distros. At some point I start going down the list of ASCII logos in the fastfetch source code to see which ones I'm missing.

Most blur together, it's always the Calamares or Anaconda installer. The CLI based ones are largely the same as Arch. Notable differences are the minimalistic source based ones like KISS and CRUX. SourceMage is fun. RedStar is exciting just because of what it is. I didn't find many differences from the surface level looks I gave the distros, but I certainly gained more confidence in my installation and rescue abilities from the more manual ones. Anyways, my collection currently contains 141 OSes. Let this be a warning to you and don't do distrohoping, kids.

https://imgur.com/G4Z6mz2

**The conclusion**

So, a year after I switched my daily driver to Linux, how do I feel about it? I truly, genuinely, love it. I can do most anything I could with Windows, save for Photoshop and Office365, but whatever, there's alternatives for those. But I can also do *more*. Tinkering with Plasma and making it look and behave how I want is amazing. If you want to do something, theres a setting for it. My UI themes are perfectly synchronized between Qt and GTK, my icon theme is a custom monochrome version of candy icons, because if you want to write a noscript to run through all the noscript files and pull all the color out, you can. My mouse cursor seems pretty vanilla, but is also a custom converted version originally only available on Windows, because if you want to convert that, you can do that too.

My terminal is set it up with tmux first and later replaced that with WezTerm to give me persistent sessions as well as graphics support. It still greets me with the same weather report styled through figlet that I set up on my first day of playing with it, but now it also pulls the Arch rss feed to alert me of any potential update issues. All in a custom colorscheme of course.

Everything, from the messages shown during boot, to the installed packages, to the behavior of windows, down to the colors of every last pixel is - to quote Kanye from before he went mad - "the exact motherfucker I wanted". And more importantly, it doesn't stand in my way when I need to do some actual work.

Yes, perfect doesn't exist, and sometimes there is something to fix. But annoyances exist on Windows too that require investing time, using google, troubleshooting and typing commands into the scary console. The difference however is this- on Windows, I'm always undoing things the developers did, while on Linux, I'm fixing things the (volunteer) developers for whatever reason didn't have the capacity for. On Windows, I'm fighting *against* the developers, and on Linux, I'm fighting *alongside* them.

And that is why I feel it's important to get more newbies into the ecosystem, more eyes on bugs, more people to complain, and more potential developers who think "fuck it, I'll just do it myself". And I'll certainly be here to welcome them with open arms.

Thank you so much for reading!

https://redd.it/1opy2x3
@r_linux

Status of linux tablets in 2025

I did a lot of research into this and finally found that Surface Go 2/3/4 are pretty much the only devices that qualifies as true x86 linux "tablets" out there, which is a bit disappointing, since they are a bit underpowered and top out at 8 GB of RAM.

Other options are too heavy and are awkward to use as tablets. Examples are Surface Pro models, Minisforum v3, Starlite and Surface-like devices from Dell (latitude 7210 for example), HP and Lenovo.

IMO they better quality as compact laptops rather than tablets.

Surface Go devices are around 500+ grams (1.20 lbs) and are comfortable to hold and use as tablets.

They are 100% compatible with linux out of the box.

I've been using a used Surface Go 2 I picked up for $160 for a couple of days and it's a joy to use both as a tablet and with the detachable keyboard, albeit if you only use it for web browsing and typing.

I just wish there were more devices in that weight class with better specs, but unfortunately I couldn't find any.

Has anyone found other good linux-friendly tablets worth checking out?












https://redd.it/1opx1ie
@r_linux

Say hi to Kit | Firefox (official Firefox swag)
https://www.firefox.com/en-US/kit/

https://redd.it/1oq0kim
@r_linux

Kubuntu.org security issue warning in firefox
https://redd.it/1oq1qi4
@r_linux

Does Windows do this for you?

Does your OS do this for you?

/etc/cron.daily/installation-birthday:

0 0
| |
____|___|____
0 |~ ~ ~ ~ ~ ~| 0
| | | |
___|__|___________|___|__
|/\/\/\/\/\/\/\/\/\/\/\/|
0 | H a p p y | 0
| |/\/\/\/\/\/\/\/\/\/\/\/| |
_|___|_______________________|___|__
|/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/|
| |
| B i r t h d a y ! ! ! |
| ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ |
|___________________________________|

Congratulations, your Debian system "gato" was installed

4 year(s) ago today!



https://redd.it/1oq15ge
@r_linux

Armbian 25.11 release is coming
https://blog.armbian.com/armbian-25-11-release-is-coming/

https://redd.it/1opyzxe
@r_linux

LXQt (Lightweight Qt Desktop Environment) 2.3.0
https://lxqt-project.org/release/2025/11/05/release-lxqt-2-3-0/

https://redd.it/1oq6wws
@r_linux

CachyOS Continues Delivering Leading Performance Over Ubuntu 25.10, Fedora Workstation 43
https://www.phoronix.com/review/cachyos-ubuntu-2510-f43

https://redd.it/1oq9o7q
@r_linux

FINALLY I INSTALLED A FORM OF ARCH ON THIS LAPTOP
https://redd.it/1oqhjzd
@r_linux

New user: had an oddly tender moment last night

So I recently took the plunge to Linux (I'm on Mint Cinnamon), and last night I tweaked all my settings and themes and got things working how I wanted them to. And I was just sitting at my computer with my new operating system listening to some of my favorite music, and it was just nice. Nice to know I was in control of my computer and everything in it. I've used Windows my whole life and I never got that feeling with them.

https://redd.it/1oqkdxs
@r_linux

swww renamed to awww, due to the author's guilt from obliviously naming it "final solution"
https://www.lgfae.com/posts/2025-10-29-RenamingSwww.html

https://redd.it/1oqq2jd
@r_linux

Updated installer for Affinity on Linux

"To all my graphic designers on Linux in the struggle...here's some pain medicine."

As always, hope this helps. https://www.youtube.com/watch?v=g19VW0K7LUY

https://redd.it/1oqu8gf
@r_linux

Sim racing on Linux

Hi there!

I had a chance to try out Bazzite but ultimately I turned it away because I just couldnt get my thrustmaster wheel to work properly

The experience I had in other games and the OS overall was amazing but I mostly just sim race so I went back to W11

Well Windows 11 is absolute , pardon my language, dogshit

So I'm kinda stuck in the middle. I don't wanna use W11 but from my experience on Bazzite/Linux it doesnt offer me what I need/want

I'm hoping since I'm a newbie I made some mistake and thats why my tm wheel didn't work

I did try to trouble shoot it for a couple of days but ultimately I gave up because I just dont have too much free time and I'd rather spend that time playing

I'd love if anyone who sim races as well could pitch in and tell me just if it is possible or not

(for reference the wheel is a T300RS GT)

Thanks for reading , have a good day

https://redd.it/1oqubyu
@r_linux

SigInt Cyberdeck I built, running mint
https://redd.it/1oqwvv4
@r_linux

Microsoft Contributing "RAMDAX" Driver For Upcoming Linux 6.19 Kernel
https://www.phoronix.com/news/Microsoft-RAMDAX-Linux-Driver

https://redd.it/1oqwvql
@r_linux

We should act before the imminent destruction of the concepts of device ownership

I’m sadly starting to see a trend. Most phone bootloaders are locked nowadays. It’s not one specific manufacturer, it’s basically everyone.

If the OEM gives you the option to unlock them, it either voids the warranty or comes with severe punishment.

When you want to root your phone to get the liberty you lost to the “security features”, you basically break any apps that check for play integrity or other methods to detect root (even tho you can bypass that, it’s against TOS). I've mostly seen this on banking apps, but they are not the only ones. Not to mention that to even have the play integrity API, you have to have Google services installed and running. So you can't even de-Google your phone and keep the features.

This problem has been rampant on phones, it’s definitely not new, but it's basically the first thing that blocks the development of Linux for general phones. 

Not to mention that no constructors follow a common thing like UEFI, they just all have their own thing. Which is a real pain for any kind of OS development.

Those aren’t the only issues tho, there's also all the proprietary blobs stuff. Without a way to either replicate them without reverse engineering, or open sourcing versions of the drivers, we will be stuck in this situation. Look at postmarketOS, they struggle a lot with this. This makes adding a device to their supported list a really hard thing to do, while costing a lot of time and money.

I think this will happen soon to laptops and desktops too. With the rise of ARM, I believe locking the bios and bootloader of those systems is not out of the question. Apple already kind of started with IBoot. It’s not fully locked, but definitely less open than what was used before in Intel macs.

And it’s not that ARM devices don't support UEFI, they absolutely do. Most Windows ARM systems use them right now. Arm’s SystemReady program allows them to boot just like x86 PCs do.

Then why the lockdown?

They will definitely say it’s for security, but Windows PCs, arm or not, have proven that you can have security while giving the user the choice to disable that security. UEFI and Secure Boot work just fine on ARM too, so it's not even a compatible issue. Secure defaults can be set as default, there is no problem with that. There is a really clear problem when those same defaults can’t be changed tho.

Now they'll probably argue that they didn't choose to do so, and that’s required by regulations.

I believe this is either misinformation, a stretch or a straight-up lie.

Radio and DRM firmware can stay on an isolated part of the device on their own. They don't need to prevent the entire OS boot process. The radio part already runs on an isolated part of the system on its own processor with signed firmware that complies with the FCC/RED requirements. The same thing goes for the DRM issue. User keys can allow for banking apps and all the other apps to verify the system without having to rely on OEM only control.

We need to act, not just complain

# What we should ask for:

We need to ask for owner-managed Secure Boot on every single type of general purpose computer. This goes for phones, smartwatches, computers… you get the point.
Either allow the user to disable secure boot or allow the user to manage their own keys, with proper documentation on how to do so.

We should also try to separate the concerns:

The radio and DRM stuff can be kept under signed, secure version on isolated systems to meet regulations.
This should NOT require a full system lockdown or OEM to have the full control over what you boot on YOUR device.
Provide documentation on how to interface with the hardware like GPS, Camera, GPUs and all to allow for third party OSes to develop properly without having to reverse engineer every single driver. This also means being able to develop proper alternatives to those NDA-only drivers.

We should have proper control over our device security:

Devices should be able to support TPM or DICE in a

We should act before the imminent destruction of the concepts of device ownership

I’m sadly starting to see a trend. Most phone bootloaders are locked nowadays. It’s not one specific manufacturer, it’s basically everyone.

If the OEM gives you the option to unlock them, it either voids the warranty or comes with severe punishment.

When you want to root your phone to get the liberty you lost to the “security features”, you basically break any apps that check for play integrity or other methods to detect root (even tho you can bypass that, it’s against TOS). I've mostly seen this on banking apps, but they are not the only ones. Not to mention that to even have the play integrity API, you have to have Google services installed and running. So you can't even de-Google your phone and keep the features.

This problem has been rampant on phones, it’s definitely not new, but it's basically the first thing that blocks the development of Linux for general phones. 

Not to mention that no constructors follow a common thing like UEFI, they just all have their own thing. Which is a real pain for any kind of OS development.

Those aren’t the only issues tho, there's also all the proprietary blobs stuff. Without a way to either replicate them without reverse engineering, or open sourcing versions of the drivers, we will be stuck in this situation. Look at postmarketOS, they struggle a lot with this. This makes adding a device to their supported list a really hard thing to do, while costing a lot of time and money.

I think this will happen soon to laptops and desktops too. With the rise of ARM, I believe locking the bios and bootloader of those systems is not out of the question. Apple already kind of started with IBoot. It’s not fully locked, but definitely less open than what was used before in Intel macs.

And it’s not that ARM devices don't support UEFI, they absolutely do. Most Windows ARM systems use them right now. Arm’s SystemReady program allows them to boot just like x86 PCs do.

**Then why the lockdown?**

They will definitely say it’s for security, but Windows PCs, arm or not, have proven that you can have security while giving the user the choice to disable that security. UEFI and Secure Boot work just fine on ARM too, so it's not even a compatible issue. Secure defaults can be set as default, there is no problem with that. There is a really clear problem when those same defaults can’t be changed tho.

Now they'll probably argue that they didn't choose to do so, and that’s required by regulations.

I believe this is either misinformation, a stretch or a straight-up lie.

Radio and DRM firmware can stay on an isolated part of the device on their own. They don't need to prevent the entire OS boot process. The radio part already runs on an isolated part of the system on its own processor with signed firmware that complies with the FCC/RED requirements. The same thing goes for the DRM issue. User keys can allow for banking apps and all the other apps to verify the system without having to rely on OEM only control.

**We need to act, not just complain**

# What we should ask for:

* We need to ask for owner-managed Secure Boot on every single type of general purpose computer. This goes for phones, smartwatches, computers… you get the point.
* Either allow the user to disable secure boot or allow the user to manage their own keys, with proper documentation on how to do so.

We should also try to separate the concerns:

* The radio and DRM stuff can be kept under signed, secure version on isolated systems to meet regulations.
* This should NOT require a full system lockdown or OEM to have the full control over what you boot on YOUR device.
* Provide documentation on how to interface with the hardware like GPS, Camera, GPUs and all to allow for third party OSes to develop properly without having to reverse engineer every single driver. This also means being able to develop proper alternatives to those NDA-only drivers.

We should have proper control over our device security:

* Devices should be able to support TPM or DICE in a