If you buy three of them you can set up a Ceph cluster I suppose ahah. That would solve part of your issue of having storage and compute on the same node.

If you don’t need enterprise level hardware and support, I can suggest MinisForum. They released the MS01 fairly recently and I believe it fits your specs.

https://store.minisforum.com/products/minisforum-ms-01

That’s the problem, if anyone somehow gets your root CA key, your encryption is pretty much gone and they can sign whatever they want with your CA.
It’s a lot of work to make sure it’s safe in a home setup.

I’m talking about home hosting and private keys. Not businesses with people whose full time job is to make sure everything runs fine.
I’m a nobody and I regularly have people/bots testing my router. I’m not monitoring my whole setup yet and if someone gets in I would probably not notice until it’s too late.
So hosting my own CA is a hassle and a security risk I’m not willing to put work into.

The domain certificate is public and its key is private? That’s basically it, if anyone gets access to your key, they can sign with your name and generate certificates without your knowledge. That’s my opinion and the main reason why I wouldn’t have a self hosted CA, maybe I’m wrong or misled, but it’s a lot of work to ensure everything is safe, only for a self hosted setup.

For self hosting at least, having your own CA is a pain in the ass to make sure everything is safe and that nobody except you has access to your CA root key.
I’m not saying it’s not doable, but it’s definitely a lot of work and potentially a big security risk if you’re not 100% certain of what you’re doing.

That sounds like a bad idea, you would need your CA and your root certs to be completely air gapped for it to be even remotely safe.

Oh removed, I was miserable back when I installed Arch. Dang, you might be onto something there!

That’s strange, apart from installing it, Arch is pretty painless to run if you’re not careless

You can read about SELinux here or ACLs here. SELinux can be pretty complex if you’ve never used it, so make sure you understand it well. I believe it should be able to do what you want to achieve.

I guess you can use ACLs depending on your filesystem, or SELinux user contexts.

He’s not wrong but he sounds like a jackass. A minimal version sounds better than removing features that are present and used by people.

Do you happen to have NetworkManager ? I think it’s default on Ubuntu and that might be your problem. If you have it, nmcli connection set <device> down would turn off your device. I believe you can also change your mac address with it, but I don’t have the manual with me right now.

Edit: NetworkManager can do randomised mac address Arch wiki link

You probably messed up your firmware. Do you see any driver related to WiFi with modprobe?

I would usually agree but Manjaro is a broken piece of garbage. Use Arch or Endeavour if you want to gain experience on an arch based distro.

Some people are trying (RISC-V for instance) but as others pointed out it’s really really hard, especially if you want to make the whole computer free and open source.
First you need an architecture for pretty much all components if you want it to be truly free (how the CPU, ram, motherboard, etc. work, on paper).
Then you need to manufacture these components, and making a modern CPU is insanely complex, even more so when you have a brand new architecture.
Then you need software (firmware, drivers, etc.), and again, on a new architecture, stuff will work differently than it does on existing stuff. So people need to learn how to work on your platform to make software. And obviously you need to make it available to people by selling it somehow.
It’s technically doable but the investment (both monetary and humanly) would be massive and not really something anyone can start on their own as a hobby.

apt is great, but yeah, if it’s gonna fail, let it fail on its own.

I don’t think it is, if it doesn’t run its course on its own, you’re screwed. It’s Debian so you can recover, but, at least for me, it was painful.

CTRL-C-ing apt because it looked stuck for more than 10 minutes. I don’t recommend doing it.

For me it’s because it’s much quicker and reliable for most use cases. Also the commands are roughly the same across many many of my systems (AIX, macos, and Linux distros)