I have 10 workstations in 10 different locations that run Kubuntu LTS. It works great (except some minor issues with Wifi printers), but Canonical pushes Snaps so hard, that leaves me wondering: if I have to use snap/flatpak anyways, why not use immutable distro then? I did research and it seems most things should work as expected, but can someone confirm immutable KDE distro will meet all these requirements?
-
Auto updates. Workstations are being used by non-admin users, and admin only visits office once or twice a year, so OS should be able to auto update everything in background (OS components and Flatpaks) without any user interaction while being run by non-admin. It can be achieved by editing
etc/dnf/automatic.conf
, right? -
Disabled USB storage. I know it can be done via UEFI, but I also need to do it in OS level. Will adding a rule in
etc/modprobe.d/
work? -
All http traffic routed via local proxy. In short, I have to block all websites except specific ones. In Kubuntu, I do this by installing Squid, setting system proxy to 127.0.0.1 in
/etc/environment
and locking Firefox configuration with help of policy JSON file. The problem is that Squid flatpak doesn’t exist. I can also use Privoxy, but it has no Flatpak too. Can I solve it with “layering”? Will it work as usual? -
Disable all outgoing connections except specified ports and IPs. As simple as adding firewall rules, just like in “normal” distro, right?
-
Pre-configured keyboard layouts and Wifi connections for new user accounts. In Kubuntu, I do this for WiFi: sudo nmcli connection add con-name “YourWiFiName” ifname “*” type wifi ssid “YourWiFiSSID” wifi-sec.key-mgmt wpa-psk wifi-sec.psk “YourWiFiPassword” connection.autoconnect yes
And to auto setup keyboard layout, I add some lines to/etc/default/keyboard
Will it work in Kinoite? -
Easy configuration of WiFi printer/scanner. All workstations use Brother multi-function devices (printers/scanners) that Brother provides downloadable drivers for. In the past, I had problems using generic Cups drivers, and scanner only worked after installing Brother drivers. Is drivers installation similar in Kinoite?
-
Option to access workstation remotely via SSH from specific IPs via specific port, but I’m sure it’s no different from non-immutable distros?