An image-based system would be the bare minimum to achieve basic security, but there would still be so many security issues compared to Android and iOS, that I don’t think Linux phones are worth putting time and development effort into.

AOSP is a fantastic base for open source mobile systems. The FOSS mobile development community should rather shift its focus to AOSP, develop a good understanding of it and get familiar with the code, instead of trying to reinvent the wheel with mobile Linux distros.

I know about the security issues in desktop Linux, but I still think secureblue fits that level of the iceberg pretty well. I would put Qubes there as well.

You could add secureblue. I would put it in the same category as GrapheneOS and Vanadium.

Chromium-based browsers have arguably better security than Firefox. https://madaidans-insecurities.github.io/firefox-chromium.html

Vanadium further improves Chromium’s security by disabling the JS JIT Compiler, using a hardened memory allocator (GrapheneOS hardened_malloc) enabling ARMv8.5 MTE, and applying other hardening patches (https://github.com/GrapheneOS/Vanadium/tree/main/patches).

The secureblue project maintains a hardened Chromium build for Linux called Trivalent, which uses most of the patches from Vanadium, among others. You can get it from their repo: https://repo.secureblue.dev/secureblue.repo

your (very expensive) license is tied to a USB stick

Not true. You can link it to your Unraid.net account using Unraid Connect: https://docs.unraid.net/account/link-key/

Sure, it’s not perfect, but still the best option for beginners.

Unraid is great for beginners.

HomeBox is perfect for your use case. You could also try InvenTree, but I think HomeBox is going to better suit your needs.

it would all be P2P backed up

It literally is. https://help.archive.org/help/archive-bittorrents/

That’s why GrapheneOS had this feature for a long time, but with the ability to disable it. It also allows you to set the time period after which the reboot is initiated yourself. You can go as low as 10 minutes, or as high as 72 hours.

The GrapheneOS team is working on finding a suitable OEM that would be able to release flagship hardware with security comparable to a Pixel, and GrapheneOS preinstalled.

And they’re even working on releasing phones that come with GrapheneOS preinstalled

Not the one who originally asked the question, but thanks, that looks very promising

I’m not OP, but MidnightControls is pretty good

https://github.com/obsproject/obs-studio

Any FOSS Linux/Unix shell, bash, zsh, fish, tcsh, whatever, is a million times better than cmd or the early versions of PowerShell. Yeah, I know, PowerShell Core exists now, and it’s even open source and cross platform, but it still sucks.

Oh wow, this is amazing. Thank you so much for sharing.

Pika Backup is pretty nice as well

https://github.com/JetBrains/intellij-community

I haven’t seen any car exhausts walking right next to me on the sidewalk though.

The Swiftfin app is awesome

https://github.com/jellyfin/Swiftfin