Had to look into this recently for similar reasons. My conclusion was that once you have macros involved, you can’t use anything but an actual copy of Excel. I’ll be spinning up a qemu VM with Windows to support Excel and the full version of Visual Studio when I get that far.

Not quite. Those are trackers: lists of bugs. If you open one, you’ll see a list of individual package bugs that are blocking these ones—up to a couple of dozen unresolved in some cases. Still, it isn’t that long a list, and a lot of the packages are minor or obscure.

Gentoo also offers it as an option. If you’re very bored and curious about what doesn’t work under specific versions of musl, you can peruse the Gentoo compatibility tracker bugs..

To my knowledge, no one is actively working on Wayland support in TDE at the moment. That could change if it becomes vital for the project’s survival, or someone whose particular itch it is joins the development team. The TQT toolkit would probably have to be ported first.

So for the time being, Trinity is X11-only, and I’d expect it to remain X11-supporting for a long, long time.

It’s one of those things you either use constantly or not at all. Activating the feature intentionally and having it fail is irritating, but activating it unintentionally because you didn’t know it was there could have serious consequences. I mean, I can even come up with cases where the wrong information being C&P’d accidentally into the wrong Web form could result in someone ending up dead.

Given the difference in stakes, “off by default” makes sense for this feature. I wouldn’t call it a dumpster fire, though—more like a relic of a more innocent time.

A standalone utility for decoding QR codes that will work on a desktop. All I want is to be able to put a picture of the code in and get whatever text it was concealing in a little text box where I can read it, and C&P it if it’s useful to do so. If something like this exists, I’ve never been able to find it, although there are seemingly dozens of programs for generating QR codes.

I’d just roll back the problem package to the last acceptable version until I have the time to address whatever the issue is (or block the new version of just that package if I have advance notification). That way, I get the fixes for everything else without breaking my workflow. If a rolling-release distro has a package manager that doesn’t allow that, I’d contend that said package manager is broken.

. . . until something in the stack requires a significant kernel upgrade, and then you’re stuck.

What exactly is the point of stable release? I don’t need everything pinned to specific versions—I’m not running a major corporate web service that needs a 99.9999% uptime guarantee—and Internet security is a moving target that requires constant updates.

Security and bug fixes—especially bug fixes, in my experience—are a good enough reason to go rolling-release even if you don’t usually need bleeding-edge features in your software.

Take your time with the install process. It’s possible that you may breeze through it. It’s also possible that you may discover that, say, there’s something wrong with the EFI implementation of the system you’re installing to that you need to do some research to resolve. I’ve had both experiences.

Once installed, Gentoo is pretty much rock-solid, and almost any issue you have can be fixed if you’re willing to put the effort in. Portage is a remarkably capable piece of software and it’s worth learning about its more esoteric abilities, like automatic user patch application.

Do take the time to set up a binary package host. This will allow you to install precompiled versions of packages where you’ve kept the default USE flags. Do everything you possibly can to avoid changing the flags on webkit-gtk, because it is quite possibly the worst monster compile in the tree at the moment and will take hours even on a capable eight-core processor. (Seriously, it takes an order of magnitude more time than compiling the kernel does.)

Install the gentoolkit package—equery is a very useful command. If you find config file management with etc-update difficult to deal with, install and configure cfg-update—it’s more friendly.

If you’re not gung-ho about Free Software, setting ACCEPT_LICENSE="* -@EULA" (which used to be the default up until a few years ago) in make.conf may make your life easier. Currently, the default is to accept only explicitly certified Free Software licenses (@FREE); the version I’ve given accepts everything except corporate EULAs. It’s really a matter of taste and convenience.

Lastly, it’s often worthwhile to run major system upgrades overnight (make sure you --pretend first to sort out any potential issues). If you do want to run updates while you’re at the computer, reduce the value of -j and other relevant compiler and linker options to leave a core free—it’ll slow down the compile a bit, but it’ll also vastly improve your experience in using the computer.

(I’ve been a happy Gentoo user for ~20 years.)

You get whatever drivers you checked off in the config. That might be only what you need for your machine, or you can build some extras, into the kernel or as modules (I’ve done make modules_install separate from updating the kernel more than once, because I needed support for a new peripheral). In order to boot the machine you only need a minimal set of drivers: CPU, video, keyboard (+ port), and hard drive. Anything else you can fix later if you need to.

My experience in moving a system with a custom kernel from an Athlon64 to a Phenom II more than a decade ago was that the CPU, video, and keyboard were either the same for both or easy to figure out (CPU might have been a bit more difficult if I’d been switching between AMD and Intel, but not much), but I ended up building pretty much every possible hard drive controller driver directly into the kernel until I figured out which one the new board was using. The new system booted without issue, but I had to futz around a bit to get ALSA and other nonessentials back on track.

Gentoo—depends on your CFLAGS, specifically -march. You may have to change it to a more generic setting and rebuild the system set, plus build additional drivers into your kernel if you have a custom one, before you can safely proceed with the move.

In other words, you can get away without reinstalling, but it’s a bit more involved because you may need to undo some customization first.

(Observing Gentoo user is puzzled by the notion of a package manager that can’t handle downgrades correctly without third-party assistance.)

That page only lists browser engines it thinks are “notable”, which is not the same as viable. Microsoft stopped developing its own engines when it moved Edge to Blink.

Currently there are four viable browser engines (still being developed and capable of displaying enough sites with enough accuracy to make a plausible daily driver) in two families: WebKit and its fork Blink, and Gecko and its fork Goanna. Goanna is not corporate. In addition, there are some experimental engines, like Ladybird’s.

I won’t deny that the situation is dire, but it isn’t quite as bad as you’ve painted it. Yet.

I think part of what you’re missing may be a set of very old assumptions about where the danger is coming from.

Linux was modeled after UNIX, and much of its core software was ported from other UNIX versions, or at least written in imitation of their utilities. UNIX was designed to be installed on large pre-Internet multi-user mainframe+dumb terminal systems in industry or post-secondary education. So there’s an underlying assumption that a system is likely to have multiple human users, most of whom are not involved in maintaining the system, some of whom may be hostile to each other or to the owner of the system (think student pranks or disgruntled employees), and they all log in at once. Under those circumstances, users need to be protected from each other, and the system needs to be protected from malicious users. That’s where the system of user and root passwords is coming from: it’s trying to deal with an internal threat model, although separating some software into its own accounts also allows the system to be deployed against external threats. Over the years, other things have been layered on top of the base model, but if you scratch the paint off, you’ll find it there underneath.

Windows, on the other hand, was built for PCs, and more or less assumes that only one user can be logged in to a machine at a time. Windows security is concerned almost entirely with external threats: viruses and other malware, remote access, etc. User-versus-user situations are a very minor concern. It’s also a much more recent creation—Windows had essentially no security until the Internet had become well-established and Microsoft’s poor early choices about macros and scripts came back to bite them on the buttocks.

So it isn’t so much that one is more secure than the other as that they started with different threat models and come from different periods of computing history.

Gentoo normally keeps arches for as long as the kernel still supports them, although package testing for some of the rarer ones may be limited. 32-bit Intel is still treated as a major arch and receives the full set of tests and package stabilizations.

Your worst problem is going to be web browsers. Chrome and derivatives don’t run on 32-bit, and Firefox is supposed to be dropping support. If Seamonkey follows Firefox, that leaves you with Pale Moon as the only reasonably maintained option.

Well, Apple hardware is a bit of a footgun in general. It isn’t in their best interests for people to repurpose their old hardware (they want you to buy shiny new hardware and make them money), so they don’t exactly go out of their way to make it easy. Driver availability outside their software ecosystem simply doesn’t enter into consideration when they’re designing a product. Nor does the ability to swap out a component for something with a different chipset. They’ve been that way since the mid-1980s.

I think you’re using obsolete closed-source drivers that require external patches for each new kernel version. So the situation is entirely Broadcom’s fault.

From the Gentoo ebuild for broadcom-sta:

If you are stuck using this unmaintained driver (likely in a MacBook), you may be interested to know that a newer compatible wireless card is supported by the in-tree brcmfmac driver. It has a model number BCM943602CS and is for sale on the second hand market for less than 20 USD.

So would I. I once ran a kernel a couple of years in arrears for a while, with everything else up-to-date, and had no userspace issues whatsoever. Granted, this was not on a Macbook, and I was using Gentoo.

It looks like the simplest method is to use rEFInd + shim or PreLoader—see The rEFInd Boot Manager: Managing Secure Boot.

If you need a last-ditch option or want to get your hands dirty, the Gentoo wiki has recipes for enrolling new EFI keys by hand. This is a rather tedious procedure, but should work for any distro that comes with efitools, sbsigntools (for signing the kernel and modules, if not already signed), and openssl (for key generation).