I need a distro that is stable with a particular need to set up zero input automatic updates. If an update asks for a password or needs user interaction in basically any way it simply won’t get done. All he needs is a reliable platform for browsing the web. I am replacing an Ubuntu system that has apparently just stopped working (I have not had a chance to examine it yet) after years and years of not getting proper updates after he forgot his password.
Something like Bazzite is intriguing because of it’s locked down environment although he is very much not a gamer. Is there something locked down like Bazzite but with long term LTS release cycle?
You must log in or # to comment.
Define what you mean by “locked down”. If you don’t give your user superuser privileges, every distro is locked down because the user can only ever write to their own /home
I’d strongly recommend Mint:
- with Cinnamon DE: very Windows-esque UI
- Ubuntu / Debian-based, i.e. rock-solid, unlikely to break
- 100% automated updates (including automatic removal of old kernels so your /boot won’t get clogged
- Timeshift system snapshots in case something does break. (Note: I’ve only ever used Timeshift to un-fuck systems that I, personally, had fucked with superuser rights and manual meddling.)
+1, my parents are using Mint and they are only browsing the web. They have not complained anything after almost a year. In my case, I didn’t dare to set up automatic updates so I’m updating the computer when I visit them.
Same here, parents. Feel free to turn on automatic updates. It’s never broken anything, and vulnerabilities do need patching.
Seconded. Absolutely what I’d install in this kind of situation. I have an old machine set up for my wife with Mint. She only uses it to check her bank account, basically. So far zero issues.
Mint was going to be my suggestion too! It’s a great distro for a lot of users. Easy to navigate and hard(ish) to break.
with Cinnamon DE: very Windows-esque UI
While I support the general advice, “very Windows-esque UI” is not a benefit for less tech-literate people. It’s the former Windows-users that conditioned themselves to expect Windows UI with all it’s shortcomings. The average elderly relative who doesn’t use anything but ~3 pre-installed programs does not care normally and can get much eaiser and more intutive UIs than those close to Windows.
Oh, you’d be surprised how the average elderly relative responds to the absence of a “start menu button” and total lack of desktop items on vanilla GNOME…
Debian and install the “unattended-upgrades” package.
You set it up with an email address to complain to when something fucks up and it just works.
E: no matter what you end up going with, some kind of reverse proxy or vpn will be helpful for when you need to remote in and fix something.
If you end up needing Remote Desktop and can do it, stay away from Wayland. The screen sharing situation there is confusing and annoying for seasoned users, let alone in a tech support situation.
What might be a better bet is either a windows (robust screen sharing setup) or mac (simpler interface and reliability) computer. You’re gonna be on the other end of it, so make sure to pick what you know the most deeply when it comes to remote support.
E2: another note in the vein of hated non linux oses: Those might be good because other people in the users life may be familiar with them and it won’t be such a pain when they wanna open a file or something.
I currently have an older relative using Debian/KDE with unattended-updates and few issues over the past year. Laptop was previously Windows 10, has had replacement battery and HDD->SSD swap, wouldn’t be supported by Windows 11, but is totally capable of running most modern apps.
Browsers can just be flatpak/snap/ppa and auto-update whenever, as Debian’s packaged (ESR) versions might get a bit dated.
From my own experiences with Ubuntu variants, I’ve always had some kind of issue when doing a release update, so I’ve personally stopped using it, but maybe thats just me.
Only significant issues I’ve encountered are with some flatpaks needing permission tweaks to (re-)enable printing, webcam, or filesystem access, and potentially over-doing the ad-block extensions/settings leading some sites to break - its worth setting up multiple browsers to pre-empt and work around those problems.
For remote access, it’s not a problem in my case, but you could potentially just setup a VPN with something like tailscale and just ssh over that. Once connected, I’d explore systems like VNC or KDE’s built-in remote access system. In the short/medium term, it would be easier to stick with X11 for that, but at some point, Wayland and those supporting tools are going to reach parity and distributions/desktop environments will drop X11 entirely - best to future-proof as much as you can.
For regular maintenance, it’s worth checking-in regularly to make sure the system and user is happy, and maybe setting a cron-job for house-keeping tasks (removing old kernel files and temp files, checking disk-usage/health), and having that notify you. But that probably depends how physically hands-on you’ll be.
Don’t think in terms of easy to use and unbreakable. You won’t get that because something as simple as losing icons on the desktop is the kinda thing that’ll confuse someone that’s bad with computers. Instead, think in terms of what’s going to be easy for you to fix when you inevitably have to play tech support.
I’ll second this. I’ve setup an Kubuntu PC for my parents. It’s worked really well for the past 5+ years. One thing I wish I had done was Setup remote access they can easily turn it on when they need help.
The other thing that has come up is the monitor resolution changing (ex: if they’re using a UHD TV as a monitor but I set it to 1080p to make things legible for them).
For the second, I added a bright and easily visible icon to their desktop that will run a quick script to reset their monitor resolution to 1080p.
Op should have a plan for updates and especially auto updating the browser. Some banking sites may stop working if the browser hasn’t been updated in a while.
Also do take time to explain the difference between the desktop (as part of the OS) vs things like application windows and especially the browser and where to find things they may not necessarily need that often but will be useful if you can’t remote in, like OS settings.
I’m a mint hater but mint is the choice here. You’ll need to monitor the transition from x11 to wayland but other than that it should be fine.
ixnay on anything but the vanillaest of the vanillas and that goes triple for bazzite and friends. you don’t want “intriguing” shit left behind to take care of pops, that’s a thing for you to play and experiment with.
your solution is already staring you in the face: the ubuntu you left behind persevered even under those circumstances. either fix it and update it or install a fresh one, with a tweak here and there. and don’t touch nothing else…
Any atomic distro + flatpak packages.
- flatpak packages.
Yay, Gramps! I got you a supply-chain exploit! Wheee!
So should they use the AUR, btw?
Atomic distros don’t support all packages, even flatpaks
Whichever distro you choose, you could set up SSH access for yourself to do things for them (apart from fixing most networking issues if they can’t connect to the internet ofc).
Is there something locked down like Bazzite but with long term LTS release cycle?
The only high confidence projects I know of are:
- Bluefin LTS
- Endless OS, also see its documentation
There’s also stuff like HeliumOS, stillOS and probably other images based (in)directly on RHEL Image Mode.
elementaryos is great for just this. haven’t used it in a while but i remember it being the most polished user experience on linux.
The distro doesn’t matter, the Desktop Environment does.
If they are used to MacOS and want something simple and “out of the way”, go with Gnome.
If they are used to Windows, go with KDE.
Fedora is probably the most straightforward to install and manage right now. You won’t need to “lock down” anything if you don’t give them sudo credentials.and just a regular user account.
If they are used to Windows, go with KDE.
I’d say Cinnamon or XFCE. Plenty customizable enough for this use case and very straightforward.
Facts. XFCE should be familiar to anyone who has operated a computer in the last 25 years
FydeOS might be more in line with what you need. Based on ChromeOS, but without the Google account requirements and spyware. I installed this on my dad’s PC along with setting up DNS-based Ad blocking and it’s been rock solid. If he just needs a browser, that’s basically what it is.
I think more important than which distro to choose is you setting up remote access for yourself. Tailscale and maybe rust desk or something would be a good idea. Or if you want to go further a vpn connection to a KVM device, some of them support being able to wire into the power button so you have full control. I would also have their account info in your password manager. Then you don’t need them to remember anything because you can do it when needed.