Install Windows, but leave drive open or a partial space on windows drive. When you install Linux, don’t let it install the EFI boot into the Windows EFI boot partition. Instead have the partition manager build a new boot partition+root home etc. Grub will install on its own partition, OS prober should find the Windows drive too, and it will add a chainloader entry to grub. Set your machine to always boot from Linux grub, if you want windows you select it in grub and it hands boot over to windows boot. This way they are isolated and Windows never knows that Linux grub exists and will leave it alone.

Yield good sir, doth thou decide in haste? Hath thou not the good word of ZorinOS upon thine ear?

You can install time shift on Ubuntu, with Mint it is part of the install process iirc, and default snapshotting with OpenSUSE install

It is not that it is the best distro, its that it is the easier onboarding experience for a windows user

Mint is a good choice because it has an easy timeshift option, so a problem in an update is just a rollback/recover. Same as Snapper Rollback on distros like OpenSUSE, it means a non savvy Linux user can reboot and have it fixed. That is appealing for a lot of users that don’t want to bother with finding the fix

For ssh they both have private and public keys. The server could be at risk of having it’s own private key compromised if somebody breaks in, and vice versa a compromised client can lose its private key. The original wording made it sound like a compromised server would steal client keys.

Also passworded keys are recommended

Only the server should have the private key. Why would other systems have the private key?

This has not been my experience. I’m not on Ubuntu, but OpenSUSE and NixOS. Everything works and operates as expected everytime. The only issue once was nvidia driver updated versions before kernel did and I had to reboot to a previous snapshot and wait a few days till the kernel update was released to work with whatever happened to the driver. But 8 years of a dependable system otherwise

You are welcome. Secure Boot does work on many distros, but it is extra steps, and when the kernel modules update and you often have to reenroll the keys. It is really not worth it unless you are a high profile target where somebody wants to maliciously alter your OS.

Make a separate home partition, and make fs BTRFS, having subvolune of root system may be tricky for formatting

In the BIOS is secure boot enabled? If it is it is easier to install Linux with secure boot disabled. If it isn’t that, then could be a hardware bug Linux lite can’t deal with. Had that with Ubuntu on one laptop, while RPM distros worked fine

Ubuntu made Linux easily accessible to anyone, so you are probably right.

For the enterprise stuff we work with only REL and SUSE are certified to install on, and work with the software. OpenSUSE works too because of the shared binaries with SUSE

We see SUSE and REL at corps and enterprises, not so much Ubuntu. None offer something like GRID though. Central management tool for Admins to deploy all systems equally from central location, with dashboard view, without having to run scripts or autoYAST to keep systems the same

It is marketed as direct windows replacement, so it appears they choose absolute safety, over possible breakage. If that GRID product they tout ever launches it will be great for companies.

Wireguard might be what you want. You connect to your remote machine ( assume it is at home). You can setup what traffic goes over wireguard (some or all). On your home machine you can run port forward command and masquerading command once connected on home machine so that you have full lan access too. It is described in the wireguard setup docs.

NVidia has worked great for me, even RTX shading looked good.

Wayland is now default, you have to add a few x11 packages to have an x11 login now. Also SE Linux Enforcing by default.

Would this help https://help.gnome.org/admin/system-admin-guide/stable/lockdown-single-app-mode.html.en

Or https://github.com/GNOME/gnome-kiosk

If you arena opposed to GNOME, you add your online accounts and it integrates them into evolution mail, calendar and contacts. And also Gdrive becomes a mounted folder if you add Google account.

I haven’t checked lately but on GNOME you add Google account to your Online accounts and gmail is automatically added to your email client (Evolution in some diatros).