True~ish. FWIW, NixOS without systemd does exist, though.

Unsure how I should respond to that 😅.

Anyhow, just to be clear, yours truly was responsible for every single letter, word, sentence, paragraph, punctuation (and whatever else I might have forgotten to explicitly mention).

LLM/AI was literally not involved in any part of the writing. Nor in the thought process*.

How is it for software availability?

Assuming you're asking for NixOS, it's basically the best; I'm simply unaware of any repo that's bigger.

While the landscape of 'atomic' distros may look thriving, we can distill the amount of mature projects to just NixOS, Guix System and Fedora Atomic (and their derivatives).

Most of the other projects found e.g. here are unfortunately not worth your time in most cases.

As for which one to go with, that definitely depends on what you desire out of it (in alphabetical order):

• Do you want something that's relatively easy to start out with? Then go with Fedora Atomic (or a derivative^[The images found under the umbrella of uBlue (which includes Bluefin) are even easier.]). From my personal testing, this one also seems to be the friendliest in terms of taking away many footguns.
• If two of the following strike a chord with ya, then you should heavily consider Guix Systems:
  • Enjoying/liking^[Or, at least finding it intriguing.] Lisp
  • Being passionate about F(L)OSS
  • Enjoying NixOS as a model, but being discontent with something^[Including, but not limited to, Documentation; DSL vs actual programming language; project governance.] that happens to be (better) (re)solved on Guix Systems
• NixOS is the OG^[To be clear, it's almost as old as Ubuntu.]. As such, there's a lot of cruft. But within that mess, somehow, ironically, it holds the potential for setting up the cleanest OS. As you can guess, without a shred of doubt, it is the most mature and most powerful out of the bunch. So, if you've got exotic places you'd like to go with your distro, then -in a lot of cases- this is the only viable destination.

older computer

What are the specs?

Is there a way to just reset and do everything over like by repartitioning and installing something like Fedora or Ubuntu?

You mean wipe everything on your HDD/SSD and install something that can make use of all of its storage capacity? That's basically included on every distro installer.

I can’t get Ethernet or my VPN working

That's definitely not expected behaviour.

I want to be able to download “app” “installers” like you do with PC or MacOS.

What do you mean? Is it either one of the following? (Perhaps both are fine with ya?)

• Download software from a website and install it?
• Use a app/software store application in which you can find and install apps/software? This is basically what's found on modern phones.

What do y’all think of Zorin, should I still migrate to something more ubiquitous and longer-running?

Zorin OS should be fine~ish. The problem with asking the community is that they're often more interested in laying out their favorites rather than what would be closest to the objectively best option 😅. If, however, your problems with ethernet persist on Zorin OS while another distro's live ISO doesn't have that problem, then I suppose it would only make sense to switch.

Yup! It's basically a slimmed down version of how Bazzite achieves 'immutability' - allowing it be very robust and pleasant to work with. And while it does sport GNOME, their optimizations enable it to run gracefully on a laptop with just 4 GB of RAM.

That depends.

If this is a Linux guest on a Linux host and both are just your average distros, then it's fine~ish. It's not 100% safe as some malware is able to escape a VM, see this for a recent example of this.

Doing your shady stuff within a disposable air-gapped^[In this context, I just mean it has only had the least amount of possible privileges/capabilities during its lifetime.] VM on a RISC-V powered Sculpt OS host should be pretty safe, though.

in general: for my personal daily use pc. I download 🏴‍☠️ files and software for websites around the internet, so it would be nice have an antivirus

Aight. Understood. Thank you for the clarification!

So..., now it becomes a question of how paranoid security-sensitive you are 😅. I suppose relying on a distro with pretty decent security defaults (like e.g. Fedora or openSUSE) makes sense for a start. Furthermore, definitely commit to best practices^[A lot can be said on this, but it would dominate this text if I'd try to touch on it.]. As for the scanning part, other comments have already touched on that.

If the PC you're doing this contains sensitive information OR you're not satisfied with the provided "probably good enough" solution, then consider going "the extra mile". Which would involve the use of specialized OSes, relying on VMs and whatnot. But I digress...

in specific: i want to self host services in my home server, so i want it to be secure and protected

Unfortunately, I'm not confident talking on servers specifically. It's simply not something I've put serious thoughts to yet. I hope someone else will touch on that 😉.

OP, I'll be honest with ya: if you're looking for something akin to M$ Defender but on Desktop Linux (and free), you ain't gonna find it.

A quick look at your Lemmy history suggests that you're security-conscious. In that context, it's worth noting that 'Linux' does provide you. However, depending on your situation and/or threat model, this might come at the cost of expertise.

If you never download random stuff from the internet, then your average distro might be sufficient as long as you commit to the most basic set of best practices.

However, if you do download random stuff from the internet OR if your situation and/or threat model warrants a more conscious approach, then things might change substantially.

But before subjecting you to Qubes OS, we'd have to know more about your situation. So, first of all, could you elaborate on your use case of ClamAV? Or, perhaps even what you intend to do in general?

FWIW, Lenspect is not capable of selecting a folder and scanning all of its contents^[Like what you'd probably want to do after extracting an archive.] (yet). For that (and more), there is vt-cli (source); maintained by (more or less) the same people that brought us VirusTotal. List of repos in which it's found.

It looks like the best options for immutable have a learning curve or time commitment attached (e.g. NixOS). For a daily driver computer it might be worth the trouble to learn, but in this case I decided to just go with standard Fedora XFCE for now.

Fam, don't sleep on Endless OS.

VanillaOS and OpenSUSE immutable ones use BTRFS snapshots dont they?

For openSUSE's atomic offerings, you're correct. Vanilla OS is a bit more nuanced, though. I don't quite recall how they did it on their original images. But since Orchid, there is a reliance on OCI images for its updates. Note that bootc is also contingent upon OCI images, which is why I made the comparison earlier. They behave so similar to one another, that Vanilla OS' Vib can be used (without too much trouble) to create Fedora Atomic images.

As for the usage of Btrfs snapshots on Vanilla OS, I think it doesn't quite need it because it relies on lvm thin provisioning instead for its ABRoot. However, an attempt to verify this by installing it within a VM failed spectacularly and I don't think the blame is on me 😅...