Yikes.
That’s why I use live updates and reboot. Much faster done that way.
If there is a better suggestion to using LTS distros. I am all for it and would just jump quickly.
Is my Linux mint idea good or way too bad.
I think this is the core issue. Your threat model doesn’t seem well defined. Are you actively being targeted by the government or an advanced intelligence agency? Why is this risky?
Remember, risk isn’t binary. You aren’t completely safe, or dead out of water. It’s a spectrum to find balance. If you are worried about 0 days, you should probably be using QubesOS without thought - but I highly doubt this is the case.
I strongly believe you really should post what your security threat model is. This is throwing off recommendations and leading to a bit of thrashing. I still believe your update policy is too strict.
Personally, I’ve explored the problem with you, offered alternatives that meet your criteria, and we are at different conclusions. Linux Mint is probably fine for you, and it being good or bad depends largely on your needs.
PG is a guideline - it’s a recommendation but it isn’t the final say in your system. Not doing what it exactly says doesn’t mean you are left in the dust.
With that, Linux Mint is a fine distro. It’s probably good enough for your needs, and if you found a way to install the latest kernel than that’s good too
Fedora pushes updates out around midnight UTC every day and they sync to all the mirrors over the next 6 hours or so iirc.
You should update/reboot daily, but updates are an absolute pita due to the offline update mechanism especially requiring luks password twice.
This is honestly one of my biggest issues with Linux, is that no normal distro has truly functional and reliable automatic updates. Atomic distros do fix this but they come at too steep a compromise (largely becoming dependent on the hodgepodge that is Flathub and throwing all the distro guarantees and ideologies out the window).
I didn’t actually realize this. My Divested-WRT ships OpenWrt master branch and switched to 6.1 over a year ago and 6.6 over four months ago: https://divested.dev/unofficial-openwrt-builds/mvebu-linksys/CHANGELOG.txt
They truly are unreliable.
And no normal Linux package manager can properly resume after a crash.
It is something Windows handles superbly with their catalouging system.
I think this is correct and Solus would probably qualify to distro recommendations if wasn’t for the last item in the criteria. Although I don’t know how we measure if is a large project or not.