oci repositories support signing artifacts, container trust policies are a thing. bootc repos are both signed and are distro repos, ostree Fedora and ublue are using it

Just because quay.io or hub.docker can be accessed without signatures or trust doesn’t mean there aren’t repos out there using it.

trusting an oci repository is the same as trusting a distro repository, if its a dodgey unknown you got from god knows where and you cant verify, dont use it

He’s talking about corporate environments that have the resources to have done the work to make Windows work, they’re not starting from zero - they’ve either got an SCCM environment with a PE that has all their configs and drivers preloaded or they’ve worked hard to make intune autopilot work (which still requires either the OEM or a curated image for the hardware configs).

He’s not talking about setups that are doing installs 1:1

A lot of work places need to keep their workstations on Windows for mdm and security compliance etc, or the IT staff does not have the bandwidth to add another OS for their developers and keep it compliant. Installing an app to run a Linux environment in userspace is easier than getting everything supported on bare metal workstations.

yeah I just started Silksong on it, its nice to be able to play it places other than my back room

In my region after the price hike Valve still had new stock of the LCD at the original price, even though its no longer manufactured. I decided to get one as it was probably my last chance. Very happy, I should have bought one years ago

I’m sure its really certified if you have to run a tainted kernel, but maybe that’s just me