Thanks, will check it, if not as host then as a VM. It is being recommended by many people.

A machine is either secure or it’s not

It can be more secure then others. Security focused (or hardened) means things like less attack surface, more careful review of packages and code, using more secure alternatives then others, among other features like kernel hardening, etc.

I plan to check Artix though, thanks.

It seems like OpenBSD does not have good support for VMs - https://redlib.catsarch.com/r/openbsd/comments/11ev3l4/is//_it//_a//_bad//_idea//_to//_use//_openbsd//_as//_a//_vm//_host/

Qubes OS has very high system requirements, so that would not work.

It seems to be Fedora based, so running without systemd might be much harder.

Maybe, but I feel like it would take a lot of effort to make it hardened and daily drive it.
I might try it at some point though.

Basically for same reasons that other people have mentioned in this thread + maybe a few more.
I will probably create a separate post about it.

Thank you for reply.

I will checkout Alpine. It sounds interesting.

Video games are not my focus, do you know how do VMs run on Alpine (with Alpine as VM host) - performance wise?

Thank you for reply.

By the rest of your post, I’d bet on B. Which, puts us into an interesting situation

Yes, I would be ok with A as well, but I am learning things slowly to get to that point. So B for now would be great.

But it seems like OpenBSD might not be great for running VMs - https://redlib.catsarch.com/r/openbsd/comments/11ev3l4/is/_it/_a/_bad/_idea/_to/_use/_openbsd/_as/_a/_vm/_host/

Could not find much info for virtualization support on HardenedBSD though.
Not sure how well bhyve work there, but it seems like VMs might not work well or be performant enough on either of them.

I would try with Alpine, Artix or Void for now.

This would require me to have a ZFS partition first and transfer my data on it, right?

Right now I am not using ZFS, but for next OS reinstall, I might try it. Thank you.

Right now it is local only. Will keep this in mind for future. Thank you.

Yeah I use Linux and am comfortable with command line.

I am not looking for continuous backup though. I would occasionally add stuff to backup - like every few months or so. I also want the incremental backup part - not sure if encrypting backed up data using luks would allow incremental addition later on.

I will check rsync and luks. If you have any resources, please feel free to post here.

What do you mean by configuration and backup script?

Configuration as in dotfiles?

What does a backup script look like? Like a list of borg commands - one for each directory + repo which you want to backup? Or something more?