I'm managing a small office that currently uses Windows 10, but our computers are too old to upgrade to Windows 11 smoothly. I'm planning to switch everyone over to Linux and need help finding the right distribution.
Here's what I'm looking for in a Linux desktop:
1. It should limit user modifications while allowing basic settings adjustments like Wi-Fi and display.
2. Must support LDAPS login.
3. WireGuard VPN should be included.
4. The Chromium browser needs to come pre-installed with plugins like uBlock and Bitwarden.
5. I require a PDF manipulation app to manage tasks like splitting, merging, and rotating files.
6. A VoIP application for making calls and transferring them.
7. Timed screen lockout feature.
8. Drivers for Wi-Fi and display must be available.
9. Compatibility for installation on x86, x64, and possibly ARM.
10. It should run efficiently on systems with 4GB RAM.
11. Automatic updates and upgrades are necessary.
12. The admin should be able to remote into computers via a central dashboard.
13. Admin should also be able to check upgrade status from that dashboard.
14. A USB installer that can setup all of the above.
I've explored several distributions from Debian to Fedora with Atomic Desktop, but there's a lot to consider. Can anyone suggest a distro that meets these requirements or provide guidance on how to set up such an environment? The main challenges I face are requirements 1, 2, 12, and 13.
4 Answers
You might want to check out Universal Blue. It's designed for environments like yours and allows for a locked-down user experience. You can use 'Polkit' for controlling user permissions. It has solid support for your needs.
Universal Blue supports automatic updates on reboot, so you're covered for requirement 11. Just make sure it's set up to download updates in the background.
There’s a way to create a custom image of Universal Blue that includes all your necessary configurations. Look into their documentation for guidelines; it mostly involves editing a container configuration file.
For WireGuard, you can add it via 'rpm-ostree' on Universal Blue. Just use the package 'wireguard-tools' to layer it in.

Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures