Absolutely not, NFS is a shared mount. Virtiofs is more complicated because it is emulating a block device.

There’s a ton of android clients Subtracks is nice too! Ultrasonic might not get regular updates, but it’s already very complete so there’s not much need.

I haven’t had much issues with gonic and album art, I guess YMMV

No one cares.

If you want pure streaming DAAP using OwnTone is a good alternative https://owntone.github.io/owntone-server/

Personally I use gonic with the Subsonic API, and Ultrasonic on Android. I haven’t noticed any buffering lag, but it does buffer and cache aggressively. For mobile connections I see that as a big plus since it’ll continue to play even if I loose signal for a while.

You could probably run Android on a Pi

SSL certs is so easy with let’s encrypt, that really shouldn’t be a blocker.

If you want something easy I think you have your answer with Signal

Yes, and the FreeBSD kernel is also derived from it, but they both formed out of that. One to form NeXT mach and the other Net, which forked to NetBSD and FreeBSD. But macOS Mach isn’t derived from the FreeBSD fork.

It’s derived from BSD 4.3, which predates and is one of the ancestors of FreeBSD

macOS is the bastard evil child given for adoption that no one in the family will ever acknowledge.

Let’s encrypt also don’t provide client certificates, or intermediates that allow you to sign them, which really is a shame.

Yes it is. EDA is a subset of CAD. It’s also called electronic computer-aided design.

That’s not CAD

KiCAD?

https://gaphor.org/

https://wiki.gnome.org/Apps/Dia

It can still prevent vectors of persistency.

That’s patently false.

Yes machinectl is the interface for nspawn

You can have a look at systemd-nspawn and machinectl actually. Sounds like exactly what you’re looking for :)

AppArmor or SELinux, OSSEC, TPM and SecureBoot boot chain.

AAfaict Debian uses the upstream defaults.