Hmm, i think I mixed it up with the config. There is an all option in swayimgrc.

deleted by creator

You can make it work mostly that way. Create a UKI (unified kernel image including EFI stub loader, kernel, initial filesystem and kernel parameters), then tell uefi to directly boot it. The four steps still run, but using only a single file.

I think the --all option is this mode.

At least on xorg the gifs I had worked.

I don’t know how it compares to nsxiv, but imv supports Wayland.

In that case you still have the third party bridge https://github.com/emersion/hydroxide

A separate routing table that takes precedence over the one modified by DHCP should works as well I think. Oh, and of course you have to use a vpn that forces its own nameserver or set one manually to prevent redirections.

If you need arm, then you probably have to install libhoudini https://github.com/casualsnek/waydroid_script

There are Browser extension available, i do not know their quality.

There seems to be a Firefox extension that can send downloads and start jdownloader as well

The mobile device / “mtp Server” requires the gadget mode as far as I know. The PC /client does not need it.

With usb-c you should be able to load a driver that allows network connectivity regardless of otg mode. Or was it Thunderbolt?

Update: I thought of thunderbolt-net which works with Thunderbolt 3 and probably USB4

There is or was a project called WinApps i think that made it easy to set up a VM to run some applications.

deleted by creator

Porteus kiosk thin client might be an option.

Nod32 offers a commercial antivirus for that scenario as well. The consumer variant has been discontinued.

That depends on the depth of the review, e.g. verifying the submitter is a member of the project, the software name does not conflict with a well known name,…

At least this prevents impersonation of well-known publishers or their software. Maybe all changes to metadata like the description should require a manual review even for established packages.

Those getting the most recent software versions, so nothing that should be running in a server.