Just a quick note if someone is looking for X programs, you can use xwayland-satellite with waypipe. Set your DISPLAY variable, launch xwayland-satellite with the display number you just used, and X programs should just work as with usual rootless Xwayland (so no window with another window inside of it).

When I tried PulseAudio over network in addition to VNC I just got a really choppy unusable audio.
I just gave up and restored to streaming audio with VLC.

Problem with plain Wireguard is if you can’t open ports on some devices to get a direct connection. It should be just fine with hub and spoke model, but NAT Traversal of Tailscale makes a huge difference. I can get a direct connection between 2 devices connected to mobile data and behind CG-NAT.
And also the config management if you have too many devices.

Hub and spoke, you just add new devices to Wireguard on the main device, and the new peer. Full mesh, oof.

But as far as configuring Wireguard goes, that’s pretty simple. And then there’s the weird stuff with MTU and fragmentation… but that’s not something Wireguard-specific.

And even if you don’t care, if you have an old machine booting from a HDD, the process at least isn’t so boring.

Yeah, just reminded me of this.

I went with Google.

Edit: I am just saying what I went with. I didn’t have another fitting option.

I recently tried Ubuntu.
Wait, no, I fought Ubuntu.

Firefox was snap. OK, remove it and apt install. Nope, that installs a snap. Now, one more thing, for some reason uninstalling the snap version of Firefox took several minutes each time where it was “disconnecting” it from a bunch of things, or something along those lines.

So I followed the Mozilla guide for Firefox installation on Ubuntu. Did it work? No. The higher priority setting for Mozilla repo from their guide didn’t work.
Finally, I found the answer on OMG Ubuntu, and I could finally install the regular Firefox package.

Here you go:

Wait, I am supposed to care about .pacnew files?

Anyway, so far all I found there is new optional dependencies.
I rather wonder what happens when manual intervention is needed, like when JDK started being in conflict with JRE.

I was just looking if something like that exists yesterday, but got disappointed. Nice timing.

Sorry about my Waypipe misunderstanding.
vncserver I configured that way, so of course. I just didn’t expect it to connect to Wayland.

If invoking xfce4-session works, it means you are doing so over vnc, not waypipe.

It does work over Waypipe. You can even see in my screenshot that on the remote machine it shows Waypipe as the WM.
The remote is running Debian 13, with multi-user.target set as default target to keep the GUI from starting. XFCE version is 4.20.1.

Using Waypipe, which proxies Wayland program GUIs to my local computer, just like ssh -X, but with Wayland, and it actually works over the internet (read: high latency).

I didn’t know XFCE supported Wayland , so I casually ran vncserver, which launched xfce4-session, except that it attached itself to the Wayland display (proxied to my local machine) rather than X display of TigerVNC. And here come the full XFCE right to my local machine (which is running Plasma).

Only if the machine is on LAN. I am running with 250ms here.

No, I was not using VNC. VNC xstartup script just launched xfce4-session which connected to Waypipe rather than Xtigervnc.

It does integrate itself to KDE nicely. Even with virtual desktops. And it even properly does the animations. Downside is, I can’t access the original desktop on my laptop while it’s running. Peek at desktop also shows XFCE.
Here’s the cube switcher, showing XFCE instead:

Probably snaps too.

I am still triple checking when I see /dev/sda as a target drive in such utilities. I use NVMe, so nowadays that’s probably a flash drive for me, but it still gives me adrenaline when I notice it.

I don’t know if it should be a bad thing. Inside the tar archive the configs were already organized into their respective dirctories, this way with --preserve-permissions --overwrite I could just quickly add the desired versions of configs.
Some examples of contents:

-rw-r--r-- root/root      2201 2026-02-18 08:08 etc/pam.d/sshd
-rw-r--r-- root/root       399 2026-02-17 23:22 etc/pam.d/sudo
-rw-r--r-- root/root      2208 2026-02-18 09:13 etc/sysctl.conf
drwx------ user/user         0 2026-02-17 23:28 home/user/.ssh/
-rw------- user/user       205 2026-02-17 23:29 home/user/.ssh/authorized_keys
drwxrwxr-x user/user         0 2026-02-18 16:30 home/user/.vnc/
-rw-rw-r-- user/user        85 2026-02-18 15:32 home/user/.vnc/tigervnc.conf
-rw-r--r-- root/root      3553 2026-02-18 08:04 etc/ssh/sshd_config

Keeps permissions, keeps ownership, puts things where they belong (or copies from where they were), and you end up with a single file that can be stored on whatever filesystem.

Yakuake terminal: https://apps.kde.org/yakuake/

My last 3 phones are just kind of pain software wise.
Moto G5s Plus - the Android 8 update (latest official) made it a slow horrible mess with frequent crashes and high battery drain. PixelExperience 11 fixed that.
Poco X3 Pro - told not to update to MIUI 13 due to instability. Many bugs I had to learn to work around. Left and right microphones reversed in software. Extreme power saving that doesn’t even spare alarms.
Ulefone Armor 24 - UI often crashes (Quickstep) including navigation. In some cases Android version updates don’t show up. The legend has it they sometimes provide updates after you e-mail them, stored on the Google Drive. Those updates do a factory reset, because of course they do. Alarm also has a chance of being killed, but lower than with MIUI. Charging with fast charger kills USB communication until reboot.

I don’t do updates anymore. Check the experiences online, and it’s all just new bugs, often pretty serious ones. So, if it somewhat works, and it isn’t absolutely clear that the next update would certainly fix something important, just keep it as-is.

TWRP could at least give me some peace of mind. I could just back up everything.