Hi Tildes community,
I'm seeking your suggestions for spinning up Windows virtual desktop.
Allow me to set the context...
My offspring is in second semester of their first year of university, and needs to use Adobe Photoshop for one of their classes this semester. They don't use a regular laptop, and have been doing quite well at uni. with their beefy Ipad. While they have used photoshop so far on their ipad, there are some growing pains. Of course, they have access to super beefy desktop Apple Macs at their school's computer lab, but its a pain to get usage of them for a few reasons. At home, all my machines are linux except for my partner's which is an old clunker Windows laptop - which i am in progress of migrating themn away from that Windows machine towards linux laptop...Hence, I don't really have a solid, modern enough machine for my offspring to load Photoshop onto.

Then, I thought, hey, maybe i can spin up some Windows virtual desktop somewhere for my offspring to use photoshop on...Its only needed for about 10 or 12 weeks remaining this semester...and they only need to use it once per week for each week's assignments. I feel like as long as the virtual windows machine is beefy enough to suppoort photoshop workloads, it can get them through the semester...and then in summer i can decide if I need to buy them an actual laptop (like an Apple laptop, etc.).

So, may i ask of you dear Tildes community members...Does my approach make sense (of trying to use a windows virt. desktop)? And, if so, are there any recommendations for which provider to use, and how to spin these up? Like, should i try something via AWS or Google Cloud or Azure? Or, should i not even consider this virtual windows approach? I'm open to hearing any/a ll recommendations. If you have links to share for me to research, or if you actually wrote your own blog post on similar topic for example, i'd love to hear it! Thanks in advance!!

Edit: 2025-02-24 UPDATE: Wanted to update folks on where i am on this...After reviewing these comments, researching some more both online and offline, etc...I arrived at the decision of biting the bullet and just buying my kid an Apple Macbook laptop. I want to thank you all for all your greet feedback and suggestions! Thanks so much Tildes community!!!

I've been self-hosting for a few years. However, now I have a single server hosting all of my things whereas, before, I had multiple old machines physically isolating services. I'm getting ready to host a game server or few (at least one for Tilde) on this machine.

While I'm not a neophyte to Linux, I'm not a guru and definitely not an infosec expert.

Given that, what steps do you take to secure a Linux server, LXCs, and docker containers that are receiving port-forwarded internet traffic?

FWIW, I expect I'll have an LXC running docker containers. I can instead run a VM doing same.

Advice welcome!

While I consider this resolved at time of posting, this is one of my weirder, more unexpected tech issues I've run into and I thought y'all might enjoy it.

I'd been having issues with my (Ubuntu) server where its services were unavailable, I couldn't SSH in, and USB devices plugged in after the issues started weren't connecting (mouse LED would light up, couldn't toggle keyboard locks or interface computer with the devices). These issues were becoming a near daily occurrence.

So after the most recent incident I decided to watch it boot. After grub, it would just hang at a black screen. So I opted for the recovery mode and after waiting some minutes for services to time out, I was given a terminal and used that to check my devices, sensors, etc and all were reading fine.

Frustrated, I started reviewing what else could have possibly changed with my setup, and I found that change in my hand. I use my server's front USBs as a low current charger and had recently got a new vape battery that was charging at that moment.

I unplugged the battery, rebooted, everything was fine. Plugged the battery in, everything locked up again immediately.

I had been using a spare cable, it had data wired. Swapping for the included power only cable, and no issues.

While I'm curious as to what exactly is happening and why, I'm satisfied enough concluding it is a cheap vape (I mean, I'm having to charge the sucker near daily after all) that is transmitting junk over data and the OS doesn't handle it appropriately. I'll pull logs or do another couple tests if other folks are curious as well though.

Oh, and the battery is a Bear Rootz Sol. Come to think of it, my other worst battery at holding a charge was also a Bear Rootz.