This talk will explore how qubesome applies GitOps principles to manage desktop environments. Defining and configuring your Window managers and workloads, which are then later executed as non-root containers, enabling a secure and flexible experience for managing your version controlled setup. We will look into splitting configuration and state, enabling uneventful transition between machines while keeping your configuration intact. Once the convenience features are out of the way, we will explore its security, focusing on the available isolation controls. Join me to explore GitOps-driven desktop management. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://c3voc.de