In a lot of educational institutions over the world, they truly on eduroam for their bidding. While it's not perfect, it does offer a python script by which proper connection to the network is established. I guess it's unfortunate to know that it's not eduroam then, as I wouldn't know what the solution would be.

Is this eduroam?

To me, Endless OS seems to be the best fit for you; install it once and you never ever have to give it a second glance for troubleshooting or whatsoever. It achieves this through using "a read-only root file system managed by OSTree with apps installed using Flatpak.". This translates to:

• The most important system-related files being protected from change by yourself and others.
• Ensurance that your base installation is exactly the same as the one tested and used by its developers. And thus an (in-)direct quality control and maintenance by the very people that work on it.
• As the base system is not changing beyond what is provided by the devs, installation of applications is relegated to flatpaks (see Flathub for the App Store).
  • Flatpak is a packaging format that doesn't interact with the base system to install software; think of it like how applications are installed on your phone. With this, you can still install software you need without compromising changes to the base system.

filesystem based encryption is really cool.

Can't agree more.

Fedora absolutely does have that package.

Sorry to be that guy, but you should just sit down and go over Qubes OS' documentation. Some specific entries that might prove useful:

• How to organize your qubes
• How to install software
• How to install software in dom0
• Creating a Kali Linux TemplateVM

If you ask me, read a lot more beyond these. But if you really got no time, then at least suffice with the aforementioned.

Wish ya good luck!

Mandatory read on the subject for the curious (also goes over Secure Boot, Boot Guard etc):

Trusted Boot (Anti-Evil-Maid, Heads, and PureBoot)

The pursuit of Freedom led me to Linux.

Are you referring to Qubes OS? If so, what do you mean exactly with hardware support?

IIRC, it stops working whenever you disable JavaScript.