I've got HP Dev One at work, and I'm pretty happy with it. It has a trackpoint along with touchpad. There are tiny annoyances like the power button right above backspace

I regret not buying one for myself when they were still available.

I also use command line and spicy to connect to the console.

To set up a network bridge (all commands assume that the user executing qemu belongs to group kvm and VMs' IP numbers start with 192.168.128.2):

• set up qemu-bridge-helper (has to be done once after upgrade):

  chgrp kvm /usr/lib/qemu/qemu-bridge-helper
  chmod 554 /usr/lib/qemu/qemu-bridge-helper
  setcap CAP_NET_ADMIN,CAP_NET_RAW,CAP_NET_BIND_SERVICE=ep /usr/lib/qemu/qemu-bridge-helper

• enable bridge at boot:

  echo 1 > /proc/sys/net/ipv4/ip_forward
  ip link add name brvm type bridge
  ip addr add 192.168.128.1/24 dev brvm
  ip link set up brvm
  iptables -t nat -A POSTROUTING -s 192.168.128.0/24 -o eth+ -j MASQUERADE
  iptables -t nat -A POSTROUTING -s 192.168.128.0/24 -o wlan+ -j MASQUERADE

• pass this parameter when launching qemu:
  -netdev tap,id=eth,br=brvm,helper=/usr/lib/qemu/qemu-bridge-helper

It is also possible to attach dhcpd and/or radvd to brvm for automatic address space management. By changing those ip commands above you may bridge brvm with workstation's ethernet interface and allow attaching VMs directly to the LAN.

Nothing. If you don't use it though it is safe to remove it.

Apparmor is on linux-image's recommended list, and that's why it may get selected automatically whenever a new kernel appears.