I wonder if something like this can be made with Debian or GNU Guix.
I wonder if something like this can be made with Debian or GNU Guix.
I just found a trick!
How to reinstall packages in #Fedora #Atomic desktop #downstream images like #uBlue (#Bazzite, #Bluefin, #Aurora, #uCore) or #Secureblue, that were removed in the image building process.
There is a bug in #rpmostree, that basically prevents you from reinstalling #Firefox if the builders decided to remove it.
https://github.com/boredsquirrel/Linux/tree/main/Fedora%20Atomic%20Desktops/install-removed-packages
Ich würde als Basis etwas wie #HeliumOS nehmen
https://codeberg.org/HeliumOS/bootc
- #atomic System, die Basis ist read-only
- automatische Updates
- #GNOME Desktop (evtl auch andere)
- läuft mit #mrchromebox #coreboot auch auf #Chromebook.s !
- viele viele Möglichkeiten zur Härtung und Optimierung in Zukunft (#secureblue Adaptionen einbauen z.B., aktueller Kernel, ...)
Been digging into 'secureblue' lately - it's a really interesting take on securing Linux desktops. If you're fed up with the usual security vs usability trade-off, this one's worth checking out.
They've built it on @fedora Atomic, added hardened_malloc and even built their own secured Chromium. Pretty neat to see someone tackling desktop Linux security without going full QubesOS.
Wrote up my thoughts here: https://profincognito.me/blog/security/secureblue
Now I kinda want #SecureBlue for #Asahi :3