Email or username:

Password:

Forgot your password?
Adrien's posts Post Back to profile
Top-level
Timothée Ravier

@KekunPlazas

> While OSTree ..., it has a significant drawback: it can’t support SecureBoot because it can’t support Unified Kernel Images, ...

That's not true. We demonstrated that in media.ccc.de/v/all-systems-go-.

You can say that it's not fully integrated, it's not ready or it's not what you want to do, but please don't say that it's not possible when we showed that it is.

I'm really glad that GNOME OS development is taking off so please don't justify technical decisions with misconceptions.

20 Dec 2024 at 15:31 | Wall-to-wall | Open on floss.social
5 comments
Timothée Ravier

@KekunPlazas

To make it very explicit as I got limited in size for the previous toot:

- I'm really glad GNOME OS development is taking off. The success of any Image Based Linux system will be a success for all of the others (mindshare for Flatpak, etc.). Taking different approaches is also good as it may fit some use cases better.

- I fully agree that support for UKI in ostree is not in a great state right now. We are working on it as part of the Bootable Containers work.

20 Dec 2024 at 15:59 | Open on floss.social
Adrien Plazas

@siosm Oh great to know! Given I use OSTree-based OSes with much pleasure since 2017, I'm glad to learn that! I'll likely update the article to fix that misinformation, thanks! 🙂

20 Dec 2024 at 16:02 | Open on mamot.fr
Timothée Ravier
Cassidy James :eos: :gg: :fh:

@siosm @KekunPlazas unless I'm mistaken, @EndlessOS has always supported secure boot (it’s required for our optional PAYG stuff), and is the original OSTree-based distro. 🤔 I don’t know the specifics but I’m sure @wjt could nerd out about it more than I can.

20 Dec 2024 at 16:15 | Open on mastodon.blaede.family
Adrien Plazas

@cassidy @siosm @EndlessOS @wjt Unless I'm mistaken Linux distros typically support SecureBoot… up to a certain point. We typically supported the first steps of the chain of trust, allowing to run on SecureBoot systems, but not the last ones. Frankly, I barely understand any of this as I never studied it in depth. 😅 I should have added "Confidence of a white guy who knows nothing about a topic but will nonetheless talk about it" as a content warning.

20 Dec 2024 at 16:20 | Open on mamot.fr
Go Up