Show threadMartin PittOct 4

@bluca Yeah, I listened to the two #allsystemsgo2025 talks about that subject, that was the trigger of this. /usr/share/gvfs/mounts/admin.mount seems to be the only thing on my system which invokes `pkexec`. Sadly Fedora doesn't split out `pkexec` as a separate package like Debian, that would make things much easier.

I removed pkexec from my bootc container and see what happens.

https://github.com/martinpitt/workstation-bootc/commit/2ee1a4aae0104cb06208234e03f24672f94af5e3

Drop pkexec · martinpitt/workstation-bootc@2ee1a4a

Only refered to by a gvfs admin thingy which I don't need. Sadly this isn't packaged separately like in Debian.

GitHub
Timothée RavierOct 2

The recording of my third talk with Pragyan and Vitaly at All Systems Go! about UKI, composefs and remote attestation for Bootable Containers is now available: https://app.media.ccc.de/v/all-systems-go-2025-362-uki-composefs-and-remote-attestation-for-bootable-containers

Slides: https://cfp.all-systems-go.io/media/all-systems-go-2025/submissions/TNKPQS/resources/2025_All_Systems_Go_-_UKI_composefs_and_r9Z95aW.pdf

#ASG2025 #AllSystemsGo #AllSystemsGo2025 #UKI #composefs #bootc #BootableContainers #RemoteAttestation

UKI, composefs and remote attestation for Bootable Containers

With Bootable Containers (bootc), we can place the operating system files inside a standard OCI container. This lets users modify the con...

Timothée RavierOct 2

The recording of my second talk at All Systems Go! about how we moved Fedora CoreOS to Bootable Containers is now available: https://app.media.ccc.de/v/all-systems-go-2025-375-leveraging-bootable-oci-images-in-fedora-coreos-and-rhel-coreos

Slides: https://cfp.all-systems-go.io/media/all-systems-go-2025/submissions/87TFB7/resources/Leveraging_bootable_OCI_images_in_Fedor_M3QtG4r.pdf

While I'm the one doing the talk, all the credit goes to Jonathan Lebon who did most of the work mentioned there.

#ASG2025 #AllSystemsGo #AllSystemsGo2025 #Fedora #CoreOS #bootc #BootableContainers

Leveraging bootable OCI images in Fedora CoreOS and RHEL CoreOS

In last year's ASG!, bootc and bootable containers were introduced. In this talk, we'll go over what changed since last year, and how Fed...

Berto GarciaOct 1
Bye bye #allsystemsgo2025 !
Berto GarciaOct 1
Here is @ebassi talking about "Yocto's hidden gem: OTA and seamless updates with systemd-sysupdate" at #allsystemsgo2025 #allsystemsgo
DongsuOct 1

My talk at All Systems Go! 2025 "Introducing ue-rs": https://cfp.all-systems-go.io/all-systems-go-2025/talk/JAC3DH/

Video: https://media.ccc.de/v/all-systems-go-2025-359-introducing-ue-rs-minimal-and-secure-rewrite-of-update-engine-in-flatcar

Slides: https://cfp.all-systems-go.io/media/all-systems-go-2025/submissions/JAC3DH/resources/Introducing_ue-rs_20251001_RLF7tpM.pdf

#ASG2025 #AllSystemsGo #AllSystemsGo2025

Introducing ue-rs, minimal and secure rewrite of update engine in Flatcar All Systems Go! 2025

Introduce ue-rs, a fresh project that aims to be a drop-in reimplementation of update engine, written in Rust.

Berto GarciaOct 1
Adrian Vovk's presentation: "Modernizing GNOME" at #allsystemsgo2025 #allsystemsgo
Timothée RavierOct 1

The recording of my talk at All Systems Go! about sysexts on Fedora Atomic Desktops and other image based systems is now available: https://media.ccc.de/v/all-systems-go-2025-356-extending-fedora-atomic-desktops-using-systemd-system-extensions

Slides: https://cfp.all-systems-go.io/media/all-systems-go-2025/submissions/DCVQLK/resources/2025_All_Systems_Go_-_Extending_Fedora__dRwVS5y.pdf

#ASG2025 #AllSystemsGo #AllSystemsGo2025 #Fedora #AtomicDesktops #CoreOS

Extending Fedora Atomic Desktops using systemd system extensions

media.ccc.de