Ich freue mich schon sehr auf die FrOSCon am kommenden Wochenende.
Und wenn ihr gerne wissen möchtet, was "Bootable Containers" sind, kommt am Samstag um 17:00 Uhr in den Raum HS 5.
Vortrags-URL: https://programm.froscon.org/froscon2025/talk/95b2e097-449a-4c87-bb73-11cabc27352b/
#froscon2025 #froscon20 #froscon #bootablecontainers #bootc #RHELImageMode
We are bringing UKI and strong boot integrity guarantees with composefs to Bootable Containers. We demonstrated our latest progress on that front at DevConf.cz 2025: https://pretalx.devconf.info/devconf-cz-2025/talk/739KGC/
Using composefs and fs-verity, we can link a UKI to a complete read only filesystem tree, guarenteeing that every byte of every file is verified on load. This is done, similar to Git, using only hashes. This means that the signature on the UKI effectively signs the whole tree. With composefs, file content is split from the metadata which enables de-duplication at the file level. We can thus host any number of OS images on a single filesystem and there is no need to reserve space on the system in advance for each image. This frees us from fixed size disk image formats such as dm-verity which is used in a lot of image based systems. We illustrate this architecture by building an OS image using an OCI container via the familiar Containerfile syntax, then pushing it to a container registry and finally deploying it on a system. We will also explain how this will be integrated with the Bootable Containers project (bootc).
Sean tells us about bootable containers and asks for our opinions on how he plans to use them with Kubernetes.
You can thank `bootc`, `/usr/lib/bootc/kargs.d/`, and @fiftydinar for your new ability to include kargs in your native container image.
Just make sure to update with `bootc` instead of `rpm-ostree`.
Check it out!
https://blue-build.org/reference/modules/kargs/
#BlueBuild #FedoraAtomic #Containers #OCI #Fedora #imagebased #bootc #BootableContainers
Having spent a couple of decades in the Linux world, I have always had an interest in Linux desktop environments and how they are themed. I would often come across a post on /r/unixporn that inspired me to try to customize the look and feel of my desktop environment. So I would install Xfce, LXQt or Sway and try to recreate components that I like from other users or create my own. I would end up installing different kinds of panels, plugins, docks and launchers as well as random themes, fonts and sounds.
With Allison, I presented at FOSDEM how we can combine UKI, composefs and containers to build a fully signed boot chain. The slides and the recording are now available: https://fosdem.org/2025/schedule/event/fosdem-2025-5191--signed-sealed-and-delivered-with-ukis-and-composefs/
This is how we are planning to bring boot chain integrity to Bootable Containers.
This is a follow up on the initial work that we presented last year at @allsystemsgo: https://cfp.all-systems-go.io/all-systems-go-2024/talk/HVEZQQ/
#BootableContainers #bootc #Fedora #CoreOS #AtomicDesktpos #FedoraCoreOS #FOSDEM #FOSDEM2025
There's a big new update to the BlueBuild CLI, with some real nice DX upgrades. Thanks @gmpinder 💙
Make sure to read our release blog for a full list of features; and breaking changes!
https://blue-build.org/blog/v090-features-changes/
#BlueBuild #FedoraAtomic #Containers #OCI #UniversalBlue #Fedora #ImageBased #BootableContainers #Linux #OpenSource #CloudNative #uBlue
Bootable Containers are the future of Fedora Atomic Desktops and we presented that at @allsystemsgo.
Introduction by @cgwalters and Ben: https://media.ccc.de/v/all-systems-go-2024-266-bootc-generating-an-ecosystem-around-bootable-oci-containers
Then take a look at how we could use sysext's to improve the local layering story with @tormath1: https://media.ccc.de/v/all-systems-go-2024-313-waiter-an-os-please-with-some-sysext-sprinkled-on-top
And then finally dive into Trusted Boot with UKI and composefs with @jbtrystram: https://media.ccc.de/v/all-systems-go-2024-309-the-road-to-a-trusted-and-measured-boot-chain-in-bootable-containers
#Fedora #AtomicDesktops #FedoraAtomic #BootableContainers #ASG2024 #AllSystemGo #AllSystemsGo2024
#Bootc: Getting Started with #BootableContainers: https://www.youtube.com/watch?v=bf1xqjLeA9M
This is based based on #Fedora's Bootc getting started guide: https://docs.fedoraproject.org/en-US/bootc/getting-started/
See also:
* bootc: Getting started with bootable containers – by @vrothberg and Preethi Thomas: https://developers.redhat.com/articles/2024/09/24/bootc-getting-started-bootable-containers#
* Bootc: Hands on Demo: https://www.youtube.com/watch?v=fccox6sGCWA
@Eeyore_Syndrome @LinuxRenaissance
To be more precise, the updates are #atomic, while most of the system is #immutable, that is a term with a certain meaning in programming languages but people not used to it think "can't be modified".
BTW the new term (specific to the current #FedoraAtomic / #CoreOS) may be #BootableContainers when they will migrate to #bootc and I think it makes very clear to many people that it brings all the advantages of the OCI ecosystem
Sean tells us about bootable containers and asks for our opinions on how he plans to use them with Kubernetes.
Jörg Kastning
Timothée Ravier
The Late Night Linux Family
BlueBuild
N-gated Hacker News
Thorsten Leemhuis (acct. 2/4)
Alex L 🕊 🇵🇸