La mise à jour foireuse de #Mesa sur #Fedora n'était donc pas un coup d'essai ☺️ un bug s'est (brièvement) glissé dans #composefs à un moment donné cette année, juste assez longtemps pour que je l'installe 🤭

Malheureusement il renforce le côté "immutable" de #uBlue, car il en bloque tout simplement les mises à jour 🙃 c'est réparable mais quelle tannée.

J'ai étudié et testé CoreOS et je suis tombé dans un rabbit hole 🙈 mais j'ai enfin publié mes 12 notes !

https://notes.sklein.xyz/2025-10-13_2224/

#Fedora #Linux #bootc #libostree #composefs #atomicdesktops #adminsys #fedoracoreos #coreos

J'ai étudié et testé CoreOS et je suis tombé dans un rabbit hole 🙈 - Jardin numérique de Stéphane Klein

J'ai étudié et testé CoreOS et je suis tombé dans un rabbit hole 🙈

UKI, composefs and remote attestation for Bootable Containers

With Bootable Containers (bootc), we can place the operating system files inside a standard OCI container. This lets users modify the con...

ARCH LINUX BOOTC WORKS. I DECLARE THE LINUX ATOMIC AGE IS UPON US!

https://github.com/tulilirockz/arch-bootc

#arch #linux #bootc #cncf #podman #ostree #composefs

Highlights from the main #erofs (used by #composefs) merge for #Linux 6.17[1]:

""We now support metadata compression. It can be useful for embedded use cases or archiving a large number of small files.

Additionally, readdir performance has been improved by enabling readahead (note that it was already common practice for ext3/4 non-dx and f2fs directories). We may consider further improvements later toalign with ext4's s_inode_readahead_blks behavior for slow devices too.""

[1] https://git.kernel.org/torvalds/c/76a9701325d39d8602695b19c49a9d0828c897ca

#kernel #LinuxKernel

We are bringing UKI and strong boot integrity guarantees with composefs to Bootable Containers. We demonstrated our latest progress on that front at DevConf.cz 2025: https://pretalx.devconf.info/devconf-cz-2025/talk/739KGC/

#Fedora #BootableContainers #bootc #UKI #composefs

UKIs and composefs support for Bootable Containers DevConf.CZ 2025

Using composefs and fs-verity, we can link a UKI to a complete read only filesystem tree, guarenteeing that every byte of every file is verified on load. This is done, similar to Git, using only hashes. This means that the signature on the UKI effectively signs the whole tree. With composefs, file content is split from the metadata which enables de-duplication at the file level. We can thus host any number of OS images on a single filesystem and there is no need to reserve space on the system in advance for each image. This frees us from fixed size disk image formats such as dm-verity which is used in a lot of image based systems. We illustrate this architecture by building an OS image using an OCI container via the familiar Containerfile syntax, then pushing it to a container registry and finally deploying it on a system. We will also explain how this will be integrated with the Bootable Containers project (bootc).

Lol @siosm we've got a PR in to fastfetch to fix the disk display thing for #composefs

https://github.com/ublue-os/bazzite/pull/2648

fix: hide composefs volume in fastfetch by ledif · Pull Request #2648 · ublue-os/bazzite

This PR hides the 100% full read-only composefs mount that keeps confusing users. Before After

GitHub

@abbra Sorry for the late reply, missed your toot.

Is there really no way to create a directory at runtime anymore? Creating and maintaining a container image where the only difference is a symlink seems a little tedious.

I already tried tmpfiles.d, but either I did it wrong or it runs too late in the boot process and the root filesystem is already read-only...

#fedora #composefs #kinoite #silverblue #nix #HomeManager

WOW I didn't realize I am already using #Bootc and #ComposeFS on my system.

Thanks #uBlue #AuroraLinux

Now let's check the status of #Podman + ComposeFS...

Incredible how Alexander Larsson was ahead of times with that reply about sharing libraries, it's basically the approach by Docker images... but OSTree, used by Flatpak, predates Docker and it is even more efficient with its by-file deduplication. And the recent #ComposeFS by the same author will allow #Podman containers to have the same deduplication not only on disk but even on RAM (to my understanding)