@simplex
"includes a commitment to run the published code" is a good start!
i'm looking forward to the day when such claims can be backed by cryptographic proofs, independently verifiable by users and third parties. implementing or inspired by https://www.system-transparency.org #systemtransparency
Managed to make and boot a stimage in qemu on Debian 12.
Not straight forward so here are a few tips
* Have stmgr in $PATH (create with ./build-stmgr if missing)
* apt remove mmdebstrap ( ./contain will be used instead and work with podman)
* apt remove netcat-openbsd (or prefer ncat by default)
daniel lublin
Johan Nilsson
Franz R.