Christian Brauner 🦊🐺

@brauner
1.7K Followers
379 Following
1.6K Posts

CTO @ Amutable

Maintains the #VFS in the Linux Kernel, #pidfds, and a bunch of other stuff.
#systemd, #LXC, #LXD and a few other things.

Website & Bloghttps://brauner.io
Verificationhttps://keyoxide.org/4880B8C9BD0E5106FC070F4F7B3C391EFEA93624
Githubhttps://github.com/brauner
Kernel Bloghttp://people.kernel.org/brauner

It is 2026 and we are back to shipping software as tar.gz
https://antigravity.google/download

antigravity chrome_100_percent.pak
chrome_200_percent.pak
chrome_crashpad_handler
chrome-sandbox
icudtl.dat

libEGL.so
libffmpeg.so
libGLESv2.so
libvk_swiftshader.so
libvulkan.so.1

LICENSE.electron.txt LICENSES.chromium.html
locales
resources
resources.pak
snapshot_blob.bin
v8_context_snapshot.bin
vk_swiftshader_icd.json

Why?

Google Antigravity

Google Antigravity - Build the new way

Google Antigravity
"Developers don't let other developers do arbitrary I/O from kthreads" or something like that:
https://patch.msgid.link/20260601-work[email protected]
[PATCH RFC v4 00/25] fs,kthread: start all kthreads in nullfs - Christian Brauner

@martinpitt Welcome to the team!

@lcamtuf

But then, not everything is a file descriptor! Some parts of the OS use separate namespaces; a good example are process identifiers (PIDs)

Linux does have "pidfds" nowadays, which let you represent a reference to a process with an FD, thanks to @brauner

I spent my final day at Red Hat with investigating an obscure SELinux regression in CentOS 10 stream in image mode (bootc). Not the most glorious activity, but then again I couldn't start anything new and shiny any more this week 😁

https://github.com/cockpit-project/cockpit/issues/23295

[packit] centos 10 image mode storage test failures · Issue #23295 · cockpit-project/cockpit

The storage tests can't login it shows as error message unsupported shell. centos 10 image mode storage test failures https://artifacts.dev.testing-farm.io/0c33d40a-7f61-4c83-9cfc-4bf558f1a7e9/work...

GitHub

ParticleOS has a sway profile now! It's happily running on my new laptop.

https://github.com/systemd/particleos/pull/162

#ParticleOS #sway

sway: Add profile by martinpitt · Pull Request #162 · systemd/particleos

Start with the packages. Keep the ones which exist in Debian and Fedora in the common mkosi.conf, and add some distro specifics. Package list based on Fedora Sway desktop: https://forge.fedoraproje...

GitHub

I replaced docker with systemd-nspawn (plus -resolved and -networkd) on my self-hosted actions runner. Am wondering what @pid_eins would think of this

https://excipio.tech/blog/improving-my-self-hosted-actions-runner-setup/

Improving my self-hosted actions runner setup

For a while now, I’ve self-hosted a runner to integrate with Gitea Action. But there was something about it that was leaving me worried: in an age where software supply chain security is becoming more and more important, I felt like I needed to improve the security of the setup. The answer I arrived at, while not perfect (yet), it’s a great improvement over what I had before. This post will be a walk through of what I had, what and why I chose to replace it, how I did it, and where I could still improve it.

Excipio
Just tried out systemctl soft-reboot on #postmarketos for the first time. Really good feature. Thank you #systemd
#TIL "systemd-analyze blame" to analyze how long take each service when your system boots.
Helped doing some cleanup. :)
#ubuntu #linux #protips

With some hand-holding from @daandemeyer (thank you!) I finally have ParticleOS in its Fedora Rawhide GNOME variant running on my new laptop. Very cool!

I really want Debian trixie with sway, that'll be one of my next exercises 😀

https://github.com/systemd/particleos

GitHub - systemd/particleos: ⸭ An image-based, secure OS, built on top of various Linux distributions

⸭ An image-based, secure OS, built on top of various Linux distributions - systemd/particleos

GitHub