Mastodawn

Secure Boot handles the kernel, but what about the root filesystem?

RHEL’s Sealed Images technology preview extends cryptographic integrity to runtime. Built via image mode for #RHEL, it uses composefs to lock down the OS. If a file is modified post-build, the kernel blocks it.

It’s a disciplined approach to immutable infra—bringing container workflows to the OS layer to stop configuration drift.

#RedHat #Linux #Security #OpenSource #ZeroTrust

Trust at every layer: How sealed images extend OS integrity from boot to runtime

Learn how Sealed Images for Red Hat Enterprise Linux extends container workflows to the operating system (OS) itself, providing a versioned, reproducible artifact that moves through the same pipeline as your applications. Strengthen OS integrity with a fully controlled signing chain, protecting every file in the immutable OS image.

Chuck Mattern Apr 23

Digital sovereignty isn't just data residency—it requires verifiable operational control. 🐧

Now GA: Red Hat Confirmed Sovereign Support. This in-region service is designed to mitigate extraterritorial risk and maintain digital autonomy. It’s a "well-lit path" for those who need to protect their stack from external influence while maintaining enterprise-grade support.

#RedHat #RHSummit #Sovereignty #RHEL #Linux #OpenSource

Now generally available: Red Hat Confirmed Sovereign Support drives digital autonomy for global enterprise

Learn about Red Hat Confirmed Sovereign Support, a premium, in-region operational service that helps protect critical workloads from violating jurisdictional boundaries. Discover how it maintains reliability in support engineering while enforcing data and operational sovereignty.

Chuck Mattern Apr 23

Managing #RHEL on Google Cloud just got more intuitive—and secure. 🐧

The new Red Hat Lightspeed Agent uses secure Agent-to-Agent (A2A) protocol to connect with Google’s Gemini. This lets SREs use natural language for infra tasks while keeping data in enterprise boundaries.

It’s a pragmatic way to scale expertise without the usual privacy trade-offs.

#RedHat #GoogleCloud #SRE #AI #Gemini #A2A #Privacy #Linux

Unlock enterprise-ready, secure AI with Red Hat Lightspeed Agent for Google Cloud

The Red Hat Lightspeed Agent for Google Cloud is an enterprise-ready tool designed specifically for Red Hat Enterprise Linux (RHEL) to help Site Reliability Engineers (SREs) and IT administrators manage their Red Hat infrastructure on Google Cloud using natural language.

Chuck Mattern Apr 17

Managing Disconnected RHEL Environments

High-security or restricted environments require a specialized approach to content delivery. This resource outlines the methodology for managing disconnected environments, focusing on operational consistency when external connectivity is not an option.

Key Points:

Enablement: Architecting offline delivery.

Security: Hardened posture for air-gapped sites.

Watch here: https://www.youtube.com/watch?v=Yc9KQyQMxfo

#RedHat #RHEL #OpenSource #Security

Managing disconnected systems | Into the Terminal 181

YouTube

Chuck Mattern Apr 17

RE: https://infosec.exchange/@gtronix/116420412326520756

As an early user of Enlightenment, an OpenSource advocate and old man who is thrilled to see the accomplishments fo our next generation this story really made my day brighter.

Congratualtions Kamila Szewczyk!

#Opensource #STEM

Chuck Mattern Apr 15

Merging DRBD-9.3 into the Linux Upstream

Sounds like exciting times at LINBIT as their multi-peer code makes it's way into the upstream #Linux kernel.

https://linbit.com/blog/merging-drbd-9-3-into-the-linux-upstream/

#OpenSource #technology #DRBD

Merging DRBD-9.3 into the Linux Upstream

We are currently working on merging DRBD-9.3 into the Linux upstream. But how did we get here? DRBD-8.4 works only with a single peer; it is a software for two-node failover clusters. And the DRBD that comes with the upstream Linux is equivalent to drbd-8.4. The most recent release was 8.4.11, eight years ago. However, […]

LINBIT

Chuck Mattern Apr 15

Zack Whittaker Apr 15

NEW, by me: Sweden has blamed Russian government-linked hackers for attempting a destructive cyber attack on a thermal plant in western Sweden in 2025.

The cyberattack failed, but it's the latest in a string of Russia-linked incidents targeting critical infrastructure in Europe in recent years.

https://techcrunch.com/2026/04/15/sweden-blames-russian-hackers-for-attempting-destructive-cyberattack-on-thermal-plant/

Sweden blames Russian hackers for attempting 'destructive' cyberattack on thermal plant | TechCrunch

Sweden's minister for civil defense said Russian hackers are "now attempting destructive cyber attacks against organizations in Europe."

TechCrunch

Chuck Mattern Apr 3

IEEE Spectrum Apr 3

The EU has announced the EURO-3C, a cloud service to keep “sovereign data” in European servers. But 70 percent of EU cloud services are currently using US company services. Who can step in to fill the gap? https://spectrum.ieee.org/europe-cloud-sovereignty?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Mastodon-Daily-Pipeline

Is EURO-3C Europe's Path to Cloud Sovereignty?

How will the EU's new cloud framework impact the dominance of US tech giants in Europe?

IEEE Spectrum

Chuck Mattern Apr 3

In the enterprise, "stability" isn't a buzzword—it's a requirement. Red Hat just moved the needle with RHEL Extended Life Cycle, Premium. 🐧

We’re talking a 14-year lifecycle and 6 years of extended maintenance for minor releases in one subscription. This is about providing "well-lit paths" for mission-critical systems, allowing you to manage tech debt on your timeline, not a vendor's.

#RedHat #RHEL #Linux #SysAdmin #Infrastructure

https://www.redhat.com/en/about/press-releases/red-hat-enhances-enterprise-stability-red-hat-enterprise-linux-extended-life-cycle-premium

Red Hat Enhances Enterprise Stability with Red Hat Enterprise Linux Extended Life Cycle, Premium

Red Hat Enterprise Linux Extended Life Cycle, Premium, is a new subscription providing a predictable 14-year life cycle for major Red Hat Enterprise Linux releases. The stand-alone subscription consolidates extended support, simplifying the complexity of managing multiple support streams.

Chuck Mattern Apr 2

Global instant payments are scaling, but fragmented infra and legacy tech debt keep the real value out of reach. 🐧

To achieve true cross-border efficiency, we must solve the interoperability puzzle. Standards like #ISO20022 are "well-lit paths" to unlocking value and AI. The future depends on resilient, flexible platforms that bridge the gap between legacy and modern rails.