Viewing profile — secureblue

secureblue creator here :) some corrections: > last I heard it wasn't out of Beta or whatever yet It is > But it uses containers rather than VMs It doesn't use plain containers for…

We've been working hard to address feedback and make improvements over the last several months. Secureblue now has expanded hardening, improved documentation, and clearer scope. In…

FYI, both userns and non-userns variants are now available. https://github.com/secureblue/secureblue/commit/38999d4123aa...

Clearlinux has nothing comparable to this as far as I know: https://github.com/ublue-os/startingpoint And it's also mainly geared towards server use cases, whereas this project is …

Just changed it. Thanks for the feedback!

What is your distro doing that would make someone want to degoogle it? Certain users have expressed a preference towards Brave instead of Chromium because in their view Brave's "de…

Some people think that Brave is preferable to Chromium because they "degoogle" it.

Trading off possible kernel bugs against letting a whole LOT of userspace software run with real root privilege Only bubblewrap would run as root, but yes this is a fair critique a…

As a follow up to this, given that bubblewrap-suid without userns vs bubblewrap with userns is a tradeoff, I could make it so both variants are published. This would give users cho…

I'm just making a judgement call for myself. Any other project ontop of Fedora increases the attack vector with its own maintainers. Totally understandable. an ISO Small point of c…

Universal blue, the starting point for this project, is fedora based. https://universal-blue.org/ No other distro has the same level of immutable tooling or support for immutable v…

I'm a little concerned that degoogling would be necessary. I don't follow. The readme specifically says it's not in scope. How much of the user's privacy is this thing selling away…

Most of this can be done with Ansible. All of this can be done in several ways. Ansible, manually, a script, etc. Building it into an image just makes it more convenient. So why sh…