Fitting Everything Together

#1

Post by mawalu » Mon, May 09, 2022, 5:16 PM UTC

Fitting Everything Together
0pointer.net

Re: Fitting Everything Together

#2

Post by mongol » Mon, May 09, 2022, 8:47 PM UTC

Interesting ideas but I wonder if there will be any distribution apart from Red Hat that would really go all the way to implement these ideas. While it seems to solve many security problems, supporting something along these lines seems very aligned with support contracts.

Re: Fitting Everything Together

#3

Post by Darkskiez » Mon, May 09, 2022, 9:20 PM UTC

Re: Fitting Everything Together

#4

Post by pantalaimon » Mon, May 09, 2022, 10:35 PM UTC

Darkskiez wrote: post #3

See also https://distr1.org/

How is this related?

Re: Fitting Everything Together

#5

Post by JetSpiegel » Tue, May 10, 2022, 12:14 AM UTC

mongol wrote: post #2

Interesting ideas but I wonder if there will be any distribution apart from Red Hat that would really go all the way to implement these ideas. While it seems to solve many security problems, supporting something along these lines seems very aligned with support contracts.

It does seem like something geared for the Red Hat model of installing millions of identikit machines.

Re: Fitting Everything Together

#6

Post by pabs3 » Tue, May 10, 2022, 7:54 AM UTC

mongol wrote: post #2

Interesting ideas but I wonder if there will be any distribution apart from Red Hat that would really go all the way to implement these ideas. While it seems to solve many security problems, supporting something along these lines seems very aligned with support contracts.

ChromeOS and macOS already use this sort of model.

Re: Fitting Everything Together

#7

Post by mongol » Tue, May 10, 2022, 5:29 PM UTC

pabs3 wrote: post #6

mongol wrote: post #2

Interesting ideas but I wonder if there will be any distribution apart from Red Hat that would really go all the way to implement these ideas. While it seems to solve many security problems, supporting something along these lines seems very aligned with support contracts.

ChromeOS and macOS already use this sort of model.

I don't doubt that. But which Linux distributions would support it? Red Hat I am sure. Perhaps OpenSuse. But any others?

Re: Fitting Everything Together

#8

Post by SAI_Peregrinus » Tue, May 10, 2022, 7:49 PM UTC

mongol wrote: post #7

pabs3 wrote: post #6

Earlier quoted context omitted.

ChromeOS and macOS already use this sort of model.

I don't doubt that. But which Linux distributions would support it? Red Hat I am sure. Perhaps OpenSuse. But any others?

I can see NixOS doing similar things. It's all about declarative configuration.

Also very useful for embedded Linux distros, an A/B setup can help protect against update corruption due to power loss. If one of the two fails to boot, it can try the other, and retry the update.

Re: Fitting Everything Together

#9

Post by greatgib » Wed, May 11, 2022, 7:56 AM UTC

The OS he is describing is an Android phone,and in my opinion this is a nightmare.

Like for exemple having to rebuild everything just to tweak (or fix) something. This is the path to throwable not easily hackable computers...

Re: Fitting Everything Together

#10

Post by usr1106 » Wed, May 11, 2022, 12:43 PM UTC

greatgib wrote: post #9

The OS he is describing is an Android phone,and in my opinion this is a nightmare. Like for exemple having to rebuild everything just to tweak (or fix) something. This is the path to throwable not easily hackable computers...

He says he wants it hackable and secure. I don't think he favors lock-in or throw it away when doesn't work.

The dilemma there seems how do you keep it quickly hackable for yourself but difficult to crack for the bad guys. What are your counterproposals if this is a nightmare?