Podcast Episodes
Back to SearchVerification of OS artifacts without stateful keyrings (asg2025)
Many OS artifacts today are still verified using proprietary, stateful keyring formats. With the "File Hierarchy for the Verification of OS Artifacts…
1 year, 1 month ago
isd: interactive systemd (asg2025)
Simplify systemd management with `isd`! `isd` is a TUI offering fuzzy search for units, auto-refreshing previews, smart sudo handling, and a fully cu…
1 year, 1 month ago
ParticleOS: Why is Lennart still not dogfooding systemd?! (asg2025)
More than six months have passed since Daan tried to ~~shame~~ gently peer pressure Lennart to actually use the stuff he builds, via a FOSDEM talk: h…
1 year, 1 month ago
A simpler and faster firewall with bpfilter (asg2025)
For many years, firewall solutions on Linux have grown and evolved, without any major change, until eBPF. While eBPF can allow very fast and efficien…
1 year, 1 month ago
Sandboxing services with Landlock (asg2025)
Landlock is an unprivileged kernel feature that enables all Linux users to sandbox their processes. Complementary to seccomp, developers can leverage…
1 year, 1 month ago
Integrating systemd-sysext images in an update stack (asg2025)
systemd-sysext provides a nice way to enhance a distribution with a read-only root filesystem without the need to reboot. But there is additional too…
1 year, 1 month ago
Look ma, no secrets! - bootstrapping cryptographic trust in my homelab using Nix, UKIs, TPMs and SPIFFE (asg2025)
All the big cloud providers provide your machines with a unique cryptographic identity that can be used to talk to their cloud services securely with…
1 year, 1 month ago
Extending Fedora Atomic Desktops using systemd system extensions (asg2025)
On image based desktops distributions such as Fedora Atomic desktops and Universal Blue, users are expected to run their graphical applications using…
1 year, 1 month ago
Accessing shadow records via varlink (asg2025)
Provide a varlink service to access /etc/passwd and /etc/shadow so that no setuid and setgid binaries are necessary for this task. There are two inde…
1 year, 1 month ago
systemd-confext Two Years On: Versioned Overlays for /etc, Reloaded (asg2025)
systemd-confext is a lightweight overlay mechanism for /etc, allowing you to drop in a configuration extension ("confext") bundle and let systemd mak…
1 year, 1 month ago