echo_society_dev_null@piefed.worldtoLinux@programming.dev•AstrOS - an immutable, secure-by-default distribution built on Arch Linux and the COSMIC desktopEnglish
1·
2 months agoAs said, dm verity and the whole hashing stuff wouldn’t be possible. We also switched to fluxer with discord available as a fallback option because most people still use it
On AstrOS the whole /usr gets hashed (thats why it isn’t possible to have it declarative, it needs to be the same for everyone). This hash gets signed. If now someone changes /usr physically from the outside the hash / hash signature mismatches and the system won’t boot. We also have a different target of users. The basic user wants a system that just works and not having to write a config file for it