I did use Fedoral Silverblue for a few months, but eventually decided it was about the same amount of work as using a fully siloed system like Tails or a build everything system like BSD.
That's my bias showing, I suppose, but I have a lot more experience and control with source code distributions. I used Gentoo Linux and macOS heavily for many years. I worked on FreeBSD chroot jails for a couple of years as well.
I actually don't have much experience with other people's container systems; cgroup-based containers always felt like FreeBSD jails and granular access control lists. Lots of experience with ACL-based security from Windows NT systems or even Banyan Vines.
So podman/docker are great, but I was more comfortable rolling my own.
Which is a very long way to say: I am crazy, and Fedora Silverblue is worth trying.
I use it on my gaming desktop. No major issues with the OSTree/Flatpak design, unless you count the fact that I wanted to try KDE but KDE-flavored Silverblue ("Kinoite") is still in prerelease and didn't work with Nvidia binary drivers for me. Similar story for Wayland with Nvidia drivers.
Fingers crossed, when 35 is released I should be able to have both KDE and Wayland (the latter is moderately important to me as I have a 1080p screen and a 4k projector, and currently I need to change DPI whenever I turn the latter on).
I should qualify that I work with Docker a lot, so rules like "to open a local HTML file in Firefox, you first need to explicitly mount the folder into the container" seem natural and expected to me in terms of security. To others they probably feel baffling or obtuse.
Oh, and my JBL Bluetooth headphones don't work (possibly other Bluetooth devices as well, I haven't tried yet). Nothing to do with Silverblue specifically, just a piece of Linux driver support still being what it is.
5 comments
[ 6.0 ms ] story [ 27.2 ms ] threadThat's my bias showing, I suppose, but I have a lot more experience and control with source code distributions. I used Gentoo Linux and macOS heavily for many years. I worked on FreeBSD chroot jails for a couple of years as well.
I actually don't have much experience with other people's container systems; cgroup-based containers always felt like FreeBSD jails and granular access control lists. Lots of experience with ACL-based security from Windows NT systems or even Banyan Vines.
So podman/docker are great, but I was more comfortable rolling my own.
Which is a very long way to say: I am crazy, and Fedora Silverblue is worth trying.
Fingers crossed, when 35 is released I should be able to have both KDE and Wayland (the latter is moderately important to me as I have a 1080p screen and a 4k projector, and currently I need to change DPI whenever I turn the latter on).
I should qualify that I work with Docker a lot, so rules like "to open a local HTML file in Firefox, you first need to explicitly mount the folder into the container" seem natural and expected to me in terms of security. To others they probably feel baffling or obtuse.
Oh, and my JBL Bluetooth headphones don't work (possibly other Bluetooth devices as well, I haven't tried yet). Nothing to do with Silverblue specifically, just a piece of Linux driver support still being what it is.