Conversation
Jarkko Sakkinen
jarkko
Edited 16 hours ago
It's always nice when different areas of my work cross paths, and this time it happens with the installer for Puu OS, which is my operating system for LLM inference appliances 🙂
With the Puu OS installer v1.1 release, which I will publish soon, the installer is no longer included in the live image. Instead, it will be turned into a precompiled AppImage with binaries distributed from NPM, and can be run simply with "npx @puu/installer".
The installer has been fully decoupled from Puu OS with a single YAML file describing the installation, including the branding and other hard-coded assumptions. The Puu OS installer has also gained optional hibernate and swap partition support for the installation.
The work began a few weeks ago when Matthew Garrett sent kernel patches for review enabling hibernate support for secure boot and lockdown; a limitation which has kept hibernate out of the product space for a multi-decade period of time [2]. Without going into further detail, the patches are based on the use of the TPM PCR 5 register as the security anchor.
Matthew's patches have also caused some refinement of my Linux kernel test harness so that it builds a bootc container and a live image, which can then in turn be installed using the Puu OS installer [1]. It is complicated, but at the same time the simplest thing possible for verifying hibernate, given how complicated a feature it is.
I'm promoting this because some might have missed that the beef here is that when these have been merged, it will be possible to use hibernate at all in product creation. And it could even be that Linux is the first major OS to re-enable hibernate. This should really gain more interest than it does right now:
https://lore.kernel.org/linux-integrity/20261008132532.1155166-1-matthewg@nvidia.com/
The comments I've made so far (please don't read them) are not too great, but that will be addressed as soon as I'm running the thing :-)
#linux #kernel #hibernate @mjg59
With the Puu OS installer v1.1 release, which I will publish soon, the installer is no longer included in the live image. Instead, it will be turned into a precompiled AppImage with binaries distributed from NPM, and can be run simply with "npx @puu/installer".
The installer has been fully decoupled from Puu OS with a single YAML file describing the installation, including the branding and other hard-coded assumptions. The Puu OS installer has also gained optional hibernate and swap partition support for the installation.
The work began a few weeks ago when Matthew Garrett sent kernel patches for review enabling hibernate support for secure boot and lockdown; a limitation which has kept hibernate out of the product space for a multi-decade period of time [2]. Without going into further detail, the patches are based on the use of the TPM PCR 5 register as the security anchor.
Matthew's patches have also caused some refinement of my Linux kernel test harness so that it builds a bootc container and a live image, which can then in turn be installed using the Puu OS installer [1]. It is complicated, but at the same time the simplest thing possible for verifying hibernate, given how complicated a feature it is.
I'm promoting this because some might have missed that the beef here is that when these have been merged, it will be possible to use hibernate at all in product creation. And it could even be that Linux is the first major OS to re-enable hibernate. This should really gain more interest than it does right now:
https://lore.kernel.org/linux-integrity/20261008132532.1155166-1-matthewg@nvidia.com/
The comments I've made so far (please don't read them) are not too great, but that will be addressed as soon as I'm running the thing :-)
#linux #kernel #hibernate @mjg59
0
0
0