Jarkko Sakkinen
Posts
6388Following
352Followers
5711. https://github.com/puu-os/bootc
2. https://github.com/puu-os/installer
Jarkko Sakkinen
jarkko
Promises given, promises kept. I had couple of calls last Fall w/ Oracle about Trenchboot series and carved rough plan what they need to do.
Given cutoffs across the board in bigtech suddenly Oracle was not a stakeholder in this anymor,e and the whole situation has been drilling me since in the background. What a relief.
Since we got here, and I feel much more relaxed I'm also motivated to proactively help with the beef of the patch series via reviews/feedback.
Given cutoffs across the board in bigtech suddenly Oracle was not a stakeholder in this anymor,e and the whole situation has been drilling me since in the background. What a relief.
Since we got here, and I feel much more relaxed I'm also motivated to proactively help with the beef of the patch series via reviews/feedback.
0
0
1
Jarkko Sakkinen
jarkko
Hoo-ray:
https://lore.kernel.org/linux-integrity/178793933115.2708560.2385527122662363073.pr-tracker-bot@kernel.org/
We got the dissociative TPM patches wiped off from the head of the Trenchboot series.
I.e., the next iteration of the patch series will be a scoped set of x86 patches.
🥳
#linu
https://lore.kernel.org/linux-integrity/178793933115.2708560.2385527122662363073.pr-tracker-bot@kernel.org/
We got the dissociative TPM patches wiped off from the head of the Trenchboot series.
I.e., the next iteration of the patch series will be a scoped set of x86 patches.
🥳
#linu
0
0
1
Jarkko Sakkinen
jarkko
I've started to regularly buy Qt Group stock it gou underevaluated heavily thanks to AI.
0
0
1
Jarkko Sakkinen
jarkko
Tonight I'm going to install Windows 11 Pro to real hardware 🚀 to my old x390 with i7-8865, 16 GiB and 512 MiB SSD.
I also found from Github Gists a cool PowerShell script that enables WSL2 port forwarding. I wrote it some years ago to deal with Windows so might come handy again.
Local account recipe of any year for Windows is always to install without network (at least past 10 years) , Shift-10 when first boot crap starts to emerge and
the safeword of the year.
The safeword of 2026 is "start ms-cxh:localonly" ;-)
I could be in 2027 that won't work but only thing that'll change is the safeword.
I also found from Github Gists a cool PowerShell script that enables WSL2 port forwarding. I wrote it some years ago to deal with Windows so might come handy again.
Local account recipe of any year for Windows is always to install without network (at least past 10 years) , Shift-10 when first boot crap starts to emerge and
the safeword of the year.
The safeword of 2026 is "start ms-cxh:localonly" ;-)
I could be in 2027 that won't work but only thing that'll change is the safeword.
0
0
0
Jarkko Sakkinen
jarkko
Edited 1 month ago
I've packaged Linux binaries for NPM distribution as static (musl) binaries so far.
As the next step, I'll package Linux executables as AppImage bundles :-) It essentially wipes away three quarters of my build scripts.
I think NPM is actually really good fit for the AppImage overall, and in addition resistant to possible (probable?) supply chain attacks as AppImage already is self-contained.
As the next step, I'll package Linux executables as AppImage bundles :-) It essentially wipes away three quarters of my build scripts.
I think NPM is actually really good fit for the AppImage overall, and in addition resistant to possible (probable?) supply chain attacks as AppImage already is self-contained.
0
0
1
Jarkko Sakkinen
jarkko
Edited 1 month ago
Making public Git repository for Puu OS some time today. It's a container native lean bootc OS centered around Buildroot build orchestration, and off-the-shelf K3s/vLLM service provider.
Copyright for this project is owned by Opinsys Oy i.e., it is for my day job.
We do school IT fully based onLinux and open source with full hardware/software leasing supply chain from student laptops to info screens. We possess 40% marketshare in Finland, and we steadily growing market share in Germany :-) Hardware is used/recycled from our leasing partners, and we refurbish it to a pristine condition. We also take broken hardware, and collect the spare parts, which maitenance service uses for the repairs. In other words, this is also quite green business.
All this with less than 30 employee staff is amazing, and the business is fully self-funded and profit making. There are no outside investors.
Copyright for this project is owned by Opinsys Oy i.e., it is for my day job.
We do school IT fully based onLinux and open source with full hardware/software leasing supply chain from student laptops to info screens. We possess 40% marketshare in Finland, and we steadily growing market share in Germany :-) Hardware is used/recycled from our leasing partners, and we refurbish it to a pristine condition. We also take broken hardware, and collect the spare parts, which maitenance service uses for the repairs. In other words, this is also quite green business.
All this with less than 30 employee staff is amazing, and the business is fully self-funded and profit making. There are no outside investors.
1
0
2
Jarkko Sakkinen
jarkko
Edited 1 month ago
For the time being I will disable io_uring in Landstrip, as I'm not yet sure if/how io_uring_setup() ought to be managed securely with seccomp for behalf of the agent.
Workaround will be that I synthesize appropriate errnos so that any sane software knows how to fall back to other ways of doing file I/O.
I have some actual fix ideas in my mind but what I don't see yet is what is the "full closure" of this topic. Will be revisited in future.
What a relieft that I caught such a big fish myself and can do a precautious fix.
I'll release 1.0 once I believe that there's nothing I can do except being the SRE for other peoples lemmings. Up until that it will be minor and patch versions (i.e. 0.y.z's), and Landstrip is labeled as insecure :-)
Workaround will be that I synthesize appropriate errnos so that any sane software knows how to fall back to other ways of doing file I/O.
I have some actual fix ideas in my mind but what I don't see yet is what is the "full closure" of this topic. Will be revisited in future.
What a relieft that I caught such a big fish myself and can do a precautious fix.
I'll release 1.0 once I believe that there's nothing I can do except being the SRE for other peoples lemmings. Up until that it will be minor and patch versions (i.e. 0.y.z's), and Landstrip is labeled as insecure :-)
1
0
0
Jarkko Sakkinen
jarkko
Edited 1 month ago
If a bug is at plain sight, it should be always piggybacked with an example:
https://lore.kernel.org/keyrings/apEWZUFe8NmwgPDb@kernel.org/
I at least start to otherwise look for blind spot in my own thinking.
#linux #kernel
https://lore.kernel.org/keyrings/apEWZUFe8NmwgPDb@kernel.org/
I at least start to otherwise look for blind spot in my own thinking.
#linux #kernel
0
0
0
Jarkko Sakkinen
jarkko
why in hell this tool has TWO names? https://github.com/containers/toolbox
super confusing and annoying.
super confusing and annoying.
2
0
1
Jarkko Sakkinen
jarkko
After many years I've finally root caused why Microfreak has so low volume. It turns out I've had a blind spot for Utility/Preset/Preset Volume (usually set to zero) :-)
0
0
0
Jarkko Sakkinen
jarkko
Edited 1 month ago
This was a difficult cover letter to make:
https://lore.kernel.org/linux-integrity/apCluywYWo97vyYr@kernel.org/
I think this is the right call because the pre-existing Trenchboot series has been shown to be confusing to review for everyone given the inherent asymmetry in it.
#linux #kernel #tpm #x86
https://lore.kernel.org/linux-integrity/apCluywYWo97vyYr@kernel.org/
I think this is the right call because the pre-existing Trenchboot series has been shown to be confusing to review for everyone given the inherent asymmetry in it.
#linux #kernel #tpm #x86
0
0
0
Jarkko Sakkinen
jarkkoI’m going to dedicate my old X390 as Windows 11 laptop for testing and fixing Windows bug in Landstrip.
The laptop no other meaningful use ATM and i7-8565U happens to be just barely Windows 11 compatible so all good :-)
I’ve been also dying to try out ReBuzz some day, which I haven’t got running even in the paid CrossOver edition of Wine.
0
0
0
Jarkko Sakkinen
repeated
repeated
Auringon sikiö
Auringon_sikio@mementomori.socialHS Visiossa nuori tekoälytyyppi pöhisee:
”Nyt on tulossa paljon viraalijuttuja, oon aivan haipeissa. Mä tunnen, että tämä voi mennä ihan boom!”
Lupaan toistella tätä aina, kun kavereiten kanssa valmistaudumme liiketoimintakriittisten sovellusten tuotantopäivityksiin.
0
3
0
Jarkko Sakkinen
jarkko
I wonder could you make agents want to stay and poison the future training iterations. Anyway, interesting work, founds while looking information about KDL and how peeople use it for the future version of ReadSeek.
https://iocaine.madhouse-project.org/
https://iocaine.madhouse-project.org/
1
0
0
Jarkko Sakkinen
repeated
repeated
captain acab 
🏳️🌈🇵🇸
redsad@ohai.social
just when you thought libraries couldn't get any cooler
0
5
0
Jarkko Sakkinen
repeated
repeated
Jarkko Sakkinen
repeated
repeated
Ars Technica
arstechnica@mastodon.socialNew Twitter launches, says Musk's X gave up the name
Judge hasn't ruled on X Corp’s preliminary injunction, but Operation Bluebird plows ahead
https://arstechnica.com/tech-policy/2026/08/new-twitter-launches-says-musks-x-gave-up-the-name/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social
2
2
0
Jarkko Sakkinen
jarkko
C++ feels fresh and cool (sorry) ;-)
The very last thing I implemented with C++ before 16 year break was some initial WebGL shoehorning {Qt,Gtk, EFL}WebKit. That led me to job interview with Research in Motion (did not take the job).
The very last thing I implemented with C++ before 16 year break was some initial WebGL shoehorning {Qt,Gtk, EFL}WebKit. That led me to job interview with Research in Motion (did not take the job).
0
0
1
Jarkko Sakkinen
repeated
repeated
Mixxx DJ Software
mixxx@floss.socialwe put together a lil video to promote our awesome 25th Anniversary Mixxx tshirt shop (https://shop.mixxx.org/) -- check it out! https://youtu.be/PWg9IRt-8R0
1
2
0
Jarkko Sakkinen
jarkko
The benefit of Landstrip is not the only reason why I migrate it to C++. It's also my personal privacy that I'm concerned of.
I mean I could get infected by supply chain attack just by developing a sandbox, and sandbox would be a great target for such attack.
"memory safety issues" are a drop in the ocean compared to the main attack vector that is hostile agent's fav 🤷 🪿
I mean I could get infected by supply chain attack just by developing a sandbox, and sandbox would be a great target for such attack.
"memory safety issues" are a drop in the ocean compared to the main attack vector that is hostile agent's fav 🤷 🪿
0
0
0