3 ms·

This(1)(2) might hold you over for a bit: "Genode's microkernel architecture, capability-based security, sandboxed device drivers, and virtual machines in a nov

This(1)(2) might hold you over for a bit: "Genode's microkernel architecture, capability-based security, sandboxed device drivers, and virtual machines in a novel operating system for commodity PC hardware and the PinePhone. Sculpt is used as day-to-day OS by the Genode developers. " It looks pretty neat - could be fun to play with! 1) https://genode.org/ https://genode.org/ 2) https://genode.org/download/sculpt https://genode.org/download/sculpt They

mikewarot 2y ago
Genode Sculpt releases, in April and October, are where they roll out user interface and other visible upgrades that form a complete system. I'm hoping to make it my daily driver in the near future.
- mech422 2y ago
  Oh! How is it for a dev. box ?? Can you get gcc/clang/rust/python ? Does it have a decent browser and code editor? It sounds like fun to play with - I've been wanting to try something new...
  - snvzz 2y ago
    They have native 3d acceleration, native modern web browser and virtualization support to e.g. run Linux and any non-ported software on that. Genode is no joke.
    - mech422 2y ago
      Thanks man - definitely gonna have a go at then :-)
codethief 2y ago
> Genode is based on a recursive system structure. Each program runs in a dedicated sandbox and gets granted only those access rights and resources that are needed for its specific purpose. Programs can create and manage sub-sandboxes out of their own resources, thereby forming hierarchies where policies can be applied at each level. Damn, I've been hoping someone would create something like this for quite some time!
- samus 2y ago
  The difficulty is the same as for current sandboxing efforts on desktop Linux though: most existing applications assume unrestricted access to user data. They have to be adapted or have to be granted unrestricted access. Otherwise users will simply not be willing/able to use the machine in secure ways. The technologies has been there for decades, but is applicable to a greenfield setting only.
  - codethief 2y ago
    > The difficulty is the same as for current sandboxing efforts on desktop Linux though You're right, that is a problem. However, the situation on Linux is even worse since you can't even nest sandboxes/containers in most real-world situations.

mikewarot 2y ago

Genode Sculpt releases, in April and October, are where they roll out user interface and other visible upgrades that form a complete system. I'm hoping to make it my daily driver in the near future.

mech422 2y ago
Oh! How is it for a dev. box ?? Can you get gcc/clang/rust/python ? Does it have a decent browser and code editor? It sounds like fun to play with - I've been wanting to try something new...
- snvzz 2y ago
  They have native 3d acceleration, native modern web browser and virtualization support to e.g. run Linux and any non-ported software on that. Genode is no joke.
  - mech422 2y ago
    Thanks man - definitely gonna have a go at then :-)

codethief 2y ago

> Genode is based on a recursive system structure. Each program runs in a dedicated sandbox and gets granted only those access rights and resources that are needed for its specific purpose. Programs can create and manage sub-sandboxes out of their own resources, thereby forming hierarchies where policies can be applied at each level. Damn, I've been hoping someone would create something like this for quite some time!

samus 2y ago
The difficulty is the same as for current sandboxing efforts on desktop Linux though: most existing applications assume unrestricted access to user data. They have to be adapted or have to be granted unrestricted access. Otherwise users will simply not be willing/able to use the machine in secure ways. The technologies has been there for decades, but is applicable to a greenfield setting only.
- codethief 2y ago
  > The difficulty is the same as for current sandboxing efforts on desktop Linux though You're right, that is a problem. However, the situation on Linux is even worse since you can't even nest sandboxes/containers in most real-world situations.