4 ms·

I'm working with rpm-ostree distros on workstations. The Universal Blue (Fedora Atomic (CoreOS)) project has OCI images that install as immutable host images.

I'm working with rpm-ostree distros on workstations. The Universal Blue (Fedora Atomic (CoreOS)) project has OCI images that install as immutable host images. We were able to install programs as admin on Windows in our university computer lab because of DeepFreeze, almost 20 years ago "Is DeepFreeze worth it?" https://www.reddit.com/r/sysadmin/comments/18zn3jn/is_deepfreeze_worth_it/ https://www.reddit.com/r/sysadmin/comments/18zn3jn/is_deepfr... TIL Windows has UWF built-in: "Unified Write Filter (UWF) feature" https://learn.microsoft.com/en-us/windows/configuration/unified-write-filter/ https://learn.microsoft.com/en-us/windows/configuration/unif... Re: ~immutable NixOS and SELinux and Flatpaks' chroot filesystems not having SELinux labels like WSL2 either: https://news.ycombinator.com/item?id=43617363 https://news.ycombinator.com/item?id=43617363

westurner 2y ago
Universal Blue immutable OCI images; ublue-os/main: https://github.com/ublue-os/main https://github.com/ublue-os/main : > OCI base images of Fedora with batteries included ublue-os/image-template: https://github.com/ublue-os/image-template https://github.com/ublue-os/image-template : > Build your own custom Universal Blue Image! Microsoft took Torvalds, who also devs on Fedora FWIU.
- westurner 2y ago
  systemd/particleos is an immutable Linux distribution built with mkosi: "systemd ParticleOS" (2025) https://news.ycombinator.com/item?id=43649088 https://news.ycombinator.com/item?id=43649088
ndegruchy 2y ago
Huh, I had no idea that UFW was a feature of Windows and I'm kind of surprised to not see more widespread adoption for workstation rollouts. DeepFreeze was great (excepting updates and other minor issues) and actively reduced a lot of nuisance issues that we might otherwise have to deal with when I worked for a school.
- westurner 2y ago
  > On September 20, 2024, Microsoft announced that Windows Server Update Service would no longer be developed starting with Windows Server 2025.[4] Microsoft encourages business to adopt cloud-based solution for client and server updates, such as Windows Autopatch, Microsoft Intune, and Azure Update Manager. [5] WSUS Offline installer is also deprecated now. And then to keep userspace updated too, a package manager like Chocolatey NuGet and this power shell script: https://github.com/westurner/dotfiles/blob/develop/scripts/setup_windows.ps1 https://github.com/westurner/dotfiles/blob/develop/scripts/s...
- EvanAnderson 2y ago
  UFW has a nicer admin automation "story" than Deep Freeze (for which I have a decent amount of experience), in my opinion. "Unfreezing" UFW volumes for updates (known as "Servicing Mode") via script isn't hateful.
EvanAnderson 2y ago
Unfortunately Unified Write Filter is SKU-limited. It has been a feature of the produce since the Windows NT Embedded 4.0 days but nobody knows about it and, if you do, you can't use it because you don't have an eligible SKU.

westurner 2y ago

Universal Blue immutable OCI images; ublue-os/main: https://github.com/ublue-os/main https://github.com/ublue-os/main : > OCI base images of Fedora with batteries included ublue-os/image-template: https://github.com/ublue-os/image-template https://github.com/ublue-os/image-template : > Build your own custom Universal Blue Image! Microsoft took Torvalds, who also devs on Fedora FWIU.

westurner 2y ago
systemd/particleos is an immutable Linux distribution built with mkosi: "systemd ParticleOS" (2025) https://news.ycombinator.com/item?id=43649088 https://news.ycombinator.com/item?id=43649088

ndegruchy 2y ago

Huh, I had no idea that UFW was a feature of Windows and I'm kind of surprised to not see more widespread adoption for workstation rollouts. DeepFreeze was great (excepting updates and other minor issues) and actively reduced a lot of nuisance issues that we might otherwise have to deal with when I worked for a school.

westurner 2y ago
> On September 20, 2024, Microsoft announced that Windows Server Update Service would no longer be developed starting with Windows Server 2025.[4] Microsoft encourages business to adopt cloud-based solution for client and server updates, such as Windows Autopatch, Microsoft Intune, and Azure Update Manager. [5] WSUS Offline installer is also deprecated now. And then to keep userspace updated too, a package manager like Chocolatey NuGet and this power shell script: https://github.com/westurner/dotfiles/blob/develop/scripts/setup_windows.ps1 https://github.com/westurner/dotfiles/blob/develop/scripts/s...
EvanAnderson 2y ago
UFW has a nicer admin automation "story" than Deep Freeze (for which I have a decent amount of experience), in my opinion. "Unfreezing" UFW volumes for updates (known as "Servicing Mode") via script isn't hateful.

EvanAnderson 2y ago

Unfortunately Unified Write Filter is SKU-limited. It has been a feature of the produce since the Windows NT Embedded 4.0 days but nobody knows about it and, if you do, you can't use it because you don't have an eligible SKU.