diff options
| author | Arslaan Pathan <[email protected]> | 2026-09-07 13:11:16 +1200 |
|---|---|---|
| committer | Arslaan Pathan <[email protected]> | 2026-09-07 13:11:16 +1200 |
| commit | 867d71725a5ef131059ed2d31320630fea8c1e47 (patch) | |
| tree | f608c71da311e868bc2b672ce706b80c0b14e4f5 /README.md | |
| parent | 514854bd5e818c5d65922344e5a2d2b8aff849c4 (diff) | |
| download | yerbalinux-867d71725a5ef131059ed2d31320630fea8c1e47.tar.xz yerbalinux-867d71725a5ef131059ed2d31320630fea8c1e47.zip | |
YEAH WE USING DNF AND RPM NOW!!! YAYAYAY
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 11 |
1 files changed, 5 insertions, 6 deletions
@@ -60,12 +60,11 @@ The following notes are for myself so I can remember what hardening features to - Atomic updates with dm-verity - Wayland by default - Chimera userland (chimerautils/FreeBSD ported) -- pkgsrc (NetBSD) package manager - - build into tarball - - on first install and on each update extract the tarball into /home/USER/.local/pkgsrc for each user - - regen mk.conf on each update/install to use correct prefix - - per-user packages only ^_^ - - unprivileged bootstrap +- rpm/dnf package manager + - built-in support in yocto yayayayayay + - good OpenPGP signature management + - set the prefix/installroot to $HOME/.local/pkg/ + - set the database to $HOME/.local/pkg/var/db - Runit init system (minimal attack surface) - Might be changed to OpenRC - Secure Boot (TPM) - Decoy/duress PIN - PAM module, wipe all user-controlled partitions and reboot immediately |