From 867d71725a5ef131059ed2d31320630fea8c1e47 Mon Sep 17 00:00:00 2001 From: Arslaan Pathan Date: Mon, 7 Sep 2026 13:11:16 +1200 Subject: YEAH WE USING DNF AND RPM NOW!!! YAYAYAY --- README.md | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) (limited to 'README.md') diff --git a/README.md b/README.md index 5cf048a..70e4ce8 100644 --- a/README.md +++ b/README.md @@ -60,12 +60,11 @@ The following notes are for myself so I can remember what hardening features to - Atomic updates with dm-verity - Wayland by default - Chimera userland (chimerautils/FreeBSD ported) -- pkgsrc (NetBSD) package manager - - build into tarball - - on first install and on each update extract the tarball into /home/USER/.local/pkgsrc for each user - - regen mk.conf on each update/install to use correct prefix - - per-user packages only ^_^ - - unprivileged bootstrap +- rpm/dnf package manager + - built-in support in yocto yayayayayay + - good OpenPGP signature management + - set the prefix/installroot to $HOME/.local/pkg/ + - set the database to $HOME/.local/pkg/var/db - Runit init system (minimal attack surface) - Might be changed to OpenRC - Secure Boot (TPM) - Decoy/duress PIN - PAM module, wipe all user-controlled partitions and reboot immediately -- cgit v1.2.3