While practising my #kubernetes #systemd #sysext talk for #CloudNative Rejekts I constantly went over time, so I tried a radical concept: just demos, no slides.
Please find the result here: https://m.youtube.com/watch?v=Hb37wNKcZdM and let me know what you think!
Today is the day the setuid root program died! It took many weeks of work, a pyramid of complex PRs with lots of yak shaving, but finally cockpit-session moved from a suid root program to systemd socket activation.
This fixes Cockpit for #bootc, paves the way for fully DynamicUser= (that will land next, almost works), and opens up the possibility of installing it as a #systemd #sysext.
Next up at #FrOSCon : @tormath1 Mathieu and Julian @apricote talk about news and happenings in and around #flatcar #container #linux - new vendors support, ClusterAPI updates, and the latest on #systemd #sysext .
The presentation will commence in about 5 minutes; abstract is here https://programm.froscon.org/2024/events/3038.html
The live stream for the talk is here: https://streaming.media.ccc.de/froscon/HS5
Blogged about #imagebased #linux os composability with #systemd #sysext and our upcoming #torcx deprecation in #Flatcar #Container Linux: https://www.flatcar.org/blog/2023/12/extending-flatcar-say-goodbye-to-torcx-and-hello-to-systemd-sysext/
If you haven't heard about torcx, don't worry about it. It's a rather specific tool for a very limited use case. Sysexts on the other hand make customising immutable, image-based Linux distros like Flatcar a lot more flexible!
Here's a new addition to the @flatcar documentation if you want to setup a #kubernetes cluster using Systemd #sysext images: https://www.flatcar.org/docs/latest/container-runtimes/getting-started-with-kubernetes/#deploy-a-kubernetes-cluster-with-flatcar
With this approach, it's easier to control the update of Kubernetes software by leveraging the sysupdate feature and to coordinate the nodes update.
