The #uapigroup hosts two brand new specifications at https://uapi-group.org/specifications

The VMClock specification comes from Amazon AWS and defines an efficient guest clock synchronization mechanism:
https://uapi-group.org/specifications/specs/vmclock/

The VMGenID specification defines a notification mechanism whenever a VM is cloned/copied so userspace and kernel can take appropriate action (e.g., changing machine ID or updating random seeds):
https://uapi-group.org/specifications/specs/vmgenid/

The #uapigroup is very happy to serve as a home for these specs.

My #talk about #VOA at #asg2025 is available as video:
https://media.ccc.de/v/all-systems-go-2025-374-verification-of-os-artifacts-without-stateful-keyrings

You can find the slides at https://pkgbuild.com/~dvzrv/presentations/all-systems-go-2025/

#uapigroup #Linux #RustLang #presentation #OpenPGP #Signature #Verification #DigitalSignature #keyring

We have just released the first version of voa-core, a #RustLang library for access to verifiers in #VOA structures. 🎁 🦀

https://crates.io/crates/voa-core/0.1.0

VOA, short for "File Hierarchy for the Verification of OS Artifacts", is a way of providing and using verifiers for digital signatures in a stateless manner, for various cryptographic technologies:
https://uapi-group.org/specifications/specs/file_hierarchy_for_the_verification_of_os_artifacts/

Thanks to @hko for his work on this and an upcoming #OpenPGP backend! 🥳

#UAPIGroup #ArchLinux #DigitalSignature #SSH #X509 #STF

It is now possible to build NixOS UKIs! 🤯
https://github.com/NixOS/nixpkgs/pull/282086

#NixOS #Nix #Linux #systemd #UAPIGroup

A little while ago we proposed a change to the #UAPIGroup system extension spec, adding optional mutability: https://github.com/uapi-group/specifications/pull/78
(Although I filed the PR, it's based on the initiative of multiple #Flatcar #Linux maintainers)

Now a fellow maintainer took a first stab at a reference implementation in #systemd: https://github.com/systemd/systemd/pull/31000

Mutable overlays will make #sysexts more versatile and flexible, and will make them easier to use on general purpose distros. Really awesome to see this happen!