<story><title>Fedora Atomic Desktops</title><url>https://fedoramagazine.org/introducing-fedora-atomic-desktops/</url></story><parent_chain></parent_chain><comment><author>bsimpson</author><text>If you&amp;#x27;re not familiar, the Atomic project is really interesting. Its focus is stability and reproducibility, trying to solve the fragility that can happen when the default way to use software in Linux is `sudo apt-get install`.&lt;p&gt;There&amp;#x27;s a community offshoot called Universal Blue (after the original Atomic image Silverblue).  It uses the standards set for containerization to make userland configuration reproducible as well.   There&amp;#x27;s a manifest (Containerfile) that enumerates all the modifications, which means an upgrade is bump the version of the base image and replay all the modifications from the manifest. It&amp;#x27;s also meant to limit `sudo` usage, so you&amp;#x27;re not in the habit of giving root to random software you downloaded from the internet.&lt;p&gt;Their most famous image is Bazzite, which will replicate the SteamOS experience on generic hardware. They also have Bluefin for software developers.&lt;p&gt;I haven&amp;#x27;t used it myself, but I find the concept fascinating. I expect Jorge and Kyle from that project will find their way to these comments.</text></comment>
<story><title>Fedora Atomic Desktops</title><url>https://fedoramagazine.org/introducing-fedora-atomic-desktops/</url></story><parent_chain></parent_chain><comment><author>kaylynb</author><text>I really like Silverblue and run it on a couple of secondary machines (like in my workshop), but it’s still rough for anything off the beaten path.&lt;p&gt;The largest pain points for me:&lt;p&gt;- Any kernel modules. I know Ublue has images but I wish Red Hat would just have an official solution that doesn’t require hacky RPMs and such.&lt;p&gt;- Kernel cmdline args or any initramfs changes: can’t package in image and need to be applied manually. Maybe it’s possible to build a custom initramfs to distribute?&lt;p&gt;- Secure boot and enrolling moks is very annoying. My current workstation just uses sbctl to sign a UKI against custom keys and everything “just works”. This is part of why kernel modules are a pain in Silverblue too.&lt;p&gt;If you don’t care about kernel modules with secure boot it’s quite nice though. Practically zero maintenance.</text></comment>