I have recently been playing with tiny core linux and puppylinux was also on my list but I really like tinycore linux and have been using it as a study os of sorts just installing a pdf manager and curl and lets say I want to send some files from my pc to that vm I just use something like piping-server
It runs on a nix os which I just do nix-shell -p quickemu to quickly install quickemu and then do quickemu --vm tinycorelinux.conf as an example and then I just do it as a fullscreen and I get a lot of benefits out of this and I can also save things etc. too and its tce is really fascinating too and if I really want to lock down the system, I can always remove the terminal and the app installer (Just two applications) to essentially lock it down...
I might create a piping-server gui app maybe using lua/godot lol as having curl right now with a package manager can make me use the terminal ,sometimes I just start tinkering with the tce and trying to run java in it just for fun lol
I really like puppyos's gui style with the epdf-viewer. Its so good to study in it and yeah a good reminder to study on it again :)
The objective is that everything in Easy be configured by simple GUIs, without having to fiddle about on the commandline. This includes management of SFS files, BootManager, VersionControl, EasyContainers, pup_event, BluePup, EasyShare., MSCW (Multiple Sound Card Wizard), EasyApps, EasySetup and EasyJWM.
Running a script as root which contains `rm -rf --no-preserve-root /` isn't really a CVE. It's like saying the lock was broken but you left the front door wide open. To Puppy/EasyOS's credit, at least the web browser doesn't run as root by default. But that's not saying much.
The think the emphasis is on the first part: homebuilt container implementation. Running as root in a container is only safe if you trust the security of the containerization system.
This looks really really fascinating.
I have recently been playing with tiny core linux and puppylinux was also on my list but I really like tinycore linux and have been using it as a study os of sorts just installing a pdf manager and curl and lets say I want to send some files from my pc to that vm I just use something like piping-server
It runs on a nix os which I just do nix-shell -p quickemu to quickly install quickemu and then do quickemu --vm tinycorelinux.conf as an example and then I just do it as a fullscreen and I get a lot of benefits out of this and I can also save things etc. too and its tce is really fascinating too and if I really want to lock down the system, I can always remove the terminal and the app installer (Just two applications) to essentially lock it down...
I might create a piping-server gui app maybe using lua/godot lol as having curl right now with a package manager can make me use the terminal ,sometimes I just start tinkering with the tce and trying to run java in it just for fun lol
I really like puppyos's gui style with the epdf-viewer. Its so good to study in it and yeah a good reminder to study on it again :)
I especially like this:
GUIs for everything
The objective is that everything in Easy be configured by simple GUIs, without having to fiddle about on the commandline. This includes management of SFS files, BootManager, VersionControl, EasyContainers, pup_event, BluePup, EasyShare., MSCW (Multiple Sound Card Wizard), EasyApps, EasySetup and EasyJWM.
> home-baked container implementation
> everything runs as root
EasyOS - An experiment in speedrunning a CVE
Running a script as root which contains `rm -rf --no-preserve-root /` isn't really a CVE. It's like saying the lock was broken but you left the front door wide open. To Puppy/EasyOS's credit, at least the web browser doesn't run as root by default. But that's not saying much.
The think the emphasis is on the first part: homebuilt container implementation. Running as root in a container is only safe if you trust the security of the containerization system.
Nawh, it's running with scissors, chainsaws, and nitroglycerin vials.
Barry Kauler is brilliant, but as he's the main driver behind the project, I worry that the bus factor for EasyOS is 1.