so that you can have the basic OS image, layers of extensions on top, and finally app images as payload – all shipped as DDIs with strongest cryptographic guarantees.
So, while systemd has been strong on DDIs already, there's one thing we did *not* provide until v256: the ability to work with DDIs from unprivileged code. Mounting file systems is after all a privileged operation on its lowest level and (with some exceptions) not accessible to unprivileged users.
Lennart Poettering /
npub1rk…qzenj
2024-05-01 06:04:02
in reply to nevent1q…j6g0
Author Public Key
npub1rk2uxtv6nk262nucavh259t085a8rhzfaj3vjc9jhzvkyav0rnqqxqzenjPublished at
2024-05-01 06:04:02Event JSON
{
"id": "da131369be4379107c96790bde3d601cf9b8b8c13cd538bcdeaa935e8648f630",
"pubkey": "1d95c32d9a9d95a54f98eb2eaa156f3d3a71dc49eca2c960b2b89962758f1cc0",
"created_at": 1714543442,
"kind": 1,
"tags": [
[
"e",
"d5eeb66fa114c71f99a4c97ee9e2140b36ed7b27d49e9b8d2cff398a536ba921",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://mastodon.social/users/pid_eins/statuses/112364319017906478",
"activitypub"
]
],
"content": "so that you can have the basic OS image, layers of extensions on top, and finally app images as payload – all shipped as DDIs with strongest cryptographic guarantees.\n\nSo, while systemd has been strong on DDIs already, there's one thing we did *not* provide until v256: the ability to work with DDIs from unprivileged code. Mounting file systems is after all a privileged operation on its lowest level and (with some exceptions) not accessible to unprivileged users.",
"sig": "b67bb295b39e70859fbdb87b54047a4091a8cfd052ea40557f9c0f993baab2062b3e64de325f3b7e4a1e6a9f89738821a410d388fc3aadefc9eb39e11d2e33ef"
}