{"guid":"ec605407-e1c6-56d7-8ac0-7a343e0221fa","title":"An extendable and securely signed image-based OS with updates","subtitle":null,"slug":"all-systems-go-2024-303-an-extendable-and-securely-signed-image-based-os-with-updates","link":"https://cfp.all-systems-go.io/all-systems-go-2024/talk/LJAYYL/","description":"With systemd tooling, including mkosi, it is possible to build an OS image that fulfills all checkmarks a modern image-based OS should have, but with a standard off-the-shelf distribution!\nThis talk gives an overview for a possible workflow, including A/B updates and offline signed images and updates, in real-use. As a bonus, it is also self-replicating and uses as little configuration as possible, leveraging built-in systemd auto detection.\n\nLicensed to the public under https://creativecommons.org/licenses/by/4.0/de/","original_language":"eng","persons":["Marius Schiffer"],"view_count":87,"promoted":false,"date":"2024-09-25T16:30:00.000+02:00","release_date":"2024-09-25T00:00:00.000+02:00","updated_at":"2026-03-23T16:30:07.785+01:00","tags":["303","asg2024","Dome","2024","Day 1"],"length":1609,"duration":1609,"thumb_url":"https://static.media.ccc.de/media/events/all_systems_go/2024/303-ec605407-e1c6-56d7-8ac0-7a343e0221fa.jpg","poster_url":"https://static.media.ccc.de/media/events/all_systems_go/2024/303-ec605407-e1c6-56d7-8ac0-7a343e0221fa_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/all_systems_go/2024/303-ec605407-e1c6-56d7-8ac0-7a343e0221fa.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/all_systems_go/2024/303-ec605407-e1c6-56d7-8ac0-7a343e0221fa.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/all-systems-go-2024-303-an-extendable-and-securely-signed-image-based-os-with-updates","url":"https://api.media.ccc.de/public/events/ec605407-e1c6-56d7-8ac0-7a343e0221fa","conference_title":"All Systems Go! 2024","conference_url":"https://api.media.ccc.de/public/conferences/asg2024","related":[],"recordings":[{"size":169,"length":1609,"mime_type":"video/webm","language":"eng","filename":"asg2024-303-eng-An_extendable_and_securely_signed_image-based_OS_with_updates_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2024-09-25T18:06:58.229+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2024/webm-hd/asg2024-303-eng-An_extendable_and_securely_signed_image-based_OS_with_updates_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/80214","event_url":"https://api.media.ccc.de/public/events/ec605407-e1c6-56d7-8ac0-7a343e0221fa","conference_url":"https://api.media.ccc.de/public/conferences/asg2024"},{"size":66,"length":1609,"mime_type":"video/webm","language":"eng","filename":"asg2024-303-eng-An_extendable_and_securely_signed_image-based_OS_with_updates_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2024-09-25T18:05:03.707+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2024/webm-sd/asg2024-303-eng-An_extendable_and_securely_signed_image-based_OS_with_updates_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/80213","event_url":"https://api.media.ccc.de/public/events/ec605407-e1c6-56d7-8ac0-7a343e0221fa","conference_url":"https://api.media.ccc.de/public/conferences/asg2024"},{"size":51,"length":1609,"mime_type":"video/mp4","language":"eng","filename":"asg2024-303-eng-An_extendable_and_securely_signed_image-based_OS_with_updates_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2024-09-25T17:56:03.367+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2024/h264-sd/asg2024-303-eng-An_extendable_and_securely_signed_image-based_OS_with_updates_sd.mp4","url":"https://api.media.ccc.de/public/recordings/80212","event_url":"https://api.media.ccc.de/public/events/ec605407-e1c6-56d7-8ac0-7a343e0221fa","conference_url":"https://api.media.ccc.de/public/conferences/asg2024"},{"size":17,"length":1609,"mime_type":"audio/opus","language":"eng","filename":"asg2024-303-eng-An_extendable_and_securely_signed_image-based_OS_with_updates_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2024-09-25T17:53:02.573+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2024/opus/asg2024-303-eng-An_extendable_and_securely_signed_image-based_OS_with_updates_opus.opus","url":"https://api.media.ccc.de/public/recordings/80211","event_url":"https://api.media.ccc.de/public/events/ec605407-e1c6-56d7-8ac0-7a343e0221fa","conference_url":"https://api.media.ccc.de/public/conferences/asg2024"},{"size":24,"length":1609,"mime_type":"audio/mpeg","language":"eng","filename":"asg2024-303-eng-An_extendable_and_securely_signed_image-based_OS_with_updates_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2024-09-25T17:52:41.525+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2024/mp3/asg2024-303-eng-An_extendable_and_securely_signed_image-based_OS_with_updates_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/80210","event_url":"https://api.media.ccc.de/public/events/ec605407-e1c6-56d7-8ac0-7a343e0221fa","conference_url":"https://api.media.ccc.de/public/conferences/asg2024"},{"size":212,"length":1609,"mime_type":"video/mp4","language":"eng","filename":"asg2024-303-eng-An_extendable_and_securely_signed_image-based_OS_with_updates_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2024-09-25T17:52:25.822+02:00","recording_url":"https://cdn.media.ccc.de/events/all_systems_go/2024/h264-hd/asg2024-303-eng-An_extendable_and_securely_signed_image-based_OS_with_updates_hd.mp4","url":"https://api.media.ccc.de/public/recordings/80209","event_url":"https://api.media.ccc.de/public/events/ec605407-e1c6-56d7-8ac0-7a343e0221fa","conference_url":"https://api.media.ccc.de/public/conferences/asg2024"}]}