Hacker News new | ask | show | jobs
by portercable 522 days ago
I had not heard of Genode/Sculpt, but it looks interesting. These days, I feel like if I boot a new operating system, I have no idea what all it's doing and whether or not things are secure--I'm basically relying on the operating system to have good defaults. And then it's so easy to screw something up!

I like the idea of Qubes and it looks like Genode might be an even better idea...

2 comments

It's a very similar philosophy to Qubes - one of their open challenges is to port the qubes infrastructure over since qubes is (in theory at least) hypervisor independent. https://genode.org/about/challenges Which would be nice since NOVA hypervisor is dramatically less code then Xen and Nitpicker/Dialog for the management console is dramatically less code than Fedora.

I've looked into it briefly but it seems like too much work for me right now.

The True Genode Way of course is that everything worth having would eventually be ported as a native genode component instead of a qubes style VM. They've put a lot of effort into making that as easy as they can with Goa (a nix-inspired package management and build tool) and adding to their C standard library and ports of popular 3rd party libs like SDL

Also - their defaults are pretty hilarious.

They dont assume you want a RAM-Only filesystem. By default it starts out completely immutable with nothing being able to save anything anywhere.

If you want to save anything to a hard drive you have to enable that driver because they don't assume that you'd need one.

Copy and paste is an optional extra to install

It's wild :p