

0·
4 days agoAs said, dm verity and the whole hashing stuff wouldn’t be possible. We also switched to fluxer with discord available as a fallback option because most people still use it


As said, dm verity and the whole hashing stuff wouldn’t be possible. We also switched to fluxer with discord available as a fallback option because most people still use it


We build signed and hashed images. Why should it be NixOS based in that case. The whole point of their declarative architecture would be gone


It is
On AstrOS the whole /usr gets hashed (thats why it isn’t possible to have it declarative, it needs to be the same for everyone). This hash gets signed. If now someone changes /usr physically from the outside the hash / hash signature mismatches and the system won’t boot. We also have a different target of users. The basic user wants a system that just works and not having to write a config file for it