Loving today's news that the mysterious "fedora man" outside the Louvre heist was actually a 15-year-old museum visitor who dresses like a 1940s French detective all the time, just because. apnews.com/article/louv...

Night at the Aquarium. November 12. Don't miss it. Join us and our friends from @thenewstack.io, @tailscale.com, @syntasso.io, Blacksmith, and @minimus.io for an unforgettable evening surrounded by belugas and brilliant people. Spots are limited. Register here: luma.com/940nj3xh

Good morning! On my way to Atlanta for KubeCon! It’s gonna be a busy week for all of us here! Nine talks across all of the Edera team, and three talks/panels I’ll be participating in! Feel the teal, because it’s coming in strong too with our incredible booth!

I'm very much looking forward to KubeCon Atlanta next week. On Monday, I'll be hosting a panel "Balancing Developer Freedom and Security" with Cat Morris, @marcusforpeace.bsky.social , @alex.zenla.io  (plus A.N. Other guest) as part of Open Source SecurityCon. https://tinyurl.com/23sjsctb 1/3

When does KubeCon start? Speaking emotionally not physically? When you head to the airport? When @rejekts.io starts? What about @cncf.bsky.social Maintainer Summit? Co-lo day? Or the ~*Official Opening Keynote*~?

I am at Magic Kingdom at Disney World today for my first mini-vacation in a long time :3

Alright it is time for me to finally sleep. I managed to mostly get Sprout working on openSUSE. The more I write guides will little tiny differences, the more I am convinced we need an installer, which will come soon! Also, Sprout went no_std and compiles with Rust stable now!

I keep having dreams about bootloaders. Something has happened to my brain.

I am breaking my anti-Nix streak by attempting to make Sprout work with NixOS. Please think of my pain and hope that it may be healed in time.

I’m at my dad’s house and I looked down at this coffee table and there was a library book from my middle school! I guess i forgot to return it lol

This year for halloween I am going to be “CTO who just dealt with Secure Boot and managed to win the battle somehow” The costume was free :3

I just had the cursed idea of adding OTEL support into a bootloader. Strictly speaking, it is possible I think lol

Do you have your plan for KubeCon set yet? Need some suggestions? Here’s what we’re doing... 🧵

it's 12:32 AM and I have decided to abuse sbrk and make Rust use my bump allocator gist.github.com/azenla/0a038...

I‘ve been in Orlando, Florida for less than 48 hours and already an absolutely crazy thunderstorm has hit and it’s STILL 80 degrees despite that…

new profile photo :3

Namespaces tidy your cluster — they don’t isolate it. All containers still share the same kernel, so one escape can take down the node. Partitioning ≠ Protection. True workload isolation happens at runtime, not in YAML. By @denhamparry.co.uk for @thenewstack.io

Very proud of my first time appearing on the @thenewstack.io, writing about something that is important to me and how I believe we should address isolation discussions within Cloud Native. Thank you to @tlpavlich.gay as well my other colleagues from @edera.dev to help articulate this piece ❤️

Maybe I'm weird for not using docs.rs all that much. It's mostly because I use RustRover a lot and I read docs a lot from the source code in the IDE rather than in a browser.

Updated Sprout development environment boot demo! Booting an Alpine Linux initramfs on aarch64 :) My Intel desktop also boots using Sprout to both Linux and Windows! As does my ThinkPad X1 Carbon!

If only everyone could have seen the look on my face when debugging this. Steven and I were up late at night working on OCI stuff as one does, and then we triggered this bug with a very specific NVIDIA OCI image. The confusion at the behavior to “oh no… oh god no” moment was exhilarating 😁

Exploit vectors are pretty interesting e.g. upload malicious but innocent looking tar file to repository (e.g. PyPI) which pwns vulnerable build systems that expand it (e.g. uv).

@edera.dev discovered an serious vuln in various Rust crates for handling tar files edera.dev/stories/tarm...

Edera is today disclosing a new high severity parser differential vulnerability in popular asynchronous tar parsers for Rust, dubbed TARmageddon! Thank you to the Edera team who helped find and responsibly disclose this vulnerability. Announcement here: edera.dev/stories/tarm...

Sprout update: Yesterday I implemented sprout command line arguments: --config path/to/sprout.toml --boot EntryTitleToBoot When I get some time I plan to add support for --boot utilizing entry ids instead of titles. I need a good refactor of the entry system for that :)

Good morning from Sea-Tac :)

It's been super busy today, and one of my favorite things is looking at all my Slack drafts from messages I started writing but didn't finish. Today, one of them is "PRwwwwwwwwww" I assume it means Pull Request and then some key repeat nonsense lol

Working on their Ivy The Axolotl fanfic about Ivy becoming the first axolotl astronaut in space.

Things Edera's bsky admin is doing while waiting out the AWS outage 🧵

Working on a Fedora onboarding guide for Sprout :D

Posting just so you know I’m not a bot running in us-east-1.

Working on documenting more of Sprout :)

Learned that an anonymous outside expert on submersibles did an interview with the OceanGate Titan investigation, and they released a transcript, with all the names redacted. The first line of his first answer? "I'm sure you're familiar with my film Titanic."

As I mature as a person I become more sure every day that finding the right people to surround yourself is nearly all that matters. I am so proud to be around great people who share my core values of kindness, curiosity, working hard on hard problems, and giving back more than you take.

If anyone from Bluesky would like an introduction to passkeys as a technology or an introduction to the FIDO Alliance, where passkeys are standardized and improved, these are services I am willing to provide.

the sprout logo is so cute :3

Maybe I'm not dreaming big enough, but everything I've convinced myself was possible, I've found a way to make it happen.

Yesterday I implemented support for LINUX_EFI_INITRD_MEDIA_GUID and if you are cursed with the knowledge to know what that is, I am so sorry...

Just think, you could put a JavaScript runtime in your bootloader! Should you do that, no... but could you do that with sprout, probably :P

Exploring the amount of crimes you can do when your bootloader dynamically adds object sections to bootable artifacts (this was just a thought experiment)

Meet your hosts for the first RUNTIME RUMBLE webinar, just 2 days away. Marina Moore runs containers so secure that malware refuses to run in her presence, out of respect...and fear. @denhamparry.co.uk once mitigated a CVE while blindfolded, with his hands tied behind his back. Register now:

Also, Sprout will be Open Source in the coming weeks :) Just need to get around to some docs and making a pretty README and all of that. And it will officially launch as a proper effort next month.

Something I haven't really explained is why sprout is built off of maps/tables rather than arrays. so it's: [entries.abc] title = "XYZ" not [[entries]] title = "XYZ" That's because I am aiming to make a drop-in system so you can modify things by adding files and they will merge or mask values.

added new splash image loading during the early phase and way to search for filesystems by partition uuid :D

Sprout Success! Posting from this Sprout config now :) With this simple configuration file, you can have sprout load BLS entries (what systemd and Fedora derivatives use) automatically and present them as boot options! I plan to make this a single line, but for now this was the easy way.

After a whole bunch of fighting with UEFI DevicePath, I managed to get sprout to boot my Fedora 43 vmlinuz and initramfs from an ext4 filesystem Here is the configuration I used, still very much WIP: gist.github.com/azenla/c104f...

Next on sprout: filesystem driver loading and auto detection (plus BLS support) I'm so ready :D

Hello from the first physical system booted via sprout :)

UEFI programming is something I wouldn't wish upon my worst enemy

Sadly a bit sick after our Edera offsite last week, so I'm recovering by working on sprout! Currently tracking down x86 boot weirdness. Nothing is ever simple on x86.