News for hackers. Stuff that matters.

A comment on Desktop Linux Hardening. Parent comment

Re:Desktop Linux Hardening by monsieurgaufre on Monday June 12, 2023 @02:36PM (#36298723)
Not to derail the thread, but i'm interested in your disagreement. It seemed really restricted for the few moments i played with it.
[ Parent | on HN ]
Re:Desktop Linux Hardening by kelvie on Monday June 12, 2023 @02:45PM (#36298901)
By default, yeah it's just running chrome on what sometimes seems like hardware that is overkill for it, but then you have:

https://support.google.com/chromebook/answer/9145439?hl=en

It runs a VM that runs LXC on it, and by default installs a debian container you get root to. They also created a X11/wayland bridge so that graphical apps work, even 3d acceleration to some degree, as well as volume mounts from the host, and USB passthrough.

I was able to use OpenSCAD on it.

You can even install containers of your choice, e.g.: https://wiki.archlinux.org/title/Chrome_OS_devices/Crostini

You get a full linux container inside your secure Chrome OS, the main limitation being that you have to use whatever kernel their presumably signed VM uses. All this without needing to disable secure boot or booting into a "developer" mode or whatever.

[ Parent | on HN ]
Re:Desktop Linux Hardening by monsieurgaufre on Monday June 12, 2023 @02:53PM (#36299049)
Thank you for the detailed answer. You're right. It is interesting.
[ Parent | on HN ]