News for hackers. Stuff that matters.

A comment on Show HN: Nucleus – A security-hardened, Nix-native container runtime.

Re:Show HN: Nucleus – A security-hardened, Nix-native contai... by yjftsjthsd-h on Wednesday June 10, 2026 @01:51AM (#48471982)
> rootfs attestation verifies a per-file SHA-256 manifest at startup;

What threat model does this protect against? Certainly nice, especially for free, but wondering about utility.

[ Parent | on HN ]
Re:Show HN: Nucleus – A security-hardened, Nix-native contai... by 0kenx on Wednesday June 10, 2026 @11:25AM (#48477782)
it's a simple integrity check for catching deployment drift/tampering.
[ Parent | on HN ]