• 194 posts
  • 33 comments
Joined 3 years ago
Cake day: June 30th, 2023

The Linux Kernel Runtime Guard (LKRG), maintained under the Openwall project, has officially reached version 1.0, more than seven years after its first public release in 2018.

If you are not familiar with it, LKRG is a kernel module that acts as a security layer for the Linux kernel. Its main job is to monitor the kernel while it’s running and catch anything that looks suspicious or unsafe.

For example, if an attacker tries to exploit a kernel vulnerability by overwriting kernel credentials or altering kernel memory, LKRG can detect that behavior. When it finds something abnormal, it can log it, kill the offending process, or take other defensive measures depending on its configuration.

Bitnami, a Broadcom-owned project that provides pre-packaged, ready-to-run application stacks (images), making it easy to deploy popular open-source software or Kubernetes tools on various containerized platforms, shook the tech world, especially within the open-source community.

In an unexpected and highly controversial move that caught everyone off guard, Bitnami announced that it is making changes to its public container catalog, and for many developers, it’s going to hurt.

Starting August 28, 2025, the long-standing Docker Hub repository at “docker.io/bitnami” will undergo a staged shutdown, with brownouts scheduled before the final deletion on September 29.

Reddit is going to be leaning even harder into search in the coming months. The company has already been working on a plan to integrate its LLM-powered search into its main search feature, but CEO Steve Huffman said he wants users to think of the site as an actual search engine.

During the company’s latest earnings call, Huffman said search is one of the top priorities for Reddit. “We’re concentrating our resources on the areas that will drive results for our most pressing needs, improving the core product, making Reddit a go-to search engine, and expanding internationally.”

The idea of reddit as a search engine isn’t that far-fetched. Many people are already in the habit of adding “Reddit” to traditional searches in the hopes of finding relevant threads from the site. And the company has been trying to take advantage of this with its own AI-powered search product Reddit Answers. Though that feature is still labeled as being in “beta,” the company plans to eventually add it to its default search bar.

Linux users may face yet another hurdle related to Secure Boot when the Microsoft-signed key used by many distributions to support the firmware-based security feature expires on September 11, leaving users at the mercy of distribution from OEMs, and systems possibly not receiving a necessary firmware update.

As LWN reported (paywall) that Microsoft will stop using the expiring key to sign the shim in September. “But the replacement key, which has been available since 2023, may not be installed on many systems; worse yet, it may require the hardware vendor to issue an update for the system firmware, which may or may not happen,” LWN said. “It seems that the vast majority of systems will not be lost in the shuffle, but it may require extra work from distributors and users.”

The report said manufacturers could add support for the new key in a full firmware update or by updating the KEK database. The former assumes that manufacturers would be interested in distributing a firmware update for a wide variety of products so a small percentage of their users could use Secure Boot with a non-Windows OS; the latter is an unproven mechanism that isn’t guaranteed to work on all devices. Both seem likely to leave at least some people to figure out a solution on their own.

Linux Mint project leader Clement Lefebvre published today a new edition of their monthly newsletter talking about some of the new features and improvements coming to Liinux Mint, LMDE 7, and related components.

One of the big changes that Clement Lefebvre talks about in the March newsletter is support for OEM (Original Equipment Manufacturer) installations for the next major version of LMDE (Linux Mint Debian Edition), which will be based on the upcoming Debian GNU/Linux 13 “Trixie” operating system series.