Christian Brauner 🦊🐺

https://lore.kernel.org is lagging quite drastically?

Some tooling changes for @monsieuricon@social.kernel.org

https://lore.kernel.org/all/20260306-master-v1-0-5a4b9cbe11d7@kernel.org

@daandemeyer@mastodon.social has been working on #barrage a concurrent async test framework for Python:

https://github.com/amutable-systems/barrage

He's got great plans for it. :)

#barrage #amutable

RE: @pid_eins@mastodon.social

The varlink-http-bridge is another #systemd component written in #Rust. Expect more of that in the future.

I can confidently say that I sent another completely batshit series that will probably end up with Linus revoking any pr rights because I clearly lost it. But it was kinda tempting to see whether I could move all kthreads into nullfs and separate PID 1 from kthread filesystem state:

https://patch.msgid.link/20260303-work-kthread-nullfs-v1-0-87e559b94375@kernel.org

Also, usermodehelpers must cease to be a thing and so do userspace filesystem operations from kthread context.

I love that ksmbd does I/O from kthread context. What can possibly go wrong.

RE: @daandemeyer@mastodon.social

I love that me ranting to @pid_eins@mastodon.social about "I don't want to mount unprivileged images in the kernel so my idea is to do it in userspace relying on the new mount API through a daemon in systemd please come to LSFMM with me" turned out exactly as envisioned. And all in less than two years.

RE: @brauner@mastodon.social

The first and largest round of invites for the (V)FS track has been sent:

https://lore.kernel.org/all/20260225-aufeinander-kummervoll-1953a06beae9@brauner/

This includes everyone who would need a VISA. The next round will be smaller.

Interested in a UAF that is just too cursed to be real?
https://lore.kernel.org/20260224-mittlerweile-besessen-2738831ae7f6@brauner

RE: @brauner@mastodon.social

So I've just been looking at the sponsorship page for LSFMM and you all need to go out and steal some of that AI funding money for one of the conferences that makes the compute for all the fanciness possible! Like right now, please.

RE: @brauner@mastodon.social

I took it one step further and implemented both CLONE_AUTOREAP (now for non-pidfd as well) and CLONE_PIDFD_AUTOKILL (requires no new privileges for the child now):

https://patch.msgid.link/20260223-work-pidfs-autoreap-v4-0-e393c08c09d1@kernel.org

RE: @GossiTheDog@cyberplace.social

Oh look, path traversal meets vibe coding.
Everyone should know that path traversal is like the easiest thing to get right. It's famously trivial. Not like we've been plagued by security issues. Imagine if Linux had symlinks or heaven forbid magic links. Oh well.

After a brief discussion I initiated #systemd updated their stability guarantees to be aligned with the #kernel:

"The kernel has a "don't break userspace" policy [1] which is very easy
to understand and like (even if the details are complicated). [...]

To improve public perception, and to align the docs with practice, let's
make a general promise to keep stability [...]"

It's been that way implicitly for a while and now it's communicated clearly as well.

https://github.com/systemd/systemd/commit/f4dd927e5cc47a88fa427a6e1ce210b1f2350978

My role in upstream maintenance for the Linux Kernel will continue as it always has. The same goes for @pid_eins@mastodon.social involvement in systemd. We take our upstream responsibility very seriously and always have.

RE: @amutable@mastodon.social

Today I'm super excited to announce Amutable, our new company together with @pid_eins@mastodon.social and @blixtra@hachyderm.io.
I couldn't be happier to have @cyphar@mastodon.social, @daandemeyer@mastodon.social, @zbyszek@fosstodon.org, @pothos@fosstodon.org, @michaelvogt@mastodon.social,
@rodrigo_rata@mastodon.social, @davidstrauss@mastodon.social as part of our team.
I've known them for a very long time and I'm very happy they are on board for the ride.
I can't wait to show everyone what we're building.
Made with ❤️ in Berlin.

https://amutable.com/blog/introducing-amutable

#amutable #linux #systemd #⊼mutable #integrity