Finally installed Atomic - I love it! - one question
by Philip Rhoades
People,
I have been following Atomic for a long time and have been wanting to
test it out but other dramas have kept me busy . . I usually have my
latest machine as my Fedora Workstation and my previous workstation as
my server for about a dozen small web sites and as a mail list server.
I have finally gotten around to buliding a new workstation with F29 and
turning the old WS into the F29 server. So now I have been able to use
the old server as the new Atomic host and as a consolidated backup
machine for all my old backup hard disks - mostly SATA but going back to
IDE and one old SCSI backup that I had an early version of RH running on
a 386.
Atomic is just what I wanted for this backup machine - small and fast
and a platform from which I can learn more about Atomic. I do have one
question though:
Could I make a dd image of the old SCSI drive and get it booting as a
virtual machine on the Atomic machine?
Many thanks for all the work that has gone into Project Atomic and I
hope to learn much more about it in the future - including hosting my
Rails and Jekyll Docker images . .
Regards,
Phil.
--
Philip Rhoades
PO Box 896
Cowra NSW 2794
Australia
E-mail: phil(a)pricom.com.au
5 years, 2 months
Removing Atomic Host from Fedora Rawhide
by Dusty Mabe
Hello Fedora Atomic Host users,
With the switched focus to Fedora CoreOS for the future of our immmutable, container
oriented operating systems the last major release of Fedora Atomic Host was Fedora
29. Considering this we are removing the builds for Fedora Atomic Host from rawhide
and will no longer be building that stream.
If you are currently using Fedora Atomic Host on rawhide, please rebase to Fedora
29 so you'll continue to receive updates until Fedora 29 EOL. You can rebase with
the command below. Please test this on some non-critical systems first.
```
rpm-ostree rebase fedora/29/x86_64/atomic-host
```
If you have trouble find me in #atomic or #fedora-coreos on freenode.
Dusty
5 years, 2 months
runc CVE-2019-5736 and Atomic Host
by Dusty Mabe
We are planning to do a release next week with updated versions of software that
don't contain the exploit. We are not doing a release this week because there are
two lines of defense that block this exploit on Atomic Host:
1. /usr/ is mounted read-only
2. SELinux is enabled by default
SELinux blocks this exploit and /usr/ being read-only prevents the runc binary from
being overwritten. Even if you had disabled SELinux /usr/ is still mounted read only
so you're Atomic Host systems should be safe.
Dusty
https://nvd.nist.gov/vuln/detail/CVE-2019-5736
5 years, 2 months
