Bazzite Auto Updates

2026-06-24 23:27 UTC

cross-posted from: sh.itjust.works/post/62361303 Hello good people. Is no one afraid of Bazzites auto updating nature? I am myself worried about the potential for well timed supply chain attacks from wherever they build their OS images, which somehow build malicious images or just gets itself into the normal image builds and we auto update to. Is this an unfounded worry? Does anyone know of the security measures in place to prevent attacks? Auto update just feels weird to me, especially for something like my OS. I’m asking because I went and installed it and realised auto updating seems to be their philosophy… which is scary? p.s. i couldnt find anyone online discussing this Thonks

Replies (3)

@Mordikan@kbin.earth 2026-06-25 00:18

This is a fair question to ask given recent events. I don't run Fedora currently, so others could probably give a much more exact answer, but from what I understand of it: Bazzite is built on top of Fedora with uBlue. To compromise one of the packages, the attacker would have to bypass the Fedora enterprise team who are rage filled roid-driven experts who don't take kindly to that sort of thing. They heavily secure their stuff. Even if an attack was successful, it would have little lasting effect because of immutability and having access to easy rollbacks. It's not impossible (like somehow stealing Bazzite's keys), but it's incredibly unlikely. AUR/NPM package sketchiness is not anywhere on the same level as compromising Fedora's keys.

Open ##3394873
@6_Electrons@lemmy.world 2026-06-25 00:17

This was one of the reasons I went to kinoite. Part of leaving Windows was to get away from all their slop… The other part was to get away all the forced updates. I don’t wanna be forced to update if I don’t want too

Open ##3394874
@warmaster@lemmy.world 2026-06-25 00:42

You can chose not to update and stick to a specific image. Check the docs.

Open ##3394979