Post #3863898
2026-07-16 17:06 UTC
Note that this doesn't necessarily save you from slopcoded drivers. But it does:
1. Allow you to use a trusted core kernel independent of what drivers you need, instead of getting locked into forced upgrades.
2. Allow you to choose your hardware around what presently has slop-free drivers, vs what already had drivers in 2024.
Replies (1)
-
@dalias@hachyderm.io 2026-07-16 17:10
Note that there's a variant on the above already possible without any new programming. It goes like this: Run the system you actually care about, with your userspace and applications exposed to vuln surface, as a virtualization guest using virtual devices and a fixed LTS kernel version you trust. Run the dubious kernel with new stuff as the hypervisor not exposed to any networks or untrusted files. This isn't entirely perfect. It's still possible that bugs in the drivers on the hypervisor side put you at risk. But at least bugs in the "OS" part of that Linux become irrelevant, because you're not using it.