__ __ __ \ \_________\ \____________\ \___ \ _ \ _\ _ \ _\ __ \ __\ / \___/\__/\__/ \_\ \___/\__/\_\_\ Bedrock Linux
Introductory Material
Current Release (0.7 Poki)
Miscellaneous
Community
2024-03-29
A common compression project, xz
, appears to have recent releases 5.6.0 and
5.6.1 compromised, tracked as
CVE-2024-3094. No stable
Bedrock Linux release uses such a new xz
build, and we are confident stable
channel users remain unaffected.
0.7.30beta1 did build against xz
5.6.1. However:
The exploit build code is only included in the xz
source tarball
releases.[0]
Bedrock Linux builds xz
from git. We checked for and were unable to find
any code path which builds/includes the exploit. We do not believe the
exploit was ever built or included in 0.7.30beta1 despite the xz
version.
The exploit appears to depend on glibc's ifunc functionality.[0] Bedrock Linux builds against musl-libc, which does not offer this functionality, and thus the exploit, were it included, is unlikely to work.
The exploit appears to explicitly check for known argv[0]
such as
/usr/sbin/sshd
.[0]
While not impossible it, this has yet to be reported to check for the only
Bedrock Linux component which is built against xz
, kmod
.
[0] https://www.openwall.com/lists/oss-security/2024/03/29/4
While we do not believe 0.7.30beta1 users are vulnerable, as a precaution we have pulled the release and push 0.7.30beta2 built against the older xz 5.4.6 and encourage beta channel users to update to it immediately.
2024-04-22
2023-08-06
2022-08-11
2022-03-02
2022-01-21
2022-01-10
2021-11-16
A point update has been released for 0.7. To update to it, run brl update
as root.
2021-08-26
A point update has been released for 0.7. To update to it, run brl update
as root.
2021-07-28
A point update has been released for 0.7. To update to it, run brl update
as root.
2021-07-26
Some distros are now distributing Linux kernels with zstd-compressed modules. For everything to work, these must be paired with inits (more specifically device managers such as udev) from distros which also support this functionality. A zstd kernel, such as from Arch, paired with a pre-zstd init/udev, such as from Debian, may result in apparent hardware issues as modules fail to dynamically load.
2021-07-19
A point update has been released for 0.7. To update to it, run brl update
as root.
Some distros are now compressing their kernel modules with zstd. Bedrock users are encouraged to update to at least this Bedrock release before booting into such a kernel.
2021-05-16
A point update has been released for 0.7. To update to it, run brl update
as root.
This includes a work around for the aforementioned Linux 5.12.3 FUSE bug.
2021-05-14
Update: Bedrock 0.7.20 resolves the concern described below
The aforementioned Arch Linux kernel issue was traced to a narrow window of Linux kernel commits. This cannot be cleanly worked around in Bedrock's code. Bedrock Linux users should avoid Linux 5.12.3 and up from all distros until a kernel fix is in place.
2021-05-14
Update: Bedrock 0.7.20 resolves the concern described below
The latest Arch Linux kernel, 5.12.3, appears to break Bedrock Linux. The
symptoms appear to be missing /bedrock/cross
entries. The issue is currently
being investigated. For the time being, consider avoiding this kernel; either
use an older Arch Linux
kernel, or get your
kernel from another distro.
2020-11-10
A point update has been released for 0.7. To update to it, run brl update
as root.
/etc/ssl
handling (fixes brl fetch arch
for some users)2020-10-20
Development effort has shifted from improving 0.7 Poki toward a new major
release, 0.8 Naga. Poki will continue to be maintain with small bug fixes and
brl fetch
updates. However, new features are unlikely or broad compatibility
improvements are unlikely until Naga's release.
Naga's tentative design plans can be found here.
2020-10-20
A point update has been released for 0.7. To update to it, run brl update
as root.
2020-04-30
A point update has been released for 0.7. To update to it, run brl update
as root.
2020-04-29
A point update has been released for 0.7. To update to it, run brl update
as root.
2020-04-16
A point update has been released for 0.7. To update to it, run brl update
as root.
2020-04-14
A point update has been released for 0.7. To update to it, run brl update
as root.
2020-01-06
A point update has been released for 0.7. To update to it, run brl update
as root.
2019-12-16
A point update has been released for 0.7. To update to it, run brl update
as root.
2019-12-14
A point update has been released for 0.7. To update to it, run brl update
as root.
2019-10-21
A point update has been released for 0.7. To update to it, run brl update
as root.
2019-09-20
A point update has been released for 0.7. To update to it, run brl update
as root.
This fixes a bug in 0.7.8 update code which may break crossfs access.
2019-09-15
A point update has been released for 0.7. To update to it, run brl update
as root.
2019-09-03
There have been repeated requests for avenues to tip the lead Bedrock Linux developer.
Bedrock Linux development is not limited by funding, and there is no intended obligation associated with benefiting from Bedrock Linux development efforts.
If you are interested in tipping the lead developer as a thanks for his efforts, see here.
2019-08-27
A point update has been released for 0.7. To update to it, run brl update
as root.
2019-08-20
Bedrock Linux now offers a beta channel for those who are interested in testing upcoming updates. See the documentation here.
Future beta updates will not necessarily be announced.
2019-05-11
A point update has been released for 0.7. To update to it, run brl update
as root.
qemu-user-static
.-a
and -A
flags in brl fetch --help
.2019-04-28
A point update has been released for 0.7. To update to it, run brl update
as root.
This is a fix for an issue found 0.7.4's handling of sandboxed software whose local files do not map directly to those of any particular stratum. Most notably, this fixes crashes in Chromium.
2019-04-28
The Bedrock Linux 0.7.4 update was found to cause Chromium to crash. The update has been temporarily pulled while the issue is being investigated.
There are no known security or data-loss concerns with any 0.7.X release at this time.
2019-04-28
A point update has been released for 0.7. To update to it, run brl update
as root. See the release notes here.
2019-04-14
A point update has been released for 0.7. To update to it, run brl update
as root. See the release notes here.
2019-04-08
Bedrock Linux was submitted to DistroWatch on 2012-08-04, almost seven years ago. DistroWatch had (understandable) requirements Bedrock failed to meet until very recently. It is now listed here.
2019-03-27
A point update has been released for 0.7. To update to it, run brl update
as root. See the release notes here.
2018-12-27
A point update has been released for 0.7. To update to it, run brl update
as root. See the release notes here.
2018-12-17
Bedrock Linux 0.7 Poki has exited beta and is ready for general consumption. See here for the release's documentation.
2018-11-05
Pre-release builds of Bedrock Linux 0.7 Poki are now available for testing. See here for further details. If you have the time and resources, assistance testing would be appreciated.
2018-09-29
An internal build of the upcoming Bedrock Linux release is now feature complete. Internal testing and bug fixing is now underway.
A release candidate is expected to be made public sometime in October or November for further testing. Any assistance testing at that time will be greatly appreciated. The proper release will follow, likely before the end of 2018.
2018-05-05
Given the relatively long release cycle, it seems prudent to provide an occasional progress update. Poki's development progress, updated 2018-05-05, can be found here. While a substantial amount of work has been done, much is left to do before the release is ready.
2017-12-10
Development over the past year and a half has been very slow due to unrelated priorities consuming Bedrock Linux development time. These priorities are largely passed, and development should restart in earnest within the first half of 2018.
There has been a fair bit of research towards the upcoming 1.0beta3 Poki release before the development stagnation. However, there is still some research left to do, as well as a lot of time consuming development and testing, and so it is unlikely that Poki will be released any time soon. It is unclear at this time if the increased scope for Poki mentioned in the last news item will remain in place, or if it will be scoped back to hit an earlier release date.
Apologies for the delay. Hang in there, we want the next release at least as much as you do.
2017-01-14
The current Bedrock Linux release, 1.0beta2 Nyla, saw a substantial increase in community feedback. Given the focus on accessibility of the upcoming 1.0beta3 Poki release it is likely to see an even greater increase in user base. It is desirable to clear the backlog of smaller issues and toughen up the project infrastructure before this projected uptick. While the major features planned on the roadmap are retained as the key goals, additional work will be put in to clean up the code base, add tests, and rework the build system, amongst other improvements. This will likely push back the upcoming release but will help ensure the upcoming increased attention is manageable.
2017-12-10
Development over the past year and a half has been very slow due to unrelated priorities consuming Bedrock Linux development time. These priorities are largely passed, and development should restart in earnest within the first half of 2018.
There has been a fair bit of research towards the upcoming 1.0beta3 Poki release before the development stagnation. However, there is still some research left to do and a lot of time consuming development, and so it is unlikely that Poki will be released any time soon. It is unclear at this time if the increased scope for Poki mentioned in the last news item will remain in place, or if it will be scoped back to hit an earlier release date.
Apologies for the delay. Hang in there, we want the next release at least as much as you do.
2016-05-21
/u/ParadigmComplex represented Bedrock Linux during an "Ask Me Anything" ("AMA") session at http://reddit.com/r/AskLinuxUsers. The session is now over, and the resulting discussion can be found here.
2016-03-01
Bedrock Linux now has a forum available on linuxquestions.org at:
http://www.linuxquestions.org/questions/bedrock-linux-118/
2016-01-23
The design plans for the upcoming release of Bedrock Linux, 1.0beta3 Poki, are available here.
A rough roadmap for Bedrock Linux is available here.
2016-01-16
The second beta of Bedrock linux, 1.0beta2 Nyla, has been released. See the major features, the high-level changelog, and either the full installation instructions or, if you'd like to expedite the install process, the quickstart installation instructions.
2015-10-03
All major features and changes for Bedrock Linux 1.0beta2 Nyla are complete; it is currently undergoing final testing and bug squashing. The release should be soon.
2015-02-22
A large number of complications have arisen since Nyla's original release date was set, including the numerous hardware failures. Moreover, while working on Nyla many of the required changes have been found to require much more time to implement than previously expected. Thus, Nyla's release is being delayed. The new tentative release date is end-of-summer 2015.
2014-11-20
Slides from a presentation on Bedrock Linux to the Columbus Linux User Group on 2014-11-19 are available here.
2014-06-28
The design plans for the upcoming release of Bedrock Linux, 1.0beta2 Nyla, are available here.
2014-06-17
The first beta of Bedrock Linux, 1.0beta1 Hawky, has been released. See a demonstration video here, the high-level changelog here and the installation instructions here.
2014-06-11
The plans for Bedrock Linux 1.0beta1 Hawky are available here. This release is planned for July 1st, 2014.
2014-06-11
Bedrock Linux was discussed on Linux Action Show Episode 316 (starting at forty minutes in). The Bedrock Linux found/lead developer was then interviewed on Linux Unplugged Episode 44 (starting at 8 minutes 30 seconds in).
2014-05-21
The public/centralized Bedrock Linux repositories were moved from http://github.com/paradigm to http://github.com/bedrocklinux . The Bedrock Linux issue trackers migrated over to GitHub's issue tracker as well.
2014-04-01
Below is a April Fools 2014 joke -- no closed beta, code has no use
The Bedrock OS project has entered an invite-only beta. This comes with numerous new features and functionality, including:
The first 50 IP addresses to reach this website should see an invite code below:
c135e9caef83e81f8c246229a7e371cac580f273
Above is a April Fools 2014 joke -- no closed beta, code has no use
2014-01-14
The plan for Bedrock Linux development in the coming months revolves around functionality which can be added without significant under-the-hood changes to Bedrock Linux. Various ideas currently being worked on:
2013-12-30
The fourth Bedrock Linux release, 1.0alpha4 Flopsie has been released. See the high-level changelog here and the installation instructions here
2013-10-31
The audio from the Bedrock Linux presentation at the 2012 Ohio Linuxfest was recorded. This has been played over the slides and is available to be viewed as a video here. The audio recording can be found here and the slides can be found here.
2013-10-13
Flopsie plans discussed here are showing promising results. One of the features, the union filesystem intended to fix the /etc-issue, has been backported to Bosco for those who are interested in trying it out before Flopsie is ready. See here for instructions on how to install the backport.
2013-07-17
At this point in time it does not look like Bedrock Linux 1.0alph4 "Flopsie" will be completed by the previous target date of "end of summer 2013". The new target date is January 1st, 2014.
The delay is entirely due entirely to time availability expectations not being met, and is not the result of any unforeseen technical issues; the plans for Flopsie still seem viable at this point in time. The additional time allows for additional goals for the next release. In total, expect the following:
brs
to let it setup/teardown clients on-the-flybri
including:
bri -w
and bri -W
act the same (current difference is confusing)brw
(essentially aliasing bri -w/W
if provided an argument)brp
which:
brp
)python
vs shared python2
)See the Flopsie Plans page for more details.
2013-06-30
As was mentioned in the last news item, Bedrock Linux was on two podcasts recently; however, only one was available online at the time. The other podcast is now available online, and can be found here:
http://lhspodcast.info/2013/06/lhs-episode-107-sorry-for-party-bedrocking/
2013-05-23
The founder and lead developer of Bedrock Linux was interviewed on not one, but two Linux podcasts in the last few days: Linux in the Ham Shack and The Linux Link Tech Show. If you would like to listen in, both were recorded. Linux in the Ham Shack's podcast is not up yet, but you can listen to TLLTS here:
http://tllts.org/rsspage.php
Look for episode 506 on May 22, 2013. The discussion veers away from Bedrock Linux after about the first hour.
Another news item will likely be put up once the Linux in the Ham Shack interview, episode 107, goes up.
2013-04-01
The April fools joke for 2013:
The primary complaint about the Bedrock OS project throughout its history is that it is insufficiently user friend. To quote Jonathan Corbert of Linux Weekly News:
[Bedrock Linux] may be especially well suited for those users who have gotten frustrated with the way distributions like Gentoo do everything for them.
Clearly, this needs to be remedied. The Bedrock Linux developers feel very strong that if you're going to do something, you should do it right, and no Linux-based operation system has ever gotten the reputation for user-friendliness that OSX has. Switching to OSX is a necessity if the Bedrock OS is ever going to become truly user friendly.
From a technical standpoint it seems quite doable. The crux of how Bedrock works under the hood - chroot() - is available on OSX as well. Apple OSX is UNIX. Moreover, work to make things like CUPS or webkit work on Bedrock will cleanly carry over.
Really, there isn't any downside. This Linux thing was never going to catch on anyways. The upsides, though, are tremendous. Consider:
Rosetta - the PowerPC-x86 binary translator for OSX - is not supported on OSX as of 10.7 "Lion". What about those poor people who bought software like Diablo 2 for OSX in the PowerPC days? With Bedrock OSX, they can just use an older OSX release that supports Rosetta and play Diablo 2 on their shiny newer OSX!
The latest version of OSX, as of the time of writing, has some applications crash when a user enters "FILE:///" into a number of text objects, such as a Finder window's search box. Prior releases of OSX did not have this. You could simply use an older Finder release until this is fixed!
With Linux, the lack of standardization makes developing Bedrock OS a pain. If some obscure distro does things in a way the Bedrock developers are not familiar, it might not work out of the box as a client. OSX, however, has a known number of releases. We just have to support those. Much easier. Bedrock development will likely speed up greatly once the switch has occurred.
However, converting the base project will take about one year. Expect Bedrock OSX to be available on April 1st, 2014.
2013-01-16
Bosco has been updated, fixing various issues. If you are currently using a
Bosco installation from before 2012-01-16, it is recommended you update.
Download and untar the userland
to a temporary directory (such as /tmp/bosco-update
), and replace the
following files from the core system with those from the userland tarball:
gcc -Wall brc.c -o /bedrock/brc/brc -static -lcap
setcap cap_sys_chroot=ep /bedrock/bin/brc
2012-12-25
The third Bedrock Linux release, 1.0alpha3 Bosco has been released. See the high-level changelog here
2012-12-12
Bedrock Linux was mentioned in an article on linux.com about new Linux distributions created in 2012.
2012-11-18
Website overhauled. Huge thanks to simonlc for assisting me with a new website design. Note that the website now supports atom, and so if you would like to follow Bedrock Linux development and news feel free to point your RSS feed reader to "http://bedrocklinux.org/atom.xml".
2012-11-16
Bosco plans discussed here have been implemented and show a huge real-world performance boost. This functionality was backported to Momo for those who are interested in trying it out before Bosco is ready. See here for benchmarks and instructions on how to install the backport update.
2012-09-29
Bedrock Linux's founder/lead dev is presenting Bedrock Linux today at the Ohio LinuxFest 2012. The slides for the presentation are available here.
2012-09-13
An article on Bedrock Linux is available here; however, it is currently only available to LWN subscribers. It will be made freely available to everyone on September 20th, 2012
2012-09-03
Plans for the upcoming release, 1.0alpha3 Bosco, are now available here. In summary, the next release should be simpler and faster.
2012-08-18
Bedrock Linux is now at its own domain: bedrocklinux.org
2012-08-14
Bedrock Linux is on the Linux Action Show. Relevant section goes from 11:15-16:41. "One of the most fascinating Linux distributions we've heard of in years."
2012-08-13
The second Bedrock Linux release, 1.0alpha2 "Momo" has been released. This release primarily addresses issues brought up from the prior release as well as contributions from others.
2012-08-09
A short video demonstration of Bedrock Linux can be found here
2012-08-05
Bedrock Linux was very briefly mentioned on Wired magazine's website here
2012-08-05
Bedrock Linux is on Slashdot.
2012-08-03
The first release of Bedrock Linux, 1.0alpha1 "Appa," is now out.