Alexander Larsson

The allowed case should work fine anywhere, but the selinux one, no.

I agree that we should put the dictionaries in the locales. Does anyone want to work on this?

First of all, the dictionaries should be in the freedesktop.org runtime, so they work for everyone, not only gnome. That is available here: https://github.com/flatpak/freedesktop-sdk-images Secondly, there is no separate json...

The current version of pulseaudio in the freedesktop.org image has PA 8.0 which does not support this though.

The one thing our meson code doesn't do is generate the .spec from spec.in during dist. It can be done, like so: https://gitlab.com/CentOS/automotive/src/autoinit/-/commit/2d1bbad976e3729faf864c205dd830cd04d7aa68 Otoh, maybe its time to drop the...

Yeah, what would be very good is if EROFS, when using the file-backed mounts could take an optional fs-verity digest mount option, and do the validation of it in the...

Yeah, that is true, maybe it would be easiest to just require there to be a single signed layer.

fs-verity IPE rules are not very interesting in general, because any file can be made fs-verity, it doesn't imply any particular trust in them. What is interesting for IPE is...

I never looked at the actual IPE implementation, but if you're right it seems that this would not be so much work. >>If there are multiple signed erofs lower layers,...

I don't see how you could use these outside your own machine though. That doesn't seem very useful.