A week of experimental runtimes, game engine support landing upstream, and a notable push on Linux desktop fleet management.
Top Stories
-
EU Age Verification Project Mandates Hardware-Bound Attestation — Linuxiac reports an EU effort that would require “hardware-bound attestation,” which could affect how EU users authenticate and how vendors ship Linux devices that pass compliance checks. This matters to privacy-conscious users and enterprise EU deployments because attestation tied to hardware can change threat models and procurement requirements.
-
Kedge – Full-stack cloud with forkable VM snapshots and global SQLite — The Kedge preview details a 3 ms VM orchestrator using forkable snapshots and warm pools, plus a global control plane backed by an eventually-consistent SQLite database and a preview running in 11 regions; all spelled out by the project’s own docs. Anyone running distributed apps or self-hosted PaaS on Linux should read this as a fresh pattern for stateful autoscaling without complex volume pinning.
-
Show HN: Bor – Open-source policy management for Linux desktops (v0.8) — The Bor 0.8 release notes say policies stream to clients over mTLS/gRPC (no polling) and now add Thunderbird, Edge for Business, and FirewallD zones to earlier support for Firefox, Chrome, KDE, dconf, polkit, and package management. This is aimed squarely at orgs managing Linux workstations at scale who want fleet policy parity with what they expect on macOS/Windows.
-
Linux on ESP32 — The repo documents a Linux port targeting Espressif’s ESP32-S3 line, showing how far the kernel and minimal userspace can be pared for constrained hardware. Embedded Linux tinkerers and IoT homelabbers get a new playground on cheap SBCs for proof-of-concepts and education.
Security Watch
- No high-priority, broadly impactful Linux CVEs or advisories stood out this week beyond normal patch cadence; keep tracking your distro security feeds and upstream project advisories.
Releases & Updates
-
VLC for Unity now supported on Linux — VideoLAN’s vlc-unity repository notes Linux is now a supported target, which gives Unity game/app developers a maintained media playback stack on Linux without third-party glue.
-
Show HN: Kakehashi – Experimental userspace to run macOS binaries on Linux ARM — The project describes itself as an “experimental userspace” for running macOS binaries on Linux ARM; early days, but a notable direction for cross-platform devs targeting Apple Silicon and Linux ARM.
-
Show HN: Bor – v0.8 release — As per the upstream notes, this update adds policy types for Thunderbird, Microsoft Edge for Business, and FirewallD zones, along with real-time mTLS/gRPC policy streaming improvements for Linux desktops.
-
Linux on ESP32 repo activity — Recent work on the ESP32-S3 Linux effort provides a reference for getting a kernel booting on ultra-low-cost microcontrollers; not a point release, but a meaningful step for embedded users following along.
Worth Reading & Trying
-
But can your calculator run Linux? — A hands-on writeup of running Linux on graphing-calculator-class hardware, with specific notes on constraints and what it takes to get a shell on ultra-low-end devices.
-
Linux on ESP32 — If you want to try a weekend porting project, this repo is a concrete starting point for bringing a tiny Linux to an ESP32-S3; expect deep-dives into kernel config, memory layout, and boot chains.
-
Kedge docs: HTML apps demo — The Kedge team shows a working HN-style app (“Kedger News”) in about 60 lines of Markdown plus CSS using its stateful HTML app model, useful for Linux self-hosters evaluating simple, server-rendered stacks.
From LinuxBlog.io
No new LinuxBlog.io articles this week.
Discuss the week’s news, your takeaways, and anything we missed in the replies below.
Our community remains free of banner ads thanks to our partnership with Better Stack.
Better Stack offers infrastructure observability services, uptime monitoring, logging, incident management, and a free tier worth checking out. Visit: betterstack.com