Second Prototype Advances ALP (UPDATED)
Geekos are rolling out a new Operating System and the second prototype of the next generation OS is quickly advancing.
The first Adaptable Linux Platform (ALP) prototype Les Droites has been supplanted by a new ALP prototype Punta Baretti.
Implementations with the new prototype include more flexibility, security and stability.
The mountainous prototype has the big addition of Full Disk Encryption. ALP extended this Full Disk Encryption to bare metal servers and the use of a Trusted Platform Module will open the doors to leverage unattended booting while keeping systems encrypted and secured. ALP is intended to run on both private and public clouds that require encryption features. The systems need no user interaction on boot nor while ensuring security for workloads. Grub2 will be the bootloader instead of another and it will have a single encrypted volume considering initramfs is already encrypted.
There were some compatibility issues addressed with the new prototype; SELinux is now set to fully enforce access control and firewalld defaults to netfilter deny; these two packages were previously more open for compatibility and testing purposes.
Also: Second Prototype Advances ALP (openSUSE News) [LWN.net]
UPDATE
-
Fresh preview of SUSE's new enterprise Linux distro arrives • The Register
As the end of the year and the holiday season both approach, so do new previews of both SUSE's new enterprise Linux distro, ALP, and the NetBSD OS.
It's been a few months since Les Droites, the first prototype build of SUSE's next-gen enterprise Linux distro, appeared. ALP is SUSE's Adaptable Linux Platform, the company's next-generation containerized enterprise distro.
Now, the second prototype is here, and it's codenamed "Punta Baretti". (Like "Les Droites", the original of the codename is a mountain in the Alps.)
This version has a new installation program, based on SUSE's YAST D-Installer project. This splits the installation program into separate layers which communicate over D-bus, so that same installater can be controlled by a local GUI, or a command line, or another machine over the network, or even by the Cockpit web management system.
There's more information about D-Installer on the project's home on Github. Courtesy of a customized version of LUKS2, the new installer can install onto bare metal with full disk encryption, unlocking the disk with a key from the TPM chip – similarly to the system we described when talking about the new Unified Kernel Image system a few months ago.