systemd, ParticleOS & nspawn (gpn24)

systemd, ParticleOS & nspawn (gpn24)

Author: CCC media team June 4, 2026 Duration: 57:22
ParticleOS kombiniert viele neuere Funktionen von systemd, um ein signiertes, immutables Betriebssystem zu bauen. systemd-nspawn wird mittels unkonventioneller Ansätze um einen unpriviligierten Modus erweitert. ParticleOS, nspawn und weitere systemd Komponenten sind teil einer Vision, welche Linux Distributionen fundamental verändern soll. systemd wird fortlaufend weiterentwickelt und um neue Funktionen und Komponenten erweitert. Was auf den ersten Blick vielleicht wie eine zufällige Ansammlung von Tools und Diensten erscheinen mag, bildet bei genauerer Betrachtung ein zusammenhängendes Konzept. Dieses Konzept wurde in einem Blog-Post von Lennart Poettering ausführlich erläutert: https://0pointer.net/blog/fitting-everything-together.html Das systemd Projekt ParticleOS versucht diese Konzept in Form eines Betriebssystems zu implementieren. Durch die Verwendung signierbarer, immutabler Disk-Images in Kombination mit Secure Boot überprüft ParticleOS die Integrität des Betriebssystems beim Booten. Dadurch können bösartige oder unabsichtliche Änderungen am Betriebssystem verhindert werden. systemd-nspawn ist ein Containerisierungs-Tool, welches in systemd integriert ist und ein Teil von Poetterings Vision ist. In den letzten Release-Versionen von systemd wurde aktiv an einem unpriviligierten Modus für nspawn gearbeitet. Dadurch können auch unpriviligierte Nutzer Container mit nspawn erstellen. Ich habe diesen unpriviligierten Modus vor kurzem ausführlich getestet und möchte berichten was bereits funktioniert und was noch in Arbeit ist. Weder immutable Linux Distributionen, noch unpriviligierte Container sind eine neue Erfindung von systemd. Jedoch gibt es Unterschiede zu anderen Projekten. Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://cfp.gulas.ch/gpn24/talk/RLCU7V/

Tune into the Chaos Computer Club-recent events feed for a direct line to the forefront of digital culture and critical technology discourse. Curated by the CCC media team, this podcast channels the raw, insightful atmosphere of Europe's most influential hacker association, bringing you recordings from their major gatherings and community events. Each episode is a deep dive into talks and presentations from the last two years, covering topics from cryptography and privacy rights to hardware hacking, societal impacts of surveillance, and open-source philosophy. You'll hear from researchers, activists, and engineers who are actively shaping our digital future, offering perspectives rarely found in mainstream tech conversations. This isn't a produced show with hosts; it's an archival audio stream of genuine conference sessions, complete with audience questions and the spontaneous energy of the live event. For anyone interested in the technical details and ethical debates at the heart of modern technology, this feed serves as an essential, unfiltered resource. Subscribe to this podcast to keep your finger on the pulse of the Chaos Computer Club's ongoing dialogue, where complex ideas are broken down and the tools for a more empowered digital life are openly discussed.
Author: Episodes: 100

Chaos Computer Club - recent events feed
Podcast Episodes
Infrastructure Review & Closing (gpn24) [not-audio_url] [/not-audio_url]

Duration: 1:16:35
Große Zahlen und ganz viel WOW Licensed to the public under https://creativecommons.org/licenses/by/4.0/ about this event: https://cfp.gulas.ch/gpn24/talk/MTP7YB/
WAF: Wrong Approach Firewall (gpn24) [not-audio_url] [/not-audio_url]

Duration: 1:01:42
Web Application Firewalls (WAFs) for filtering based on HTTP and payload are omnipresent. In this talk an argument will be made that, in many cases, the wrong approach for implementing WAFs is chosen: They are implemente…
Building video games with 20 year old tech (gpn24) [not-audio_url] [/not-audio_url]

Duration: 19:10
The market is full of high-performance graphics APIs like Vulkan and fantastic engines like Unreal and Unity. So, why not use DirectX 9 and a self-built engine instead? ;) In this talk we'll take a quick stroll down memo…
Three Languages, Triple the Confusion (gpn24) [not-audio_url] [/not-audio_url]

Duration: 20:21
This code runs without errors, but still confuses. In this talk, we explore some subtle quirks of C, Python, and Java (and others) that catch even experienced developers off guard. No bugs, no typos - just the language d…
MMO-CHIP: From Microscope to Verilog in an hour (gpn24) [not-audio_url] [/not-audio_url]

Duration: 58:45
Reverse engineering old custom chips from microscope pictures is cool, but oh so painfully slow! Last time I did this (talk at 38C3), I spent two weeks waking up, annotating wires in Inkscape, going to bed, and then drea…
DI.Days as Anarchist Practice/Anarchist Practices for DI.Days (gpn24) [not-audio_url] [/not-audio_url]

Duration: 44:54
Digital Independence Days are a response to the growing monopolization of technology and the recent loss of trust in US-based tech firms after the USA's shift towards authoritarianism. The (communicated) goal is to prote…