favicon here hometagsblogmicrobio cvtech cvgpg keys

How I use MicroOS Desktop

#linux #container #workflow #desktop

Soc Virnyl Estela | 2023-05-28 | reading time: ~4min

Update on my current usage§

I stopped using it. MicroOS has some of it's perks but the current state of the operating system is still in it's beta/alpha state so some moving parts are inherently broken. It's probably because of the lack of contributors and interest from SUSE and openSUSE for the desktop variant of MicroOS. As much as I want to become a contributor, I realize I lack the time to do so because of work and personal problems and issues I still have to fix a lot in real life. If you still want to know how I use it, continue reading.


MicroOS Desktop is a desktop variant of the openSUSE's MicroOS for servers and containerized workflows. Please do note, although they are similar, they are separate products and have different goals.

Issues in MicroOS for server should be issued over there and issues in MicroOS Desktop should be on MicroOS Desktop.

The goal of the desktop is as follows:

  • immutability
  • isolation of system and user software
  • containerized workflows

Immutability§

Immutable desktops are nothing new. Windows and MacOS are immutable desktops since you cannot change the core part of the system unless you have some permissions and workarounds to do it e.g. modifying the system registry. For years, this was the standard of modern OSses including Android.

Traditional desktop linux and nix systems are mutable which means that the user can modify each part of the core system. Although this advantage is also a disadvantage, nothing is perfect.

Advantages of an immutable system§

Being immutable is inherently an advantage of an immutable desktop system. It is hard to modify the core part of the system and updates are "atomic" which means the whole system will update as an immutable system.

Users are encouraged to use workflows through sandboxing or containers. In this case, flatpaks, nix, distrobox, toolbx, docker and podman.

For desktop software, it is advisable to use flatpaks. Some users do use toolbx and distrobox for this.

For development environment, they are encouraged to use distrobox and toolbx. Others may prefer nix.

Disadvantages§

Being immutable may also be a disadvantage. It's very self-explanatory. You cannot modify your system as much as you like to.

Security§

Immutable desktops increases security of the core system since it's not welcoming any modifications. Since the root file system is read-only, it's not easy to tamper the system and thus, users can avoid any vulnerabilities unless the vulnerability is from the package and software installed from the root file system.

My Workflow§

For software that I want to use e.g. Firefox, flatpaks are the way to go. Flatpaks are the best when it comes to these kind of distributions as they are self-contained and do not pollute the host system with ridiculously brittle and large dependencies when installing through the system's package manager.

For developing and packaging software and also for learning, and note taking, I use distrobox.

How I use distrobox§

I created mainbox executable.

#!/usr/bin/bash

distrobox enter -n tumbleweed $@

This is for my development environment such as notetaking, learning a new language, or programming tasks.

I also created rootbox executable.

#!/usr/bin/bash

distrobox-enter --root --name opensuse-build-service $@

This is for openSUSE Build Service related stuff since I am a volunteer packager there. I also set the --home flag when creating this podman container. The --home flag helps you have a custom $HOME inside your container. It avoids clutter on your actual home directory.

Conclusion§

For now, I am still new to MicroOS Desktop and I still experience some bugs here and there because I use the KDE Plasma variant of MicroOS which is known to be still in it's alpha stage. This means, it's not yet considered for daily use even though some users are now using it. To help improve the experience, it's best to file bug reports and propose suggestions to the MicroOS Plasma Desktop maintainers and contributors. If you are privileged to have the free time to contribute, consider offering your skills and services as well.

Troubleshooting§

Blurry fonts on KDE Plasma§

Install all the xdg-desktop-portal implementations especially gnome and gtk. Blurry fonts are usually affecting gtk apps and not qt apps.

Issues§

NVIDIA drivers don't load as fast causing some issues with the login manager. Workarounds is a force systemctl restart display-manager.service. I am not sure what's causing it as there are no logs. This does not happen on vanilla openSUSE TumbleWeed.

Articles from blogs I follow around the net

Body::poll_progress

This describes a proposal for a cancelation problem with hyper’s request and response bodies. hyper is an HTTP library for the Rust language. Background: what is the Body trait? The Body trait used by hyper is meant to represent a potentially streaming (…

via seanmonstarApril 22, 2025

CVE-2025-32433 - State Machine Err-ly RCE in Erlang/OTP SSH Server

CVE-2025-32433 is a remote code execution vulnerability in the SSH server implementation within Erlang’s OTP libraries (affecting versions legendary CVSS score of 10.0 and became known as a vulnerability for which AI-assisted exploit development process wa…

via GreyNoise LabsApril 22, 2025

AI-powered search summaries led to less clicks to websites

Google claims that links beside AI summaries get more clicks. This goes against intuition. Ahrefs did some analysis on this recently. Who is right?

via Rob O'Leary | BlogApril 21, 2025

Resistance from the tech sector

As of late, most of us have been reading the news with a sense of anxious trepidation. At least, those of us who read from a position of relative comfort and privilege. Many more read the news with fear. Some of us are already no longer in a position to re…

via Drew DeVault's blogApril 20, 2025

Retrospective: Five Years Blogging About Cryptography as a Gay Furry Online

The history of this blog might very well be a cautionary tail (sic) about scope creep. The Original Vision For Dhole Moments Originally, I just wanted a place to write about things too long for Twitter (back when I was an avid Twitter poster). I also figur…

via Dhole MomentsApril 17, 2025

Status update, April 2025

Hi! Last week wlroots 0.19.0-rc1 has been released! It includes the new color management protocol, however it doesn’t include HDR10 support because the renderer and backend bits haven’t yet been merged. Also worth noting is full explicit synchronization su…

via emersionApril 16, 2025

The IndieWeb & that blog roll

The IndieWeb's something I've known about for a while, but never really engaged with. I mean this is very much part of The Indie Web, the very thing, you're reading it right now. But in terms of the camel cased movement, not so much. To me they seemed a bi…

via Mike KreuzerApril 16, 2025

Tidbyt without the company

Remember the Tidbyt? It’s a super low-resolution, internet-connected, wood-paneled display that I wrote a review of it back in 2022. It’s been on my shelf for years now, showing the time, weather, warning me when the UV is going to be high. In 2023 I used …

via macwright.comApril 12, 2025

One does not simply write a SSH config parser (in Rust)

Do you know the feeling when you start a project and you think it will be easy, but then you realize that it is not? This is the story of the implementation of ssh2-config, a Rust library to parse SSH config files. Why did I write this? Because basically…

via Christian Visintin BlogMarch 30, 2025

LLDB's TypeSystems: An Unfinished Interface

Well, it's "done". TypeSystemRust has a (semi) working prototype for LLDB 19.x. It doesn't support expressions or MSVC targets (i.e. PDB debug info), and there are a whole host of catastrophic crashes, but it more or less proves what it needs to: Rust's de…

via Cracking the ShellMarch 28, 2025

Backup Yubikey Strategy

After a local security meetup where I presented about Webauthn, I had a really interesting chat with a member about a possible Yubikey management strategy. Normally when you purchase a yubikey it's recommended that you buy two of them - one primary and one…

via Firstyear's blog-a-logFebruary 28, 2025

Ludic's Guide To Getting Software Engineering Jobs

The steps in this guide have generated A$1,179,000 in salary (updated 13th April, 2025), measured as the sum of the highest annual salaries friends and readers have reached after following along, where they were willing to attribute their success actions i…

via LudicityFebruary 28, 2025

The Adrian Dittmann Story

the evidence, from A to Z, and righting the wrongs

via maia blogJanuary 05, 2025

Awesome Fish functions

Some awesome fish functions that I have accumalated over the years.

via Ishan WritesJanuary 03, 2025

Physics Simulations in Bevy

Bevy is the most popular and powerful game engine in Rust. Because of its flexibility, it can be used not only for games but also for (scientific) physics simulations. In this blog post, I will share my experience using Bevy for physics simulations from sc…

via mo8it.comJuly 19, 2024

Defending myself against defensive writing

I write this blog because I enjoy writing. Some people enjoy reading what I write, which makes me feel really great! Recently, I took down a post and stopped writing for a few months because I didn't love the reaction I was getting on social media sites li…

via pcloadletterMay 27, 2024

The Elegiac Hindsight of Intelligent Machines

This essay was edited out of a chapter of my book, The Intelligence Illusion: a practical guide to the business risks of Generative AI, with minor alterations. “See the choice of dreams”, and then worry about it Very well. This book – this side, Dream …

via Out of the Software Crisis (Newsletter)October 13, 2023

Regex engine internals as a library

Over the last several years, I’ve rewritten Rust’s regex crate to enable better internal composition, and to make it easier to add optimizations while maintaining correctness. In the course of this rewrite I created a new crate, regex-automata, which expos…

via Andrew Gallant's Blog on Andrew Gallant's BlogJuly 05, 2023

Generated by openring-rs

favicon here hometagsblogmicrobio cvtech cvgpg keys