We dig into the Copy Fail vulnerability and test a proof-of-concept against our own box. Plus, Jon Seager, VP of Engineering at Canonical joins us, and we kick off the BSD Challenge!Sponsored By:<ul><li><a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r">Jupiter Party Annual Membership</a>: <a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r">Put your support on automatic with our annual plan, and get one month of membership for free!</a></li><li><a rel="nofollow" href="https://defined.net/unplugged">Managed Nebula</a>: <a rel="nofollow" href="https://defined.net/unplugged">Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.</a></li></ul><a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946">Support LINUX Unplugged</a>Links:<ul><li><a title="💥 Gets Sats Quick and Easy with Strike" href="https://strike.me/" rel="nofollow">💥 Gets Sats Quick and Easy with Strike</a></li><li><a title="📻 LINUX Unplugged on Fountain.FM" href="https://www.fountain.fm/show/dWiuBeqpDSM86AwXRXov" rel="nofollow">📻 LINUX Unplugged on Fountain.FM</a></li><li><a title="Copy Fail — CVE-2026-31431" href="https://copy.fail/#exploit" rel="nofollow">Copy Fail — CVE-2026-31431</a> — "An unprivileged local user can write four controlled bytes into the page cache of any readable file on a Linux system, and use that to gain root." — Theori</li><li><a title="Copy Fail: 732 Bytes to Root - Xint" href="https://xint.io/blog/copy-fail-linux-distributions" rel="nofollow">Copy Fail: 732 Bytes to Root - Xint</a> — "A single 732-byte Python script can edit a setuid binary and obtain root on essentially all Linux distributions shipped since 2017." — Xint</li><li><a title="Linux Kernel Bug Explained - Jorijn" href="https://jorijn.com/en/blog/copy-fail-cve-2026-31431-linux-kernel-bug-explained/" rel="nofollow">Linux Kernel Bug Explained - Jorijn</a> — "CopyFail is more portable. One script, every distro, no offsets. Dirty Pipe needed kernel ≥ 5.8; Copy Fail covers 2017–2026." — Jorijn"Kubernetes Pod Security Standards (Restricted) and default seccomp do NOT block the syscall used." — Jorijn</li><li><a title="Ars: Most Severe Linux Threat in Years" href="https://arstechnica.com/security/2026/04/as-the-most-severe-linux-threat-in-years-surfaces-the-world-scrambles/" rel="nofollow">Ars: Most Severe Linux Threat in Years</a> — "The most severe Linux threat to surface in years catches the world flat-footed." — Ars Technica</li><li><a title="Sysdig: CVE-2026-31431 Analysis" href="https://www.sysdig.com/blog/cve-2026-31431-copy-fail-linux-kernel-flaw-lets-local-users-gain-root-in-seconds/" rel="nofollow">Sysdig: CVE-2026-31431 Analysis</a> — "The flaw was introduced in 2017 via commit 72548b093ee3, which switched AEAD operations to in-place processing." — Sysdig</li><li><a title="CERT-EU Advisory" href="https://cert.europa.eu/publications/security-advisories/2026-005/" rel="nofollow">CERT-EU Advisory</a></li><li><a title="Ubuntu Security Tracker" href="https://ubuntu.com/security/CVE-2026-31431" rel="nofollow">Ubuntu Security Tracker</a></li><li><a title="The Register: Crypto Flaw" href="https://www.theregister.com/2026/04/30/linux_cryptographic_code_flaw/" rel="nofollow">The Register: Crypto Flaw</a></li><li><a title="Kernel Patch (reverts 2017 optimization)" href="https://github.com/torvalds/linux/commit/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5.diff" rel="nofollow">Kernel Patch (reverts 2017 optimization)</a> — "This mostly reverts commit 72548b093ee3 except for the copying of the associated data." — Kernel Commit</li><li><a title="Buggy Commit: 72548b093ee3 (2017)" href="https://github.com/torvalds/linux/commit/72548b093ee3" rel="nofollow">Buggy Commit: 72548b093ee3 (2017)</a></li><li><a title="DeepWiki: AF_ALG Internals" href="https://deepwiki.com/theori-io/copy-fail-CVE-2026-31431/3.1-linux-crypto-api-(af_alg)-internals" rel="nofollow">DeepWiki: AF_ALG Internals</a></li><li><a title="oss-security Disclosure" href="https://www.openwall.com/lists/oss-security/2026/04/29/23" rel="nofollow">oss-security Disclosure</a></li><li><a title="PSA + GRUB Mitigation - Jan Wildeboer" href="https://jan.wildeboer.net/2026/05/PSA-CopyFail-CVE-2026-31431/" rel="nofollow">PSA + GRUB Mitigation - Jan Wildeboer</a></li><li><a title="Ubuntu 26.04 LTS (Resolute Raccoon) Released" href="https://canonical.com/blog/canonical-releases-ubuntu-26-04-lts-resolute-raccoon" rel="nofollow">Ubuntu 26.04 LTS (Resolute Raccoon) Released</a> — "Ubuntu 26.04 LTS sets the example for providing best-in-class resilience while simultaneously embracing innovation and the advancement of open source." — Jon Seager, VP Ubuntu Engineering</li><li><a title="The Future of AI in Ubuntu - Jon Seager" href="https://discourse.ubuntu.com/t/the-future-of-ai-in-ubuntu/81130" rel="nofollow">The Future of AI in Ubuntu - Jon Seager</a> — "Throughout 2026 we'll be working on enabling access to frontier AI for Ubuntu users in a way that is deliberate, secure, and aligned with our open source values." — Jon Seager</li><li><a title="Ubuntu 26.04 Release Notes" href="https://documentation.ubuntu.com/release-notes/26.04/" rel="nofollow">Ubuntu 26.04 Release Notes</a></li><li><a title="Ubuntu AI Features Throughout 2026 - Phoronix" href="https://www.phoronix.com/news/Ubuntu-AI-Features-2026" rel="nofollow">Ubuntu AI Features Throughout 2026 - Phoronix</a> — "Canonical's approach to AI is refreshingly thoughtful — Microsoft should take note." — ZDNet</li><li><a title="Canonical DDoS Attack Update" href="https://discourse.ubuntu.com/t/update-concerning-ddos-attack-on-canonical-and-ubuntu/81482" rel="nofollow">Canonical DDoS Attack Update</a> — "Canonical's web infrastructure is under a sustained, cross-border attack and we are working to address it." — arcticp, Canonical</li><li><a title="Ubuntu Weekly Newsletter #942" href="https://discourse.ubuntu.com/t/ubuntu-weekly-newsletter-issue-942/81204" rel="nofollow">Ubuntu Weekly Newsletter #942</a></li><li><a title="Canonical AI Approach - ZDNet" href="https://www.zdnet.com/article/canonical-ai-approach-thoughtful-microsoft-should-take-note/" rel="nofollow">Canonical AI Approach - ZDNet</a></li><li><a title="9to5Linux: Opt-In LLM Tools" href="https://9to5linux.com/canonical-plans-to-integrate-opt-in-llm-based-tools-in-future-ubuntu-releases/" rel="nofollow">9to5Linux: Opt-In LLM Tools</a></li><li><a title="uutils/coreutils: Cross-platform Rust rewrite of the GNU coreutils" href="https://github.com/uutils/coreutils" rel="nofollow">uutils/coreutils: Cross-platform Rust rewrite of the GNU coreutils</a></li><li><a title="LINUX Unplugged 636: Engineering the Future" href="https://linuxunplugged.com/636" rel="nofollow">LINUX Unplugged 636: Engineering the Future</a></li><li><a title="LiveCD fails to start X session on QEMU · Issue #354 · ghostbsd/issues" href="https://github.com/ghostbsd/issues/issues/354" rel="nofollow">LiveCD fails to start X session on QEMU · Issue #354 · ghostbsd/issues</a></li><li><a title="Monty&apos;s “rescue” drive NixOS config" href="https://github.com/pmontgo33/nix-config" rel="nofollow">Monty's “rescue” drive NixOS config</a></li><li><a title="Magnolia Mayhem&apos;s BSD Challenge Report" href="https://www.ministryofmayhem.space/posts/bsdptdeux/" rel="nofollow">Magnolia Mayhem's BSD Challenge Report</a></li><li><a title="Pick: NASty" href="https://github.com/nasty-project/nasty" rel="nofollow">Pick: NASty</a> — NASty is a NAS operating system built on NixOS and bcachefs. It turns commodity hardware into a storage appliance serving NFS, SMB, iSCSI, and NVMe-oF — managed from a single web UI, updated atomically, and rolled back when things go sideways.</li><li><a title="Pick: Defuse" href="https://github.com/shonebinu/Defuse" rel="nofollow">Pick: Defuse</a> — Defuse is a GTK4 application for removing image backgrounds locally.</li><li><a title="Defuse on Flathub" href="https://flathub.org/en/apps/io.github.shonebinu.Defuse" rel="nofollow">Defuse on Flathub</a></li></ul>

<description>&lt;p&gt;We dig into the Copy Fail vulnerability and test a proof-of-concept against our own box. Plus, Jon Seager, VP of Engineering at Canonical joins us, and we kick off the BSD Challenge!&lt;/p&gt;&lt;p&gt;Sponsored By:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r"&gt;Jupiter Party Annual Membership&lt;/a&gt;: &lt;a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r"&gt;Put your support on automatic with our annual plan, and get one month of membership for free!&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a rel="nofollow" href="https://defined.net/unplugged"&gt;Managed Nebula&lt;/a&gt;: &lt;a rel="nofollow" href="https://defined.net/unplugged"&gt;Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.&lt;/a&gt;&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946"&gt;Support LINUX Unplugged&lt;/a&gt;&lt;/p&gt;&lt;p&gt;Links:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;a title="💥 Gets Sats Quick and Easy with Strike" href="https://strike.me/" rel="nofollow"&gt;💥 Gets Sats Quick and Easy with Strike&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="📻 LINUX Unplugged on Fountain.FM" href="https://www.fountain.fm/show/dWiuBeqpDSM86AwXRXov" rel="nofollow"&gt;📻 LINUX Unplugged on Fountain.FM&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Copy Fail — CVE-2026-31431" href="https://copy.fail/#exploit" rel="nofollow"&gt;Copy Fail — CVE-2026-31431&lt;/a&gt; — "An unprivileged local user can write four controlled bytes into the page cache of any readable file on a Linux system, and use that to gain root." — Theori&lt;/li&gt;&lt;li&gt;&lt;a title="Copy Fail: 732 Bytes to Root - Xint" href="https://xint.io/blog/copy-fail-linux-distributions" rel="nofollow"&gt;Copy Fail: 732 Bytes to Root - Xint&lt;/a&gt; — "A single 732-byte Python script can edit a setuid binary and obtain root on essentially all Linux distributions shipped since 2017." — Xint&lt;/li&gt;&lt;li&gt;&lt;a title="Linux Kernel Bug Explained - Jorijn" href="https://jorijn.com/en/blog/copy-fail-cve-2026-31431-linux-kernel-bug-explained/" rel="nofollow"&gt;Linux Kernel Bug Explained - Jorijn&lt;/a&gt; — "CopyFail is more portable. One script, every distro, no offsets. Dirty Pipe needed kernel ≥ 5.8; Copy Fail covers 2017–2026." — Jorijn"Kubernetes Pod Security Standards (Restricted) and default seccomp do NOT block the syscall used." — Jorijn&lt;/li&gt;&lt;li&gt;&lt;a title="Ars: Most Severe Linux Threat in Years" href="https://arstechnica.com/security/2026/04/as-the-most-severe-linux-threat-in-years-surfaces-the-world-scrambles/" rel="nofollow"&gt;Ars: Most Severe Linux Threat in Years&lt;/a&gt; — "The most severe Linux threat to surface in years catches the world flat-footed." — Ars Technica&lt;/li&gt;&lt;li&gt;&lt;a title="Sysdig: CVE-2026-31431 Analysis" href="https://www.sysdig.com/blog/cve-2026-31431-copy-fail-linux-kernel-flaw-lets-local-users-gain-root-in-seconds/" rel="nofollow"&gt;Sysdig: CVE-2026-31431 Analysis&lt;/a&gt; — "The flaw was introduced in 2017 via commit 72548b093ee3, which switched AEAD operations to in-place processing." — Sysdig&lt;/li&gt;&lt;li&gt;&lt;a title="CERT-EU Advisory" href="https://cert.europa.eu/publications/security-advisories/2026-005/" rel="nofollow"&gt;CERT-EU Advisory&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Ubuntu Security Tracker" href="https://ubuntu.com/security/CVE-2026-31431" rel="nofollow"&gt;Ubuntu Security Tracker&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="The Register: Crypto Flaw" href="https://www.theregister.com/2026/04/30/linux_cryptographic_code_flaw/" rel="nofollow"&gt;The Register: Crypto Flaw&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Kernel Patch (reverts 2017 optimization)" href="https://github.com/torvalds/linux/commit/a664bf3d603dc3bdcf9ae47cc21e0daec706d7a5.diff" rel="nofollow"&gt;Kernel Patch (reverts 2017 optimization)&lt;/a&gt; — "This mostly reverts commit 72548b093ee3 except for the copying of the associated data." — Kernel Commit&lt;/li&gt;&lt;li&gt;&lt;a title="Buggy Commit: 72548b093ee3 (2017)" href="https://github.com/torvalds/linux/commit/72548b093ee3" rel="nofollow"&gt;Buggy Commit: 72548b093ee3 (2017)&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="DeepWiki: AF_ALG Internals" href="https://deepwiki.com/theori-io/copy-fail-CVE-2026-31431/3.1-linux-crypto-api-(af_alg)-internals" rel="nofollow"&gt;DeepWiki: AF_ALG Internals&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="oss-security Disclosure" href="https://www.openwall.com/lists/oss-security/2026/04/29/23" rel="nofollow"&gt;oss-security Disclosure&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="PSA + GRUB Mitigation - Jan Wildeboer" href="https://jan.wildeboer.net/2026/05/PSA-CopyFail-CVE-2026-31431/" rel="nofollow"&gt;PSA + GRUB Mitigation - Jan Wildeboer&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Ubuntu 26.04 LTS (Resolute Raccoon) Released" href="https://canonical.com/blog/canonical-releases-ubuntu-26-04-lts-resolute-raccoon" rel="nofollow"&gt;Ubuntu 26.04 LTS (Resolute Raccoon) Released&lt;/a&gt; — "Ubuntu 26.04 LTS sets the example for providing best-in-class resilience while simultaneously embracing innovation and the advancement of open source." — Jon Seager, VP Ubuntu Engineering&lt;/li&gt;&lt;li&gt;&lt;a title="The Future of AI in Ubuntu - Jon Seager" href="https://discourse.ubuntu.com/t/the-future-of-ai-in-ubuntu/81130" rel="nofollow"&gt;The Future of AI in Ubuntu - Jon Seager&lt;/a&gt; — "Throughout 2026 we'll be working on enabling access to frontier AI for Ubuntu users in a way that is deliberate, secure, and aligned with our open source values." — Jon Seager&lt;/li&gt;&lt;li&gt;&lt;a title="Ubuntu 26.04 Release Notes" href="https://documentation.ubuntu.com/release-notes/26.04/" rel="nofollow"&gt;Ubuntu 26.04 Release Notes&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Ubuntu AI Features Throughout 2026 - Phoronix" href="https://www.phoronix.com/news/Ubuntu-AI-Features-2026" rel="nofollow"&gt;Ubuntu AI Features Throughout 2026 - Phoronix&lt;/a&gt; — "Canonical's approach to AI is refreshingly thoughtful — Microsoft should take note." — ZDNet&lt;/li&gt;&lt;li&gt;&lt;a title="Canonical DDoS Attack Update" href="https://discourse.ubuntu.com/t/update-concerning-ddos-attack-on-canonical-and-ubuntu/81482" rel="nofollow"&gt;Canonical DDoS Attack Update&lt;/a&gt; — "Canonical's web infrastructure is under a sustained, cross-border attack and we are working to address it." — arcticp, Canonical&lt;/li&gt;&lt;li&gt;&lt;a title="Ubuntu Weekly Newsletter #942" href="https://discourse.ubuntu.com/t/ubuntu-weekly-newsletter-issue-942/81204" rel="nofollow"&gt;Ubuntu Weekly Newsletter #942&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Canonical AI Approach - ZDNet" href="https://www.zdnet.com/article/canonical-ai-approach-thoughtful-microsoft-should-take-note/" rel="nofollow"&gt;Canonical AI Approach - ZDNet&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="9to5Linux: Opt-In LLM Tools" href="https://9to5linux.com/canonical-plans-to-integrate-opt-in-llm-based-tools-in-future-ubuntu-releases/" rel="nofollow"&gt;9to5Linux: Opt-In LLM Tools&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="uutils/coreutils: Cross-platform Rust rewrite of the GNU coreutils" href="https://github.com/uutils/coreutils" rel="nofollow"&gt;uutils/coreutils: Cross-platform Rust rewrite of the GNU coreutils&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="LINUX Unplugged 636: Engineering the Future" href="https://linuxunplugged.com/636" rel="nofollow"&gt;LINUX Unplugged 636: Engineering the Future&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="LiveCD fails to start X session on QEMU · Issue #354 · ghostbsd/issues" href="https://github.com/ghostbsd/issues/issues/354" rel="nofollow"&gt;LiveCD fails to start X session on QEMU · Issue #354 · ghostbsd/issues&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Monty&amp;apos;s “rescue” drive NixOS config" href="https://github.com/pmontgo33/nix-config" rel="nofollow"&gt;Monty's “rescue” drive NixOS config&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Magnolia Mayhem&amp;apos;s BSD Challenge Report" href="https://www.ministryofmayhem.space/posts/bsdptdeux/" rel="nofollow"&gt;Magnolia Mayhem's BSD Challenge Report&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: NASty" href="https://github.com/nasty-project/nasty" rel="nofollow"&gt;Pick: NASty&lt;/a&gt; — NASty is a NAS operating system built on NixOS and bcachefs. It turns commodity hardware into a storage appliance serving NFS, SMB, iSCSI, and NVMe-oF — managed from a single web UI, updated atomically, and rolled back when things go sideways.&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: Defuse" href="https://github.com/shonebinu/Defuse" rel="nofollow"&gt;Pick: Defuse&lt;/a&gt; — Defuse is a GTK4 application for removing image backgrounds locally.&lt;/li&gt;&lt;li&gt;&lt;a title="Defuse on Flathub" href="https://flathub.org/en/apps/io.github.shonebinu.Defuse" rel="nofollow"&gt;Defuse on Flathub&lt;/a&gt;&lt;/li&gt;&lt;/ul&gt;</description>

We dig into the Copy Fail vulnerability and test a proof-of-concept against our own box. Plus, Jon Seager, VP of Engineering at Canonical joins us, and we kick off the BSD Challenge!

665: Patch Me If You Can

After 26 years, we return to our roots and reflect on why LinuxFest Northwest is still a special event.Sponsored By:<ul><li><a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r">Jupiter Party Annual Membership</a>: <a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r">Put your support on automatic with our annual plan, and get one month of membership for free!</a></li><li><a rel="nofollow" href="https://defined.net/unplugged">Managed Nebula</a>: <a rel="nofollow" href="https://defined.net/unplugged">Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.</a></li></ul><a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946">Support LINUX Unplugged</a>Links:<ul><li><a title="💥 Gets Sats Quick and Easy with Strike" href="https://strike.me/" rel="nofollow">💥 Gets Sats Quick and Easy with Strike</a></li><li><a title="📻 LINUX Unplugged on Fountain.FM" href="https://www.fountain.fm/show/dWiuBeqpDSM86AwXRXov" rel="nofollow">📻 LINUX Unplugged on Fountain.FM</a></li><li><a title="LINUX Unplugged 666 BSD Challenge - Rules and Regrets" href="https://linuxunplugged.com/bsd" rel="nofollow">LINUX Unplugged 666 BSD Challenge - Rules and Regrets</a></li><li><a title="LFNW2026 - Back to Root" href="https://linuxfestnorthwest.org/" rel="nofollow">LFNW2026 - Back to Root</a></li><li><a title="LinuxFest Northwest 2026 Playlist - YouTube" href="https://www.youtube.com/watch?v=-xc9pNSl6b0&amp;list=PLjDc7gDlIASThBDIH-XRSJB7XkwzwRW56&amp;pp=0gcJCbcEOCosWNin" rel="nofollow">LinuxFest Northwest 2026 Playlist - YouTube</a></li><li><a title="LinuxFest Northwest - YouTube" href="https://www.youtube.com/@LinuxFestNorthwest/playlists" rel="nofollow">LinuxFest Northwest - YouTube</a></li><li><a title="The New Linux Kernel AI Bot Uncovering Bugs Is A Local LLM On Framework Desktop + AMD Ryzen AI Max" href="https://www.phoronix.com/news/Clanker-T1000-AMD-Ryzen-AI-Max" rel="nofollow">The New Linux Kernel AI Bot Uncovering Bugs Is A Local LLM On Framework Desktop + AMD Ryzen AI Max</a></li><li><a title="Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain" href="https://socket.dev/blog/bitwarden-cli-compromised" rel="nofollow">Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain</a></li><li><a title="Bear454&apos;s Fundraiser: Support for James Mason&apos;s Family" href="https://www.gofundme.com/f/support-for-james-masons-family-bz45v" rel="nofollow">Bear454's Fundraiser: Support for James Mason's Family</a></li><li><a title="Pick: Updo" href="https://github.com/Owloops/updo" rel="nofollow">Pick: Updo</a> — Updo is a command-line tool for monitoring website uptime and performance. It provides real-time metrics on website status, response time, SSL certificate expiry, and more, with alert notifications.</li><li><a title="Pick: Pake" href="https://github.com/tw93/Pake" rel="nofollow">Pick: Pake</a> — 🤱🏻 Turn any webpage into a desktop app with one command.</li></ul>

<description>&lt;p&gt;After 26 years, we return to our roots and reflect on why LinuxFest Northwest is still a special event.&lt;/p&gt;&lt;p&gt;Sponsored By:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r"&gt;Jupiter Party Annual Membership&lt;/a&gt;: &lt;a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r"&gt;Put your support on automatic with our annual plan, and get one month of membership for free!&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a rel="nofollow" href="https://defined.net/unplugged"&gt;Managed Nebula&lt;/a&gt;: &lt;a rel="nofollow" href="https://defined.net/unplugged"&gt;Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.&lt;/a&gt;&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946"&gt;Support LINUX Unplugged&lt;/a&gt;&lt;/p&gt;&lt;p&gt;Links:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;a title="💥 Gets Sats Quick and Easy with Strike" href="https://strike.me/" rel="nofollow"&gt;💥 Gets Sats Quick and Easy with Strike&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="📻 LINUX Unplugged on Fountain.FM" href="https://www.fountain.fm/show/dWiuBeqpDSM86AwXRXov" rel="nofollow"&gt;📻 LINUX Unplugged on Fountain.FM&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="LINUX Unplugged 666 BSD Challenge - Rules and Regrets" href="https://linuxunplugged.com/bsd" rel="nofollow"&gt;LINUX Unplugged 666 BSD Challenge - Rules and Regrets&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="LFNW2026 - Back to Root" href="https://linuxfestnorthwest.org/" rel="nofollow"&gt;LFNW2026 - Back to Root&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="LinuxFest Northwest 2026 Playlist - YouTube" href="https://www.youtube.com/watch?v=-xc9pNSl6b0&amp;amp;list=PLjDc7gDlIASThBDIH-XRSJB7XkwzwRW56&amp;amp;pp=0gcJCbcEOCosWNin" rel="nofollow"&gt;LinuxFest Northwest 2026 Playlist - YouTube&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="LinuxFest Northwest - YouTube" href="https://www.youtube.com/@LinuxFestNorthwest/playlists" rel="nofollow"&gt;LinuxFest Northwest - YouTube&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="The New Linux Kernel AI Bot Uncovering Bugs Is A Local LLM On Framework Desktop + AMD Ryzen AI Max" href="https://www.phoronix.com/news/Clanker-T1000-AMD-Ryzen-AI-Max" rel="nofollow"&gt;The New Linux Kernel AI Bot Uncovering Bugs Is A Local LLM On Framework Desktop + AMD Ryzen AI Max&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain" href="https://socket.dev/blog/bitwarden-cli-compromised" rel="nofollow"&gt;Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Bear454&amp;apos;s Fundraiser: Support for James Mason&amp;apos;s Family" href="https://www.gofundme.com/f/support-for-james-masons-family-bz45v" rel="nofollow"&gt;Bear454's Fundraiser: Support for James Mason's Family&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: Updo" href="https://github.com/Owloops/updo" rel="nofollow"&gt;Pick: Updo&lt;/a&gt; — Updo is a command-line tool for monitoring website uptime and performance. It provides real-time metrics on website status, response time, SSL certificate expiry, and more, with alert notifications.&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: Pake" href="https://github.com/tw93/Pake" rel="nofollow"&gt;Pick: Pake&lt;/a&gt; — 🤱🏻 Turn any webpage into a desktop app with one command.&lt;/li&gt;&lt;/ul&gt;</description>

After 26 years, we return to our roots and reflect on why LinuxFest Northwest is still a special event.

664: Back to Root

We all have data to rescue, you just don't realize it yet. This week we build our own custom live rescue distros, recover real data, and show you how to make your own.Sponsored By:<ul><li><a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r">Jupiter Party Annual Membership</a>: <a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r">Put your support on automatic with our annual plan, and get one month of membership for free!</a></li><li><a rel="nofollow" href="https://defined.net/unplugged">Managed Nebula</a>: <a rel="nofollow" href="https://defined.net/unplugged">Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.</a></li></ul><a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946">Support LINUX Unplugged</a>Links:<ul><li><a title="💥 Gets Sats Quick and Easy with Strike" href="https://strike.me/" rel="nofollow">💥 Gets Sats Quick and Easy with Strike</a></li><li><a title="📻 LINUX Unplugged on Fountain.FM" href="https://www.fountain.fm/show/dWiuBeqpDSM86AwXRXov" rel="nofollow">📻 LINUX Unplugged on Fountain.FM</a></li><li><a title="LinuxFest Northwest 2026 - Back to Root" href="https://linuxfestnorthwest.org/" rel="nofollow">LinuxFest Northwest 2026 - Back to Root</a> — April 24-26, 2026 - Bellingham, Washington</li><li><a title="6 ultimate boot CDs (system rescue) for troubleshooting Windows PCs" href="https://www.digitalcitizen.life/best-system-rescue-discs-windows-pcs-no-longer-work-well/" rel="nofollow">6 ultimate boot CDs (system rescue) for troubleshooting Windows PCs</a></li><li><a title="SystemRescue" href="https://www.system-rescue.org/" rel="nofollow">SystemRescue</a> — A Linux system rescue toolkit available as a bootable medium for administrating or repairing your system and data after a crash.</li><li><a title="Finnix" href="https://www.finnix.org/" rel="nofollow">Finnix</a> — Debian-based, CLI-focused with a comprehensive set of repair tools. Recent updates improved modern hardware support, boot speed, zram compression, and SSH remote access.</li><li><a title="Changes/ModernizeLiveMedia - Fedora Project Wiki" href="https://fedoraproject.org/wiki/Changes/ModernizeLiveMedia" rel="nofollow">Changes/ModernizeLiveMedia - Fedora Project Wiki</a> — Modernize the live media by switching to the "new" live environment setup scripts provided by livesys-scripts and leverage new functionality in dracut to enable support for automatically enabling persistent overlays when flashed to USB sticks.</li><li><a title="Fedora 41: Modernize the live media Overlay Features?" href="https://discussion.fedoraproject.org/t/how-to-test-for-upcoming-fedora-linux-41-modernize-the-live-media-overlay-features/120468" rel="nofollow">Fedora 41: Modernize the live media Overlay Features?</a></li><li><a title="aegis-boot" href="https://github.com/williamzujkowski/aegis-boot" rel="nofollow">aegis-boot</a> — A signed UEFI Secure Boot rescue environment that lets operators pick any ISO from a USB stick's data partition and kexec into it — without leaving the chain of trust.</li><li><a title="netboot.xyz" href="https://netboot.xyz/" rel="nofollow">netboot.xyz</a> — A network-based bootable operating system installer based on iPXE.</li><li><a title="Greg&apos;s nixos-config" href="https://forgejo.gth.sh/greg/nixos-config" rel="nofollow">Greg's nixos-config</a></li><li><a title="Self-Hosted 129: Forged Alliance" href="https://selfhosted.show/129" rel="nofollow">Self-Hosted 129: Forged Alliance</a> — The battle for code forges is heating up. We chat about HexOS' big promises and get excited about Meshtastic.</li><li><a title="pocket-id" href="https://github.com/pocket-id/pocket-id" rel="nofollow">pocket-id</a> — A simple OIDC provider that allows users to authenticate with their passkeys to your services.</li><li><a title="What Is Claude Mythos—And Why Anthropic Won’t Let Anyone Use It" href="https://www.forbes.com/sites/jonmarkman/2026/04/08/what-is-claude-mythos-and-why-anthropic-wont-let-anyone-use-it/" rel="nofollow">What Is Claude Mythos—And Why Anthropic Won’t Let Anyone Use It</a></li><li><a title="v4call" href="https://v4call.com/info.html" rel="nofollow">v4call</a> — v4call is a decentralised video, voice and text platform built on the Hive blockchain. Users set their own rates for receiving calls and messages.</li><li><a title="Pick: Metadata Cleaner" href="https://gitlab.com/metadatacleaner/metadatacleaner" rel="nofollow">Pick: Metadata Cleaner</a> — View and clean metadata in files</li><li><a title="Metadata Cleaner on FlatHub" href="https://flathub.org/en/apps/io.gitlab.metadatacleaner.metadatacleaner" rel="nofollow">Metadata Cleaner on FlatHub</a></li><li><a title="Pick: mat2" href="https://github.com/tpet/mat2" rel="nofollow">Pick: mat2</a> — mat2 is a metadata removal tool, supporting a wide range of commonly used file formats, written in python3</li><li><a title="Pick: Little Snitch for Linux" href="https://obdev.at/products/littlesnitch-linux/index.html" rel="nofollow">Pick: Little Snitch for Linux</a> — Every time an application on your computer opens a network connection, it does so quietly, without asking. Little Snitch for Linux makes that activity visible and gives you the option to do something about it.</li><li><a title="littlesnitch-linux-flake" href="https://github.com/noblepayne/littlesnitch-linux-flake" rel="nofollow">littlesnitch-linux-flake</a> — A Nix Flake for Little Snitch for Linux</li><li><a title="Pick: PCAPdroid" href="https://github.com/emanuele-f/PCAPdroid" rel="nofollow">Pick: PCAPdroid</a> — No-root network monitor, firewall and PCAP dumper for Android</li></ul>

<description>&lt;p&gt;We all have data to rescue, you just don't realize it yet. This week we build our own custom live rescue distros, recover real data, and show you how to make your own.&lt;/p&gt;&lt;p&gt;Sponsored By:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r"&gt;Jupiter Party Annual Membership&lt;/a&gt;: &lt;a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r"&gt;Put your support on automatic with our annual plan, and get one month of membership for free!&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a rel="nofollow" href="https://defined.net/unplugged"&gt;Managed Nebula&lt;/a&gt;: &lt;a rel="nofollow" href="https://defined.net/unplugged"&gt;Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.&lt;/a&gt;&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946"&gt;Support LINUX Unplugged&lt;/a&gt;&lt;/p&gt;&lt;p&gt;Links:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;a title="💥 Gets Sats Quick and Easy with Strike" href="https://strike.me/" rel="nofollow"&gt;💥 Gets Sats Quick and Easy with Strike&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="📻 LINUX Unplugged on Fountain.FM" href="https://www.fountain.fm/show/dWiuBeqpDSM86AwXRXov" rel="nofollow"&gt;📻 LINUX Unplugged on Fountain.FM&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="LinuxFest Northwest 2026 - Back to Root" href="https://linuxfestnorthwest.org/" rel="nofollow"&gt;LinuxFest Northwest 2026 - Back to Root&lt;/a&gt; — April 24-26, 2026 - Bellingham, Washington&lt;/li&gt;&lt;li&gt;&lt;a title="6 ultimate boot CDs (system rescue) for troubleshooting Windows PCs" href="https://www.digitalcitizen.life/best-system-rescue-discs-windows-pcs-no-longer-work-well/" rel="nofollow"&gt;6 ultimate boot CDs (system rescue) for troubleshooting Windows PCs&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="SystemRescue" href="https://www.system-rescue.org/" rel="nofollow"&gt;SystemRescue&lt;/a&gt; — A Linux system rescue toolkit available as a bootable medium for administrating or repairing your system and data after a crash.&lt;/li&gt;&lt;li&gt;&lt;a title="Finnix" href="https://www.finnix.org/" rel="nofollow"&gt;Finnix&lt;/a&gt; — Debian-based, CLI-focused with a comprehensive set of repair tools. Recent updates improved modern hardware support, boot speed, zram compression, and SSH remote access.&lt;/li&gt;&lt;li&gt;&lt;a title="Changes/ModernizeLiveMedia - Fedora Project Wiki" href="https://fedoraproject.org/wiki/Changes/ModernizeLiveMedia" rel="nofollow"&gt;Changes/ModernizeLiveMedia - Fedora Project Wiki&lt;/a&gt; — Modernize the live media by switching to the "new" live environment setup scripts provided by livesys-scripts and leverage new functionality in dracut to enable support for automatically enabling persistent overlays when flashed to USB sticks.&lt;/li&gt;&lt;li&gt;&lt;a title="Fedora 41: Modernize the live media Overlay Features?" href="https://discussion.fedoraproject.org/t/how-to-test-for-upcoming-fedora-linux-41-modernize-the-live-media-overlay-features/120468" rel="nofollow"&gt;Fedora 41: Modernize the live media Overlay Features?&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="aegis-boot" href="https://github.com/williamzujkowski/aegis-boot" rel="nofollow"&gt;aegis-boot&lt;/a&gt; — A signed UEFI Secure Boot rescue environment that lets operators pick any ISO from a USB stick's data partition and kexec into it — without leaving the chain of trust.&lt;/li&gt;&lt;li&gt;&lt;a title="netboot.xyz" href="https://netboot.xyz/" rel="nofollow"&gt;netboot.xyz&lt;/a&gt; — A network-based bootable operating system installer based on iPXE.&lt;/li&gt;&lt;li&gt;&lt;a title="Greg&amp;apos;s nixos-config" href="https://forgejo.gth.sh/greg/nixos-config" rel="nofollow"&gt;Greg's nixos-config&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Self-Hosted 129: Forged Alliance" href="https://selfhosted.show/129" rel="nofollow"&gt;Self-Hosted 129: Forged Alliance&lt;/a&gt; — The battle for code forges is heating up. We chat about HexOS' big promises and get excited about Meshtastic.&lt;/li&gt;&lt;li&gt;&lt;a title="pocket-id" href="https://github.com/pocket-id/pocket-id" rel="nofollow"&gt;pocket-id&lt;/a&gt; — A simple OIDC provider that allows users to authenticate with their passkeys to your services.&lt;/li&gt;&lt;li&gt;&lt;a title="What Is Claude Mythos—And Why Anthropic Won’t Let Anyone Use It" href="https://www.forbes.com/sites/jonmarkman/2026/04/08/what-is-claude-mythos-and-why-anthropic-wont-let-anyone-use-it/" rel="nofollow"&gt;What Is Claude Mythos—And Why Anthropic Won’t Let Anyone Use It&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="v4call" href="https://v4call.com/info.html" rel="nofollow"&gt;v4call&lt;/a&gt; — v4call is a decentralised video, voice and text platform built on the Hive blockchain. Users set their own rates for receiving calls and messages.&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: Metadata Cleaner" href="https://gitlab.com/metadatacleaner/metadatacleaner" rel="nofollow"&gt;Pick: Metadata Cleaner&lt;/a&gt; — View and clean metadata in files&lt;/li&gt;&lt;li&gt;&lt;a title="Metadata Cleaner on FlatHub" href="https://flathub.org/en/apps/io.gitlab.metadatacleaner.metadatacleaner" rel="nofollow"&gt;Metadata Cleaner on FlatHub&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: mat2" href="https://github.com/tpet/mat2" rel="nofollow"&gt;Pick: mat2&lt;/a&gt; — mat2 is a metadata removal tool, supporting a wide range of commonly used file formats, written in python3&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: Little Snitch for Linux" href="https://obdev.at/products/littlesnitch-linux/index.html" rel="nofollow"&gt;Pick: Little Snitch for Linux&lt;/a&gt; — Every time an application on your computer opens a network connection, it does so quietly, without asking. Little Snitch for Linux makes that activity visible and gives you the option to do something about it.&lt;/li&gt;&lt;li&gt;&lt;a title="littlesnitch-linux-flake" href="https://github.com/noblepayne/littlesnitch-linux-flake" rel="nofollow"&gt;littlesnitch-linux-flake&lt;/a&gt; — A Nix Flake for Little Snitch for Linux&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: PCAPdroid" href="https://github.com/emanuele-f/PCAPdroid" rel="nofollow"&gt;Pick: PCAPdroid&lt;/a&gt; — No-root network monitor, firewall and PCAP dumper for Android&lt;/li&gt;&lt;/ul&gt;</description>

We all have data to rescue, you just don't realize it yet. This week we build our own custom live rescue distros, recover real data, and show you how to make your own.

663: The 99.8% Rescue

Is it time to replace GitHub in our workflow? We git into it. Plus, our favorite features in the new Linux 7.0 release.Sponsored By:<ul><li><a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r">Jupiter Party Annual Membership</a>: <a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r">Put your support on automatic with our annual plan, and get one month of membership for free!</a></li><li><a rel="nofollow" href="https://defined.net/unplugged">Managed Nebula</a>: <a rel="nofollow" href="https://defined.net/unplugged">Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.</a></li></ul><a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946">Support LINUX Unplugged</a>Links:<ul><li><a title="💥 Gets Sats Quick and Easy with Strike" href="https://strike.me/" rel="nofollow">💥 Gets Sats Quick and Easy with Strike</a></li><li><a title="📻 LINUX Unplugged on Fountain.FM" href="https://www.fountain.fm/show/dWiuBeqpDSM86AwXRXov" rel="nofollow">📻 LINUX Unplugged on Fountain.FM</a></li><li><a title="LinuxFest Northwest 2026" href="https://linuxfestnorthwest.org/" rel="nofollow">LinuxFest Northwest 2026</a> — April 24-26, 2026 - Bellingham, Washington</li><li><a title="LFNW2026 Schedule" href="https://linuxfestnorthwest.org/schedule/" rel="nofollow">LFNW2026 Schedule</a></li><li><a title="Linux 7.0: Btrfs" href="https://www.phoronix.com/news/Linux-7.0-Btrfs-Changes" rel="nofollow">Linux 7.0: Btrfs</a> — A translation layer of logical block addresses that allows changes without moving or rewriting blocks for relocation</li><li><a title="Linux 7.0: XFS" href="https://www.phoronix.com/news/XFS-Linux-7.0" rel="nofollow">Linux 7.0: XFS</a> — Autonomous self-healing; delivers live filesystem health events to userspace for automatic repairs</li><li><a title="Linux 7.0: EXT4" href="https://www.phoronix.com/news/Linux-7.0-EXT4" rel="nofollow">Linux 7.0: EXT4</a> — Improves write performance for concurrent direct I/O writes</li><li><a title="Linux 7.0: IO-uring" href="https://www.phoronix.com/news/Linux-7.0-IO-uring-BPF-Filter" rel="nofollow">Linux 7.0: IO-uring</a> — Adds support for BPF filtering to IO_uring for high performance async I/O</li><li><a title="Linux 7.0: Scheduler" href="https://www.phoronix.com/news/Linux-7.0-Scheduler" rel="nofollow">Linux 7.0: Scheduler</a> — Scheduler updates land with time slice extension, performance and scalability work for high core count systems</li><li><a title="Linux 7.0: Rust" href="https://www.phoronix.com/news/Linux-7.0-Rust" rel="nofollow">Linux 7.0: Rust</a> — Formally concluding the 'Rust experiment'; Rust for the Linux kernel is here to stay</li><li><a title="Linux 7.1: i486" href="https://www.phoronix.com/news/Linux-7.1-Phasing-Out-i486" rel="nofollow">Linux 7.1: i486</a> — Begins phasing out Intel 486 CPU support; no known Linux distributions still ship with i486 support</li><li><a title="Give Up GitHub" href="https://sfconservancy.org/GiveUpGitHub/" rel="nofollow">Give Up GitHub</a> — We realize this is not an easy task; GitHub is ubiquitous. Through their effective marketing, GitHub has convinced FOSS developers that GitHub is the best (and even the only) place for FOSS development.</li><li><a title="opengist" href="https://github.com/thomiceli/opengist" rel="nofollow">opengist</a> — Self-hosted pastebin powered by Git, open-source alternative to Github Gist.</li><li><a title="Forgejo on Codeberg" href="https://codeberg.org/forgejo/forgejo" rel="nofollow">Forgejo on Codeberg</a> — Beyond coding. We forge.</li><li><a title="Forgejo" href="https://forgejo.org/" rel="nofollow">Forgejo</a> — Self-hosted alternative to GitHub; liberate your software from proprietary shackles with a familiar environment</li><li><a title="NixOS Wiki: Forgejo" href="https://wiki.nixos.org/wiki/Forgejo" rel="nofollow">NixOS Wiki: Forgejo</a> — Lightweight software forge; completely free software and a fork of Gitea</li><li><a title="Forgejo Actions" href="https://forgejo.org/docs/next/user/actions/actions/" rel="nofollow">Forgejo Actions</a> — Reusable pieces of code for CI workflows; compatible with GitHub Actions</li><li><a title="NixOS Forgejo Actions Runner" href="https://codeberg.org/whitequark/nixos-forgejo-actions-runner" rel="nofollow">NixOS Forgejo Actions Runner</a> — NixOS configuration for turnkey deployment of Forgejo Actions runners</li><li><a title="Forgejo Federation (PR #10453)" href="https://codeberg.org/forgejo/forgejo/pulls/10453" rel="nofollow">Forgejo Federation (PR #10453)</a> — Work-in-progress for federated repositories; enabling decentralized software development</li><li><a title="Forgejo Snippets (Issue #1069)" href="https://codeberg.org/forgejo/forgejo/issues/1069" rel="nofollow">Forgejo Snippets (Issue #1069)</a> — Create a shareable piece of text, be it code or plain text, publicly or privately</li><li><a title="Git Novice Guide" href="https://swcarpentry.github.io/git-novice/" rel="nofollow">Git Novice Guide</a> — Free interactive tutorial; learn version control with Git from scratch</li><li><a title="Pick: sshroute" href="https://github.com/thereisnotime/sshroute" rel="nofollow">Pick: sshroute</a> — Network-aware SSH router - routes connections to different IPs/ports/keys/jump hosts based on active VPN or network</li><li><a title="Pick: rendercv" href="https://github.com/rendercv/rendercv" rel="nofollow">Pick: rendercv</a> — Resume builder for academics and engineers</li><li><a title="Pick: ESPHome Starter Kit" href="https://apolloautomation.com/products/esk-1-esphome-starter-kit" rel="nofollow">Pick: ESPHome Starter Kit</a> — DIY sensor kit for Home Assistant with ESPHome; build your own smart home devices</li></ul>

<description>&lt;p&gt;Is it time to replace GitHub in our workflow? We git into it. Plus, our favorite features in the new Linux 7.0 release.&lt;/p&gt;&lt;p&gt;Sponsored By:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r"&gt;Jupiter Party Annual Membership&lt;/a&gt;: &lt;a rel="nofollow" href="https://jupitersignal.memberful.com/checkout?plan=117630r"&gt;Put your support on automatic with our annual plan, and get one month of membership for free!&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a rel="nofollow" href="https://defined.net/unplugged"&gt;Managed Nebula&lt;/a&gt;: &lt;a rel="nofollow" href="https://defined.net/unplugged"&gt;Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.&lt;/a&gt;&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946"&gt;Support LINUX Unplugged&lt;/a&gt;&lt;/p&gt;&lt;p&gt;Links:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;a title="💥 Gets Sats Quick and Easy with Strike" href="https://strike.me/" rel="nofollow"&gt;💥 Gets Sats Quick and Easy with Strike&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="📻 LINUX Unplugged on Fountain.FM" href="https://www.fountain.fm/show/dWiuBeqpDSM86AwXRXov" rel="nofollow"&gt;📻 LINUX Unplugged on Fountain.FM&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="LinuxFest Northwest 2026" href="https://linuxfestnorthwest.org/" rel="nofollow"&gt;LinuxFest Northwest 2026&lt;/a&gt; — April 24-26, 2026 - Bellingham, Washington&lt;/li&gt;&lt;li&gt;&lt;a title="LFNW2026 Schedule" href="https://linuxfestnorthwest.org/schedule/" rel="nofollow"&gt;LFNW2026 Schedule&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Linux 7.0: Btrfs" href="https://www.phoronix.com/news/Linux-7.0-Btrfs-Changes" rel="nofollow"&gt;Linux 7.0: Btrfs&lt;/a&gt; — A translation layer of logical block addresses that allows changes without moving or rewriting blocks for relocation&lt;/li&gt;&lt;li&gt;&lt;a title="Linux 7.0: XFS" href="https://www.phoronix.com/news/XFS-Linux-7.0" rel="nofollow"&gt;Linux 7.0: XFS&lt;/a&gt; — Autonomous self-healing; delivers live filesystem health events to userspace for automatic repairs&lt;/li&gt;&lt;li&gt;&lt;a title="Linux 7.0: EXT4" href="https://www.phoronix.com/news/Linux-7.0-EXT4" rel="nofollow"&gt;Linux 7.0: EXT4&lt;/a&gt; — Improves write performance for concurrent direct I/O writes&lt;/li&gt;&lt;li&gt;&lt;a title="Linux 7.0: IO-uring" href="https://www.phoronix.com/news/Linux-7.0-IO-uring-BPF-Filter" rel="nofollow"&gt;Linux 7.0: IO-uring&lt;/a&gt; — Adds support for BPF filtering to IO_uring for high performance async I/O&lt;/li&gt;&lt;li&gt;&lt;a title="Linux 7.0: Scheduler" href="https://www.phoronix.com/news/Linux-7.0-Scheduler" rel="nofollow"&gt;Linux 7.0: Scheduler&lt;/a&gt; — Scheduler updates land with time slice extension, performance and scalability work for high core count systems&lt;/li&gt;&lt;li&gt;&lt;a title="Linux 7.0: Rust" href="https://www.phoronix.com/news/Linux-7.0-Rust" rel="nofollow"&gt;Linux 7.0: Rust&lt;/a&gt; — Formally concluding the 'Rust experiment'; Rust for the Linux kernel is here to stay&lt;/li&gt;&lt;li&gt;&lt;a title="Linux 7.1: i486" href="https://www.phoronix.com/news/Linux-7.1-Phasing-Out-i486" rel="nofollow"&gt;Linux 7.1: i486&lt;/a&gt; — Begins phasing out Intel 486 CPU support; no known Linux distributions still ship with i486 support&lt;/li&gt;&lt;li&gt;&lt;a title="Give Up GitHub" href="https://sfconservancy.org/GiveUpGitHub/" rel="nofollow"&gt;Give Up GitHub&lt;/a&gt; — We realize this is not an easy task; GitHub is ubiquitous. Through their effective marketing, GitHub has convinced FOSS developers that GitHub is the best (and even the only) place for FOSS development.&lt;/li&gt;&lt;li&gt;&lt;a title="opengist" href="https://github.com/thomiceli/opengist" rel="nofollow"&gt;opengist&lt;/a&gt; — Self-hosted pastebin powered by Git, open-source alternative to Github Gist.&lt;/li&gt;&lt;li&gt;&lt;a title="Forgejo on Codeberg" href="https://codeberg.org/forgejo/forgejo" rel="nofollow"&gt;Forgejo on Codeberg&lt;/a&gt; — Beyond coding. We forge.&lt;/li&gt;&lt;li&gt;&lt;a title="Forgejo" href="https://forgejo.org/" rel="nofollow"&gt;Forgejo&lt;/a&gt; — Self-hosted alternative to GitHub; liberate your software from proprietary shackles with a familiar environment&lt;/li&gt;&lt;li&gt;&lt;a title="NixOS Wiki: Forgejo" href="https://wiki.nixos.org/wiki/Forgejo" rel="nofollow"&gt;NixOS Wiki: Forgejo&lt;/a&gt; — Lightweight software forge; completely free software and a fork of Gitea&lt;/li&gt;&lt;li&gt;&lt;a title="Forgejo Actions" href="https://forgejo.org/docs/next/user/actions/actions/" rel="nofollow"&gt;Forgejo Actions&lt;/a&gt; — Reusable pieces of code for CI workflows; compatible with GitHub Actions&lt;/li&gt;&lt;li&gt;&lt;a title="NixOS Forgejo Actions Runner" href="https://codeberg.org/whitequark/nixos-forgejo-actions-runner" rel="nofollow"&gt;NixOS Forgejo Actions Runner&lt;/a&gt; — NixOS configuration for turnkey deployment of Forgejo Actions runners&lt;/li&gt;&lt;li&gt;&lt;a title="Forgejo Federation (PR #10453)" href="https://codeberg.org/forgejo/forgejo/pulls/10453" rel="nofollow"&gt;Forgejo Federation (PR #10453)&lt;/a&gt; — Work-in-progress for federated repositories; enabling decentralized software development&lt;/li&gt;&lt;li&gt;&lt;a title="Forgejo Snippets (Issue #1069)" href="https://codeberg.org/forgejo/forgejo/issues/1069" rel="nofollow"&gt;Forgejo Snippets (Issue #1069)&lt;/a&gt; — Create a shareable piece of text, be it code or plain text, publicly or privately&lt;/li&gt;&lt;li&gt;&lt;a title="Git Novice Guide" href="https://swcarpentry.github.io/git-novice/" rel="nofollow"&gt;Git Novice Guide&lt;/a&gt; — Free interactive tutorial; learn version control with Git from scratch&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: sshroute" href="https://github.com/thereisnotime/sshroute" rel="nofollow"&gt;Pick: sshroute&lt;/a&gt; — Network-aware SSH router - routes connections to different IPs/ports/keys/jump hosts based on active VPN or network&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: rendercv" href="https://github.com/rendercv/rendercv" rel="nofollow"&gt;Pick: rendercv&lt;/a&gt; — Resume builder for academics and engineers&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: ESPHome Starter Kit" href="https://apolloautomation.com/products/esk-1-esphome-starter-kit" rel="nofollow"&gt;Pick: ESPHome Starter Kit&lt;/a&gt; — DIY sensor kit for Home Assistant with ESPHome; build your own smart home devices&lt;/li&gt;&lt;/ul&gt;</description>

Is it time to replace GitHub in our workflow? We git into it. Plus, our favorite features in the new Linux 7.0 release.

662: The GitHub Diet

The expensive, challenging, and humbling journey with open source agents.Sponsored By:<ul><li><a href="https://jupitersignal.memberful.com/checkout?plan=117630r" rel="nofollow">Jupiter Party Annual Membership</a>: <a href="https://jupitersignal.memberful.com/checkout?plan=117630r" rel="nofollow">Put your support on automatic with our annual plan, and get one month of membership for free!</a></li><li><a href="https://defined.net/unplugged" rel="nofollow">Managed Nebula</a>: <a href="https://defined.net/unplugged" rel="nofollow">Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.</a></li></ul><a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946">Support LINUX Unplugged</a>Links:<ul><li><a title="💥 Gets Sats Quick and Easy with Strike" href="https://strike.me/" rel="nofollow">💥 Gets Sats Quick and Easy with Strike</a></li><li><a title="📻 LINUX Unplugged on Fountain.FM" href="https://www.fountain.fm/show/dWiuBeqpDSM86AwXRXov" rel="nofollow">📻 LINUX Unplugged on Fountain.FM</a></li><li><a title="LinuxFest Northwest 2026 - Back to Root" href="https://linuxfestnorthwest.org/" rel="nofollow">LinuxFest Northwest 2026 - Back to Root</a> — April 24-26, 2026 - Bellingham, Washington</li><li><a title="Preferring Local OSS LLMs" href="https://blogs.newardassociates.com/blog/2026/titit-local-ai.html" rel="nofollow">Preferring Local OSS LLMs</a></li><li><a title="Qwen3.5 27B vs Gemma4 31B" href="https://x.com/stevibe/status/2040472614892974277" rel="nofollow">Qwen3.5 27B vs Gemma4 31B</a></li><li><a title="Open Models have crossed a threshold" href="https://www.linkedin.com/pulse/open-models-have-crossed-threshold-mason-daugherty-jsjme" rel="nofollow">Open Models have crossed a threshold</a></li><li><a title="Gemma 4 — Google DeepMind" href="https://deepmind.google/models/gemma/gemma-4/" rel="nofollow">Gemma 4 — Google DeepMind</a></li><li><a title="Welcome Gemma 4: Frontier multimodal intelligence on device" href="https://huggingface.co/blog/gemma4" rel="nofollow">Welcome Gemma 4: Frontier multimodal intelligence on device</a></li><li><a title="Gemma-4-31B-JANG\_4M-CRACK · Hugging Face" href="https://huggingface.co/dealignai/Gemma-4-31B-JANG_4M-CRACK" rel="nofollow">Gemma-4-31B-JANG\_4M-CRACK · Hugging Face</a></li><li><a title="mesh-llm" href="https://github.com/michaelneale/mesh-llm" rel="nofollow">mesh-llm</a> — Mesh LLM lets you pool spare GPU capacity across machines and expose the result as one OpenAI-compatible API.</li><li><a title="hermes-agent: The agent that grows with you" href="https://github.com/NousResearch/hermes-agent" rel="nofollow">hermes-agent: The agent that grows with you</a> — The self-improving AI agent built by Nous Research. It's the only agent with a built-in learning loop — it creates skills from experience, improves them during use, nudges itself to persist knowledge, searches its own past conversations, and builds a deepening model of who you are across sessions.</li><li><a title="goose" href="https://github.com/block/goose" rel="nofollow">goose</a> — An open source, extensible AI agent that goes beyond code suggestions; install, execute, edit, and test with any LLM.</li><li><a title="Lobehub" href="https://github.com/lobehub/lobehub" rel="nofollow">Lobehub</a> — The ultimate space for work and life. To find, build, and collaborate with agent teammates that grow with you. We are taking agent harness to the next level; enabling multi-agent collaboration, effortless agent team design, and introducing agents as the unit of work interaction.</li><li><a title="LibreFang" href="https://github.com/librefang/librefang" rel="nofollow">LibreFang</a> — LibreFang is an open-source agent operating system written in Rust.</li><li><a title="OpenHarness" href="https://github.com/HKUDS/OpenHarness" rel="nofollow">OpenHarness</a> — OpenHarness is an open-source Python implementation designed for researchers, builders, and the community.</li><li><a title="Microsoft&apos;s Newest Open-Source Project: Runtime Security For AI Agents" href="https://www.phoronix.com/news/Microsoft-AI-Agent-Governance" rel="nofollow">Microsoft's Newest Open-Source Project: Runtime Security For AI Agents</a> — Microsoft proclaims their new open-source project is the first toolkit that addresses all ten agentic AI risks identified last year by the OWASP</li><li><a title="Top 10 Risks and Mitigations for Agentic AI Security - OWASP Gen AI Security Project" href="https://genai.owasp.org/2025/12/09/owasp-genai-security-project-releases-top-10-risks-and-mitigations-for-agentic-ai-security/" rel="nofollow">Top 10 Risks and Mitigations for Agentic AI Security - OWASP Gen AI Security Project</a></li><li><a title="googleworkspace/cli: Google Workspace CLI" href="https://github.com/googleworkspace/cli" rel="nofollow">googleworkspace/cli: Google Workspace CLI</a> — One command-line tool for Drive, Gmail, Calendar, Sheets, Docs, Chat, Admin, and more. Dynamically built from Google Discovery Service. Includes AI agent skills.</li><li><a title="Tunarr API Reference" href="https://tunarr.com/api-docs.html#latest/tag/channels" rel="nofollow">Tunarr API Reference</a></li><li><a title="Euro-Office launches as Europe&apos;s open-source Office rival" href="https://itbrief.co.uk/story/euro-office-launches-as-europe-s-open-source-office-rival" rel="nofollow">Euro-Office launches as Europe's open-source Office rival</a></li><li><a title="Pick: single-file-cli" href="https://github.com/gildas-lormeau/single-file-cli" rel="nofollow">Pick: single-file-cli</a> — CLI tool for saving a faithful copy of a complete web page in a single HTML file (based on SingleFile)</li><li><a title="Pick: html-to-markdown" href="https://github.com/JohannesKaufmann/html-to-markdown" rel="nofollow">Pick: html-to-markdown</a> — Convert HTML to Markdown. Even works with entire websites and can be extended through rules.</li><li><a title="Pick: skim" href="https://github.com/noblepayne/skim" rel="nofollow">Pick: skim</a> — Turns any HTML page into clean markdown.</li></ul>

<description>&lt;p&gt;The expensive, challenging, and humbling journey with open source agents.&lt;/p&gt;&lt;p&gt;Sponsored By:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;a href="https://jupitersignal.memberful.com/checkout?plan=117630r" rel="nofollow"&gt;Jupiter Party Annual Membership&lt;/a&gt;: &lt;a href="https://jupitersignal.memberful.com/checkout?plan=117630r" rel="nofollow"&gt;Put your support on automatic with our annual plan, and get one month of membership for free!&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a href="https://defined.net/unplugged" rel="nofollow"&gt;Managed Nebula&lt;/a&gt;: &lt;a href="https://defined.net/unplugged" rel="nofollow"&gt;Meet Managed Nebula from Defined Networking. A decentralized VPN built on the open-source Nebula platform that we love.&lt;/a&gt;&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;a rel="payment" href="https://jupitersignal.memberful.com/checkout?plan=52946"&gt;Support LINUX Unplugged&lt;/a&gt;&lt;/p&gt;&lt;p&gt;Links:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;a title="💥 Gets Sats Quick and Easy with Strike" href="https://strike.me/" rel="nofollow"&gt;💥 Gets Sats Quick and Easy with Strike&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="📻 LINUX Unplugged on Fountain.FM" href="https://www.fountain.fm/show/dWiuBeqpDSM86AwXRXov" rel="nofollow"&gt;📻 LINUX Unplugged on Fountain.FM&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="LinuxFest Northwest 2026 - Back to Root" href="https://linuxfestnorthwest.org/" rel="nofollow"&gt;LinuxFest Northwest 2026 - Back to Root&lt;/a&gt; — April 24-26, 2026 - Bellingham, Washington&lt;/li&gt;&lt;li&gt;&lt;a title="Preferring Local OSS LLMs" href="https://blogs.newardassociates.com/blog/2026/titit-local-ai.html" rel="nofollow"&gt;Preferring Local OSS LLMs&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Qwen3.5 27B vs Gemma4 31B" href="https://x.com/stevibe/status/2040472614892974277" rel="nofollow"&gt;Qwen3.5 27B vs Gemma4 31B&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Open Models have crossed a threshold" href="https://www.linkedin.com/pulse/open-models-have-crossed-threshold-mason-daugherty-jsjme" rel="nofollow"&gt;Open Models have crossed a threshold&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Gemma 4 — Google DeepMind" href="https://deepmind.google/models/gemma/gemma-4/" rel="nofollow"&gt;Gemma 4 — Google DeepMind&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Welcome Gemma 4: Frontier multimodal intelligence on device" href="https://huggingface.co/blog/gemma4" rel="nofollow"&gt;Welcome Gemma 4: Frontier multimodal intelligence on device&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Gemma-4-31B-JANG\_4M-CRACK · Hugging Face" href="https://huggingface.co/dealignai/Gemma-4-31B-JANG_4M-CRACK" rel="nofollow"&gt;Gemma-4-31B-JANG\_4M-CRACK · Hugging Face&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="mesh-llm" href="https://github.com/michaelneale/mesh-llm" rel="nofollow"&gt;mesh-llm&lt;/a&gt; — Mesh LLM lets you pool spare GPU capacity across machines and expose the result as one OpenAI-compatible API.&lt;/li&gt;&lt;li&gt;&lt;a title="hermes-agent: The agent that grows with you" href="https://github.com/NousResearch/hermes-agent" rel="nofollow"&gt;hermes-agent: The agent that grows with you&lt;/a&gt; — The self-improving AI agent built by Nous Research. It's the only agent with a built-in learning loop — it creates skills from experience, improves them during use, nudges itself to persist knowledge, searches its own past conversations, and builds a deepening model of who you are across sessions.&lt;/li&gt;&lt;li&gt;&lt;a title="goose" href="https://github.com/block/goose" rel="nofollow"&gt;goose&lt;/a&gt; — An open source, extensible AI agent that goes beyond code suggestions; install, execute, edit, and test with any LLM.&lt;/li&gt;&lt;li&gt;&lt;a title="Lobehub" href="https://github.com/lobehub/lobehub" rel="nofollow"&gt;Lobehub&lt;/a&gt; — The ultimate space for work and life. To find, build, and collaborate with agent teammates that grow with you. We are taking agent harness to the next level; enabling multi-agent collaboration, effortless agent team design, and introducing agents as the unit of work interaction.&lt;/li&gt;&lt;li&gt;&lt;a title="LibreFang" href="https://github.com/librefang/librefang" rel="nofollow"&gt;LibreFang&lt;/a&gt; — LibreFang is an open-source agent operating system written in Rust.&lt;/li&gt;&lt;li&gt;&lt;a title="OpenHarness" href="https://github.com/HKUDS/OpenHarness" rel="nofollow"&gt;OpenHarness&lt;/a&gt; — OpenHarness is an open-source Python implementation designed for researchers, builders, and the community.&lt;/li&gt;&lt;li&gt;&lt;a title="Microsoft&amp;apos;s Newest Open-Source Project: Runtime Security For AI Agents" href="https://www.phoronix.com/news/Microsoft-AI-Agent-Governance" rel="nofollow"&gt;Microsoft's Newest Open-Source Project: Runtime Security For AI Agents&lt;/a&gt; — Microsoft proclaims their new open-source project is the first toolkit that addresses all ten agentic AI risks identified last year by the OWASP&lt;/li&gt;&lt;li&gt;&lt;a title="Top 10 Risks and Mitigations for Agentic AI Security - OWASP Gen AI Security Project" href="https://genai.owasp.org/2025/12/09/owasp-genai-security-project-releases-top-10-risks-and-mitigations-for-agentic-ai-security/" rel="nofollow"&gt;Top 10 Risks and Mitigations for Agentic AI Security - OWASP Gen AI Security Project&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="googleworkspace/cli: Google Workspace CLI" href="https://github.com/googleworkspace/cli" rel="nofollow"&gt;googleworkspace/cli: Google Workspace CLI&lt;/a&gt; — One command-line tool for Drive, Gmail, Calendar, Sheets, Docs, Chat, Admin, and more. Dynamically built from Google Discovery Service. Includes AI agent skills.&lt;/li&gt;&lt;li&gt;&lt;a title="Tunarr API Reference" href="https://tunarr.com/api-docs.html#latest/tag/channels" rel="nofollow"&gt;Tunarr API Reference&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Euro-Office launches as Europe&amp;apos;s open-source Office rival" href="https://itbrief.co.uk/story/euro-office-launches-as-europe-s-open-source-office-rival" rel="nofollow"&gt;Euro-Office launches as Europe's open-source Office rival&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: single-file-cli" href="https://github.com/gildas-lormeau/single-file-cli" rel="nofollow"&gt;Pick: single-file-cli&lt;/a&gt; — CLI tool for saving a faithful copy of a complete web page in a single HTML file (based on SingleFile)&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: html-to-markdown" href="https://github.com/JohannesKaufmann/html-to-markdown" rel="nofollow"&gt;Pick: html-to-markdown&lt;/a&gt; — Convert HTML to Markdown. Even works with entire websites and can be extended through rules.&lt;/li&gt;&lt;li&gt;&lt;a title="Pick: skim" href="https://github.com/noblepayne/skim" rel="nofollow"&gt;Pick: skim&lt;/a&gt; — Turns any HTML page into clean markdown.&lt;/li&gt;&lt;/ul&gt;</description>

The expensive, challenging, and humbling journey with open source agents.

661: Sink Your Claws In

An open show powered by community LINUX Unplugged takes the best attributes of open collaboration and turns it into a weekly show about Linux.


LINUX Unplugged

Details

Recent Episodes