Tine: A Build System That Turns Thin Air into Bootable OS Images
From Thin Air to Bootable Images: The Tine Build System
Daan De Meyer and Martin Pitt introduce tine, a new Buck2-based build system for creating cryptographically verifiable operating systems. Tine requires only git, python3, and user namespaces on the host, then bootstraps everything from pinned declarations. It builds rpm, Rust, and Go components, UKIs, and bootable images with hermetic, reproducible builds. The post explains why existing tools like mkosi, OBS, BuildStream, and Antlir fell short, and walks through building a Fedora Rawhide image with a Go tool.
tine has only three requirements on its build host: git, python3 (just for its own bootstrapping, not for production builds) and user namespaces.
- bananaquant
The other article on their blog introduces a systemd module that not only collects all hardware information, but also signs it with TPM before transmission [0].
I'm not even sure it makes much sense in datacenter conditions. And once it gets onto computers of the regular users, it would be very easy to repurpose it for spyware.
[0]: https://amutable.com/blog/it-starts-upstream-systemd-report
- amelius
Why cant we just use Nix for building anything? A unified approach to building stuff.