Coreos secure sealing

More here just want to know if there is someone can answer

Certainly not an Official Statement, most users, FSS is no longer a viable option on Fedora Core; relying on remote journal logging is the standard solution for ensuring log integrity.

Now you have one of reasons for not having Fedora Core for my server.
Actually all fedora’s have the same showstopper.

The FSS feature has been effectively disabled in standard Fedora distributions (including Fedora 43) as it is not widely used and reintroducing the dependency is considered unnecessary overhead. :frowning:

systemd v262 (released 2026-09-22) has this in its release notes: “Journal sealing/FSS support was moved from libgcrypt to OpenSSL. libsystemd no longer links against libgcrypt, and sealed journal files remain readable when sealing support is unavailable (seal tag verification is skipped in that case).”

So I sure hope to get that support as remote journal adda again one more surface for attacks and risk factors. And that means I have make also more APi and scrape etc for system alerts to pickup more things… FSS should be there by default as now bad actors can edit the logs and so on

Goes for me as well! :wink:
Thanks for the updated information I was just reading something about that, sounds promising. :crossed_fingers: