Last few "holes" in Fedora Silverblue - libvirt/swtpm/virt-manager and systemd-homed

This is my opinion.

I think we are ready with SELinux policies for systemd-homed. Tremendous work has been done by @richiedaze , he created SELinux policies and this guide to get it working in Fedora (including Atomic variants) - Building a new home with systemd-homed on fedora

He was also worked on including proper SELinux policies to Fedora OOTB - Add support for systemd-homed by richiedaze · Pull Request #2018 · fedora-selinux/selinux-policy · GitHub. I don’t know latest updates, maybe @richiedaze will say something about it himself.

So having his guide and SELinux policies one can create and use systemd-homed managed users. If SELinux policies were in place and PAM was updated with sysyemd-homed (e.g., via authselect) OOTB, users could just create homed-managed users with homectl.

Also I’ve learned recently that some of systemd-homed related work is happening in the GNOME project:
https://thisweek.gnome.org/posts/2024/08/twig-160/

It looks like the is some work planned in GUI area, but I don’t know details, thus might be wrong.

I’d say fixing SELinux contexts, adding missing directories and enabling systemd-homed in PAM config OOTB is the MVP for systemd-homedto become usable. Of course, GUI goodies, e.g., user creation/modifications via GNOME settings, are welcome too :smiley:

1 Like