Let's prepare at POC: "EU OS" KDE Plasma workstation for the EU public administration

Hi,
For the moment Primtux is an ISO, therefore the proposition to make it something more general.

2 Likes

There’s an Open Source In The European Legislative Landscape and Beyond dev room at FOSDEM 2025. Might be a good opportunity to discuss this further.

2 Likes

Hello,
There is an article from Eset that shows that 32 Millions of computers are still running Windows 10 in Germany. Windows 10 support is ending in October 2025 :open_mouth:
https://www.eset.com/de/about/presse/pressemitteilungen/pressemitteilungen/security-fiasko-32-millionen-computer-in-deutschland-laufen-noch-mit-windows-10/

It is perhaps the time to invest in some other solution like EU OS ?

Regards,

1 Like

No, basing off the direct Fedora images is best. It guarantees the fastest updates with no middleman or Github in between.

@rriemann I think basing off HeliumOS could be a better idea. Fedora at scale could be problematic, as there are so frequent updates.

HeliumOS bases off AlmaLinux bootc, which is similar to Fedora Atomic Desktops. The dev is working on a version based on CentOS Stream 10 afaik, not sure about the project status.

These have a way longer support period, and CentOS 10 will also ship plasma 6.

Using the official LTS kernel instead of the CentOS or AlmaLinux kernel would also be a good idea for faster updates and a shorter chain of trust.

https://copr.fedorainfracloud.org/coprs/kwizart/kernel-longterm-6.12

https://copr.fedorainfracloud.org/coprs/kwizart/kernel-longterm-6.6

Maintaining the RPM packaging for such things would need to be done in-house I assume.

Also have a look at secureblue for future security hardening steps. A lot in there can be considered essential.

1 Like

Secureblue looks promising. Especially as I also thought that BlueBuild may be a good venue and they use the same. So one could just check and import their recipes one-by-one. It also has quite some github stars…

1 Like

Yes but for professional appliances I would really base off CentOS Stream or Alma, as they are way more stable.

Fedora is not a replacement for Windows 10, Enterprise Linux is.

For a POC I would base off Secureblue, maybe? They remove RPM Firefox which is the single biggest issue with the project. Same with all uBlue Variants that have a name. And you should not use Flatpak Firefox.

It is difficult in the end. I would base off HeliumOS for more stability, and add a few secureblue things on top.

Or do it yourself, copy their build system and directly base off CentOS-Stream, Almalinux or Fedra. For shortest chain of trust and fastest updates.