Week 9 in The Ur Project: Buildroot-7.4 with LLVM 23 and Rust 1.99, GIMP, Kdenlive, FreeCAD, Wine and emulators, working DKMS, and a CVE gate on every package. Ruby Gems packaging. New kernels. #Linux
https://ur.foo-projects.org/posts/project-status-update-week-9/Write something here...

The CVE train never stops. AI finds old flaws faster than any human can triage them. Where The Ur Project stands: identities on every package, re-scans on every disclosure, and coming: a pkg audit command that shows your own risk. - https://ur.foo-projects.org/posts/on-cves/

People asking "How can I help?" So here's an answer: Try it! read the docs, tell us what's missing, file bugs, spread the word. And possibly lend or donate hardware we could use for ports - https://ur.foo-projects.org/posts/how-can-you-help/

Buildroot-7.4 is done: new LLVM and Rust, and Sandcastle-Base builds on it now. pkg closes a gap a rogue proxy could exploit, CVE tracking routes to the right package, and GIMP, Kdenlive, ScummVM and Wine arrive. Plasma is coming to the live USB.

https://ur.foo-projects.org/posts/buildroot-cycles/

Sandcastle week 8: OBS Studio 33, GNOME Circle as its own set, Papers, fingerprint login and kernel 7.2.12. pkg now follows the system CA store, four repro failures were fixed, and lowerthird for a clean boot screen without Plymouth:

https://ur.foo-projects.org/posts/project-status-update-week-8/

It's been quite a week for security, and we're all vulnerable. What The Ur Project does about it: reproducible builds, TUF, air-gapped keys, sandboxed builds, human review of every change, fast fixes. https://ur.foo-projects.org/posts/vulnerable/

Who runs The Ur Project, and what are its plans? The new "Governance" page covers who calls the shots, talks about copyright, AI use, how members and companies partake, funding, and future plans and contingencies - covered in this page:

https://ur.foo-projects.org/governance/

An outdated system is insecure. This week a kernel flaw that lets code escape a VM, a compromised certificate authority, both fixed within hours. Dispatch gets updates out fast, but for now you still need to pkg upgrade.

https://ur.foo-projects.org/posts/updates-updates/

Remember "stateless" from Clear? It's still a thing, here's why we'll incorporate it again in The Ur Project. It still needs a better name, though!

https://ur.foo-projects.org/posts/on-stateless/

One week since launch: New images fix the ISO installer, GNOME 51 lands with more Circle apps, plus Plasma 6.8, kernel 7.2.11, faster USB boot, reproducibility fixes, proxy support in pkg and better image testing in dispatch.

https://ur.foo-projects.org/posts/project-status-update-week-7/

The Ur Project is now released!

The public announcement is on our official website:

https://ur.foo-projects.org/posts/the-ur-project-is-now-live/

Try it. Boot it. Build it. Make images. Deploy it. Build your own!

1st out of the build system - "Sandcastle" - a rolling release OS