r/cachyos • u/fogeke88 • 14h ago
Review CachyOS is adding a dedicated EACv2-compatible kernel (`linux-cachyos-eac`) plus a Secure Boot setup guide so users can optionally meet Epic’s new Easy Anti-Cheat Linux v2 requirements without changing their normal optimized kernel.
https://github.com/CachyOS/linux-cachyos/pull/1084167
u/Papa_Hube 14h ago
Nice. Good for anyone that wants that choice.
73
u/MehEds 14h ago
I dunno why people can't appreciate the choice. Even if you abhor AC practices of late, a choice is always better than none.
If we want Linux gaming to grow, stuff like this is needed, and you can always not install that kernel anyway.
13
u/Papa_Hube 14h ago
Agreed. I won't use it myself but being able to do something is always better then not being able to.
8
u/Aggressive-Lawyer207 12h ago
stuff like this is needed.
That is what gaming corporations want you to think. What was wrong with just the server-sided/clientside anticheat operating in a userland? Do we really need these rootkits to be running in our system all the time?
If PC gamers keep accepting these anticheats, eventually gaming companies will follow suit and do the same thing. that's gonna force PC gamers to just use x86_64 cpu instead of ARM64 or to not sandbox their games. And then the gaming industry will completely fail just like what is happening already.
7
u/PM_ME_DND_FIGURINES 9h ago edited 7h ago
The issue was that they didn't work. You can actually see this, right now. Deadlock and CS2 are two of the only current competitive games on the market doing server-side anticheat. CS2 has had a bad cheater problem for a very long while, and Deadlock already has a fairly small, but growing cheater problem.
Cheaters are an unacceptable problem to players. It can and provably does drive players away in DROVES. If you want competitive multiplayer games to be a viable thing (whether you personally like them or not), this has been the only mostly-functional solution we've stumbled on so far.
I have my own problems with EACv2 (mainly that being Epic right now, it's 100% going to be vibecoded slop). But the way they have gone about this (requiring the bare minimum security features and tying it to a trusted kernel so you can just kernal swap instead of requiring a specific locked down distro) is genuinely very in the spirit of Linux. If you don't like it, don't run the kernel. They've never required this stuff for singleplayer games and they're not randomly about to start.
My real hope is that at the very minimum, this will kickstart distros into better supporting Secure Boot, which is a genuinely decent security feature that probably should have become standard in Linux years ago
4
u/IlyichValken 8h ago
What was wrong with just the server-sided/clientside anticheat operating in a userland?
The problem is that we're so far down the shithole with anticheat that literally no company that thinks they're worth anything is ever going to back off of kernel level AC.
10
u/AlliedSalad 11h ago
I don't think EAC2 is a rootkit though.
From what I understand (and I am no expert, so I'm open to correction), all it does is look at the kernel to make sure it's signed by a trusted source; but does not actually have kernel-level access.
2
u/Papa_Hube 10h ago
You could critique this voice also in the direction of Valve. May I remember you what they did with HL2? With the "gift" of Steam Works?
As much as I hate it personally, money has to be made, otherwise nobody would make games. And it's their rules we have to follow if we want to consume the games.
-2
u/ChadHUD 13h ago
If gamers who switch to Linux hold there ground eventually game companies cave. We caved the first time epic threw out a half baked vibe coded kernel anti cheat lite. (Which they reserve the right to make worse). If gamers want to be free of game publishers trying to sneak into there systems to mine them. They have to say no. This is the start of the shitificarion.
20
u/queenbiscuit311 10h ago
I hate kernel anti cheat but I also like playing video games with my friends so I appreciate the choice
-9
u/ChadHUD 6h ago
You had the choice. Its called dual boot that other OS. :)
9
u/queenbiscuit311 5h ago
and now i don't have to keep it around at all and i get 300gb of ssd space back. what's the downside here?
-1
u/ChadHUD 5h ago
Lots of them. One every other EAC game is going to get pushed to EAC2 by Epic. Which at some point is going to mean tons of games that currently work on Linux will not... they will work on EAC kernel approved Linux. AND of course if Sweeney decides at some point he isn't down with Linux anymore. He can end all of those games working any time he wants. Really I don't trust this isn't just Sweeney looking to set up his old pal Gabe. I can't imagine Valve loves the idea of Tim Sweeney having any say over tons of popular game titles working or not working on their OS.
Yes i get this is a bit more convenient then rebooting into windows. I just highly doubt the ask on the part of Epic and other game developers ends with a signed kernel. I suspect at some point they are going to start requiring closed sourced kernel modules get baked in. I know they aren't saying that right now. Of course they aren't Though it was alluded to in Epics announcement.
1
u/zagblorg 22m ago
It rather depends why they're doing it. Not only is Linux gaming on the rise, but European governments are starting to adopt it for data sovereignty reasons after Microsoft deleted some International Criminal Court workers' accounts. Likely to speed up after the recent Starlink crippling debacle in Ukraine, too.
Depending how that goes, Linux might become the default choice in Europe generally, as more businesses follow suit to avoid being beholden to Microsoft. If people get used to using Linux at work they'll be more likely to use it at home. It's possible Epic have seen this coming and want to ensure they can continue to sell into the European market in future.
Of course if all this does happen, we're more likely to have governments pushing things into Linux as well, like the OS level identity verification stuff that's becoming law in some US states, and seems likely to be forced in the UK, Australia etc. soon too.
19
u/mcronline 14h ago
Choice is good. I certainly think its a great optional addition. I also have a question...If I opt for the cachyos-eac kernel and install my multiplayer games etc etc.. when updates come will it then default to the eac kernel or is there a way to make it default. I ask because I love this OS and its a rolling release, so updates come thick and fast.. I am lazy and don't want to be selecting the eac kernel manually each time (lazy i know).
7
u/ChadHUD 13h ago
It would be like any other kernel. You can install as many as you like. Most of the boot loaders will default boot the last kernel you used. On updates we don't know cadence on signed kernel updates. I would assume kernel updates will be slower. But you would have to ask the cachy devs about that. Of course we also don't know epics end game here. They are talking about kernel modules. Which I am sure will have required versions and likey introduce all sorts of bs. Obviously we are talking closed modules. I expect a crash fest of crap that epic eventually a walks from. Braking every eac game that adopts this.
5
u/FlamesDoHelp 11h ago
wait would this mean I could play wardogs with my friends? Because as far as I’m aware that game uses EAC.
4
u/BigOlFortune 10h ago
No and it doesn't it uses elytra a custom anti clean that currently had no Linux support during the beta they had EAC and it actually worked on linux
1
40
u/C0rn3j 14h ago edited 12h ago
Invasive kernel-level anticheat needs to go, adopting secure boot in general is nice, but it's not so nice when it's to support just Epic, which explicitly intends to run closed-source kernel-level eBPF modules.
If I can't sandbox the game, it ain't going to be running on my system.
Normalizing giving companies access to your entire system is horrible for the ecosystem.
A lot of game companies were just fine running server-side AC and user-level client-side AC, now you're giving them reason to put rootkits into people's systems.
And no, eBPF is not some silver bullet that's severely limited.
It is limited, but even within its limitations, you can still escalate any user to root or hide malicious processes from being viewed, as existing rootkits abusing eBPF already do.
https://github.com/pathtofile/bad-bpf#sudo-add
EDIT: Looks like Fedora is working on enforcing only allowing LSM eBPF modules, which would solve most of the problems I have with letting Epic do this.
16
u/ghost103429 13h ago
EAC v2 doesn't use regular ebpf instead it uses ebpf-lsm which can't modify API requests instead it can only return an allow/deny nor can it override denials from selinux/apparmor.
So no it can't function as a traditional rootkit and the rootful systemd unit used to load it can be further confined by selinux/apparmor.
0
u/C0rn3j 13h ago edited 12h ago
it uses ebpf-lsm
Re-reading their announcement, you seem to be right.
I'll take the issue of even the LSM module being able to exploit bugs to gain further access - which is a vast improvement over deliberate guaranteed features allowing such - aside, for now.
However, what is enforcing them to only use LSM, and preventing them from loading another module type with issues I outlined above?
You cannot let Epic keep watch over Epic - who is going to guarantee that they're only getting access to this eBPF module type and that they can't just rugpull it later and replace it with a bad eBPF module?
EDIT: It looks like Fedora had the exact same concern - https://fedoraproject.org/wiki/Changes/UnprivilegedEBPFRBACDaemon
EDIT2: Attaching a reply to the now-deleted comment of yours since I already bothered to write it:
So there is nothing currently preventing them from doing the above, and everything in my initial post is valid.
If the ebpf program submitted to ebpf-lsm by EAC v2 doesn't show up or isn't viewable it'll be an obvious tell that malicious activity is happening through it.
You mean querying info on a system where the module already launched, helped exploit your system, and fully masked its actions?
Surely you see the problem with that, the system is already compromised in that scenario.
an ebpf-lsm program can be written to load at boot restrict and EAC v2 to only the BPF-PROG-TYPE-LSM.
If something akin to that were a guarantee to exist, that'd be neat.
It does look like there is a possible good path forward, it just needs to be taken.
2
u/MagazineSilent6569 14h ago
War dogs
5
4
u/Tjccs 13h ago
Some people rather not have cheaters and their games and give away their security.
I'll honestly say I don't think server-side anti cheats are good enough YET but i sure hope they become good and the norm soon enough
5
u/JohnSmith--- 13h ago
There will still be cheaters even after people give away their security.
All paid private cheat forums focus entirely on Windows. Not even cheaters use Linux even if it’s just user-space right now.
Windows has the most draconian kernel level anti-cheats known to man, yet there are still cheaters. Even if you run an approved kernel signed with approved keys by Epic and Microsoft on Linux, you will still encounter cheaters.
2
-2
u/PruneNo6968 10h ago
That's sad, yes. Few idiots like to ruin it for everyone. However what is the alternative? Kernel level anti cheat exists for a reason, it's at least a bit more secure.
-4
u/C0rn3j 13h ago
I'll honestly say I don't think server-side anti cheats are good enough YET
Multibillion corporations rely on them just fine.
Some people rather not have cheaters and their games and give away their security.
Can I see this magical game with zero cheaters? All games have cheaters, no matter the measures they take.
Don't let anyone sell you or anyone else on the idea that having corporations own your device is okay.
3
u/RaspberryMotorZZZ 12h ago
adopting secure boot in general is nice, but it's not so nice when it's to support just Epic
Its purpose isn't just for game anti-cheat software but thanks for letting the world know how little your knowledge about the purposes and functioning of secure boot is.
1
u/IlyichValken 8h ago
That sentence doesn't imply that secure boot's only purpose is for anti-cheat software.
In your hubris of trying to sound smart and informed, you're showing your ass in that you can't actually comprehend what you read.
1
u/mdedetrich 19m left
This is so misguided it’s not funny. Server side anti cheat cannot work for a whole class of games (I.e. FPS) because in these kinds of games, movement/vision is calculated on the client, not on the server.
This is done because the games would be unplayable otherwise, not everyone has a fiber connection with single millisecond latency in the same country.
In summary, most games don’t run like a dumb terminal. Even WoW did movement calculations on the client (which is why speed hacks exist to this day).
The only way to properly get around this is to do what EAC V2 is doing, it’s technically possible otherwise. Also FYI, the reason why some games dropped support for Linux EAC is that Linux EACv1 worked in user space and because of this, it could easily be spoofed and cheaters were using this to get around EAC on Windows
1
u/kkassius_ 13h ago
you must be really ignorant on why these security features even added to hardware jesus if you dont want it just dont play the game idj what you smoking
-6
u/C0rn3j 13h ago
just dont play the game
That's what I have been doing til now, it's not like I had a choice?
But now distribution maintainers are letting corporations put rootkits into ignorant people's systems, normalizing people not being in control of their computers.
You don't need to care about Fortnite or anything from Epic for that matter for the consequences to hit you all the same, as the frog is being slowly boiled.
2
-4
u/JohnSmith--- 13h ago
They must really, REALLY want to see people’s KeePassXC databases in plain text in memory clearly, so they can sell the data to data brokers.
Gotta see what’s on that password database at all costs. eBPF or not, that’s the ultimate goal. Not preventing cheaters.
Same EAC v2 that permanently activates a Vulkan layer with invisible pixels on Windows. So it knows exactly what you’re looking at. Banking, porn, doesn’t matter.
I wonder if that’s also to prevent cheaters… Makes you think, huh?
37
u/GoldenX86 14h ago
Neckbeards acting as if secureboot is bad in 2026...
11
u/noobjaish 14h ago
You're expecting decency and rationality from clowns dude
9
u/GoldenX86 14h ago
Sadly it's like 80% of the Linux community is composed from clowns. From outdated Microslop haters living in 2004 to rightards with Omarchy.
7
u/hm9408 10h ago
You should see the thread where they were discussing what to do https://discuss.cachyos.org/t/new-eac-v2-announcement-brings-better-eac-to-linux-curious-questions/37034?u=hamcore
Absolute mess
9
u/GoldenX86 10h ago
Is it so hard to understand that nothing here is mandatory...
Why are neckbeards hell-bent in making sure everyone using Linux suffers.
-6
u/noobjaish 14h ago
Definitely, istg I have never seen these sorts of people in Windows and Mac communities (Apple users are a special cult but even then)
3
u/GoldenX86 13h ago
I know one that gets ANGRY when you name the current AI situation in MacOS/iOS as "the Apple Copilot moment"
Apple fanatics are a sect.
9
u/babayaro53 14h ago
So noob here, can i play faceit? If yes im going to remove windows from my life
11
3
15
u/-Badger3- 14h ago
Awesome news for me. Fortnite is literally the only thing keeping my Windows partition installed lol
1
5
u/GBAbaby101 14h ago
So if I'm understanding right, it would be on boot we have our bootloader options like now with the normal, lts, and snapshots (along with whatever else one may have), and we just choose the eac version for our kennel level AC. And then when we want to use our system normally, we just reboot and choose our normal option and the AC will just be inactive?
If this is accurate, it certainly will be annoying to do reboots just to play a game, but as long as any kernel level AC is restricted to an eac boot option and doesn't touch anything in the normal boot environment, I think i can be fine with that.
3
u/Confident_Hyena2506 14h ago
Wait until people find none of the extra modules they added will load then - so things like motherboard sensors and other stuff won't work. Also things like different nvidia drivers versions, if you don't use the cachyos one.
1
u/IlyichValken 8h ago
it certainly will be annoying to do reboots just to play a game
Literally one of the main reasons I was saved from even trying out Valorant was Vanguard with all its bullshit
1
u/GBAbaby101 7h ago
Ya :/ I joke about it a lot with friends, but when I swapped to Linux last year, I have been saying, "Ah, finally, I can break my toxic League addiction", and I seriously am on the fence of whether or not I would return to games that require such AC because of that friction point of needing to boot into a specific build of the OS.
-5
u/Amazing-Pattern-6125 14h ago
i don't even know why they need this separate option, all it needs is a signed kernel image and loading the BPF module.
3
u/ghost103429 13h ago
The default kernel used by CachyOS isn't signed and instead depend on MoK for secureboot, so they need this alternative option to work with EAC v2.
6
u/NotThatPro 14h ago
So now we could have 3 options when booting - latest, lts and eac? I'm saying 'could' because it should be opt-in, right?
21
u/noobjaish 14h ago
Ofcourse it's opt-in why would they even force everyone to install a kernel lol
10
u/madman404 13h ago
Sometimes people hear "anti cheat" and their minds immediately blank and assume the worst. Blame grifter fearmongering or something, I honestly don't know.
2
-1
u/NotThatPro 13h ago
Exactly, but how would they do it? Via the "welcome to cachy os" GUI or some other user friendly way, because i already have cachy installed and I'm sure that there will be an option in the fresh install GUI, I'm more interested in users that are already using it. Yeah i know it's always possible via terminal, not my point. Accessibility is the point, and clear messaging to the users that don't know better.
5
2
7
6
u/TWS_Mike 14h ago
These changes will bring a lot of people to Linux and I love it. There are few games I'd like to play but I won't dual boot. I can live without few games even if I'd like to play them...
-2
u/ChadHUD 6h ago
This is still a form of dual booting unless your just going to run the EAC kernel all the time.
I can't help but feel this is Sweeney looking to screw over his old pal Gabe.
Get all the Linux people to setup EAC2. Get all the unreal developers using EAC now that all work fine in Linux without this BS to adopt EAC2. Then you create a fake flood of Linux cheaters and say oh no oh no oh no we have to Stop Linux support right now. Breaking a ton of games that have all worked fine up till now. Followed by Sweeney yelling from the roof tops, on X in game publications everywhere he can that Linux is full of cheaters and Steam/Linux is the devil come back to windows and the Epic store where its safe. :/I would like to think I'm being paranoid... but the way they announced this with a "we are talking to Valve about SteamOS" tells me they are disingenuous as hell.
4
u/TWS_Mike 2h ago
You absolutely are paranoid. All Swine wants is to sell more games and more of his other products on other platforms...
No one can deny Linux growth...it came to a point where they cannot ignore it...they didn't ignore it in the background for a while and now it's just public.
2
2
u/A_Buttholes_Whisper 14h ago
Non gamer here. What the hell does this mean?
11
u/MagazineSilent6569 14h ago edited 13h ago
Paving the way for more games to come to Linux. Various titles such as Fortnite, BF6, War Dogs and League Of Legends are restricted to windows / macOS due to lack of kernel level anti cheat.
2
u/A_Buttholes_Whisper 14h ago
Oh ok thanks
4
u/TheSnapper09 11h ago
it's optional so if you don't care about games, let alone anti cheat protected ones, you can live peacefully
some can actually live peacefully ehehe
1
2
u/NightCulex 12h ago edited 11h ago
I assume this wouldn't work with if your using the x1 wireless dongle. I don't think it's a big deal tbh. 41% of EAC games already work. the other half is broken and about 5% are denied. ie. Destiny 2, Apex Legends, GTA V. EAC only stops the low effort cheating anyway.
3
u/Illustrious-Gur8335 14h ago
Will they add instructions to set up shim for secure boot? Cos adding your own keys to the BIOS may cause some games to flag as cheating
3
u/Nalin8 10h ago
Yes, they are working on draft documentation on GitHub. It looks like
systemd-bootandLimineare the current targets.Liminesupport actually uses a side-by-side install ofsystemd-bootin its own directory to avoid that whole issue with your self created keys. Of course, the instructions are very much a WIP and there are a bunch of TODO's everywhere, and there appears to be discussions to create various helper scripts for it.1
u/Kaoll397 9h ago
Wait, are they changing how it works? I already run Secure Boot + TPM2 with limine on my cachy install. There's already instructions for this process and I followed the step by step instructions on the Cachy wiki.
2
u/Andoragh 14h ago
I'm still pretty new to linux and have only been running Cachy for a few months, so I have a question about how it works.
As far as I understand it, Cachy runs on a modified kernel that offers some advantages for gaming.
Now, another kernel is being implemented that doesn't include these modifications, so that everything is clean for Epic's anti-cheat system.
So to play the game, I'll have to switch to this EAC kernel when booting, right?
What exactly am I losing by running this kernel instead?
I've always thought that what makes Cachy so special is precisely the way it is.
As I said, this is probably a total noob question, since I'm definitely not a linux pro.
8
u/Exotic_Accident3101 13h ago
Ok to simplify things,
This isn't the default kernel, this is a kernel that would be used if you want to play Epic games like fortnite on linux.
It should have the default stuff from cachy os but signed by them and you should have secure boot enabled.
This will allow epic to verify that you are using a safe kernel to launch the game. Easy enough?
3
u/SupehCookie 7h ago
So just swap when not playing Fortnite? Why is the eac so bad than?
1
u/Loewi_CW 2h ago
Some people either don't understand what's happening or they hate everything that has something to do with kernels and anticheat.
2
u/Prudent_Move_3420 10h ago
this is a good way, just add one kernel that‘s compatible and everyone else can stay on the normal kernel
2
u/Aggressive-Lawyer207 12h ago edited 12h ago
I suppose that's good for Epic Games players as long as they welcome an invasive anti-cheat like EAC with open arms... The same anti-cheat that's forced players into running games with EAC onto their barebones PC because if you run it into a VM, it crashes the game and flags your system as an incompatible environment. Look at Helldivers 2 for example. Ever since AH switch to a different anticheat, ARM64 users can no longer play it because it's giving errors that x86_64 is required. People are also raging over no longer being able to isolate Helldivers because of EAC.
The sooner people reject EAC and just kernel anticheats in general while going back to server-side/clientside anticheats operating in a userspace, the better we are off. But that's only wishful thinking
4
u/__pickle_rick 11h ago
Ah yes the highly competitive online multiplayer Helldivers? Or wait, I guess its just a casual PVE game that requires EAC.
1
1
1
u/BedrockBen101 13h ago
Pretty cool. I won't use it since knowing me I'd screw something up with Secure Boot and lock myself out of my PC lol (I had Windows installed previously too so the keys are already signed with Windows... I just don't want to go through that hassle to play 1 game that I don't even play a ton anyway)
3
u/Humble_Economics9145 13h ago
you can just disable secure boot if you can't boot with it turned on..
1
u/Aimless115 13h ago
Its safe to assume other companies will follow same path has epic mostly because the ground work will be done and paid be someone else and they can just copy Javelin for example EA wanted someone to work on a Linux version before the acquisition. Valorant is probably the only one with 0 chance of having a Linux version even with this
1
u/BulletDust 3h ago
Personally, I'd love to be able to play BF6 under the OS of my choosing. Hell, I'd like to be able to play BF1 and BFV once again after Linux support was revoked in favor of an OS with a more effective AC solution...
1
u/MaxYeena 12h ago
Okay but will it work on the Handheld Edition of CachyOS?
3
u/TheSnapper09 11h ago
why wouldn't it?
2
u/MaxYeena 6h ago
I'm hopeful, I'd love to play Fortnite on my Steam Deck
1
u/TheSnapper09 2h ago
considering both steamos and CachyOS handheld are just UIs on top of a normal Linux system I'm pretty positive it's gonna work
1
u/blendernoob64 6h ago
I use the CachyOS LTO kernel on Red Hat Enterprise Linux 9 with secure boot via a copr so I can get more hardware support and ntsync. It’s an amazing setup for 3D animation and gaming. Unfortunately I do have to sign the kernel and Nvidia drivers myself so I do not think this would work for the future of anti cheat on Linux. I am thinking if EAC2 works well, other developers are going to follow suit with their own implementation of ebpf based anti cheats (server anti cheat is a lost cause and it seems developer will never ever ever touch that stuff with a ten foot pole) I so hope we can use this kernel on distros other than CachyOS.
1
u/RoyalSquarious 13h ago
So, what’s the deal with secure boot? I’ve run bazzite and cachyOS in the past year. Now on cachy, and in both cases I had secure boot enabled after install with no issues. Is that not a common experience? Why is enabling secure boot not common? Still a Linux noob so I don’t get it.
2
u/drake90001 10h ago
You have to go out of your way to do so, importing the keys manually after configuring secure boot to use custom mode and then setup mode.
2
2
2
u/Exotic_Accident3101 13h ago
Not all people does this.
I also run secure boot but i found out tgat it's not a common practice in linux community
1
u/skippyalpha 12h ago
Yeah I already had secure boot enabled on cachyos as well, went through the steps on their wiki
0
u/TheSnapper09 11h ago
I don't get all the hate, it's an OPTIONAL option
anyways I won't install it until I'll have read all the documentation
-6
u/ChadHUD 14h ago
This isn't good for Linux gaming. I'm sorry so many believe so.
Epic is going to convince everyone using unreal engine to implement this, then as they are a bunch of flakes when they decide Linux is a PITA or whatever and abandon the effort. A bunch of games we had working fine are going to end up being an issue.
We should have been a hard no on all of this.
12
u/MrTyperoi 14h ago
Ah yes, the classic Linux strategy: reject compatibility today because a company might abandon us tomorrow. Galaxy-brain stuff.
CachyOS is making it optional, not holding a gun to your kernel. Nobody's forcing you to use it. And if Epic eventually drops Linux, your current outrage won't magically make those games work.
But sure, let's boycott potential compatibility before it even becomes a problem. That'll show them.
→ More replies (1)-5
-3
u/WealthyTuna 13h ago
I wouldn't add secure boot to my Linux machine if cachyos made it mandatory. I left windows because of that bs. Who the hell wants to play a game made by a lunatic who claims we should all accept Ai and never be told when it's used.
3
u/AntiGrieferGames 13h ago
CachyOS itself is not mandatory, its just the anti cheat shit, that are more spyware than you ever think!
5
u/Exotic_Accident3101 13h ago
You don't have to, this is a kernel for users who want to play epic games. Not the default kernel anyway.
-3
u/NerdyGuy117 13h ago
who claims we should all accept Ai
What does Linus have to do with this?
→ More replies (3)
-1
u/hagdush 8h ago
I use Linux just to run from this bullshit, and now cachy is implementing this just to back a Winny company that makes a vibecoded launcher on Linux ? I'm so glad that i am not using cachy rn
4
2
2
u/ProbablyM_S 8h ago
Then use something else now...? All major distro's will be adding it 🤡
→ More replies (5)1
-4
u/Educational-Fox-5789 14h ago
I hope CachyOS eventually makes its main optimized kernels EACv2-compatible instead of requiring a separate kernel.
I'm curious whether any of the kernel configuration options required by EACv2 conflict with CachyOS's existing performance optimizations. If so, maintaining a separate kernel might be unavoidable.
CachyOS already supports configuring Secure Boot, so if kernel signing and the associated trust requirements are the main obstacles, hopefully there's a way to integrate EACv2 compatibility into the existing kernel workflow without sacrificing those optimizations.
4
u/Crafty-Corvid 14h ago
It sounds like the main reason it requires a separate kernel is that lockdown mode makes some features like hibernate to disk impossible(at least for now).
→ More replies (7)1
u/ghost103429 13h ago
Just as long as the performance optimizations don't tamper with ebpf-lsm it should run fine.
(Ebpf-lsm, is a security module created by the kernel team to extend the functionality of apparmor/selinux or stand alone by itself and the security mechanism EAC v2 want to use to ensure nothing can read in-game memory)
1
u/ChadHUD 13h ago
So many people claim to have left windows over Microsofts mitts in their systems. Now here they are welcoming the coming of kernel level anto cheat modules. If people really want this yes it needs to remain a it in seperate kenrrel. Fuck I hate that it's looking like I have to leave a disto I quite likem seems like the majority are welcoming this trash. No game is worth this. I thought people coming to Linux would hold the line at least a little. Epics first half serious overture and people are lining up to let game publishers root their systems all the time. Lol at least as a seperate kernel you can choose to only use it when gaming.
And for what it's worth if you really want to only use a eac kernel YOU could just choose to uninstall your other kernels.
→ More replies (3)
0
0
u/Illustrious-Gur8335 4h ago
Life will get very interesting for Nvidia and zfs users with the EAC kernel if the proposed changes go through as is!
Since the kernel only loads modules that were signed when it was compiled...
Dkms can't be used with EAC kernel, thus there will be EAC Nvidia and zfs modules too. No virtualbox EAC modules haha
4
u/BulletDust 3h ago
Canonical already sign their Nvidia drivers in the case of pre built binary packages, and they're the latest production branch that in my experience run better than the latest feature branch.
I can't see this being a huge problem.
229
u/madman404 14h ago
It is kind of funny that at least two people immediately ran to the GitHub PR to soapbox about how they'll uninstall CachyOS with both no understanding of the issue itself and no knowledge as to whether or not the eac kernel would be default (it won't).