惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Spread Privacy
Spread Privacy
P
Palo Alto Networks Blog
P
Proofpoint News Feed
AI
AI
Help Net Security
Help Net Security
S
Securelist
T
Troy Hunt's Blog
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
C
Cisco Blogs
Scott Helme
Scott Helme
Hacker News - Newest:
Hacker News - Newest: "LLM"
Vercel News
Vercel News
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
B
Blog
GbyAI
GbyAI
Recent Commits to openclaw:main
Recent Commits to openclaw:main
D
Darknet – Hacking Tools, Hacker News & Cyber Security
P
Proofpoint News Feed
S
Security Affairs
Cisco Talos Blog
Cisco Talos Blog
AWS News Blog
AWS News Blog
T
Tenable Blog
H
Help Net Security
NISL@THU
NISL@THU
F
Fortinet All Blogs
博客园_首页
G
GRAHAM CLULEY
L
LINUX DO - 最新话题
P
Privacy International News Feed
G
Google Developers Blog
博客园 - Franky
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
Security Archives - TechRepublic
Security Archives - TechRepublic
The Register - Security
The Register - Security
L
LangChain Blog
aimingoo的专栏
aimingoo的专栏
T
Tor Project blog
P
Privacy & Cybersecurity Law Blog
量子位
C
Cyber Attacks, Cyber Crime and Cyber Security
Forbes - Security
Forbes - Security
S
Secure Thoughts
Simon Willison's Weblog
Simon Willison's Weblog
D
Docker
Recorded Future
Recorded Future
博客园 - 三生石上(FineUI控件)
L
Lohrmann on Cybersecurity
T
Tailwind CSS Blog

Lobsters

CIFSwitch: a non-universal Linux local root vulnerability RIPE NCC session fixation: poaching logins with an Atlas probe GNOME 2.20 but its Web Components Agentic Search for Context Engineering – Leonie Monigatti Garnix is shutting down [not OC] akashina.tngl.sh/jjc Concerning Emacs (and Jazz) Nitpicking the shell history scene in ‘Tron: Legacy’ What's cooking on SourceHut? Q2 2026 The tenth OpenPGP email summit Package managers that package package managers Clojure on Fennel part three: parsing WordPress at 23 Finding Miscompiles for Fun, Not Profit GitHub - creusot-rs/creusot: Creusot helps you prove your Rust code is correct. Announcing Rust 1.96.0 | Rust Blog A Love Letter to Neovim sqlite AGENTS.md Am I a Bad Friend? CSS vs. JavaScript • Josh W. Comeau Erlang Ecosystem Foundation - Supporting the BEAM community A brief note about slot access cost in Common Lisp Keyboard latency probe Rethinking the GNOME clipboard issues Back to the Building Blocks’ Building Blocks Tech Notes: Theseus: translating win32 to wasm Fast is better than slow Content-addressed Rust builds (or, what kache actually caches) Intent to Prototype: Embedding API Canada’s Bill C-22 and the security cost of collecting more data 5 PostgreSQL locking behaviors that trip people up okmij.org Stop advertising in your commits! | AksDev GitHub - mplsllc/macsurf: A modern web browser for Classic Mac OS 9 PowerPC. Real CSS3, ES5 JavaScript, native HTTPS — built with CodeWarrior on the Carbon API. Introducing DoomBench - Can Your Data Stack Run DOOM? What are some of your favourite developer tools? Building a Scalable Ingestion Pipeline with Temporal (Part 1) Converting shallow Git bundles into normal repositories Are you a member of any professional associations? What is a harmonic? An interactive comic about additive synthesis How Virtual Tables Work in the Itanium C++ ABI Using SwiftUI to Build a Mac-assed App in 2026 Rust (and Slint) on a jailbroken Kindle. ~jack/lambda-on-lambda - Serverless Haskell on AWS - sourcehut git Human proof for FOSS contributions Extremely simple internet radio controlled via IRC Announcing BABLR Splitting Konsole views from Helix to run tools | AksDev GitHub - yugr/rust-slides Serving files over HTTP three ways: synchronous, epoll, and io_uring update docs with information about building with build.py (#979) · astral-sh/python-build-standalone@c9c40c5 A Simple Makefile Tutorial On C extensions, portability, and alternative compilers Switching to Colemak | Pedro Alves Just How Bad Was The Intel IAPX432? Nix's Substituter List Is Not a Routing Table Accelerating copy_if using SIMD Lambda on Lambda: Serverless Haskell on AWS | Blog Announcing feed-repeat v1.0 Scaling Akvorado BMP RIB with sharding EYG news: A host of CLI improvements, new guides and new effects The social contract of writing JS Crossword C array types are weird; and related topics Flatpak will depend on systemd – OSnews Migrating from Go to Rust | corrode Rust Consulting A portentous reunion Vivado Licensing Options How my minimal, memory-safe Go rsync steers clear of vulnerabilities the entropy layer of a wavelet codec, on its own GitHub - nferhat/fht-compositor: A dynamic tiling Wayland compositor. Debian SE Linux and PinTheft Does bulk memmove speed up std::remove_if? (No.) 声明式部分更新 | Blog | Chrome for Developers Fully in-browser container builds Dianne Skoll's Web Site - Remind The Architecture of Open Source Applications (Volume 1)Berkeley DB Pardon MIE? - ironPeak Blog “Long-Term Support” doesn’t mean what you think Jira IS Turing-Complete May I recommend thinking of Emacs as your Fortress of Solitude hershey Floodgap Gopher-HTTP gateway gopher://thelambdalab.xyz/1cuneiforth/ HP QuickWeb, Singular And Pointless That one time I used Go panics for flow control A new suite of modern tools coming for editing and publishing RFCs From the Tabletop… The Digital Antiquarian Building a Host-Tuned GCC to Make GCC Compile Faster Are we self-sovereign PKI yet? Claw Patrol: an open-source security firewall for agents | Deno Revised^7 Report on Scheme, Large: Procedural Fascicle Draft is now public A Network Allow-List Won't Stop Exfiltration — André Graf From AFSK to Goertzel – µArt.cz Software For My New Home Server Introducing Neptune: Direct3D virtualization for QEMU AI Agent Bankrupted Their Operator While Trying to Scan DN42 - Lan Tian @ Blog mimalloc: A new, high-performance, scalable memory allocator for the modern era Making wl_shm fast The Soul of Maintaining a New Machine - Third Draft | Books in Progress What is Git made of?
UseKmsconVTConsole - Fedora Project Wiki
fedoraprojec · 2026-06-19 · via Lobsters

Use kmscon as default VT console

Summary

This change is to replace the kernel console fbcon with the userspace console kmscon in Fedora, to provide an enhanced and more secure console for Fedora users.

The long term goal is also to deprecate fbcon/fbdev emulation in the kernel, and this is the first step in this direction.

Owner

Current status

Detailed Description

fbcon is a terminal emulator in the kernel, which is not well maintained (it lost scrolling support a few years ago due to a CVE), and requires a fbdev emulation layer in the kernel, as all GPU drivers are using the newer drm interface. It still requires userspace executable like getty and bash to be useful.

kmscon is a simple terminal emulator based on linux kernel mode setting (KMS). It can replace fbcon for VT console, and provide better keyboard support, and better security.

This change will do the following: Install kmscon by default, and update the symbolic link /usr/lib/systemd/system/autovt@.service to point to kmsconvt@.service, to start kmscon by default when switching VT. kmscon should be the default also on non-graphical installation, as it doesn't require any graphic library (only libdrm, to access the framebuffer).

This change won't affect the installation, the boot process (like encryption password fallback), as fbcon will still be compiled in the kernel. User can still revert to fbcon if they want, or if kmscon has issue on their setup. If kmscon fails to launch, it will fallback to getty/fbcon.

Currently kmscon depends on opengl/mesa, because it has an optional opengl backend. But we don't want that on non-graphical server installation. I will split the package in two, having something like kmscon and kmscon-gl for the optional gl renderer.

Feedback

Benefit to Fedora

kmscon is more configurable, and has more features than fbcon:

  • Uses xkbcommon for keyboard layout, so it supports multiple layout, and switching between them with configurable shortcut.
  • Has better unicode support.
  • Can use pango for font rendering, and has better compatibility with double-width character https://github.com/Aetf/kmscon/pull/135.
  • Scrolling.
  • Better security, as it's a userspace program, compared to fbcon running in the kernel.
  • A crash in kmscon will make the systemd service to restart it. A crash in fbcon triggers a kernel panic.

By the time Fedora 44 is released, it may also have these additional features:

Scope

  • Proposal owners:
    • Add kmscon in default installation target.
    • Enable kmscon systemd service, for all tty, by changing the symbolic link /usr/lib/systemd/system/autovt@.service, to point to kmsconvt@.service
    • Split the kmscon package in 2, to avoid direct dependencies on egl.
  • Other developers:
  • Policies and guidelines: N/A (not needed for this Change)
  • Trademark approval: N/A (not needed for this Change)
  • Alignment with the Fedora Strategy:

Upgrade/compatibility impact

Early Testing (Optional)

Do you require 'QA Blueprint' support? Y/N

How To Test

kmscon is available in the Fedora repository, but if you want to test the latest version with mouse support, rotation support, and kmscon-launch-gui, then use this copr instead, it has builds for F41 to F44 rawhide:
sudo dnf copr enable jfalempe/kmscon
Install kmscon with:
sudo dnf install kmscon kmscon-freetype
If you want to test the opengl version also install the gl plugins:
sudo dnf install kmscon-gl
then make it the default VT with:
sudo ln -s /usr/lib/systemd/system/kmsconvt@.service /etc/systemd/system/autovt@.service
You can edit the file /etc/kmscon/kmscon.conf, to customize kmscon. Then restart the service with:
sudo systemctl restart kmsconvt@tty3
Press Ctrl+alt+F3 to switch to the VT console. Login and check if it's running kmscon with ps aux | grep tty3.
You should see a kmscon process, like this:
bash root 52095 0.0 0.0 115180 16868 ? Ssl 17:37 0:00 /usr/libexec/kmscon/kmscon --vt=tty3 --seats=seat0 --no-switchvt --login -- /sbin/agetty -o -p -- \u --noclear -- -

Check that you can scroll back with page up/page down.
Check that you can increase the font size with "ctrl +" and decrease with "ctrl -"
Check that your terminal applications like top, nano, vi, ... work as expected.

User Experience

Improvements

  • The look & feel of the VT console, will be much better.
  • Users will be able to configure special fonts, and use more unicode characters.
  • Users will have the same keyboard layout has what they have in graphical environment. (Currently the kernel keyboard layout are different).
  • Users will be able to scroll in the console.

Caveats

  • Starting graphical application from the console (like "startx") won't work, but you can work around it by using the script kmscon-launch-gui startx

Dependencies

No dependencies.

Contingency Plan

  • Contingency mechanism: (What to do? Who will do it?) N/A (not a System Wide Change)
  • Contingency deadline: N/A (not a System Wide Change)
  • Blocks release? N/A (not a System Wide Change), Yes/No

It should be easy to revert, just not install kmscon, and fbcon with getty service will be the default.

Documentation

kmscon is a bit different than fbcon, so some applications will not work on it.

Keyboard/Font

Tools that configure the kernel font/keyboard layout won't work: setfont, loadkeys, ...
Instead you can configure the font/keyboard settings in /etc/kmscon/kmscon.conf, (by default kmscon will use the keyboard config from localectl)

Mouse

Tools that override tty to add mouse support won't work too: gpm, consolation
Mouse support is now built-in kmscon main git branch.

Graphics

Starting a graphic application from kmscon also won't work directly, you need to use the kmscon-launch-gui script. (so for things like startx or startplasma).

Configuration

You can configure kmscon to your taste, by editing the file /etc/kmscon/kmscon.conf
Execute man kmscon.conf to see all option available.

Release Notes