[{"data":1,"prerenderedAt":432},["ShallowReactive",2],{"navigation":3,"\u002Fspec":73,"\u002Fspec-surround":416,"-spec-description":421},[4,9,14,63,68],{"title":5,"path":6,"stem":7,"icon":8},"Goals","\u002Fgoals","0.goals","i-lucide-goal",{"title":10,"path":11,"stem":12,"icon":13},"Specification","\u002Fspec","1.spec","i-lucide-square-pen",{"title":15,"path":16,"stem":17,"children":18,"icon":62},"Proof of Concept","\u002Fpoc","3.poc\u002F0.index",[19,22,27,32,37,42,47,52,57],{"title":20,"path":16,"stem":17,"icon":21},"Overview","i-lucide-play",{"title":23,"path":24,"stem":25,"icon":26},"Container Image","\u002Fpoc\u002Fmanage-image","3.poc\u002F1.manage-image","i-lucide-layers",{"title":28,"path":29,"stem":30,"icon":31},"Server Setup","\u002Fpoc\u002Fsetup-server","3.poc\u002F2.setup-server","i-lucide-server",{"title":33,"path":34,"stem":35,"icon":36},"User Management","\u002Fpoc\u002Fmanage-users","3.poc\u002F3.manage-users","i-lucide-square-user",{"title":38,"path":39,"stem":40,"icon":41},"Fleet Management","\u002Fpoc\u002Fmanage-fleet","3.poc\u002F4.manage-fleet","i-lucide-circle-pile",{"title":43,"path":44,"stem":45,"icon":46},"Provisioning","\u002Fpoc\u002Fprovisioning","3.poc\u002F5.provisioning","i-lucide-image-down",{"title":48,"path":49,"stem":50,"icon":51},"User Data","\u002Fpoc\u002Fmanage-data","3.poc\u002F6.manage-data","i-lucide-folder-sync",{"title":53,"path":54,"stem":55,"icon":56},"Branding","\u002Fpoc\u002Fbranding","3.poc\u002F7.branding","i-lucide-paintbrush",{"title":58,"path":59,"stem":60,"icon":61},"Legacy Apps","\u002Fpoc\u002Flegacy-apps","3.poc\u002F7.legacy-apps","i-lucide-hourglass","i-lucide-code-xml",{"title":64,"path":65,"stem":66,"icon":67},"Use Cases","\u002Fuse-cases","4.use-cases","i-lucide-list",{"title":69,"path":70,"stem":71,"icon":72},"FAQ","\u002Ffaq","5.faq","i-lucide-message-circle-question-mark",{"id":74,"title":10,"body":75,"description":410,"extension":411,"meta":412,"navigation":413,"path":11,"seo":414,"stem":12,"__hash__":415},"docs\u002F1.spec.md",{"type":76,"value":77,"toc":398},"minimark",[78,92,100,105,113,118,162,166,185,189,218,222,283,287,294],[79,80,81],"warning",{},[82,83,84,85],"p",{},"This page is work in progress. Related issue: ",[86,87,91],"a",{"href":88,"rel":89},"https:\u002F\u002Fgitlab.com\u002Feu-os\u002Feu-os.gitlab.io\u002F-\u002Fissues\u002F1",[90],"nofollow","#1",[82,93,94,95,99],{},"Consider also the ",[86,96,98],{"href":97},"\u002Fuse-cases.md#european-commission-case-study","European Commission case study"," from 2005 with details on requirements and selection criteria.",[101,102,104],"h2",{"id":103},"functional-requirements","Functional Requirements",[82,106,107,108],{},"See also: ",[86,109,112],{"href":110,"rel":111},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FFunctional_requirement",[90],"Functional Requirement on Wikipedia",[114,115,117],"h3",{"id":116},"productivity","Productivity",[119,120,121,133,147,150,153,156,159],"ul",{},[122,123,124,125],"li",{},"networked\u002Fsynced folders",[119,126,127,130],{},[122,128,129],{},"per-user folders",[122,131,132],{},"shared folders (possibly with distinct permissions per user groups)",[122,134,135,136],{},"powerful mail, calendar and user directory software with either",[119,137,138,141,144],{},[122,139,140],{},"KOrganizer\u002FKMail",[122,142,143],{},"Thunderbird",[122,145,146],{},"Webmail such as OpenExchange",[122,148,149],{},"integration with enterprise-grade network printing services accessible from PDF reader, office software, email etc.",[122,151,152],{},"password manager software with integration in browser",[122,154,155],{},"multi-format compression tool (like 7zip)",[122,157,158],{},"option to deploy self-service software catalogue (like flathub)",[122,160,161],{},"good to have: electronic signatures for staff",[114,163,165],{"id":164},"device-management","Device Management",[119,167,168],{},[122,169,170,171],{},"central management of devices\n",[119,172,173,176,179,182],{},[122,174,175],{},"patch management",[122,177,178],{},"inventar function (end-of-life, software versions etc.)",[122,180,181],{},"software distribution",[122,183,184],{},"Lifecycle management",[114,186,188],{"id":187},"scalability","Scalability",[119,190,191,207],{},[122,192,193,194],{},"integration with directory service for identity and policy management as well as Single-Sign-On with either",[119,195,196,199],{},[122,197,198],{},"Microsoft Active Directory",[122,200,201,202,206],{},"a free alternative, such as FreeIPA (",[86,203,204],{"href":204,"rel":205},"https:\u002F\u002Fwww.freeipa.org\u002F",[90],")",[122,208,209,210],{},"automatic deployment of custom certificates",[119,211,212,215],{},[122,213,214],{},"import organisation-specific SSL certificates (e.g. to access intranet)",[122,216,217],{},"import of per-user certificates (e.g. for WiFi or S\u002FMime)",[114,219,221],{"id":220},"security-and-robustness","Security and Robustness",[119,223,224,241,244,252,263,266,269,280],{},[122,225,226,227],{},"software update mechanism supporting",[119,228,229,232,235,238],{},[122,230,231],{},"separate roll-out for different hardware configurations",[122,233,234],{},"non-interactive unattended updates",[122,236,237],{},"non-interrupting updates",[122,239,240],{},"roll back in cases of breaking updates",[122,242,243],{},"Software Bill of Materials (SBOMs) and vulnerability monitoring\u002Falerts",[122,245,246,247],{},"regular automated backups of (selected) user folders and application configuration data as well as restore from such backups",[119,248,249],{},[122,250,251],{},"most important apps: office software, internet browser, KDE profile",[122,253,254,255],{},"LUKS full disk encryption (FDE) supporting",[119,256,257,260],{},[122,258,259],{},"password-less unlocking of FDE (FIDO2, TPM, PCKS#11)",[122,261,262],{},"per-user or per-device secrets for FDE",[122,264,265],{},"support for Security-Enhanced Linux (SELinux) or equivalent",[122,267,268],{},"granular configuration\u002Fhardening of the browser",[122,270,271,272],{},"support for monitoring of network access (highly dependend on organisation requirements)",[119,273,274,277],{},[122,275,276],{},"web proxy?",[122,278,279],{},"VPN?",[122,281,282],{},"optional: seamless login to internet\u002Fintranet resources and applications (Kerberos)",[101,284,286],{"id":285},"non-functional-requirements","Non-Functional Requirements",[82,288,107,289],{},[86,290,293],{"href":291,"rel":292},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FNon-functional_requirement",[90],"Non-Functional Requirement on Wikipedia",[119,295,296,307,321,335],{},[122,297,298,299],{},"secure",[119,300,301,304],{},[122,302,303],{},"open source (as per project philosophy) for broad auditability",[122,305,306],{},"automation with modern DevOps paradigms (declarative or imperative) for reproducible builds and reproducibility",[122,308,309,310],{},"sovereign",[119,311,312,315,318],{},[122,313,314],{},"built to the requirements for the EU public sector",[122,316,317],{},"highly reusable (promoting sharing across organisations to permit sharing of workload and responsability between EU, national, regional and communal administrations)",[122,319,320],{},"highly customisable",[122,322,323,324],{},"sleek: efficient and eco-friendly",[119,325,326,329,332],{},[122,327,328],{},"runs smoothly on hardware procured for Windows 7 and later",[122,330,331],{},"best use of hardware features for e.g. hardware-accelerated video calls and FDE",[122,333,334],{},"caching of software packages and updates close the users",[122,336,337,338],{},"supporting the compliance with",[119,339,340,343,346,354,374,382,390],{},[122,341,342],{},"General Data Protection Regulation (GDPR) or for entities of the EU administration, the European Union Data Protection Regulation (EUDPR)",[122,344,345],{},"Network and Information Security Directive 2 (NIS2)",[122,347,348,349],{},"EU ",[86,350,353],{"href":351,"rel":352},"https:\u002F\u002Fdigital-strategy.ec.europa.eu\u002Fen\u002Fnews\u002Fcyber-resilience-act-enters-force-make-europes-cyberspace-safer-and-more-secure",[90],"Cyber Resilience Act",[122,355,356,357],{},"ISO 27001 and its national variants\n",[119,358,359,367],{},[122,360,361,362],{},"🇩🇪 ",[86,363,366],{"href":364,"rel":365},"https:\u002F\u002Fwww.bsi.bund.de\u002FEN\u002FThemen\u002FUnternehmen-und-Organisationen\u002FStandards-und-Zertifizierung\u002FIT-Grundschutz\u002Fit-grundschutz_node.html",[90],"IT-Grundschutz",[122,368,369,370],{},"🇫🇷 ",[86,371,372],{"href":372,"rel":373},"https:\u002F\u002Fcyber.gouv.fr",[90],[122,375,376,377],{},"National Sovereignty Schemes\n",[119,378,379],{},[122,380,381],{},"🇫🇷 SecNumCloud (if applicable?)",[122,383,384,389],{},[86,385,388],{"href":386,"rel":387},"https:\u002F\u002Fslsa.dev\u002Fspec\u002Fv1.1\u002Flevels#build-l3",[90],"SLSA Level 3"," for hardened supply chain.",[122,391,392,397],{},[86,393,396],{"href":394,"rel":395},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FEvaluation_Assurance_Level",[90],"EAL 4"," or higher",{"title":399,"searchDepth":400,"depth":400,"links":401},"",2,[402,409],{"id":103,"depth":400,"text":104,"children":403},[404,406,407,408],{"id":116,"depth":405,"text":117},3,{"id":164,"depth":405,"text":165},{"id":187,"depth":405,"text":188},{"id":220,"depth":405,"text":221},{"id":285,"depth":400,"text":286},"Spec for EU OS","md",{},{"icon":13},{"title":10,"description":410},"nr3AFBLIXUHpUME0DmkPEVAOI7_pfp6Sel4TlNRr-5o",[417,419],{"title":5,"path":6,"stem":7,"description":418,"icon":8,"children":-1},"Goals and Motivation for EU OS",{"title":20,"path":16,"stem":17,"description":420,"icon":21,"children":-1},"The EU OS projects develops a proof of concept (PoC) to explain IT decision makers and the open source community better the vision of the project. The proof of concept also helps determining rough edges and missing pieces and brings them to the attention of the upstream projects, so that they can be addressed early on.",{"data":422,"body":423},{},{"type":424,"children":425},"root",[426],{"type":427,"tag":82,"props":428,"children":429},"element",{},[430],{"type":431,"value":410},"text",1787174572290]