In the fall 2026 release of Fedora Linux 45, plans are underway to implement the possibility of using the Anaconda WebUI web interface for remote management of installation of atomically updated Fedora Atomic Desktop images such as Silverblue and Kinoite. This plan, however, has not yet been approved by the FESCo (Fedora Engineering Steering Committee), which oversees the technical aspects of Fedora Linux development. If approved, users will be able to boot Fedora on the target system with the “inst.webui.remote” option and manage the installation through a web browser on another computer using PIN authentication and traffic encryption.
Simultaneously, a proposal has been published for replacing the installer in Fedora Atomic iso images. The proposal suggests using a new installer with a built-in web interface that is currently utilized in Fedora Workstation and live builds, instead of the traditional Anaconda installer with a GTK-based interface.
In Fedora 45, it is also proposed to implement the first stage of preparation for removing the API for accessing the crypto subsystem of the Linux kernel from user space, known as CRYPTO_USER_API. This API has been deprecated in the kernel due to potential security risks and is slated for removal. The distribution’s use of the Crypto Userspace API will be restricted to a few specific packages as part of the preparation for its complete removal and to identify any hidden uses it may still have. Notable packages that use the Crypto Userspace API include iwd, cryptsetup (utilized in tcplay and VeraCrypt) and libkcapi (used in dracut), but the initial stage of removal will not impact their functionality.
The complete removal of the Crypto Userspace API is not anticipated until kernel version 7.3. In kernel version 7.2, the AF_ALG has been deprecated, as exploited in the Copy Fail vulnerability to alter data in the page cache, and is scheduled for removal in a future release. AF_ALG permits the use of hardware accelerators for cryptographic computations in the kernel’s Crypto API, but it is typically used in specific scenarios. In kernel version 7.2, only software implementations of crypto algorithms remain, with support for hardware crypto accelerators in the kernel crypto API being removed, as AF_ALG significantly broadens the attack surface without providing a performance benefit compared to implementing cryptography in user space.