RakuOS 2026.10.30 hotfix: Intel touchscreens, Secure Boot re-enrollment, and web apps that let you type

A small hotfix on top of 2026.10.28: one new driver and a handful of fixes. Update and reboot as usual.

New driver: Intel touchscreens (ithc)

The Drivers page in RakuOS System now lists Intel touchscreens (ithc). It's the touchscreen driver for laptops with an Intel Touch Host Controller, from Lakefield to Raptor Lake: the Surface Pro 7+ and 8, the Surface Laptop 4 and 5, the ThinkPad X1 Fold and others. Newer laptops (Meteor Lake and later) use the touch driver built into the kernel and don't need it.

On Surface devices, multi-touch and the pen also need iptsd, which is in Terra. If Terra is on, iptsd is installed with the driver. More: Drivers.

Secure Boot: re-enrolling the key works again

A firmware (BIOS) update or a reset of its settings can wipe the keys you enrolled, including the RakuOS key. RakuOS then stops booting with Secure Boot on. Running sudo rakuos enroll-secureboot-key should put the key back, but it said the key was already enrolled and did nothing. That's because RakuOS kernels have the key built in, and it checked there instead of in the firmware's list.

It now checks only the firmware's list, so it queues the key again and you confirm it in the blue MOK Manager screen on the next boot. If you're stuck on an older image, this does the same:

sudo mokutil --ignore-keyring --import /usr/share/rakuos/sb_pubkey.der

The password is rakuos. The installer had the same bug when enrolling the key on a new install. It's fixed in the next ISO builds. More: Secure Boot.

Web apps no longer crash when you type

Web apps from the Software Center crashed as soon as you clicked into a text field, for example to log in. They were forced to run through XWayland, where the current Electron crashes on text input. They now run natively on Wayland, and their window icon still shows.

rum holds back only the driver's own packages

When a new kernel arrives before a driver's build for it, rum holds that driver back until the build is out, along with the packages that go with it. That rule was too wide, so it also froze packages other things depend on, like bluez-tools. Now rum holds back only packages named after the driver, such as xone's or xpadneo's own packages. For NVIDIA, it holds back all of NVIDIA's packages.

Other fixes

• RakuOS System: in the Qt version, some dialogs (like Turn Overlay Off) showed their last button outside the dialog. Dialogs now size themselves to what's in them.
• Exporting your packages list in RakuOS System leaves out driver packages (rakuos-kmod-*). Their names depend on the image, so importing the list on another image could fail. Install drivers from the Drivers page instead.
• v4l2loopback (the OBS virtual camera driver) is now built from RPM Fusion's source, since Terra stopped packaging it for RakuOS 45. Nothing changes for you.
• The RakuOS repository repairs package checksums that went stale when a package was replaced. That had broken one kernel package download.

After updating

Reboot. If anything goes wrong, pick the previous image in the GRUB menu, or run sudo bootc rollback and reboot. Then tell us on Discord or at rakuos.org/bugs. For the full list of changes, see the 2026.10.30 changelog.