CachyOS first to announce EAC Linux v2 kernel with opt-in lockdown mode

CachyOS has become one of the first Linux distributions to explicitly commit to supporting Epic Games' Easy Anti-Cheat Linux v2 requirements by developing a dedicated kernel variant. The linux-cachyos-eac kernel will incorporate lockdown mode and other native Linux security features that Epic mandated for distributions seeking compatibility with EAC v2-protected games.

The implementation remains incomplete, but CachyOS maintainers emphasize the kernel will be fully optional and opt-in through the distribution's Cachy Hello GUI, which already supports easy kernel switching. The required security features have generated significant controversy in Linux gaming communities because they disable functionality including unsigned kernel modules, PCI passthrough, hibernation, and kdump. CachyOS plans to add a one-click download button in its welcome application and will publish Secure Boot setup documentation to help users configure the environment that EAC v2 demands.

EAC v2 kernel requirements and CachyOS implementation

• Lockdown mode enforcement: The linux-cachyos-eac kernel will enable Linux kernel lockdown, a security feature that restricts access to kernel functionality and prevents unsigned code execution in kernel space.
• Unsigned module prohibition: EAC Linux v2 compatibility requires blocking unsigned kernel modules, which breaks common workarounds for hardware peripherals and custom drivers that Linux gamers frequently rely upon.
• Disabled subsystems: PCI passthrough for GPU virtualization, system hibernation, and kdump crash collection will all cease to function when the EAC-compatible kernel is active.
• Secure Boot dependency: The implementation requires users to configure Secure Boot, with CachyOS planning wiki documentation to guide setup of this UEFI feature.
• Opt-in architecture: CachyOS leverages its existing GUI kernel switcher to let users boot the standard linux-cachyos kernel for normal use and selectively boot linux-cachyos-eac only when running EAC v2 games.

Why it matters

CachyOS's move establishes an early template for how gaming-oriented Linux distributions might reconcile Epic's stricter anti-cheat requirements with user freedom, though the tradeoffs may push some users toward distributions that decline to implement EAC v2 at all. The opt-in approach preserves choice but places the burden on users to understand when and why to sacrifice kernel flexibility for game compatibility, potentially fragmenting the Linux gaming experience across different kernel configurations.