ublue

scottames' custom Fedora Silverblue native container image powered by Universal Blue.

Multiple images are built, ublue being the default Silverblue. See packages for image details.

Verification

Images are signed with sisgstore's cosign. To verify images, grab the pub key and verify:

cosign verify --key cosign.pub ghcr.io/scottames/ublue

If you're forking this repo, the uBlue website has instructions for setting up signing properly.

Installation

Warning This is an experimental feature and should not be used in production!

• First rebase to the image unsigned, to get the proper signing keys and policies installed:

  sudo rpm-ostree rebase ostree-unverified-registry:ghcr.io/scottames/ublue:latest
  

• Reboot to complete the rebase:

  systemctl reboot
  

• Then rebase to the signed image, like so:

  sudo rpm-ostree rebase ostree-image-signed:docker://ghcr.io/scottames/ublue:latest
  

• Reboot again to complete the installation

  systemctl reboot
  

Staying Up to Date with Upstream

• Last tracking github.com/ublue-os/startingpoint at a700132 If necessary, set upstream with ublue-os

git remote add upstream https://github.com/ublue-os/startingpoint.git

Fetch & rebase

# Retrieve latest changes from upstream's template.
git fetch upstream template
git checkout template
git rebase upstream/template
# resolve any conflicts
git push

# Rebase your own "live" changes onto the latest template.
git checkout live
git rebase --onto live template

# Perform a force-push to update your "live" branch on GitHub, to deploy.
# The "lease" ensures that you won't overwrite "live" if GitHub's version
# is different than your local version (ie. if a team member pushed to it).
git push --force-with-lease