{"id":37683666,"url":"https://github.com/large-farva/outpost","last_synced_at":"2026-05-16T11:35:02.055Z","repository":{"id":311866930,"uuid":"1045378529","full_name":"large-farva/outpost","owner":"large-farva","description":"Fedora Kinoite based image with built in DoD CAC support.","archived":false,"fork":false,"pushed_at":"2026-01-10T19:11:02.000Z","size":2018,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-01-11T05:36:47.546Z","etag":null,"topics":["atomic","bluebuild","custom-image","image-based","immutable","linux","linux-custom-image","oci","oci-image","operating-system"],"latest_commit_sha":null,"homepage":"","language":"QML","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/large-farva.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-08-27T04:28:52.000Z","updated_at":"2026-01-10T19:11:05.000Z","dependencies_parsed_at":null,"dependency_job_id":"754b802c-1aec-4073-8c63-f9c7b8a968a6","html_url":"https://github.com/large-farva/outpost","commit_stats":null,"previous_names":["large-farva/atlas","large-farva/outpost"],"tags_count":0,"template":false,"template_full_name":"blue-build/template","purl":"pkg:github/large-farva/outpost","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/large-farva%2Foutpost","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/large-farva%2Foutpost/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/large-farva%2Foutpost/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/large-farva%2Foutpost/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/large-farva","download_url":"https://codeload.github.com/large-farva/outpost/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/large-farva%2Foutpost/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28478650,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-16T11:59:17.896Z","status":"ssl_error","status_checked_at":"2026-01-16T11:55:55.838Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["atomic","bluebuild","custom-image","image-based","immutable","linux","linux-custom-image","oci","oci-image","operating-system"],"created_at":"2026-01-16T12:28:47.114Z","updated_at":"2026-05-16T11:35:02.049Z","avatar_url":"https://github.com/large-farva.png","language":"QML","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cp align=\"center\"\u003e\n  \u003cimg src=\"assets/outpost-logo.png\" alt=\"Outpost logo\" width=\"300\" /\u003e\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://github.com/large-farva/outpost/actions/workflows/build.yml/badge.svg\"\u003e\n\u003c/p\u003e\n\n# Outpost\n\nOutpost is a custom **Fedora Kinoite** immutable desktop image built with **BlueBuild**.\n\nIt is based on the **official upstream Fedora Kinoite image** and provides a **CAC-ready Fedora workstation** with curated defaults and **no post-install configuration required**.\n\nOutpost is designed for environments where **Common Access Card (CAC)** authentication and DoD PKI trust are required.\n\n## Features\n\n### DoD CAC support\n- `opensc`\n- `pcsc-lite`, `pcsc-lite-ccid`\n- `pcsc-tools`\n- `p11-kit`\n- `pcscd.socket` enabled for on-demand activation\n\nOutpost does **not** ship CACKey, CoolKey, or proprietary vendor middleware.  \n**OpenSC** is the supported and tested provider.\n\n---\n\n### DoD trust anchors\n- Official **DoD PKCS#7 certificate bundle** is **vendored in the repository**\n- ZIP filename is unchanged from the official distribution\n- Certificates are extracted, converted to PEM, and installed into the system trust store at build time\n\n---\n\n### Firefox\n- Firefox is installed as an **RPM**, not a Flatpak\n- Uses system NSS, PKCS#11, and CA trust integration\n- CAC works without per-user manual setup in normal cases\n---\n\n### Curated Flatpak baseline\n- Kontainer\n- OnlyOffice\n- Signal\n- XCA\n\n## Installation\n\n⚠️ You must rebase from **Fedora Kinoite** or a Kinoite-based image.  \n\n### 1. Bootstrap\n```bash\nrpm-ostree rebase ostree-unverified-registry:ghcr.io/large-farva/outpost:latest\nsudo systemctl reboot\n```\n\n### 2. Rebase to the signed image\n```bash\nrpm-ostree rebase ostree-image-signed:docker://ghcr.io/large-farva/outpost:latest\nsudo systemctl reboot\n```\n\n## Verification\n\nOutpost images are signed using **Sigstore Cosign**.\n\nVerify with the included public key:\n\n```bash\ncosign verify --key cosign.pub ghcr.io/large-farva/outpost:latest\n```\n\n## CAC Support\n\nOutpost includes all middleware and trust components required for CAC authentication.\n\nSupported:\n- Firefox (RPM)\n- System-wide PKCS#11 and CA trust integration\n\nNot supported:\n- Flatpak browsers\n- Proprietary middleware\n\n## Documentation\n\nDetailed documentation is available in the [Wiki](https://github.com/large-farva/outpost/wiki).\n\nThis includes:\n- CAC architecture and behavior\n- Diagnostics and troubleshooting\n- Firefox-specific behavior\n- Trust store handling\n- Network and captive portal considerations\n\nPlease review the wiki before opening an issue.\n\n## Roadmap\n\n### Near-term\n- Documentation polish\n- Diagnostics refinement\n\n### Longer-term\n- Okular support for CAC based PDF signing\n- NVIDIA-compatibile image variant\n\n## Issues\n\nWhen reporting issues, include relevant diagnostics from the wiki where applicable.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flarge-farva%2Foutpost","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flarge-farva%2Foutpost","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flarge-farva%2Foutpost/lists"}