https://github.com/cbenoit/fedora-atomic-kokoriko
Sway Atomic + minimal host + Toolbox dev stack (Rust/.NET/Node) with Helix & Nushell
https://github.com/cbenoit/fedora-atomic-kokoriko
Last synced: 4 months ago
JSON representation
Sway Atomic + minimal host + Toolbox dev stack (Rust/.NET/Node) with Helix & Nushell
- Host: GitHub
- URL: https://github.com/cbenoit/fedora-atomic-kokoriko
- Owner: CBenoit
- License: apache-2.0
- Created: 2025-10-06T20:15:55.000Z (9 months ago)
- Default Branch: main
- Last Pushed: 2025-10-07T10:53:58.000Z (9 months ago)
- Last Synced: 2025-10-07T11:41:49.110Z (9 months ago)
- Language: Just
- Size: 22.5 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
README
# Fedora Atomic Kokoriko
Sway Atomic + minimal host + Toolbox dev stack (Rust/.NET/Node) with Helix & Nushell
## Installation
> [!WARNING]
> [This is an experimental feature](https://www.fedoraproject.org/wiki/Changes/OstreeNativeContainerStable), try at your own discretion.
To rebase an existing atomic Fedora installation to the latest build:
- First rebase to the unsigned image, to get the proper signing keys and policies installed:
```
rpm-ostree rebase ostree-unverified-registry:ghcr.io/cbenoit/atomic-kokoriko:latest
```
- Reboot to complete the rebase:
```
systemctl reboot
```
- Then rebase to the signed image, like so:
```
rpm-ostree rebase ostree-image-signed:docker://ghcr.io/cbenoit/atomic-kokoriko:latest
```
- Reboot again to complete the installation
```
systemctl reboot
```
The `latest` tag will automatically point to the latest build. That build will still always use the Fedora version specified in `recipe.yml`, so you won't get accidentally updated to the next major version.
- Run the ujust helpers:
```shell
ujust dev-setup # Create + provision your Toolbox.
ujust nu-default # Switch login shell to Nushell.
ujust nu-bootstrap # Wire Starship + Zoxide into Nushell.
ujust wireshark-perms # (Optional) enable non-root packet capture.
```
- Use `toolbox enter dev` for builds.
## ISO
If build on Fedora Atomic, you can generate an offline ISO with the instructions available [here](https://blue-build.org/learn/universal-blue/#fresh-install-from-an-iso). These ISOs cannot unfortunately be distributed on GitHub for free due to large sizes, so for public projects something else has to be used for hosting.
## Verification
These images are signed with [Sigstore](https://www.sigstore.dev/)'s [cosign](https://github.com/sigstore/cosign). You can verify the signature by downloading the `cosign.pub` file from this repo and running the following command:
```bash
cosign verify --key cosign.pub ghcr.io/cbenoit/atomic-kokoriko
```