https://github.com/clearstaff/chomkeos
https://github.com/clearstaff/chomkeos
atomic bluebuild bluebuild-image custom-image image-based immutable linux linux-custom-image oci oci-image operating-system
Last synced: 11 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/clearstaff/chomkeos
- Owner: ClearStaff
- License: apache-2.0
- Created: 2025-02-15T18:53:57.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2025-03-29T10:56:15.000Z (12 months ago)
- Last Synced: 2025-03-29T11:32:52.657Z (12 months ago)
- Topics: atomic, bluebuild, bluebuild-image, custom-image, image-based, immutable, linux, linux-custom-image, oci, oci-image, operating-system
- Size: 41 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
README
# chomkeos [](https://github.com/clearstaff/chomkeos/actions/workflows/build.yml)
Custom Fedora Atomic image build using BlueBuild. Mostly created because all my machines follow similar hardware specs and software used.
## Installation
> [!WARNING]
> [This is an experimental feature](https://www.fedoraproject.org/wiki/Changes/OstreeNativeContainerStable), try at your own discretion.
To rebase an existing atomic Fedora installation to the latest build:
- First rebase to the unsigned image, to get the proper signing keys and policies installed:
```
rpm-ostree rebase ostree-unverified-registry:ghcr.io/clearstaff/chomkeos:latest
```
- Reboot to complete the rebase:
```
systemctl reboot
```
- Then rebase to the signed image, like so:
```
rpm-ostree rebase ostree-image-signed:docker://ghcr.io/clearstaff/chomkeos:latest
```
- Reboot again to complete the installation
```
systemctl reboot
```
## Verification
These images are signed with [Sigstore](https://www.sigstore.dev/)'s [cosign](https://github.com/sigstore/cosign). You can verify the signature by downloading the `cosign.pub` file from this repo and running the following command:
```bash
cosign verify --key cosign.pub ghcr.io/clearstaff/chomkeos
```