https://github.com/scottames/ublue
Deprecated by: https://github.com/scottames/containers
https://github.com/scottames/ublue
fedora fedora-silverblue silverblue ublue-os universal-blue
Last synced: 6 months ago
JSON representation
Deprecated by: https://github.com/scottames/containers
- Host: GitHub
- URL: https://github.com/scottames/ublue
- Owner: scottames
- License: apache-2.0
- Created: 2023-07-07T02:24:21.000Z (almost 2 years ago)
- Default Branch: live
- Last Pushed: 2024-08-04T14:34:09.000Z (9 months ago)
- Last Synced: 2024-08-04T16:16:27.295Z (9 months ago)
- Topics: fedora, fedora-silverblue, silverblue, ublue-os, universal-blue
- Language: Shell
- Homepage: https://universal-blue.org
- Size: 677 KB
- Stars: 2
- Watchers: 3
- Forks: 0
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
README
# ublue
[](https://github.com/scottames/ublue/actions/workflows/build.yml)
> [!WARNING]
> Deprecated by [containers](https://github.com/scottames/containers),
> primarily [containers/atomic](https://github.com/scottames/containers/tree/main/atomic)
[scottames](https://github.com/scottames)' custom Fedora Silverblue [native container image](https://fedoraproject.org/wiki/Changes/OstreeNativeContainerStable) powered by [Universal Blue](https://universal-blue.org/).
Multiple images are built, ublue being the default Silverblue. See [packages](https://github.com/scottames?tab=packages&repo_name=ublue) for image details.
## Verification
Images are signed with sisgstore's [cosign](https://docs.sigstore.dev/cosign/overview/). To verify images, grab [the pub key](cosign.pub) and verify:
cosign verify --key cosign.pub ghcr.io/scottames/ublue
If you're forking this repo, the uBlue website has [instructions](https://universal-blue.org/tinker/make-your-own/) for setting up signing properly.
## Installation
> **Warning**
> This is an experimental feature and should not be used in production!
- First rebase to the image unsigned, to get the proper signing keys and policies installed:
```
sudo rpm-ostree rebase ostree-unverified-registry:ghcr.io/scottames/ublue:latest
```
- Reboot to complete the rebase:
```
systemctl reboot
```
- Then rebase to the signed image, like so:
```
sudo rpm-ostree rebase ostree-image-signed:docker://ghcr.io/scottames/ublue:latest
```
- Reboot again to complete the installation
```
systemctl reboot
```
## Staying Up to Date with Upstream
- Last tracking [github.com/ublue-os/startingpoint](https://github.com/ublue-os/startingpoint) at [a700132](https://github.com/ublue-os/startingpoint/commit/a70013277e209a042d546d5a43ea3d39e26b1a08)
If necessary, set upstream with ublue-os
```shell
git remote add upstream https://github.com/ublue-os/startingpoint.git
```
Fetch & rebase
```shell
# Retrieve latest changes from upstream's template.
git fetch upstream template
git checkout template
git rebase upstream/template
# resolve any conflicts
git push
# Rebase your own "live" changes onto the latest template.
git checkout live
git rebase --onto live template
# Perform a force-push to update your "live" branch on GitHub, to deploy.
# The "lease" ensures that you won't overwrite "live" if GitHub's version
# is different than your local version (ie. if a team member pushed to it).
git push --force-with-lease
```