Rich Renomeron's Builds of Fedora Silverblue and Project Bluefin

These are Universal Blue-based images built via BlueBuild's tools with a bunch of my personal preferences baked in. The images contain either the Fedora Silverblue or Project Bluefin operating system with custom modifications. I am currently daily driving the Bluefin DX image.

Features common to both images:

• Google Chrome RPM installed and set as default browser
• Variety wallpaper changer (installed as RPM for now)
• Clocks set to AM/PM view with Weekday Display
• Curated selection of Flatpak apps installed automatically at runtime
• <CTRL><ALT>t opens a terminal
• Single click to open items in Nautilus
• Use smaller icons in Nautilus icon view
• Sort directories first in Nautilus and GTK file choosers
• Dark styles enabled by default
• System76 wallpaper collection
• Historical Ubuntu wallpapers, mostly from the LTS versions

For the Silverblue Images (ghcr.io/rrenomeron/ublue-tr):

• Visual Studio Code RPM installed
• Libvirt/Virt-Manager installed on host
• Docker CE installed with rootful Docker disabled
• Dash-to-Dock enabled by default, skipping Overview on login
• Appindicators enabled by default
• Logo Menu enabled by default (like Bluefin)
• Cascadia Code set as default monospace font
• Windows have minimize and maximize buttons (like Ubuntu and Bluefin)

For the Bluefin Images (ghcr.io/rrenomeron/bluefin-tr-dx or ghcr.io/rrenomero/bluefin-tr):

• Developer mode enabled by default on the -dx image. Switching between dx and non-dx images via ujust not (yet) supported.
• Default Fedora/GNOME keybindings, icons and fonts
• Starship disabled by default (users can enable if needed)
• GNOME Terminal as default terminal
• Rootful Docker disabled. Users can set up rootless Docker for themselves.

We default to Fedora 40. Once Universal Blue and Bluefin add support for Fedora 41, add -canary to the image name (e.g ublue-tr-canary).

Installation

Warning
This is an experimental feature, try at your own discretion.

First, install any Fedora Atomic or Universal Blue desktop edition (preferably one that features GNOME, like Silverblue or Bluefin).

To rebase an existing atomic Fedora installation to the latest build:

• First rebase to the unsigned image, to get the proper signing keys and policies installed:

  rpm-ostree rebase ostree-unverified-registry:ghcr.io/rrenomeron/ublue-tr:latest
  

  (Note: you can substiture one of the other image names if you want to use e.g. Bluefin.)

• Reboot to complete the rebase:

  systemctl reboot
  

• Then rebase to the signed image, like so:

  rpm-ostree rebase ostree-image-signed:docker://ghcr.io/rrenomeron/ublue-tr:latest
  

• Reboot again to complete the installation

  systemctl reboot
  

• If you are on an existing Universal Blue-based atomic installation, you should just be able to rebase directly:

  sudo rpm-ostree rebase ostree-image-signed:docker://ghcr.io/rrenomeron/ublue-tr:latest
  systemctl reboot
  

The latest tag will automatically point to the latest build.

Installing via ISO

If you have podman installed on your system, you can generate an offline ISO with the download-iso.sh script in this directory, like this:

./download-iso.sh $IMAGE_NAME

where $IMAGE_NAME is one of ublue-tr, ublue-tr-canary, bluefin-tr, bluefin-dx-tr-, or bluefin-dx-tr-canary.

Verification

Warning
This is still boilerplate from the original template. It might not be accurate; I haven't verified it.

These images are signed with Sigstore's cosign. You can verify the signature by downloading the cosign.pub file from this repo and running the following command:

cosign verify --key cosign.pub ghcr.io/blue-build/legacy-template

Building Locally

bluebuild build --build-driver=podman [recipe file]

TODO

• Figure out what my development container workflow is going to look like (distrobox? toolbox? something else?)
• Fix ISO generation issues for better 1st run experience on a new device
• Look at features from Secure Blue to incorporate
• Re-evaluate some Bluefin choices we disagree with (e.g. Mission Center over GNOME System Monitor)