can you approve this for workflow runs?

K

Kyle GospoOP•7/19/23, 10:16 PM

ty

J

j0rge•7/19/23, 10:19 PM

invites in your inbox

J

j0rge•7/19/23, 10:20 PM

I'll just mention the upgrading from fedora part in the blog post so we can finish

J

j0rge•7/19/23, 10:24 PM

ok last one for the day I hope: https://github.com/ublue-os/website/pull/297

GitHub

feat: add cosign blog by castrojo · Pull Request #297 · ublue-os/we...

Do not merge, just staging this.

KKyle Gospo can you approve this for workflow runs?

J

j0rge•7/19/23, 10:28 PM

need to kick off the failed one, it'll be a minute

J

j0rge•7/19/23, 10:28 PM

mate 37 decided to not be a team player today

Jj0rge need to kick off the failed one, it'll be a minute

K

Kyle GospoOP•7/19/23, 10:28 PM

no rush

GGerblesh Are we planning to switch to the new iso builder when 39 drops?

J

j0rge•7/19/23, 10:29 PM

I don't think anyone's taken a look at it yet

J

j0rge•7/19/23, 10:29 PM

it would be nice if someone did the research to do that, the new ui looks nice

G

Gerblesh•7/19/23, 10:30 PM

Yeah I'd like a step up over the net install

G

Gerblesh•7/19/23, 10:30 PM

Would be nice to just download a local rescue image

J

j0rge•7/19/23, 10:30 PM

yeah also I was expecting them to fix stuff, they didn't really do that

J

j0rge•7/19/23, 10:31 PM

like I would have thought at some point there'd be support for us to be able to do fat installs, a working progress bar, etc.

X

xkrith•7/19/23, 10:46 PM

@j0rge on an up to date stock silverblue install this worked:

podman pull ghcr.io/ublue-os/config
rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm 2>/dev/null)
rpm-ostree rebase --uninstall ublue-os-signing-0.1-1.fc38.noarch ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main

podman pull ghcr.io/ublue-os/config
rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm 2>/dev/null)
rpm-ostree rebase --uninstall ublue-os-signing-0.1-1.fc38.noarch ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main

podman pull ghcr.io/ublue-os/config
rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm 2>/dev/null)
rpm-ostree rebase --uninstall ublue-os-signing-0.1-1.fc38.noarch ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main

podman pull ghcr.io/ublue-os/config
rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm 2>/dev/null)
rpm-ostree rebase --uninstall ublue-os-signing-0.1-1.fc38.noarch ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main

State: idle
AutomaticUpdates: stage; rpm-ostreed-automatic.timer: no runs since boot
Deployments:
● ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main
                   Digest: sha256:3dc528ffd5d19228cb8f79d696ec797f90c2c40c917dcfd871d89ff9fb825de0
                  Version: 38.20230719.0 (2023-07-19T19:54:09Z)

  fedora:fedora/38/x86_64/silverblue
                  Version: 38.20230719.0 (2023-07-19T02:37:06Z)
                   Commit: 01d2b50f3ff36c03aa9c8408ef55a5d85c8e62fb367458f2bd5d81b2a3827f3b
             GPGSignature: Valid signature by 6A51BBABBA3D5467B6171221809A8D7CEB10B464

State: idle
AutomaticUpdates: stage; rpm-ostreed-automatic.timer: no runs since boot
Deployments:
● ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main
                   Digest: sha256:3dc528ffd5d19228cb8f79d696ec797f90c2c40c917dcfd871d89ff9fb825de0
                  Version: 38.20230719.0 (2023-07-19T19:54:09Z)

  fedora:fedora/38/x86_64/silverblue
                  Version: 38.20230719.0 (2023-07-19T02:37:06Z)
                   Commit: 01d2b50f3ff36c03aa9c8408ef55a5d85c8e62fb367458f2bd5d81b2a3827f3b
             GPGSignature: Valid signature by 6A51BBABBA3D5467B6171221809A8D7CEB10B464

State: idle
AutomaticUpdates: stage; rpm-ostreed-automatic.timer: no runs since boot
Deployments:
● ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main
                   Digest: sha256:3dc528ffd5d19228cb8f79d696ec797f90c2c40c917dcfd871d89ff9fb825de0
                  Version: 38.20230719.0 (2023-07-19T19:54:09Z)

  fedora:fedora/38/x86_64/silverblue
                  Version: 38.20230719.0 (2023-07-19T02:37:06Z)
                   Commit: 01d2b50f3ff36c03aa9c8408ef55a5d85c8e62fb367458f2bd5d81b2a3827f3b
             GPGSignature: Valid signature by 6A51BBABBA3D5467B6171221809A8D7CEB10B464

State: idle
AutomaticUpdates: stage; rpm-ostreed-automatic.timer: no runs since boot
Deployments:
● ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main
                   Digest: sha256:3dc528ffd5d19228cb8f79d696ec797f90c2c40c917dcfd871d89ff9fb825de0
                  Version: 38.20230719.0 (2023-07-19T19:54:09Z)

  fedora:fedora/38/x86_64/silverblue
                  Version: 38.20230719.0 (2023-07-19T02:37:06Z)
                   Commit: 01d2b50f3ff36c03aa9c8408ef55a5d85c8e62fb367458f2bd5d81b2a3827f3b
             GPGSignature: Valid signature by 6A51BBABBA3D5467B6171221809A8D7CEB10B464

Xxkrith @j0rge on an up to date stock silverblue install this worked: ``` podman pull g...

J

j0rge•7/19/23, 10:49 PM

want to leave the first comment?

J

j0rge•7/19/23, 10:49 PM

https://universal-blue.org/blog/2023/07/19/sigstore-signed-images-are-now-here/

Sigstore signed images are now here - Universal Blue

Custom Operating System images based on Fedora

Xxkrith @j0rge on an up to date stock silverblue install this worked: ``` podman pull g...

K

Kyle GospoOP•7/19/23, 10:49 PM

beauty, love it

J

j0rge•7/19/23, 10:50 PM

yeah and it also appears that blog posts don't show up in the forum until there's at least one comment in the blog

J

j0rge•7/19/23, 10:51 PM

so we need that snippet in there to kick it off anyway

K

Kyle GospoOP•7/19/23, 10:51 PM

only suggestion, should grab the name of the package dynamically

K

Kyle GospoOP•7/19/23, 10:51 PM

otherwise when it updates that command will break

J

j0rge•7/19/23, 10:51 PM

also, if we published the rpm in like, the releases section we wouldn't need the podman command at all right?

X

xkrith•7/19/23, 10:52 PM

right now the signing package is only available in that container

J

j0rge•7/19/23, 10:52 PM

https://github.com/orgs/ublue-os/discussions/193

GitHub

Sigstore signed images are now here - Universal Blue · ublue-os · D...

Sigstore signed images are now here - Universal Blue Custom Operating System images based on Fedora https://universal-blue.org/blog/2023/07/19/sigstore-signed-images-are-now-here/

J

j0rge•7/19/23, 10:53 PM

ah ok, adding an emoji was enough to kick off giscus at least

K

Kyle GospoOP•7/19/23, 10:53 PM

podman pull ghcr.io/ublue-os/config
rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm 2>/dev/null)
rpm-ostree rebase --uninstall $(rpm -qa | grep ublue-os-signing) ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main

podman pull ghcr.io/ublue-os/config
rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm 2>/dev/null)
rpm-ostree rebase --uninstall $(rpm -qa | grep ublue-os-signing) ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main

podman pull ghcr.io/ublue-os/config
rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm 2>/dev/null)
rpm-ostree rebase --uninstall $(rpm -qa | grep ublue-os-signing) ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main

podman pull ghcr.io/ublue-os/config
rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm 2>/dev/null)
rpm-ostree rebase --uninstall $(rpm -qa | grep ublue-os-signing) ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main

Jj0rge also, if we published the rpm in like, the releases section we wouldn't need the...

A

akdev•7/19/23, 10:54 PM

Yeah

KKyle Gospo ```podman pull ghcr.io/ublue-os/config rpm-ostree install --assumeyes --apply-li...

X

xkrith•7/19/23, 11:11 PM

method using rpm query instead of grep:

podman pull ghcr.io/ublue-os/config
rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm 2>/dev/null)
rpm-ostree rebase --uninstall $(rpm -q ublue-os-signing-* --queryformat '%{NAME}-%{VERSION}-%{RELEASE}.%{Arch}') ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main

podman pull ghcr.io/ublue-os/config
rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm 2>/dev/null)
rpm-ostree rebase --uninstall $(rpm -q ublue-os-signing-* --queryformat '%{NAME}-%{VERSION}-%{RELEASE}.%{Arch}') ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main

podman pull ghcr.io/ublue-os/config
rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm 2>/dev/null)
rpm-ostree rebase --uninstall $(rpm -q ublue-os-signing-* --queryformat '%{NAME}-%{VERSION}-%{RELEASE}.%{Arch}') ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main

podman pull ghcr.io/ublue-os/config
rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm 2>/dev/null)
rpm-ostree rebase --uninstall $(rpm -q ublue-os-signing-* --queryformat '%{NAME}-%{VERSION}-%{RELEASE}.%{Arch}') ostree-image-signed:docker://ghcr.io/ublue-os/silverblue-main

J

j0rge•7/19/23, 11:15 PM

oh no

J

j0rge•7/19/23, 11:15 PM

now we have another (good) problem

J

j0rge•7/19/23, 11:15 PM

remember how I said we're going to hit 1 million pulls on friday?

J

j0rge•7/19/23, 11:16 PM

We are, as of now, at

991249

T

tulip•7/19/23, 11:49 PM

oh dear god

T

tulip•7/19/23, 11:50 PM

that's amazing!

J

j0rge•7/19/23, 11:55 PM

https://github.com/ublue-os/website/pull/301

GitHub

feat: one million pull blog! by castrojo · Pull Request #301 · ublu...

J

j0rge•7/19/23, 11:55 PM

need one review and we're good to go!

J

j0rge•7/19/23, 11:55 PM

@KyleGospo you've been here a long time, do the honors?

K

Kyle GospoOP•7/19/23, 11:59 PM

I'd love the honor

K

Kyle GospoOP•7/19/23, 11:59 PM

Uno moment

J

j0rge•7/20/23, 12:18 AM

\o/

J

j0rge•7/20/23, 12:18 AM

smoke if you got em!

E

EyeCantCU•7/20/23, 12:19 AM

Just had a thought. Do we need to change anything in isogenerator now that we have signed images?

J

j0rge•7/20/23, 12:24 AM

not sure

J

j0rge•7/20/23, 12:24 AM

looking but nothing jumps out at me

E

EyeCantCU•7/20/23, 12:48 AM

I'll give it a sweep

B

bketelsen•7/20/23, 1:17 AM

worth mentioning somewhere that you have to have the last unverified pull before you can switch to the signed image

B

bketelsen•7/20/23, 1:17 AM

Rebooting into signed now

B

bketelsen•7/20/23, 1:19 AM

hacker voice

hacker voice

hacker voice

hacker voice: I'm in

B

bketelsen•7/20/23, 1:19 AM

kudos to everyone on the amazing job getting this shipped. what a team

J

Julio_Guti•7/20/23, 1:24 PM

I don't want to sound alarming, but i was having issues moving into the signed images https://github.com/orgs/ublue-os/discussions/193#discussioncomment-6499271 and it was preventing me to update images in general, wondering if more ppl are stuck in a version due to this issue and not realizing of it because they are relying on the auto update process.

can you approve this for workflow runs?

Similar Threads

Similar Threads

Similar Threads