https://github.com/ublue-os/isogenerator/issues/82 FYI anyone messing with ISO installers... we're

https://github.com/ublue-os/isogenerator/issues/82 FYI anyone messing with ISO installers... we're getting more complaints about controllers not working which pretty much turn out to be the secure boot key was never enrolled... it could help a little if we change this

GitHub

always import MOK not only on nvidia · Issue #82 · ublue-os/isogene...

Since we now build multiple akmods, not just nvidia, the current post-install-nvidia.sh should be renamed to post-install.sh or post-install-akmods.sh and run for all installs, not just nvidia inst...

Bbsherman https://github.com/ublue-os/isogenerator/issues/82 FYI anyone messing with ISO...

Kyle Gospo•9/3/23, 6:28 PM

Should make it part of yafti

Kyle Gospo•9/3/23, 6:29 PM

If we can

Kyle Gospo•9/3/23, 6:29 PM

That reminds me, would be nice if we could do screenshots on a Yafti page, for demo purposes

KKyle Gospo Should make it part of yafti

bshermanOP•9/3/23, 6:29 PM

that would be fine too, but wouldn't address nvidia not working on a fresh install with an nvidia only machine

bshermanOP•9/3/23, 6:30 PM

I support doing both

KKyle Gospo Should make it part of yafti

fiftydinar•9/3/23, 6:31 PM

maybe good solution for more opinionated images, but not for main

Aakdev I believe if it was up to Colin he’d move things to bootc asap

Bigpod•9/3/23, 10:37 PM

If it would be up to colin he would be spending more time on it and everything sorunding it afaik

GGerblesh Can you rebase to a non-ostree container?

Bigpod•9/3/23, 10:38 PM

No just ostree

j0rge•9/3/23, 10:43 PM

has anyone looked at enabling 39 in the last week?

j0rge•9/3/23, 10:51 PM

Upstream bug tracker: https://github.com/fedora-silverblue/issue-tracker/issues

BBigpod If it would be up to colin he would be spending more time on it and everything s...

akdev•9/3/23, 10:51 PM

it doesn’t really work like that as his priorities are given to him by his employer and many of the fixes that need to happen are outside of his direct scope afaict

j0rge•9/3/23, 10:51 PM

dunno why I didn't pin that ages ago

akdev•9/3/23, 10:51 PM

For example he didn’t implement the ostreecontainer/ostreesetup commands in anaconda, he just filed a ticket

akdev•9/3/23, 10:51 PM

Anaconda team actioned on that ticket

Aakdev it doesn’t really work like that as his priorities are given to him by his emplo...

Bigpod•9/3/23, 10:52 PM

I understand that of course which is why i aaid if it would be up to him

Jj0rge Click to see attachment

Kyle Gospo•9/4/23, 1:17 AM

Gerblesh•9/4/23, 3:00 AM

https://github.com/ublue-os/startingpoint/pull/142
this is ready to merge if anyone wants to take a look

GitHub

feat: added systemd and files module by gerblesh · Pull Request #14...

What's currently done:

added a systemd module
added a files module
Containerfile adjustments

What needs to be done:

Documentation
Debugging/testing

5init•9/4/23, 4:46 AM

I've noticed that there's bootc on the newest update of bluefin now. Is the thing already usable (As in "I could run this command") now?

55init I've noticed that there's bootc on the newest update of bluefin now. Is the thin...

Gerblesh•9/4/23, 4:50 AM

yeah you can run it, i'd suggest sticking to rpm-ostree for now though

Gerblesh•9/4/23, 4:50 AM

it's mainly for testing/messing around

5init•9/4/23, 5:00 AM

I've seen the demo by the guy who made it. But it was only between rpm-based distro though. I'm curious if we could just drop into other distro image like ubuntu for example

Gerblesh•9/4/23, 5:00 AM

yeah, if there is an ubuntu image with ostree on it, it would totally work

5init•9/4/23, 5:15 AM

Interesting

Xxkrith on stock silverblue you'll need to install the `ublue-os-signing.noarch.rpm` pac...

kaotikfunk•9/4/23, 7:08 AM

so is this supposed to fetch the RPM? I'm stuck here as well trying to rebase to bazzite from stock silverblue.

podman pull ghcr.io/ublue-os/config && rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm

podman pull ghcr.io/ublue-os/config && rpm-ostree install --assumeyes --apply-live --force-replacefiles $(find ~/.local/share/containers -name ublue-os-signing.noarch.rpm

Error I'm getting:

 podman pull ghcr.io/ublue-os/config 
Trying to pull ghcr.io/ublue-os/config:latest...
Error: Source image rejected: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory
[patrick@fedora ~]$ rpm-ostree rebase ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-nvidia:38
Pulling manifest: ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-nvidia:38
error: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory

 podman pull ghcr.io/ublue-os/config 
Trying to pull ghcr.io/ublue-os/config:latest...
Error: Source image rejected: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory
[patrick@fedora ~]$ rpm-ostree rebase ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-nvidia:38
Pulling manifest: ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-nvidia:38
error: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory

Original message was deleted

Kyle Gospo•9/4/23, 7:13 AM

Bazzite in particular attempts to sign itself

Kyle Gospo•9/4/23, 7:13 AM

So unsigned is fine to recommend now

Kyle Gospo•9/4/23, 7:13 AM

It'll correct itself

Kyle Gospo•9/4/23, 7:13 AM

yep

kaotikfunk•9/4/23, 7:24 AM

what's unsigned bazzite?

Kkaotikfunk what's unsigned bazzite?

Kyle Gospo•9/4/23, 7:25 AM

rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest

rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest

kaotikfunk•9/4/23, 7:25 AM

ah, will try. thanks

Kyle Gospo•9/4/23, 7:25 AM

kaotikfunk•9/4/23, 7:25 AM

$ rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest
Pulling manifest: ostree-unverified-image:docker://ghcr.io/ublue-os/bazzite-nvidia:latest
error: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory

$ rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest
Pulling manifest: ostree-unverified-image:docker://ghcr.io/ublue-os/bazzite-nvidia:latest
error: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory

Kyle Gospo•9/4/23, 7:26 AM

your issue isn't the command, your issue is your system is configured to look for a key that isn't there

Kyle Gospo•9/4/23, 7:26 AM

no idea how that happened

Kyle Gospo•9/4/23, 7:26 AM

try rpm-ostree reset

Kyle Gospo•9/4/23, 7:26 AM

and then reboot

Kyle Gospo•9/4/23, 7:26 AM

and then run that

kaotikfunk•9/4/23, 7:27 AM

$ rpm-ostree reset
No change.

$ rpm-ostree reset
No change.

kaotikfunk•9/4/23, 7:29 AM

so I'm in a state where I can upgrade to new silverblue images and just updated, although I suppose those are not using OCI

kaotikfunk•9/4/23, 7:29 AM

the fact that

podman pull

podman pull

is failing is new to me. I've never seen a pull fail like that

kaotikfunk•9/4/23, 7:34 AM

and the file exists - is an SELinux policy missing / corrupted?

 podman pull ghcr.io/ublue-os/config
Trying to pull ghcr.io/ublue-os/config:latest...
Error: Source image rejected: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory
[patrick@fedora containers]$ pwd
/etc/pki/containers
[patrick@fedora containers]$ ls -l
total 4
-rw-r--r--. 1 root root 178 Sep  2 16:15 ublue-os.pub
[patrick@fedora containers]$ cat ublue-os.pub 
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE7lh7fJMV4dBT2jT1XafixUJa7OVA
cT+QFVD8IfIJIS/KBAc8hx1aslzkH3tfeM0cwyCLB7kOStZ4sh6RyFQD9w==
-----END PUBLIC KEY-----

 podman pull ghcr.io/ublue-os/config
Trying to pull ghcr.io/ublue-os/config:latest...
Error: Source image rejected: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory
[patrick@fedora containers]$ pwd
/etc/pki/containers
[patrick@fedora containers]$ ls -l
total 4
-rw-r--r--. 1 root root 178 Sep  2 16:15 ublue-os.pub
[patrick@fedora containers]$ cat ublue-os.pub 
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE7lh7fJMV4dBT2jT1XafixUJa7OVA
cT+QFVD8IfIJIS/KBAc8hx1aslzkH3tfeM0cwyCLB7kOStZ4sh6RyFQD9w==
-----END PUBLIC KEY-----

kaotikfunk•9/4/23, 7:38 AM

aha - I had to delete the reference to that key in

/etc/containers/policy.json

/etc/containers/policy.json

kaotikfunk•9/4/23, 7:39 AM

now it's attempting to pull & rebase using

rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest

rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest

as suggested

kaotikfunk•9/4/23, 7:39 AM

GHCR.io is SLOOOOOOOOW

Kyle Gospo•9/4/23, 7:39 AM

Nice job

Kkaotikfunk GHCR.io is SLOOOOOOOOW

Kyle Gospo•9/4/23, 7:39 AM

At least it's free

Gerblesh•9/4/23, 7:40 AM

(docker hub)

kaotikfunk•9/4/23, 7:40 AM

hmm well its going faster than before. Earlier I tried this and it was getting 1-2 Mbps, so I let it run and it didn't seem to finish. Getting faster results now

Kkaotikfunk hmm well its going faster than before. Earlier I tried this and it was getting 1...

kaotikfunk•9/4/23, 7:47 AM

And... I'm in. Thanks for the help!

podman pull ghcr.io/ublue-os/config Trying to pull ghcr.io/ublue-os/config:latest... Error: Source image rejected: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory [patrick@fedora ~]$ rpm-ostree rebase ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-nvidia:38 Pulling manifest: ostree-image-signed:docker://ghcr.io/ublue-os/bazzite-nvidia:38 error: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory

$ rpm-ostree rebase ostree-unverified-registry:ghcr.io/ublue-os/bazzite-nvidia:latest Pulling manifest: ostree-unverified-image:docker://ghcr.io/ublue-os/bazzite-nvidia:latest error: Creating importer: Failed to invoke skopeo proxy method OpenImage: remote error: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory

podman pull ghcr.io/ublue-os/config Trying to pull ghcr.io/ublue-os/config:latest... Error: Source image rejected: open /usr/etc/pki/containers/ublue-os.pub: no such file or directory [patrick@fedora containers]$ pwd /etc/pki/containers [patrick@fedora containers]$ ls -l total 4 -rw-r--r--. 1 root root 178 Sep 2 16:15 ublue-os.pub [patrick@fedora containers]$ cat ublue-os.pub -----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE7lh7fJMV4dBT2jT1XafixUJa7OVA cT+QFVD8IfIJIS/KBAc8hx1aslzkH3tfeM0cwyCLB7kOStZ4sh6RyFQD9w== -----END PUBLIC KEY-----

https://github.com/ublue-os/isogenerator/issues/82 FYI anyone messing with ISO installers... we're

Similar Threads

Similar Threads

Similar Threads